sha256 checkpoint type username hostname netdomain filename_x ppolicy policyname policyver commandline publisher_x pprocess gprocess datetime_x md5_x sha128_x sha384_x sha512_x ip localip num_devices result filename_y filepath description filesize md5_y productname productversion publisher_y createtime modtime sha128_y sha384_y sha512_y datetime_y applications baselines reputation_lastseen reputation_scannercount reputation_scannermatch reputation_status reputation_threatlevel reputation_threatname reputation_timestamp
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7 [68a15553f0288d1b4c03964a, 68a1569398248a97cb1eb444, 68a1579f43eac3933ae67f3f, 68a1579f43eac3933ae67f40, 68a15842e8bb20015b29ac4f, 68a15b12277ee4ee43d0013b, 68a15eb4c5f239a6269d41d8, 68a15eb4c5f239a6269d41d9, 68a1610cf9cfe9240990b436, 68a163659570ae1ee2d89ce0, 68a163659570ae1ee2d89ce1, 68a163659570ae1ee2d89ce2, 68a1638d6b917cef7bc97207, 68a1681586b0e7998354db07, 68a1681586b0e7998354db08, 68a1691b4bf3087d7e238afb, 68a16b9043b033c7a2eecf86, 68a171761a77ed74f831f283, 68a171761a77ed74f831f284, 68a17176bff5622a2d3696bc, 68a17176bff5622a2d3696bd, 68a173ce919298d7701753a1, 68a173ce919298d7701753a2, 68a17627f658def3f757025a, 68a17627f658def3f757025b, 68a177691d5d3f63a03c1ad5, 68a177691d5d3f63a03c1ad6, 68a17852d53457e99d2a1d44, 68a1787f67f15891c3fec87a, 68a1787f67f15891c3fec87b, 68a178de243e2bba57cc5801, 68a178de243e2bba57cc5802, 68a17942be3220ec231b3b80, 68a179c230590616f9b723b2, 68a17b9b3ddb6ec7fea0f38d, 68a17c545ff79556eb1328d6, 68a17c545ff79556eb1328d7, 68a17c545ff79556eb1328d8, 68a17ec0f67761c149804787, 68a17f8642db8d6e7f43cd8c, 68a17f8642db8d6e7f43cd8d, 68a181de59b4482fa7baec2d, 68a181de59b4482fa7baec2e, 68a1828582f7df0f80d175d1, 68a1828582f7df0f80d175d2, 68a1831bf4da161b8c87d3c6, 68a184378419081851c4e2e5, 68a184378419081851c4e2e6, 68a1843792475c708deccd10, 68a1843792475c708deccd11, 68a185db842cac218ba203f9, 68a185db842cac218ba203fa, 68a1868f1e60b44ecd8c81c4, 68a1868f1e60b44ecd8c81c5, 68a1886744607e81f6c10e5c, 68a18b91e9d77e8a81cf79a6, 68a18d24f17f0d1f3fa3eba0, 68a18e286614188113b37b2e, 68a1918cc8c8ecd3a8a99b86, 68a1947d72dace2927aba8b3, 68a194a0baf0cc2124cb25f9, 68a194a0baf0cc2124cb25fa, 68a19538d9ad5eea4becd9ec, 68a196d51e9aca8b489bff2a, 68a197f840dc363ec3e31572, 68a19808a2364c998538408a, 68a198c797ce7f7229d88e1f, 68a19b7c95cc08790b402935, 68a19b9a646ea6d5e3c65c95, 68a19b9a646ea6d5e3c65c96, 68a19eca66077dcec7d8dab6, 68a1a54209794d7ae62d7f51, 68a1a54209794d7ae62d7f52, 68a1a5d3e1fae7cd4e7285de, 68a1a768ae1ac4256aa0ab0d, 68a1a7b83d457ac9aa59fe78, 68a1a7b83d457ac9aa59fe79, 68a1a9c0d6437811458b522f, 68a1ac14c1289bb2fb90d527, 68a1ac14c1289bb2fb90d528, 68a1b65b765104ab536adc31, 68a1bc83c61b8d2fb51e62ba, 68a1bc83c61b8d2fb51e62bb, 68a1bc83c61b8d2fb51e62bc, 68a1bd190677737ff6d7893f, 68a1bed22245de719e9d7121, 68a1bed22245de719e9d7122, 68a1c9a968ecc0f1b9499954, 68a1d166a13e0e9a22029a61, 68a1d47c75a829514da35e1e, 68a1e9550f8d0d2f18aa9eea, 68a1edf2fe07403e0fd51627, 68a1ee3d0aeb6405a5b1dd0c, 68a1f045bddace5846d825bc, 68a1f62133f76e551695154e, 68a1f6ee39ad072132f9ee4f, 68a1f9477b941b62d9b602a4, 68a202fdb002892fe0988856, 68a208f2fdbf196d413a85fc, 68a20bae729bb1db1cdafce8, ...] [2] [SYSTEM, insqadhocadmin, CA_Jnt_SCCMSrvF1, GreyBeard, ellisonmea, my10040sa, CA_Jnt_FSA5, CA_Jnt_ECSA2, CA_Jnt_Talis1, CA_Jnt_ECSA11, CA_Jnt_SVA2] [GCMH-VERSATRAK, AlinIQ-IMS, DP-USC, GRMC-PREM, GRMC-NIAGARA, DP-Weirton, inSQADHOC, DP-SRMC, GRMC-ECW-IF, U-NKCS-01, DP-Braxton, i-nPRNNova, i-nPaceartInt, i-vLightHouse, DP-UHC1, GRMC-SQL2, GRMC-SFTP, DP-Laundry, GRMC-ECW-DB, GRMC-FF3, WHL-DC1, GRMC-KRON, GRMC-PRINT, i-nRMHConAS01, GAC-BG5, DP-CCMC, U-HUHCNCVENT, u-vcfgsms1, i-hMeThinks, i-nleicasam01, DP-VIKING, GRMC-ECW-EBO, DP-RUBY02, DP-RUBY03, i-VTEAM2022, dp-ruby01, vm-cfgsms1, I-CAJump, DP-Warehouse1, i-hvmigration3, i-vSynthFlowGW, i-nkalani25, I-NCSMITH, VM-TalisWave, DP-UTN1, VM-CFGMGR, i-nrightfax2, WHGPHARMSERV] [NT AUTHORITY, INSQADHOC, WVUHS, WVUH] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p2mgehtu.sm1.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2bdgodq.zjz.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xilw05vn.hef.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4qdrzf2f.nnh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vvhdpspp.stz.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3xdtme4b.btd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cmcqz3wu.0n3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kxpajgif.v21.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zewg4lsu.iwv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5gqoqyt0.vzl.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bre44qcl.szx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l0jttjdo.cz2.ps1, D:\Temp\__PSScriptPolicyTest_fzw0j4at.pro.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ruavklg0.b0k.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ai5551wh.rnq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5kx5ipub.cjf.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vambezrj.b42.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sdvw1yzb.cj2.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrxo4eeb.uhq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_crnzftiq.ebx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5av23sun.fld.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u4d1s1ym.3ew.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n2gkorcv.ywo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_se2h305p.yhr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1fvf5jq3.1si.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_z5iirfx4.mgq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_emkhqolb.4ur.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_asfciozp.m2v.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bb1dcvha.qqb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lymb1wst.yhb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kgkub1od.5nh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yhc4sogi.4y2.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zs03hn03.whc.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2f2kmrzz.lzb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vcivhpuc.pfe.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5emhy0yw.uiy.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koutdxpk.12z.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gku2zkdb.sju.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e551aivx.x5g.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f0b0uqfr.cl0.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gywjbof.xjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3yfbsrlv.bot.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sfabzeq5.m20.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0kk0vql2.uai.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tomhb00o.kxi.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pc4dgcvs.hcy.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dif1l4bf.jms.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hvj0hf3n.dba.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a12vuyfa.q3s.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_om2k3dj2.0mx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm52ae50.owt.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d12zwuyw.di4.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_marcxnku.tjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eyy4wjrt.mtw.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfcvgcgu.rjx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_orvxy2k3.gna.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xb1bngte.gus.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etxqufed.qh5.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zx3jkhaw.z3t.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ookerucp.c2l.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ebf2gpz4.so0.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_31oo00so.4es.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cz41onu0.y3l.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zns1xpam.qyo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqiaibcy.hjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pxye2kcu.isw.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w5u1sssu.fqo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr5bnjcl.uly.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_crz1rcmh.zlr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y5nydfmv.n14.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gglt1rfg.2zr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i3fb144r.xgd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxikoytg.43f.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0nmjwf1.1zl.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nk22erzx.5mv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q5wh3jbm.hq3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nrjbxi2u.f1y.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5ba4xfp4.o10.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3lmr1nbt.vkg.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uzy0y4ut.qor.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vyliynfw.qto.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_k4s23gqw.tlm.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zbhlai4m.05t.ps1, C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_jqik1uzr.hs3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae0sjvcr.iey.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_k0nk1vgx.y0p.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ak5acbr5.xoh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vr3qd3kb.vir.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3ouwkpa0.a3k.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lxv2kkgu.bgo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d2czzg1r.w2h.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gmoo3xd4.0sd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_siyim0jy.0mr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ewjchuou.nbv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pdpmjcdm.mia.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_04d4q3wx.0eo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vwjmac.yeg.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oljmmeca.chs.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_agude4m0.kf4.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wo1envi3.zwm.ps1, ...] [Servers] [Servers Audit] [v2248.849, v2249.850, v2250.850, v2252.851, v2258.855, v2258.856, v2259.858, v2260.859, v2260.858, v2263.860, v2264.861, v2264.862, v2267.864, v2268.865, v2270.866, v2272.867, v2272, v2273.867, v2276.869, v2276.868, v2282.875, v2283.876, v2284.877, v2286.878, v2287.880, v2287.879, v2292.885, v2300.892, v2309.897, v2310.898, v2324.911, v2324.910] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe, C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe, C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe] [C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Platform\10.8775.27682.1015\SenseIR.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\svchost.exe, C:\Windows\explorer.exe, E:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe] [2025-08-17T03:56:29Z, 2025-08-17T04:06:44Z, 2025-08-17T04:06:38Z, 2025-08-17T04:15:33Z, 2025-08-17T04:18:38Z, 2025-08-17T04:27:09Z, 2025-08-17T04:46:06Z, 2025-08-17T04:46:27Z, 2025-08-17T04:56:00Z, 2025-08-17T04:57:23Z, 2025-08-17T05:01:52Z, 2025-08-17T05:02:23Z, 2025-08-17T05:00:02Z, 2025-08-17T05:21:04Z, 2025-08-17T05:21:42Z, 2025-08-17T05:21:06Z, 2025-08-17T05:31:34Z, 2025-08-17T05:58:08Z, 2025-08-17T06:06:23Z, 2025-08-17T06:03:05Z, 2025-08-17T06:03:30Z, 2025-08-17T06:07:22Z, 2025-08-17T06:07:55Z, 2025-08-17T06:23:02Z, 2025-08-17T06:23:31Z, 2025-08-17T06:30:00Z, 2025-08-17T06:30:07Z, 2025-08-17T06:26:48Z, 2025-08-17T06:33:00Z, 2025-08-17T06:33:24Z, 2025-08-17T06:28:21Z, 2025-08-17T06:28:58Z, 2025-08-17T06:33:33Z, 2025-08-17T06:41:51Z, 2025-08-17T06:42:09Z, 2025-08-17T06:43:05Z, 2025-08-17T06:43:37Z, 2025-08-17T06:53:02Z, 2025-08-17T06:53:27Z, 2025-08-17T06:58:00Z, 2025-08-17T06:58:29Z, 2025-08-17T07:08:04Z, 2025-08-17T07:09:40Z, 2025-08-17T07:09:31Z, 2025-08-17T07:11:22Z, 2025-08-17T07:14:36Z, 2025-08-17T07:23:08Z, 2025-08-17T07:24:30Z, 2025-08-17T07:18:11Z, 2025-08-17T07:19:43Z, 2025-08-17T07:23:44Z, 2025-08-17T07:25:25Z, 2025-08-17T07:33:04Z, 2025-08-17T07:34:40Z, 2025-08-17T07:44:29Z, 2025-08-17T07:57:59Z, 2025-08-17T07:54:50Z, 2025-08-17T08:08:16Z, 2025-08-17T08:23:31Z, 2025-08-17T08:28:03Z, 2025-08-17T08:33:14Z, 2025-08-17T08:35:47Z, 2025-08-17T08:32:23Z, 2025-08-17T08:38:20Z, 2025-08-17T08:48:50Z, 2025-08-17T08:46:19Z, 2025-08-17T08:54:25Z, 2025-08-17T08:56:16Z, 2025-08-17T08:58:45Z, 2025-08-17T09:00:34Z, 2025-08-17T09:17:35Z, 2025-08-17T09:37:43Z, 2025-08-17T09:39:26Z, 2025-08-17T09:39:58Z, 2025-08-17T09:49:38Z, 2025-08-17T09:48:17Z, 2025-08-17T09:49:51Z, 2025-08-17T09:57:00Z, 2025-08-17T10:13:14Z, 2025-08-17T10:14:39Z, 2025-08-17T10:50:32Z, 2025-08-17T11:24:39Z, 2025-08-17T11:26:01Z, 2025-08-17T11:26:56Z, 2025-08-17T11:26:50Z, 2025-08-17T11:33:14Z, 2025-08-17T11:34:34Z, 2025-08-17T12:19:02Z, 2025-08-17T12:54:04Z, 2025-08-17T12:59:02Z, 2025-08-17T14:28:46Z, 2025-08-17T14:57:44Z, 2025-08-17T14:48:55Z, 2025-08-17T15:02:13Z, 2025-08-17T15:27:17Z, 2025-08-17T15:27:26Z, 2025-08-17T15:36:31Z, 2025-08-17T16:26:11Z, 2025-08-17T16:44:04Z, 2025-08-17T16:56:11Z, ...] [] [] [] [] [10.1.35.25, 172.30.33.2, 172.31.220.9, 10.1.65.26, 10.1.95.209, 172.21.20.5, 172.17.253.151, 172.31.103.150, 192.168.3.242, 172.25.23.240, 172.30.2.10, 172.17.251.159, 172.17.250.43, 172.17.30.81, 172.25.17.56, 10.1.115.124, 172.30.33.20, 172.16.233.4, 192.168.3.240, 10.1.115.136, 172.18.99.251, 192.168.2.32, 192.168.1.41, 172.17.252.158, 192.168.0.119, 172.27.107.116, 172.25.17.232, 172.25.23.183, 172.17.251.218, 172.17.251.190, 172.16.223.194, 192.168.3.241, 172.17.120.10, 172.17.120.20, 172.17.30.50, 172.17.120.11, 172.25.18.240, 172.17.252.110, 172.19.236.2, 172.17.23.32, 172.17.36.46, 172.17.23.146, 172.17.252.118, 172.17.252.194, 172.29.7.93, 172.17.21.194, 172.17.46.25, 172.24.26.89] [10.1.35.25, 172.30.33.2, 172.31.220.9, 10.1.65.26, 10.1.95.209, 172.21.20.5, 172.17.253.151, 172.31.103.150, 192.168.3.242, 172.25.23.240, 172.30.2.10, 172.17.251.159, 172.17.250.43, 172.17.30.81, 172.25.17.56, 10.1.115.124, 172.30.33.20, 172.16.233.4, 192.168.3.240, 10.1.115.136, 172.18.99.251, 192.168.2.32, 192.168.1.41, 172.17.252.158, 192.168.0.119, 172.27.107.116, 172.25.17.232, 172.25.23.183, 172.17.251.218, 172.17.251.190, 172.16.223.194, 192.168.3.241, 172.17.120.10, 172.17.120.20, 172.17.30.50, 172.17.120.11, 172.25.18.240, 172.17.252.110, 172.19.236.2, 172.17.23.32, 172.17.36.46, 172.17.23.146, 172.17.252.118, 172.17.252.194, 172.29.7.93, 172.17.21.194, 172.17.46.25, 172.24.26.89] 48 Success __PSScriptPolicyTest_4cdfxukf.1ez.ps1 C:\Windows\SystemTemp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-03-24 17:29:39 +0000 UTC None None 2025-04-09 09:13:56 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-04-10 02:20:59.07 +0000 UTC
d1d29bfdf0938484bad3df1024847c2b6cc6310c3e1f55236e1f54593094f054 [68a1ac1ec193963d0c0ace4e, 68a29ad1e6b70fa9edec4351, 68a2b972d6f29d8003151b81, 68a2fff19b21a43c06982f02] [2] [SYSTEM] [i-nCusterqs1, i-nQS, i-nMrristnnqs1] [NT AUTHORITY] [E:\QS1\QAU\Info\SystemInfo.bat, D:\QS1\QAU\Info\SystemInfo.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe] [E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe] [2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z] [6e5cd2985085a14f0365ac9f09224978] [b8c1668ef28fa7f83d9ead6d14705e95bc335e5b] [eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83] [dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989] [172.17.21.68, 172.17.252.137, 172.17.21.65] [172.17.21.68, 172.17.252.137, 172.17.21.65] 3 Success SystemInfo.bat C:\QS1\QAU\Info\ 70 6e5cd2985085a14f0365ac9f09224978 Not Signed 2019-10-22 11:10:42 +0000 UTC 2019-10-22 11:10:42 +0000 UTC b8c1668ef28fa7f83d9ead6d14705e95bc335e5b eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83 dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989 2025-07-16 14:19:51 +0000 UTC [{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
1aac11b17b781bae4155142b446ee8c2a50ee6b74d487c177c219a582fc7b1fe [68a61ba94647e99a42f1f95e, 68a61c2b9f20edac12c008b0, 68a61c2b9f20edac12c008b1] [2] [SYSTEM] [dp-ruby01, DP-RUBY02, DP-RUBY03] [NT AUTHORITY] [C:\Windows\CCM\ScriptStore\5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1] [Servers] [Servers Audit] [v2309.897] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\CCM\CcmExec.exe] [2025-08-20T19:01:55Z, 2025-08-20T19:04:06Z, 2025-08-20T19:04:07Z] [d7d030bd33393f5a761bd2d6eb2e6f51] [58918d62b1b53da8534b7b47f29ad298d71b7e4e] [b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d] [72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847] [172.17.120.11, 172.17.120.10, 172.17.120.20] [172.17.120.11, 172.17.120.10, 172.17.120.20] 3 Success 5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1 C:\Windows\CCM\ScriptStore\ 134 d7d030bd33393f5a761bd2d6eb2e6f51 Not Signed 2025-05-20 16:34:58 +0000 UTC 2025-05-20 16:34:58 +0000 UTC 58918d62b1b53da8534b7b47f29ad298d71b7e4e b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d 72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847 2025-08-20 19:02:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
18f94c227e2d517cfb94721f65e950efbfeb23990fcf7dcbc48bbbf8ba8e3e68 [68a1ac1ec193963d0c0ace4f, 68a29ad1e6b70fa9edec4352, 68a2b972d6f29d8003151b82, 68a2fff19b21a43c06982f03] [2] [SYSTEM] [i-nCusterqs1, i-nQS, i-nMrristnnqs1] [NT AUTHORITY] [E:\QS1\QAU\Info\SerialNumber.bat, D:\QS1\QAU\Info\SerialNumber.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe] [E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe] [2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z] [1dd0238e6d527954d3190764187d6a05] [c542ac2cea1b430cf3ae7b91936b57b20a72a2a7] [062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589] [9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c] [172.17.21.68, 172.17.252.137, 172.17.21.65] [172.17.21.68, 172.17.252.137, 172.17.21.65] 3 Success SerialNumber.bat C:\QS1\QAU\Info\ 64 1dd0238e6d527954d3190764187d6a05 Not Signed 2019-12-18 12:10:54 +0000 UTC 2019-12-18 12:10:54 +0000 UTC c542ac2cea1b430cf3ae7b91936b57b20a72a2a7 062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589 9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c 2025-07-16 14:19:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bd7a8d07a6a3d0b10b943a17dedd5f3a23eea53b0d0babe6d6ed452c24f5710d [68a178f000fcf6f09fa43ed4, 68a17c6313d38093271e4d7d, 68a17d32b8e0917a96ab5183, 68a2ca7bf1b5d070157fa50a, 68a2cde79ef546c806451f9b, 68a2cebeea2bec6dd453ddc6, 68a41c1ee32af9c7fb4f586d, 68a4205b652c2f8e7aac8983, 68a4212d6d0e46c2f152938d, 68a56dbbc331ff607b884d4b, 68a5711ca55e4f736b7b2bfa, 68a571f415ffa42bc82736b5, 68a6bd0efdc403b5bd56e6e7, 68a6c2bdb866e479a63a4423, 68a6c39760f18225f9c20c97] [2] [WVUHPAN] [I-PANHS, i-NPANHS, U-PanHS] [HS] [C:\Program Files\Quest Software\Management Shell for AD\userlist.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T06:30:01Z, 2025-08-17T06:51:01Z, 2025-08-18T06:30:01Z, 2025-08-18T06:51:00Z, 2025-08-18T06:51:02Z, 2025-08-19T06:30:02Z, 2025-08-19T06:51:02Z, 2025-08-19T06:51:00Z, 2025-08-20T06:30:01Z, 2025-08-20T06:51:00Z, 2025-08-20T06:51:02Z, 2025-08-21T06:30:02Z, 2025-08-21T06:51:00Z, 2025-08-21T06:51:02Z] [67922bcfb6b909fcf4c6066aae296c06] [5cecc6335811f9bf1365738b97bd0a717a78be24] [f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2] [c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014] [172.17.252.76, 172.17.253.167, 172.25.18.242] [172.17.252.76, 172.17.253.167, 172.25.18.242] 3 Success userlist.bat C:\Program Files\Quest Software\Management Shell for AD\ 238 67922bcfb6b909fcf4c6066aae296c06 Not Signed 2018-10-17 14:35:55 +0000 UTC 2010-08-18 13:45:20 +0000 UTC 5cecc6335811f9bf1365738b97bd0a717a78be24 f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2 c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014 2025-08-09 04:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fb39dc9b0ead7b6e038a358e3ca9faae5a39570bfaf3834bf8c75aa2912698a5 [68a1646609d3c08e7ea8cecc, 68a16470d97d50d8da4abf7a, 68a18f14b89992b111df5d02] [2] [SYSTEM] [i-nLeicaSAM03, i-nleicasam02, nt-UHCleica] [NT AUTHORITY] [C:\Program Files (x86)\Aperio\DatabaseCheck\Check-GT450-Database-Integrity.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:11:00Z, 2025-08-17T08:11:00Z] [1a72b94c58d7e7f137a18e1a0c18914a] [4ba6ef15a0cd389d15ad080de945a334373c9fc6] [7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c] [76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee] [172.17.253.15, 172.17.253.103, 172.25.17.137] [172.17.253.15, 172.17.253.103, 172.25.17.137] 3 Success Check-GT450-Database-Integrity.ps1 C:\Program Files (x86)\Aperio\DatabaseCheck\ 1399 1a72b94c58d7e7f137a18e1a0c18914a Not Signed 2024-08-05 16:07:43 +0000 UTC 2024-07-29 14:50:04 +0000 UTC 4ba6ef15a0cd389d15ad080de945a334373c9fc6 7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c 76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee 2025-08-10 05:11:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd [68a523949cec397f02de9f60, 68a62c61512061b0a03001ea, 68a62d65c4509fd4abd51f66] [2] [SYSTEM] [i-nMobileView, u-NFP2, i-NFP1] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Ionic.Zip.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Ionic.Zip.dll] [Servers] [Servers Audit] [v2284.877, v2310.898] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe, C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\CompatTelRunner.exe, C:\Windows\System32\svchost.exe] [2025-08-20T01:23:31Z, 2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] [6ded8fcbf5f1d9e422b327ca51625e24] [8a1140cebc39f6994eef7e8de4627fb7b72a2dd9] [1530387215ec35e5bff13d8428c792715a9a54264b763e07c815712e423caba497f2b6ba98d1c1da6bcd0e94417d6141] [bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4] [172.17.22.40, 172.25.17.195, 172.17.253.162] [172.17.22.40, 172.25.17.195, 172.17.253.162] 3 Success Ionic.Zip.dll C:\Program Files (x86)\Varian\ProductLine\Workspaces\VMS.IRS.Workspace\ Ionic's Zip Library 462336 6ded8fcbf5f1d9e422b327ca51625e24 DotNetZip Library 1.9.1.8 Not Signed 2017-02-15 19:39:12 +0000 UTC 2017-02-15 19:39:12 +0000 UTC 8a1140cebc39f6994eef7e8de4627fb7b72a2dd9 1530387215ec35e5bff13d8428c792715a9a54264b763e07c815712e423caba497f2b6ba98d1c1da6bcd0e94417d6141 bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4 2025-03-24 18:47:28 +0000 UTC None None 2025-04-08 15:29:36 +0000 UTC 72 0 KNOWN 0 Microsoft attested file 2025-04-10 18:01:47.956 +0000 UTC
04df00b66b4fa24bdc2db48590ac7606033c016198f74519a57486f26bfbed4c [68a62c390de66b6bd84ed64e, 68a62cbbbad0c3891c05202f] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z] [23b2ae6780127e22e426af5b5389a6eb] [162a79b2993bee4878e2d1758b296e6a96e2a063] [33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88] [90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ 289792 23b2ae6780127e22e426af5b5389a6eb 1.0.0.0 Not Signed 2023-06-20 18:27:46 +0000 UTC 2023-06-20 18:27:46 +0000 UTC 162a79b2993bee4878e2d1758b296e6a96e2a063 33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88 90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
010ddff1577bb17ad0560dc7f8db16f6acdbef67f14e95ee97a642af58604a10 [68a62c61512061b0a03001e9, 68a62d65c4509fd4abd51f65] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Imaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] [9309717e9d2577ab9a3c5c958927143f] [e49ddf7c7605fa186a8c8d501c9b31dd52bb359d] [0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf] [cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Imaging.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ Imaging 22528 9309717e9d2577ab9a3c5c958927143f Imaging 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC e49ddf7c7605fa186a8c8d501c9b31dd52bb359d 0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
06248e206086e314f33123d3bdef9c88f986a21a8ecd43de4c41a8ec71d2a137 [68a62c390de66b6bd84ed651, 68a62cbbbad0c3891c052032] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.WPFImaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z] [dadb08e43df4a89ea6e4afee8da42293] [f561d513ca0284513c3310150988f26126b08be7] [6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1] [4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.WPFImaging.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Utility.WPFImaging 23040 dadb08e43df4a89ea6e4afee8da42293 FormFast.Utility.WPFImaging 1.0.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC f561d513ca0284513c3310150988f26126b08be7 6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1 4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb 2025-05-06 18:30:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e66dd4c11b9186e43f0c3d18b951ca73cbef3979c0b3bf070e5f492bd165542e [68a62c390de66b6bd84ed640, 68a62c4fe0cb7d1d0b6ef997, 68a62cb1297e2a61afff0f82, 68a62dbdd3f22bde37b5f4f3, 68a62dbdd3f22bde37b5f4fd, 68a62ea8e82920a204bd4bec] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Salesforce.Common.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Salesforce.Common.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Salesforce.Common.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:38Z, 2025-08-20T20:14:47Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z] [beae27cecad508f4a838cf2df424f43d] [89769af6b354ae2c323aca4bf3d5392b6954ca7b] [e9c424bba05f4ba5ae3721ebab123d95e2de1e28e71fab4f1970459d3e51c95291bbd5a611c68a932b1613d611168cfb] [4afa7af556e74fe13feae82125e6188f8dbda38838aecd724ee7268deb56ae8b35312a8e37e1bf0c0286706bcaa56370ef1b63b93ee129df747337bc8f729f55] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Salesforce.Common.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Salesforce.Common 53760 beae27cecad508f4a838cf2df424f43d Salesforce.Common 1.0.0.0 Not Signed 2016-07-27 19:41:14 +0000 UTC 2016-07-27 19:41:14 +0000 UTC 89769af6b354ae2c323aca4bf3d5392b6954ca7b e9c424bba05f4ba5ae3721ebab123d95e2de1e28e71fab4f1970459d3e51c95291bbd5a611c68a932b1613d611168cfb 4afa7af556e74fe13feae82125e6188f8dbda38838aecd724ee7268deb56ae8b35312a8e37e1bf0c0286706bcaa56370ef1b63b93ee129df747337bc8f729f55 2025-05-06 18:28:12 +0000 UTC None None 2020-04-18 00:35:33 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.67 +0000 UTC
ff35bdba1d0ca12a74749adb1a07f2dda2d3fbb5a56c8fdc10908ce933f470b0 [68a62c390de66b6bd84ed641, 68a62c4fe0cb7d1d0b6ef998, 68a62cb1297e2a61afff0f83, 68a62dbdd3f22bde37b5f4f4, 68a62dbdd3f22bde37b5f4fe, 68a62ea8e82920a204bd4bed] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Salesforce.Force.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Salesforce.Force.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Salesforce.Force.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:38Z, 2025-08-20T20:14:47Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z] [932f018f1e491ab9caa1dc40baa4aec0] [61fea022aa77cf3c1e880fa2ed22bb819518cbe8] [7c1b03f2a6ab846c62d02f1bb482d9113d33aeeab4f48d4b5b373bfc94a33ecc5291a3ce39072ad2ee46f569013a548c] [d3d0a6a8f6b68b7d99f1c5c533ab47da149ec77a6db8e47ecd81d303df71894fc8257cacba7eb7414fc256cd9a0299d94874fc2391604de5c489fa3e18172578] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Salesforce.Force.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Salesforce.Force 16896 932f018f1e491ab9caa1dc40baa4aec0 Salesforce.Force 1.0.0.0 Not Signed 2016-07-27 19:41:14 +0000 UTC 2016-07-27 19:41:14 +0000 UTC 61fea022aa77cf3c1e880fa2ed22bb819518cbe8 7c1b03f2a6ab846c62d02f1bb482d9113d33aeeab4f48d4b5b373bfc94a33ecc5291a3ce39072ad2ee46f569013a548c d3d0a6a8f6b68b7d99f1c5c533ab47da149ec77a6db8e47ecd81d303df71894fc8257cacba7eb7414fc256cd9a0299d94874fc2391604de5c489fa3e18172578 2025-05-06 18:28:12 +0000 UTC None None 2020-04-17 23:25:42 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.671 +0000 UTC
f4d83af03fc9dccddc0e5ea6783f1579c486253abeb05bae6e46bf127a5f8457 [68a62c2f20141caa2973b29a, 68a62cb1297e2a61afff0f6a] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Oracle.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] [2dc49e26bee18b516bdd45649a5ae8a1] [42eea7c6a302295e9f6e8076b39b52804f214d4c] [4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1] [2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Oracle.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.Oracle 7680 2dc49e26bee18b516bdd45649a5ae8a1 FormFast.Common.Oracle 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC 42eea7c6a302295e9f6e8076b39b52804f214d4c 4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1 2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e0e00d85eb881678c720ba0a991f1e2e4d74681c5e7d1a432632434966f8a0cb [68a62c61512061b0a03001e5, 68a62d65c4509fd4abd51f61] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:11Z, 2025-08-20T20:17:32Z] [40ffc6345b95c232205c8536d42a1bd7] [1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a] [59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e] [11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.FFWFI 218112 40ffc6345b95c232205c8536d42a1bd7 FormFast.FFWFI 1.0.0.0 Not Signed 2023-06-20 18:28:40 +0000 UTC 2023-06-20 18:28:40 +0000 UTC 1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a 59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e 11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e0ca44a1efde6d7e0ec58da88696fd02e7f9ba9c685fb67ff53401cd2bdbbc24 [68a62c390de66b6bd84ed63e, 68a62c4fe0cb7d1d0b6ef996, 68a62cb1297e2a61afff0f80, 68a62dbdd3f22bde37b5f4f2, 68a62dbdd3f22bde37b5f4fc, 68a62ea8e82920a204bd4beb] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Oracle.ManagedDataAccess.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Oracle.ManagedDataAccess.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Oracle.ManagedDataAccess.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:37Z, 2025-08-20T20:14:46Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z] [525d30f0a2e40e35175d5b4affa10eda] [867801f00320673cb8857738be0ae82764dfff34] [102c6ebe6ef985253c52d9ba2565215e13946f9d2cea3c75b7ca53aee58a65e9b0cd27383896ac669e07a768b75ff25f] [83c1e7cb03b17aad690eba0cad8c5462a63e754cad60ee9f344c4583d43a3fff4ebb42f4b8f6ea360d082d11af545441b65dec4a831c44340a4af9a94c7d9c04] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Oracle.ManagedDataAccess.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Oracle.ManagedDataAccess.dll 6530560 525d30f0a2e40e35175d5b4affa10eda Oracle Data Provider for .NET, Managed Driver 4.121.1.20131211 Not Signed 2023-05-24 16:40:30 +0000 UTC 2023-05-24 16:40:30 +0000 UTC 867801f00320673cb8857738be0ae82764dfff34 102c6ebe6ef985253c52d9ba2565215e13946f9d2cea3c75b7ca53aee58a65e9b0cd27383896ac669e07a768b75ff25f 83c1e7cb03b17aad690eba0cad8c5462a63e754cad60ee9f344c4583d43a3fff4ebb42f4b8f6ea360d082d11af545441b65dec4a831c44340a4af9a94c7d9c04 2025-05-06 18:28:12 +0000 UTC None None 2025-03-27 20:13:59 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.671 +0000 UTC
e004a9327c38e81644b9ec7c19a2129908a6c5d68edafb175962c2d78404dc1c [68a62c4d7785949c881367c5, 68a62d5b4fa1f463a5481ccf] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Base.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z] [af34b8b1165332b262d93e879c27365e] [901ce0ab1be72beb1bf8308f6bee7803a793f162] [5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2] [b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Base.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ Base 200192 af34b8b1165332b262d93e879c27365e Base 1.0.0.0 Not Signed 2023-06-20 18:28:38 +0000 UTC 2023-06-20 18:28:38 +0000 UTC 901ce0ab1be72beb1bf8308f6bee7803a793f162 5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2 b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09 2025-07-11 22:48:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ff9f06adf36fa5057cc3505bfcc119aaecb03fc327377c26a75042f54f61bc5b [68a62c57d96ab29dcabe19ac, 68a62d65c4509fd4abd51f5b] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] [83cdf6c2e5d109f7345c49628f408fb6] [f7921a39ae4d43b99f5aee80257c703702cd2657] [d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022] [734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ 631296 83cdf6c2e5d109f7345c49628f408fb6 1.0.0.0 Not Signed 2023-06-20 18:28:40 +0000 UTC 2023-06-20 18:28:40 +0000 UTC f7921a39ae4d43b99f5aee80257c703702cd2657 d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022 734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
eca61854f8025db6e42a44a39206869612d62eb8f71f3e479fd019118a700859 [68a62c2f20141caa2973b296, 68a62cb1297e2a61afff0f64] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:26Z, 2025-08-20T20:14:33Z] [5a10414070f606d7d4713d640f2d06f2] [a7d305197c8b3c311aa1b36e67c3332e132f267d] [f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b] [b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.ECM 499712 5a10414070f606d7d4713d640f2d06f2 FormFast.ECM 1.0.0.0 Not Signed 2023-06-20 18:27:54 +0000 UTC 2023-06-20 18:27:54 +0000 UTC a7d305197c8b3c311aa1b36e67c3332e132f267d f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
da4d63e8b4184b115ac4613449ba37cbbf5c7008bc5e72a02f0e30409d164bfb [68a170048fde46e0c9f34fea, 68a17149e8e8e52d3dfcb9e4, 68a2c188e888059cd5cdb356, 68a2c3c48cc751a9359e6e31, 68a4131f300a88183c09330d, 68a41545c70c05af9b9a4906, 68a564afc34030bc5e574490, 68a5660d299bfb77304b4e2d, 68a6b64bde9c88a2d9100c9e, 68a6b7b8a2f9b7d205bc199a] [2] [SYSTEM] [GRMC-ECW-APP, GRMC-ECW-IF] [NT AUTHORITY] [D:\eClinicalWorks\tomcat8\bin\tomcat_stop.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T06:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T06:00:01Z, 2025-08-20T06:00:01Z, 2025-08-21T06:00:01Z] [48a2fd9d7bcaeb0a981e418befc23462] [d86428726f1783a0e94f371bfef026a7ae6ce283] [20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec] [2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539] [192.168.3.239, 192.168.3.242] [192.168.3.239, 192.168.3.242] 2 Success tomcat_stop.bat D:\eClinicalWorks\tomcat8\bin\ 16 48a2fd9d7bcaeb0a981e418befc23462 Not Signed 2021-07-04 18:02:01 +0000 UTC 2021-07-04 18:02:01 +0000 UTC d86428726f1783a0e94f371bfef026a7ae6ce283 20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec 2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539 2025-08-09 06:00:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3f3bf5421b89863185362c6162aaa51be2e5b565c0df60ab19702cc36b483c3 [68a62c390de66b6bd84ed63c, 68a62cb1297e2a61afff0f7e] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.WebApi.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [060d826576b501ac78da60c4985bbe71] [72a41f9f93a58a38192af1c81cc25e20e1f5a6d1] [0c466ecaa7cc68368ef9eabdbcb7a21a8a5ae5828fad42aa7177a242f1a9434d7e5d96b8e8f3b30c1c405830911c1743] [76f20149e074ee852e3f0bff67728f31c751b861ad507b2171dc4e6b9b188417962e0321bb4303ed545cedeed658d91f6124a3598468ca38369b03972f233bd4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Ninject.Web.WebApi.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Ninject.Web.WebApi 26112 060d826576b501ac78da60c4985bbe71 Ninject integration for WebApi 2 3.3.0 Not Signed 2017-10-23 13:17:34 +0000 UTC 2017-10-23 13:17:34 +0000 UTC 72a41f9f93a58a38192af1c81cc25e20e1f5a6d1 0c466ecaa7cc68368ef9eabdbcb7a21a8a5ae5828fad42aa7177a242f1a9434d7e5d96b8e8f3b30c1c405830911c1743 76f20149e074ee852e3f0bff67728f31c751b861ad507b2171dc4e6b9b188417962e0321bb4303ed545cedeed658d91f6124a3598468ca38369b03972f233bd4 2025-05-06 18:28:12 +0000 UTC None None 2023-02-13 15:50:47 +0000 UTC 53 0 KNOWN 0 Microsoft attested file 2025-05-06 18:32:19.671 +0000 UTC
e3a49f661552f457a58a05aa08a8a2260163b0117aa88f690744d9864dad2c12 [68a62c2f20141caa2973b2a4, 68a62c4fe0cb7d1d0b6ef995, 68a62cb1297e2a61afff0f75, 68a62dbdd3f22bde37b5f4f1, 68a62dbdd3f22bde37b5f4fb, 68a62ea8e82920a204bd4bea] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Matrixcare.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:30Z, 2025-08-20T20:12:35Z, 2025-08-20T20:14:36Z, 2025-08-20T20:14:45Z, 2025-08-20T20:17:33Z, 2025-08-20T20:13:11Z] [63f2acff027a49b92b1c853563fa84da] [08845800b27ef97fe203342f1c40e9df2d78950b] [31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e] [7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Matrixcare.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Matrixcare 13312 63f2acff027a49b92b1c853563fa84da FormFast.Matrixcare 1.0.0.0 Not Signed 2023-06-20 18:20:00 +0000 UTC 2023-06-20 18:20:00 +0000 UTC 08845800b27ef97fe203342f1c40e9df2d78950b 31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e 7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d81403211a57d215a6b4be8cc38f7e459dd7335c477f4ea9cd1ead0119b54df6 [68a62c2f20141caa2973b29b, 68a62cb1297e2a61afff0f6b] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Sfdc.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] [5c0bb4c741bcf8fcd6af3c01281eb540] [bfa43d44497992ad190244c7a450d53a2b240865] [68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2] [638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Sfdc.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.Sfdc 44544 5c0bb4c741bcf8fcd6af3c01281eb540 FormFast.Common.Sfdc 1.0.0.0 Not Signed 2023-06-20 18:27:58 +0000 UTC 2023-06-20 18:27:58 +0000 UTC bfa43d44497992ad190244c7a450d53a2b240865 68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2 638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d9f13dd98551054ff7b68b640d3af1a44941bcccb0f50d08f7434d874bd78915 [68a62c390de66b6bd84ed646, 68a62cb1297e2a61afff0f86] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WorkflowEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z] [1b9ee76338d61494a62f3d2481b92c95] [916303fec9d999bbad4fe203eb37a859fc08a83a] [6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501] [716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success WorkflowEngine.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ WorkflowEngine 450560 1b9ee76338d61494a62f3d2481b92c95 WorkflowEngine 1.0.0.0 Not Signed 2023-06-20 18:27:56 +0000 UTC 2023-06-20 18:27:56 +0000 UTC 916303fec9d999bbad4fe203eb37a859fc08a83a 6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501 716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f 2025-05-06 18:28:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d3da14b92659035996cb517e0a9001093780104f6018d56894355a53cf014900 [68a62c390de66b6bd84ed645, 68a62cb1297e2a61afff0f85] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WebActivatorEx.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z] [e6ebf27fa68c47a434c2e6ac0c08cf5a] [113b4fbd946cd38a296ff07c6562a88676d7b79b] [4f27a67d057c6cf7dda395a8ae193b9a369fa0c7d05e96c9d40007e2f136dbe808659ace1574a4e1e4c5866b312be5d4] [2cbcdbdbe9c17a09173c36ef35ae4decac7d4ab54342e8443781e772c595caa23e2735533e1bd330c4d6da52574b3d281714514a35d988ac1e0a0bdd99948968] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success WebActivatorEx.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ WebActivator 12288 e6ebf27fa68c47a434c2e6ac0c08cf5a WebActivator 2.2.0 Not Signed 2016-10-05 18:11:52 +0000 UTC 2016-10-05 18:11:52 +0000 UTC 113b4fbd946cd38a296ff07c6562a88676d7b79b 4f27a67d057c6cf7dda395a8ae193b9a369fa0c7d05e96c9d40007e2f136dbe808659ace1574a4e1e4c5866b312be5d4 2cbcdbdbe9c17a09173c36ef35ae4decac7d4ab54342e8443781e772c595caa23e2735533e1bd330c4d6da52574b3d281714514a35d988ac1e0a0bdd99948968 2025-05-06 18:28:22 +0000 UTC None None 2025-03-23 20:18:27 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-05-06 18:32:19.67 +0000 UTC
d6b54e55d6c23433ecc098e1ce9f6f8d4c24ada9f4f3d6c316f54540694b4eb8 [68a62c57d96ab29dcabe19ad, 68a62d65c4509fd4abd51f5c] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Oracle.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] [39d6e5c350190a6ac95b0bec4525ceb3] [76fb72ff68e166b6ff1d319e13b2578aabc3fe52] [7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010] [9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Oracle.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common.Oracle 7680 39d6e5c350190a6ac95b0bec4525ceb3 FormFast.Common.Oracle 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC 76fb72ff68e166b6ff1d319e13b2578aabc3fe52 7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010 9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ce5c130e19f4771691161ab4b4329a24eab18e9df3229183c020204516c6e0a1 [68a62c2f20141caa2973b298, 68a62c4fe0cb7d1d0b6ef991, 68a62cb1297e2a61afff0f67, 68a62dbdd3f22bde37b5f4ed, 68a62dbdd3f22bde37b5f4f6, 68a62ea8e82920a204bd4be5] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.HL7.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:27Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] [3f08973ce2b2dc32f33a5b4163bab9c1] [b91d3a9974b84b00ac9ca8f0114db15a553ea00a] [32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed] [4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.HL7.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.HL7 120832 3f08973ce2b2dc32f33a5b4163bab9c1 FormFast.Common.HL7 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC b91d3a9974b84b00ac9ca8f0114db15a553ea00a 32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed 4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c9ce850dc19c02bded048e7b5cfdd68a7cde7e0da3a172c3c598d277a29efcde [68a62c390de66b6bd84ed63a, 68a62cb1297e2a61afff0f7c] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.Common.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [901ba5652790217d5d19c9a41d426ac6] [dbebd3abe9f8aba4353a2137d7bd5a4842e2f408] [a1a00e37ec5514d10f52c9795372fa2a244cecb023a8aa25477c1dfbbf6c5ad9134f6f951b53f35a037d76df6f5b37dc] [d69172900aa88141ac82b28d149ec196048aa23d89643b96b42adf011f22deddbdd0c983ce56423b270e55258088d5d41741c00810e04e60c82799c54b992407] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Ninject.Web.Common.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Ninject.Web.Common 7168 901ba5652790217d5d19c9a41d426ac6 Ninject.Web.Common 3.3.0 Not Signed 2017-10-23 12:33:26 +0000 UTC 2017-10-23 12:33:26 +0000 UTC dbebd3abe9f8aba4353a2137d7bd5a4842e2f408 a1a00e37ec5514d10f52c9795372fa2a244cecb023a8aa25477c1dfbbf6c5ad9134f6f951b53f35a037d76df6f5b37dc d69172900aa88141ac82b28d149ec196048aa23d89643b96b42adf011f22deddbdd0c983ce56423b270e55258088d5d41741c00810e04e60c82799c54b992407 2025-05-06 18:28:12 +0000 UTC None None 2020-06-18 00:35:48 +0000 UTC 71 0 KNOWN 0 Microsoft attested file 2025-05-06 18:32:19.671 +0000 UTC
c91f5897176c15efd03ff7ed6746b9479ffc0e88ebabd6bb95c9dd4884a0ff1a [68a62c4d7785949c881367c6, 68a62d5b4fa1f463a5481cd0] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Common.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z] [d5554406e72e2f7ede8c94c492229b65] [acf40e10c3844e9facc9689b8fcd1e68356c319f] [05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb] [1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Common.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common 449024 d5554406e72e2f7ede8c94c492229b65 FormFast.Common 4.3.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC acf40e10c3844e9facc9689b8fcd1e68356c319f 05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb 1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4 2025-07-11 22:49:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c073d514ca716ea106959b1452f4a594d5cea50e1c9637a93ecfe5ca0458e384 [68a62c61512061b0a03001e4, 68a62d65c4509fd4abd51f60] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.WebFormImprint.Core.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z] [07794196e59ac753b490cc99593544fc] [bc4d2672634d3510fd3e45de23fcef6382d85f72] [4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2] [9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FastPrint.WebFormImprint.Core.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.FastPrint.WebFormImprint.Core 18944 07794196e59ac753b490cc99593544fc FormFast.FastPrint.WebFormImprint.Core 1.0.0.0 Not Signed 2023-06-20 18:28:40 +0000 UTC 2023-06-20 18:28:40 +0000 UTC bc4d2672634d3510fd3e45de23fcef6382d85f72 4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2 9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bc6276343bf45f469e33be988e0016326417e07d89f1d0ef20f90f18bb171119 [68a62c390de66b6bd84ed636, 68a62cb1297e2a61afff0f78] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.WPFImaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] [8106ee1d0eca9bb361f0420e501667ac] [a6030b69ab1c721f47a9d05125a374521a644475] [2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0] [baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.WPFImaging.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Utility.WPFImaging 23040 8106ee1d0eca9bb361f0420e501667ac FormFast.Utility.WPFImaging 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC a6030b69ab1c721f47a9d05125a374521a644475 2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0 baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bbf4e828f15edae7e0009db13f67000492433690ad2245c3837b991feb89979b [68a289dc0e6a21d30c5fa31e, 68a29c0c6ac1db84aa535408, 68a29c1bd1ae18ffaf5ca38c] [2] [SYSTEM] [U-NKRONOSWEB2, i-nkronoswork] [NT AUTHORITY] [C:\Kronos\openfire\ns\bin\ns_vars.bat] [Servers] [Servers Audit] [v2248.849, v2248] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Kronos\openfire\ns\bin\openfireService.exe] [2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z] [8c8134e0f58626802c6448a24065cd29] [5568e8662a3001bdea1e8e7f7ab93cd0a49ece48] [0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db] [ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede] [172.25.16.7, 172.17.253.221] [172.25.16.7, 172.17.253.221] 2 Success ns_vars.bat C:\Kronos\openfire\ns\bin\ 621 8c8134e0f58626802c6448a24065cd29 Not Signed 2022-02-08 15:15:46 +0000 UTC 2022-02-08 15:16:06 +0000 UTC 5568e8662a3001bdea1e8e7f7ab93cd0a49ece48 0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede 2025-08-09 02:00:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b40599107c267ccb76709238ef7f34abe28628eeeb22e17c12786b0c7d3477c0 [68a62c57d96ab29dcabe19af, 68a62d65c4509fd4abd51f5e] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.WebControls.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] [6a642a74192c2a589bdae7882625b4a3] [0fd309336186c6eca3035fc53fe67640e0ff7dc2] [0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712] [894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.WebControls.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common.WebControls 819712 6a642a74192c2a589bdae7882625b4a3 FormFast.Common.WebControls 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC 0fd309336186c6eca3035fc53fe67640e0ff7dc2 0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712 894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ddf671505404788521fda5c973af69107bc087d852d71c4b7c32aa3e196dfe48 [68a62c390de66b6bd84ed64d, 68a62cbbbad0c3891c05202e] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z] [7c34e63ebc70dc9dc37dfca6d43e98cf] [ae7c13b1bba6b8ea57c53b0163dca8140cd2110a] [d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb] [27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.FFWFI 218112 7c34e63ebc70dc9dc37dfca6d43e98cf FormFast.FFWFI 1.0.0.0 Not Signed 2023-06-20 18:27:44 +0000 UTC 2023-06-20 18:27:44 +0000 UTC ae7c13b1bba6b8ea57c53b0163dca8140cd2110a d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb 27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dde97184b601782ae0abc3ff1cb59960f2e0c5059c5e5418c2c5e0e11e8ed943 [68a62c390de66b6bd84ed63b, 68a62cb1297e2a61afff0f7d] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.Common.WebHost.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [37d362da0fed62d2ff86ba4f2501029f] [fad81398b35795cbc63ee47f853b0a8b576a1989] [13894f0ab53ff299951dac0d5b758fb35ce69745827bbbd3c58fc5af5e47d1d68e9960b31340eb3c9ab00096ff448ef3] [0635163903e187588ba7e984ed543000b6a55fb7d36180646a2a0de0228e27fcda37da734476854c46e299c99895f596440a9c66d376fb7c7a2ac4905f0a14bc] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Ninject.Web.Common.WebHost.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Ninject.Web.Common.WebHost 9728 37d362da0fed62d2ff86ba4f2501029f Ninject.Web.Common.WebHost 3.3.0 Not Signed 2017-10-23 12:33:26 +0000 UTC 2017-10-23 12:33:26 +0000 UTC fad81398b35795cbc63ee47f853b0a8b576a1989 13894f0ab53ff299951dac0d5b758fb35ce69745827bbbd3c58fc5af5e47d1d68e9960b31340eb3c9ab00096ff448ef3 0635163903e187588ba7e984ed543000b6a55fb7d36180646a2a0de0228e27fcda37da734476854c46e299c99895f596440a9c66d376fb7c7a2ac4905f0a14bc 2025-05-06 18:28:12 +0000 UTC None None 2019-08-03 13:40:49 +0000 UTC 69 0 KNOWN 0 Microsoft attested file 2025-05-06 18:32:19.67 +0000 UTC
015453e136abf50cbbbf808b57b7c5a00f91d91129c922c4857a95afa5a23664 [68a62c390de66b6bd84ed635, 68a62cb1297e2a61afff0f77] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] [6b971ede90737ede2770db65b7fab0db] [b754cd469ae436842b3d24bc04b4e2775b971cd6] [ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e] [5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Utility 140800 6b971ede90737ede2770db65b7fab0db FormFast.Utility 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC b754cd469ae436842b3d24bc04b4e2775b971cd6 ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e 5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
01cc80a16323f56191596013eef1de7e43271d6f991f4740b1fcc5195d8ab5bd [68a62c390de66b6bd84ed639, 68a62cb1297e2a61afff0f7b] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [0b2cb73855a6f9e364d4fb6393df5571] [29e05fbd7a07baddf49a69ef4f7c44c3a191fb89] [a1a866927a49b199d1b68bada61ab73aa935e5b0900d9eb8f7f9e807fb61f00dfb86dcfda9d16fe340ab392f2f3adee4] [1cdd1aaffa0a2a52ee997d754704fd2f888916b292c670595dc9a5f4057b0c5c05ce859ea3113346afc787aa2cf2315108c1102a78d80788882d9fb3f66beb25] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Ninject.dll C:\Program Files (x86)\VITEC\EZTV\Web\API\bin\ Ninject 138752 0b2cb73855a6f9e364d4fb6393df5571 Ninject: Lightweight dependency injection for .NET 3.3.4 Not Signed 2017-11-13 08:01:30 +0000 UTC 2017-11-13 08:01:30 +0000 UTC 29e05fbd7a07baddf49a69ef4f7c44c3a191fb89 a1a866927a49b199d1b68bada61ab73aa935e5b0900d9eb8f7f9e807fb61f00dfb86dcfda9d16fe340ab392f2f3adee4 1cdd1aaffa0a2a52ee997d754704fd2f888916b292c670595dc9a5f4057b0c5c05ce859ea3113346afc787aa2cf2315108c1102a78d80788882d9fb3f66beb25 2025-05-01 01:42:11 +0000 UTC None None 2025-03-24 14:14:55 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-30 06:52:42.232 +0000 UTC
fb86afd3c6fcdad7c494651481b906b004846066c0d130d10cfd1738d4b54f9e [68a62c390de66b6bd84ed64f, 68a62cbbbad0c3891c052030] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z] [5b6aebd86fb1e8c33afe527100c348e3] [696abaa1ec222d4ddf57c0b1472bff9fdcb38985] [9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04] [b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Utility 140800 5b6aebd86fb1e8c33afe527100c348e3 FormFast.Utility 1.0.0.0 Not Signed 2023-06-20 18:27:38 +0000 UTC 2023-06-20 18:27:38 +0000 UTC 696abaa1ec222d4ddf57c0b1472bff9fdcb38985 9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04 b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ad1da4f93aab239ace410b322f5ed5cfe1f5879da4d19e7ca297e24305382450 [68a62c390de66b6bd84ed644, 68a62cbbbad0c3891c052027] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z] [c1b3cbbd457177190f1876cae07fcbbe] [96715a446043a6f266410e8131710ac45574e701] [23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf] [11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ 631296 c1b3cbbd457177190f1876cae07fcbbe 1.0.0.0 Not Signed 2023-06-20 18:27:44 +0000 UTC 2023-06-20 18:27:44 +0000 UTC 96715a446043a6f266410e8131710ac45574e701 23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf 11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
af94476044666c91a75deaaad5adf85364fab6e767c1ea41617a86554b4cc15a [68a62c254d354bf933e4d34f, 68a62ca798fdd4aa74a31738] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Base.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:17Z, 2025-08-20T20:14:24Z] [c50b3e7c14d2f045bab6117722fee54a] [efc6caa5b6bbfe187aee2f22d76872cc63922546] [539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286] [b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Base.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Base 200192 c50b3e7c14d2f045bab6117722fee54a Base 1.0.0.0 Not Signed 2023-06-20 18:27:52 +0000 UTC 2023-06-20 18:27:52 +0000 UTC efc6caa5b6bbfe187aee2f22d76872cc63922546 539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286 b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e 2025-05-06 18:27:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
098d2b84069e297d67d62296d293f624529fcbfb81d2f483841cffaaf856ee85 [68a17e784c66390ad0dbbcc0, 68a17f4292a8fa5a3dd2d46f, 68a2cffe3648098ea02a6aec, 68a2d0c6e967c9fedcd45bc3, 68a4226ce3b71f72263710e5, 68a42295ccb2668fe949e62f, 68a5734d56974fb8ac6f8dea, 68a574064a957a7c650fc381, 68a6c3586480a9858574cc85, 68a6c501cc0db49f15cf67e9] [2] [SYSTEM] [i-vpg1a, u-vpg1b] [NT AUTHORITY] [C:\icm\bin\OPCCleanup.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T06:57:01Z, 2025-08-17T06:57:00Z, 2025-08-18T06:57:01Z, 2025-08-18T06:57:00Z, 2025-08-19T06:57:00Z, 2025-08-19T06:57:01Z, 2025-08-20T06:57:00Z, 2025-08-21T06:57:00Z] [70a3df06b9af27c0169a5f2e57fe0910] [3fb2825a5131ce29da291a67d1bdda2e095d4bf5] [345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a] [27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf] [172.17.196.43, 172.25.196.36] [172.17.196.43, 172.25.196.36] 2 Success OPCCleanup.bat C:\icm\bin\ 309 70a3df06b9af27c0169a5f2e57fe0910 Not Signed 2019-12-19 12:48:26 +0000 UTC 2021-08-18 16:13:21 +0000 UTC 3fb2825a5131ce29da291a67d1bdda2e095d4bf5 345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a 27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf 2025-08-09 06:57:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b09d4426042b1b0b92920640077a0cb0437448dbd4e2ad6362a5db8c19a48396 [68a62c390de66b6bd84ed63f, 68a62cb1297e2a61afff0f81] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\PDFEditor.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z] [0a479cfa691848f8093f23dee318a0f8] [2452e732580e910c62edc42cb7e7f5664b7af275] [304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54] [1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success PDFEditor.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ PDFEditor 109568 0a479cfa691848f8093f23dee318a0f8 PDFEditor 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC 2452e732580e910c62edc42cb7e7f5664b7af275 304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54 1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b27c79dea15afcb5dca60df8c3f118935313871b837bc3fcceeec1e90607bca6 [68a3b9a777cc2b5ee11bb210, 68a6d73e9344841503a5d97b] [2] [SYSTEM] [i-nctx-natus1, u-hctx-natus1] [NT AUTHORITY] [C:\NeuroWorks\RunWebService_js.cmd] [Servers] [Servers Audit] [v2272, v2314] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\NeuroWorks\XLSyncServer.exe] [2025-08-18T23:30:43Z, 2025-08-21T08:12:38Z] [bfa13690b9a80188a2417893d78b5ee3] [4308a880433c30d9790233ee58b23328b7164bad] [904d96f71ae98d8e4c1c37495ce4ebb3a17f4a7ba96d0ff29d05b11e46d5cf1cdd63f0e8e7004d87a3c3523025725ade] [654fc00d36676b16987f3ece5426b72271d321185d9528d61bb8873abe1967e0c1e0f5e3cf3e9e48af2cec50bcefe5f88baf1cf327949185f73ce2168ff3d264] [172.17.147.114, 172.25.15.217] [172.17.147.114, 172.25.15.217] 2 Success RunWebService_js.cmd C:\NeuroWorks\ 1231 bfa13690b9a80188a2417893d78b5ee3 Not Signed 2023-03-20 20:01:41 +0000 UTC 2021-08-20 20:56:00 +0000 UTC 4308a880433c30d9790233ee58b23328b7164bad 904d96f71ae98d8e4c1c37495ce4ebb3a17f4a7ba96d0ff29d05b11e46d5cf1cdd63f0e8e7004d87a3c3523025725ade 654fc00d36676b16987f3ece5426b72271d321185d9528d61bb8873abe1967e0c1e0f5e3cf3e9e48af2cec50bcefe5f88baf1cf327949185f73ce2168ff3d264 2025-08-13 05:01:48 +0000 UTC None None 2024-02-29 07:04:12 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-08-13 05:05:20.127 +0000 UTC
ace6da9bf8d445dc8ee37e2c53ba887f4240eac639c26f1f636181978105dce7 [68a2933c9ec71f04ddbda157, 68a293873b7ed38a0e67d317] [2] [SYSTEM] [U-NKRONOSWEB2, i-nkronoswork] [NT AUTHORITY] [C:\Kronos\jboss\bin\jboss-cli.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\cmd.exe] [2025-08-18T02:40:09Z, 2025-08-18T02:40:10Z] [1f936af4f88c0e516f5e9bdc04702262] [4e085411a943887521afa6b3478c4765c53ee977] [75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4] [a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4] [172.25.16.7, 172.17.253.221] [172.25.16.7, 172.17.253.221] 2 Success jboss-cli.bat E:\kronos\jboss\bin\ 2879 1f936af4f88c0e516f5e9bdc04702262 Not Signed 2020-12-16 21:22:13 +0000 UTC 2017-12-17 03:33:40 +0000 UTC 4e085411a943887521afa6b3478c4765c53ee977 75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4 a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4 2025-07-22 23:34:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a7e24a20b68c9fcce3cd15293e17c137fc6b4dd216ed7a769aee2ba388b36662 [68a62c2f20141caa2973b29d, 68a62c4fe0cb7d1d0b6ef994, 68a62cb1297e2a61afff0f6d, 68a62dbdd3f22bde37b5f4f0, 68a62dbdd3f22bde37b5f4f9, 68a62ea8e82920a204bd4be8] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] [a8d6363363dc6e25c38bae4ed0a8bdf0] [468c211b8cea0c4282358993a6f84072ca3d46d4] [4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a] [ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.SharePoint.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ 20992 a8d6363363dc6e25c38bae4ed0a8bdf0 1.0.0.0 Not Signed 2023-06-20 18:19:58 +0000 UTC 2023-06-20 18:19:58 +0000 UTC 468c211b8cea0c4282358993a6f84072ca3d46d4 4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a9c2e0aac424785820d2e99836bdc15a30fd6116221f24a538988654f8e50f2a [68a62c2f20141caa2973b29f, 68a62cb1297e2a61afff0f70] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebControls.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:14:35Z] [3a5259b82d4d5545ff8ce39e8340ee51] [ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7] [f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771] [fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.WebControls.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.WebControls 819712 3a5259b82d4d5545ff8ce39e8340ee51 FormFast.Common.WebControls 1.0.0.0 Not Signed 2023-06-20 18:27:52 +0000 UTC 2023-06-20 18:27:52 +0000 UTC ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7 f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771 fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
99e1e93e732b9d4f6c47c0867eb8a5aff40d857d9ff409874a10e1389fd58c22 [68a62c4d7785949c881367c4, 68a62d5b4fa1f463a5481cce] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\AjaxControlToolkit.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:58Z, 2025-08-20T20:17:20Z] [ab8c75ab1dcaafe94c35dc4d12efcd28] [47887b7c0587cc2298c8e4896f146df77b3dab8f] [eda717a5a78a8c4cc0077d22036047ad45f3251fc9c350e56d75eea1d947c83e97ffc21f1c935d8a2ed59ab8bd307c3b] [64b45409f8ea932309b88579b143577a76547e0db99c3b4f0b47163c5deddb236c719b2fec61f3c025249799d25d270e9fe910c61159e46ceb2185bcbf4d8b27] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success AjaxControlToolkit.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ Ajax Control Toolkit 6410240 ab8c75ab1dcaafe94c35dc4d12efcd28 AjaxControlToolkit 4.1.51116 Not Signed 2023-05-24 16:40:10 +0000 UTC 2023-05-24 16:40:10 +0000 UTC 47887b7c0587cc2298c8e4896f146df77b3dab8f eda717a5a78a8c4cc0077d22036047ad45f3251fc9c350e56d75eea1d947c83e97ffc21f1c935d8a2ed59ab8bd307c3b 64b45409f8ea932309b88579b143577a76547e0db99c3b4f0b47163c5deddb236c719b2fec61f3c025249799d25d270e9fe910c61159e46ceb2185bcbf4d8b27 2025-07-11 22:48:13 +0000 UTC None None 2024-02-14 04:49:51 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-07-11 22:50:48.445 +0000 UTC
9024b6f1218d19b2a6595dc3b8dc69cacd733a0c47f2a1007e7b02ca98351e8b [68a62c254d354bf933e4d351, 68a62ca798fdd4aa74a3173a] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Common.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:18Z, 2025-08-20T20:14:25Z] [234e5d848debfd7b2b962ddc610b9d62] [8bce91910db4e551f1aa9dc7e83d61440b721a6b] [14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96] [d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Common.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common 449024 234e5d848debfd7b2b962ddc610b9d62 FormFast.Common 4.3.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC 8bce91910db4e551f1aa9dc7e83d61440b721a6b 14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96 d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766 2025-05-06 18:27:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8f17acea63db67d665c4b9619cfd2176782e029c7bf9fd81ddf8743066878009 [68a62c61512061b0a03001e8, 68a62d65c4509fd4abd51f64] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.WPFImaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] [2af245a0a0a6739073b1c35f9c086273] [f27e97961d0910317696386cff2cd3af5756f953] [c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5] [24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.WPFImaging.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Utility.WPFImaging 23040 2af245a0a0a6739073b1c35f9c086273 FormFast.Utility.WPFImaging 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC f27e97961d0910317696386cff2cd3af5756f953 c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5 24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8da0a73d9bfc04ac9994386d8e5abaeb6e79fadf60f8a1be36557bc03c2a3dbd [68a62c390de66b6bd84ed647, 68a62cbbbad0c3891c052028] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Oracle.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z] [1e7d19b84f70194728281751f39aab86] [815de6c698bc8f7a4a54fe69256d4cbb98b39295] [0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16] [bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Oracle.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Common.Oracle 7680 1e7d19b84f70194728281751f39aab86 FormFast.Common.Oracle 1.0.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC 815de6c698bc8f7a4a54fe69256d4cbb98b39295 0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16 bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a4259a8145dbe0502a700f2a97d2e5a52f0056025d172e71add9d97fb0c2d443 [68a62c390de66b6bd84ed655, 68a62cbbbad0c3891c052036] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\WorkflowEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:38Z, 2025-08-20T20:14:47Z] [5a89d1ae29d44aafd5e0a06cb65f5568] [139d9e403eb754b10b9952f92710977087d60141] [be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a] [d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success WorkflowEngine.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ WorkflowEngine 450560 5a89d1ae29d44aafd5e0a06cb65f5568 WorkflowEngine 1.0.0.0 Not Signed 2023-06-20 18:27:46 +0000 UTC 2023-06-20 18:27:46 +0000 UTC 139d9e403eb754b10b9952f92710977087d60141 be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3 2025-05-06 18:30:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a1238aeac72ed3f322173557f5170fad5f79de5799f743c96a1e8b87fde11473 [68a62c2f20141caa2973b2a1, 68a62cb1297e2a61afff0f72] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.WebFormImprint.Core.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] [3135e62c687f74b43f94c66b49445cb7] [e38bf716c7802960ad937b1551580b2f1f788ea6] [eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24] [204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FastPrint.WebFormImprint.Core.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.FastPrint.WebFormImprint.Core 18944 3135e62c687f74b43f94c66b49445cb7 FormFast.FastPrint.WebFormImprint.Core 1.0.0.0 Not Signed 2023-06-20 18:27:56 +0000 UTC 2023-06-20 18:27:56 +0000 UTC e38bf716c7802960ad937b1551580b2f1f788ea6 eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24 204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9b8eeb58ae7a747a0afb91393f6aa4da945d3909322a45d047001eac42ccfe0b [68a62c390de66b6bd84ed643, 68a62cbbbad0c3891c052026] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z] [3263475c89ab7ec1df01983fb99cc8ad] [5348eb8c358aa68c767096de74065ae4e64221ab] [a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2] [4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.ECM 499712 3263475c89ab7ec1df01983fb99cc8ad FormFast.ECM 1.0.0.0 Not Signed 2023-06-20 18:27:42 +0000 UTC 2023-06-20 18:27:42 +0000 UTC 5348eb8c358aa68c767096de74065ae4e64221ab a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2 4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a469e94319ca4a5068eba7c584bb648cef964b39247eafbf36274c2739b53bf8 [68a62c57d96ab29dcabe19aa, 68a62d5b4fa1f463a5481cd2] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Dashboard.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] [40c09d5c6e3c3ee86e34db4babde939a] [4fdf90e25d0025f59348b401f06b743be653f3cb] [c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b] [0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Dashboard.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common.Dashboard 34304 40c09d5c6e3c3ee86e34db4babde939a FormFast.Common.Dashboard 1.0.0.0 Not Signed 2023-06-20 18:28:38 +0000 UTC 2023-06-20 18:28:38 +0000 UTC 4fdf90e25d0025f59348b401f06b743be653f3cb c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b 0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
87379fa2a359ec5d48330bd8b11792b871c516654cb9531bf55cf9d7f986d24d [68a62c390de66b6bd84ed64c, 68a62cbbbad0c3891c05202d] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.WebFormImprint.Core.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z] [7d73e6851a1c8517ee4350a6202f6543] [25be8b71b22fcc8f23dabda16a5ef5a483554aed] [7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3] [8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FastPrint.WebFormImprint.Core.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.FastPrint.WebFormImprint.Core 18944 7d73e6851a1c8517ee4350a6202f6543 FormFast.FastPrint.WebFormImprint.Core 1.0.0.0 Not Signed 2023-06-20 18:27:44 +0000 UTC 2023-06-20 18:27:44 +0000 UTC 25be8b71b22fcc8f23dabda16a5ef5a483554aed 7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3 8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
85cedd9e1d502085b0bfef0698aef44d947faa8e389593cd33626a696d6f748c [68a62c390de66b6bd84ed652, 68a62cbbbad0c3891c052033] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Imaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z] [42fa62608696fa72558ae86415e6f201] [30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9] [21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29] [d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Imaging.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ Imaging 22528 42fa62608696fa72558ae86415e6f201 Imaging 1.0.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC 30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9 21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29 d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4 2025-05-06 18:30:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
81151bd7410efbbd5e12a433990f411b387d65dac6d015d82ba8214539435d31 [68a4730f28df70c6fde369ea, 68a720db49ea7210cfdd661c] [2] [shke0124] [Uniontown-DC-01, uniontown-dc-03] [UTWNNET] [C:\temp\test-pendingreboot.ps1] [Servers] [Servers Audit] [v2272.867, v2322.909] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:40:22Z, 2025-08-21T13:27:35Z] [f3d03d56da1294ef5032ad5902a255d3] [672d173b6c306d3c809c5409854c838452d10e25] [2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b] [7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804] [10.144.17.62, 10.144.17.121] [10.144.17.62, 10.144.17.121] 2 Success test-pendingreboot.ps1 C:\temp\ 762 f3d03d56da1294ef5032ad5902a255d3 Not Signed 2025-07-09 12:54:01 +0000 UTC 2025-07-09 12:54:01 +0000 UTC 672d173b6c306d3c809c5409854c838452d10e25 2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b 7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804 2025-08-11 12:43:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7a24f9165e658de3b76bb3c04653d32520677becca5d4e5b05016792b61cfb7a [68a62c390de66b6bd84ed642, 68a62cb1297e2a61afff0f84] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Swashbuckle.Core.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z] [c24d9327a4c6a33705c1b1b5519b287f] [a57b25899280bbbf1797864c6dad2abcca11a9ba] [3c9ceabdbe6073746a9e73223c980d7b4c8a2eddb33cc713d2bea6039b0ddf66876ce38de3ea56e5c01929ecc5f63cb8] [1acae46da2b2e7469258d3627fb9e1bace52bf66abaaaae2a173e1fec653ff7df7a5d6264a178da05a33e20e58b127a7c45c77cf8fad8e7b25f045e07f1d5a63] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Swashbuckle.Core.dll C:\Program Files (x86)\Varian\ARIA Connect\3.0\EDF\ Swashbuckle.Core 4129280 c24d9327a4c6a33705c1b1b5519b287f Swashbuckle.Core 5.6.0 Not Signed 2017-07-08 06:30:56 +0000 UTC 2017-07-08 06:30:56 +0000 UTC a57b25899280bbbf1797864c6dad2abcca11a9ba 3c9ceabdbe6073746a9e73223c980d7b4c8a2eddb33cc713d2bea6039b0ddf66876ce38de3ea56e5c01929ecc5f63cb8 1acae46da2b2e7469258d3627fb9e1bace52bf66abaaaae2a173e1fec653ff7df7a5d6264a178da05a33e20e58b127a7c45c77cf8fad8e7b25f045e07f1d5a63 2025-03-21 07:59:19 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-17 10:18:54 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-04-10 05:03:19.958 +0000 UTC
7905b1830cbf4890381a3415372e109eeb1ece7c02936a220ac1f166e74b0ed8 [68a2933c9ec71f04ddbda158, 68a293873b7ed38a0e67d318] [2] [SYSTEM] [U-NKRONOSWEB2, i-nkronoswork] [NT AUTHORITY] [C:\Kronos\jboss\bin\standalone.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Kronos\wfc\bin\jbossService.exe] [2025-08-18T02:41:45Z, 2025-08-18T02:41:33Z] [48b73b080adb3ce41b4947d5775eb4bc] [e1ffc19ea0e7993d37c3119a49c1c0c068624284] [155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401] [7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a] [172.25.16.7, 172.17.253.221] [172.25.16.7, 172.17.253.221] 2 Success standalone.bat E:\Kronos\jboss\bin\ 9260 48b73b080adb3ce41b4947d5775eb4bc Not Signed 2020-12-12 23:23:31 +0000 UTC 2017-12-17 03:33:40 +0000 UTC e1ffc19ea0e7993d37c3119a49c1c0c068624284 155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401 7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a 2025-07-22 23:35:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
77fe0f26dccc5c24f74c01715f8ee961dcbf89d097ba3e6d98a8affeea40f8c6 [68a62c2f20141caa2973b2a3, 68a62cb1297e2a61afff0f74] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:29Z, 2025-08-20T20:14:36Z] [c8d59a3d0d900b0a8897e19beb7aa313] [6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a] [be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119] [d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ 289792 c8d59a3d0d900b0a8897e19beb7aa313 1.0.0.0 Not Signed 2023-06-20 18:27:56 +0000 UTC 2023-06-20 18:27:56 +0000 UTC 6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119 d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7558691333b70391fb91d26b9260507de1e56c472fcc9e2c404ce60cda87ebc5 [68a62c390de66b6bd84ed648, 68a62cbbbad0c3891c052029] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Sfdc.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z] [b0f7ae9b56111a45892fb5d4876413a7] [499944bef9b82dfef97ae702d7d6618b9f2ffe97] [ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6] [995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Sfdc.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Common.Sfdc 44544 b0f7ae9b56111a45892fb5d4876413a7 FormFast.Common.Sfdc 1.0.0.0 Not Signed 2023-06-20 18:27:46 +0000 UTC 2023-06-20 18:27:46 +0000 UTC 499944bef9b82dfef97ae702d7d6618b9f2ffe97 ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6 995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7495b8a6f9abb329896bc4b33c9995705069703ff2930e80f09e449a87c57517 [68a62c2f20141caa2973b299, 68a62c4fe0cb7d1d0b6ef992, 68a62cb1297e2a61afff0f69, 68a62dbdd3f22bde37b5f4ee, 68a62dbdd3f22bde37b5f4f7, 68a62ea8e82920a204bd4be6] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Models.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] [57df9c39430df2249924c520a3bd5795] [0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec] [5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367] [39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Models.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.Models 15360 57df9c39430df2249924c520a3bd5795 FormFast.Common.Models 1.0.0.0 Not Signed 2023-06-20 18:19:58 +0000 UTC 2023-06-20 18:19:58 +0000 UTC 0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec 5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367 39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7253595091c17a19a2384c7268d936222f6b316f28fcfe2e83933231e9d9f3be [68a62c390de66b6bd84ed63d, 68a62cb1297e2a61afff0f7f] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.WebApi.WebHost.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [23f9cf7a32ab286415d1bf959cccc4d3] [8cda9006802347203a48f3841a098f219c711cf2] [f630a509f84f6127b2c6432ec93ef66369433415c8d256f240663063f08c1b2d45d87805d58944349608a58885a7b38a] [9c25dada1dbfc52c8ef7b20054caf4eb206fb11375642c444d6b2ab540dd1cfe6cf7b3676d65184c8b8395eab7b0aa3e3341a1cdd45b137a9c12c84662c43aa4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Ninject.Web.WebApi.WebHost.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Ninject.Web.WebApi.WebHost 6144 23f9cf7a32ab286415d1bf959cccc4d3 Ninject integration for WebApi 2 web host 3.3.0 Not Signed 2017-10-23 13:17:36 +0000 UTC 2017-10-23 13:17:36 +0000 UTC 8cda9006802347203a48f3841a098f219c711cf2 f630a509f84f6127b2c6432ec93ef66369433415c8d256f240663063f08c1b2d45d87805d58944349608a58885a7b38a 9c25dada1dbfc52c8ef7b20054caf4eb206fb11375642c444d6b2ab540dd1cfe6cf7b3676d65184c8b8395eab7b0aa3e3341a1cdd45b137a9c12c84662c43aa4 2025-05-06 18:28:12 +0000 UTC None None 2022-02-04 09:38:59 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.67 +0000 UTC
6f30e0e23ce47898752d2c51fe0bf30691c48bb35818bb4d8e75c6fe5db142dd [68a3b9a777cc2b5ee11bb211, 68a6d73e9344841503a5d97c] [2] [SYSTEM] [i-nctx-natus1, u-hctx-natus1] [NT AUTHORITY] [C:\NeuroWorks\DynamicFields\WS\npm\ws.cmd] [Servers] [Servers Audit] [v2272, v2314] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\NeuroWorks\XLSyncServer.exe] [2025-08-18T23:30:44Z, 2025-08-21T08:12:39Z] [9eaf7a8371a51fdabe1bc1120ded09ac] [737379e4db0e374c08a427b0ceb496733fe40de6] [53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a] [68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be] [172.17.147.114, 172.25.15.217] [172.17.147.114, 172.25.15.217] 2 Success ws.cmd C:\NeuroWorks\DynamicFields\WS\npm\ 297 9eaf7a8371a51fdabe1bc1120ded09ac Not Signed 2021-04-06 21:04:16 +0000 UTC 2021-04-06 21:04:16 +0000 UTC 737379e4db0e374c08a427b0ceb496733fe40de6 53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a 68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be 2025-08-13 05:01:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6b6ad431214d0c4ef21f0b10cd6acde62b800a16dc3ed22310b742d149523e71 [68a62c390de66b6bd84ed64a, 68a62cbbbad0c3891c05202b] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common_Rest.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] [c604a070e63e2e6585164307edf7dbf2] [45233bb7eb48124f6c3606b6a13925954b985b33] [2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1] [b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common_Rest.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Common_Rest 86016 c604a070e63e2e6585164307edf7dbf2 FormFast.Common_Rest 1.0.0.0 Not Signed 2023-06-20 18:27:46 +0000 UTC 2023-06-20 18:27:46 +0000 UTC 45233bb7eb48124f6c3606b6a13925954b985b33 2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1 b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6a709cd50fa7d3826662bfd0b27b1b9f80f3a2a57092655c17e33238cc13e764 [68a178f000fcf6f09fa43ed5, 68a17d32b8e0917a96ab5184, 68a2ca7bf1b5d070157fa50b, 68a2cebeea2bec6dd453ddc7, 68a41c1ee32af9c7fb4f586e, 68a4205b652c2f8e7aac8984, 68a56dbbc331ff607b884d4c, 68a571f415ffa42bc82736b6, 68a6bd0efdc403b5bd56e6e8, 68a6c39760f18225f9c20c98] [2] [WVUHPAN] [I-PANHS, U-PanHS] [HS] [C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-17T06:30:02Z, 2025-08-17T06:51:02Z, 2025-08-18T06:30:02Z, 2025-08-18T06:51:03Z, 2025-08-19T06:30:03Z, 2025-08-19T06:51:02Z, 2025-08-20T06:30:03Z, 2025-08-20T06:51:02Z, 2025-08-21T06:30:03Z, 2025-08-21T06:51:03Z] [93fa6789028ba05bc8aacc943b54eddd] [f17fa2522392628272a587caf103c1fd0c7732f8] [e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea] [609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c] [172.17.252.76, 172.25.18.242] [172.17.252.76, 172.25.18.242] 2 Success no-ie.ps1 C:\Program Files\Quest Software\Management Shell for AD\ 1831 93fa6789028ba05bc8aacc943b54eddd Not Signed 2018-11-06 12:14:18 +0000 UTC 2020-04-17 12:37:22 +0000 UTC f17fa2522392628272a587caf103c1fd0c7732f8 e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea 609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c 2025-08-09 06:30:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c03d4295496789ededcf8a9c8ebebbd4e236ff4517bc62338dd521a3134e1b9 [68a289dc0e6a21d30c5fa31f, 68a29c0c6ac1db84aa535409, 68a29c0c6ac1db84aa53540a, 68a29c1bd1ae18ffaf5ca38d, 68a29c1bd1ae18ffaf5ca38e] [2] [SYSTEM] [U-NKRONOSWEB2, i-nkronoswork] [NT AUTHORITY] [C:\Kronos\configuration\boms\bin\Shortcut.vbs] [Servers] [Servers Audit] [v2248.849, v2248] [] [Not Signed] [C:\Windows\SysWOW64\cscript.exe] [C:\Windows\SysWOW64\cmd.exe] [2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:36Z, 2025-08-18T03:20:47Z, 2025-08-18T03:20:48Z] [01ee07f3ce06569e0aa0e51727e6b2f4] [7d87d946d1e38e9a6926b1a44e33e6bdf85ac876] [3fb743cf32f485f8511da85d9eeb79902b2420fd719465d2c00213722b3a3957f012baa51a5c55358a158ad4f8fbca5b] [75993f88ef170861dc2e3d9a96c8000f16e5f24607cd03d14bedef14a4c5a0a5afcd8f7b3987e3cb9f540a1db554f152462128f1bd4d0cc3e5f0eec410eafdf8] [172.25.16.7, 172.17.253.221] [172.25.16.7, 172.17.253.221] 2 Success Shortcut.vbs E:\kronos\configuration\boms\bin\ 4411 01ee07f3ce06569e0aa0e51727e6b2f4 Not Signed 2020-12-16 21:19:39 +0000 UTC 2021-07-02 12:32:55 +0000 UTC 7d87d946d1e38e9a6926b1a44e33e6bdf85ac876 3fb743cf32f485f8511da85d9eeb79902b2420fd719465d2c00213722b3a3957f012baa51a5c55358a158ad4f8fbca5b 75993f88ef170861dc2e3d9a96c8000f16e5f24607cd03d14bedef14a4c5a0a5afcd8f7b3987e3cb9f540a1db554f152462128f1bd4d0cc3e5f0eec410eafdf8 2025-07-22 23:34:50 +0000 UTC None None 2024-09-15 11:11:08 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-07-22 23:37:32.926 +0000 UTC
8aa6f2c4876469b14c284845015127a526963e464fc909961c4d57eb565a978b [68a62c2f20141caa2973b2a5, 68a62cb1297e2a61afff0f76] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Services.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z] [27e1dbc8bc6cca4fc36c2012705294a2] [6514a2bbf32e5e805a3355ad21d367a98bdb6a49] [88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac] [9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Services.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Services 47104 27e1dbc8bc6cca4fc36c2012705294a2 FormFast.Services 1.0.0.0 Not Signed 2023-06-20 18:27:58 +0000 UTC 2023-06-20 18:27:58 +0000 UTC 6514a2bbf32e5e805a3355ad21d367a98bdb6a49 88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac 9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0e6bd78b294419e4fdf53637463eddfa92e91aebcb08308aab0d1825c8abb76b [68a62dbdd3f22bde37b5f4fa, 68a62ea8e82920a204bd4be9] [2] [SYSTEM] [i-NFP1, u-NFP2] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.PrintEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:17:32Z, 2025-08-20T20:13:10Z] [54d640613f50c4c6d4dfac35bcd2e3dc] [57a19917f194791d4039d9254d6f0cbda27b7b16] [dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1] [0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a] [172.17.253.162, 172.25.17.195] [172.17.253.162, 172.25.17.195] 2 Success FormFast.FastPrint.PrintEngine.dll C:\Program Files (x86)\FormFast\PrintManagerClient\ FormFast.FastPrint.PrintEngine 252416 54d640613f50c4c6d4dfac35bcd2e3dc FastPrint 5.0.8571.24000 Not Signed 2023-06-20 17:20:02 +0000 UTC 2023-06-20 17:20:02 +0000 UTC 57a19917f194791d4039d9254d6f0cbda27b7b16 dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1 0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a 2025-05-01 17:27:15 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0e28827fcc1512a275ce68b1fb018b2ce93612d87ec4abe10ff1fec81f926c3f [68a289dc0e6a21d30c5fa320, 68a29c0c6ac1db84aa535407, 68a29c1bd1ae18ffaf5ca38b] [2] [SYSTEM] [U-NKRONOSWEB2, i-nkronoswork] [NT AUTHORITY] [C:\Kronos\openfire\ns\bin\openfire.bat] [Servers] [Servers Audit] [v2248.849, v2248] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Kronos\openfire\ns\bin\openfireService.exe] [2025-08-18T02:00:01Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z] [ab64c8787040b08d683005966e018ee4] [f9da413179bee525e399f586c1afe270a2de061b] [6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd] [8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9] [172.25.16.7, 172.17.253.221] [172.25.16.7, 172.17.253.221] 2 Success openfire.bat C:\Kronos\openfire\ns\bin\ 1163 ab64c8787040b08d683005966e018ee4 Not Signed 2022-02-08 15:15:46 +0000 UTC 2021-12-20 08:03:28 +0000 UTC f9da413179bee525e399f586c1afe270a2de061b 6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd 8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9 2025-08-09 02:00:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6054d028e63b2ba38b02379beaebdd1bbf8ee123f706a9c36caeb6a2de43b333 [68a62c390de66b6bd84ed64b, 68a62cbbbad0c3891c05202c] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.PrintEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] [8b3adcbf2a0f7a606fce9c03b8c9732a] [b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8] [f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff] [1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FastPrint.PrintEngine.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.FastPrint.PrintEngine 252416 8b3adcbf2a0f7a606fce9c03b8c9732a FastPrint 5.0.8571.24231 Not Signed 2023-06-20 18:27:44 +0000 UTC 2023-06-20 18:27:44 +0000 UTC b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8 f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff 1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
618e4a759878701f6e2fa437073f84a4928b28e2f5ad2cdd177d582b9a4d7809 [68a62c390de66b6bd84ed649, 68a62cbbbad0c3891c05202a] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.WebControls.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z] [cd453ae2d81abb01c3672138e3c684b9] [fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7] [7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8] [3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.WebControls.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Common.WebControls 819712 cd453ae2d81abb01c3672138e3c684b9 FormFast.Common.WebControls 1.0.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7 7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8 3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d 2025-05-06 18:29:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
670ddf1e8c8d970ff2d18e82ac1ebb0f9838d2d0af4359428bc630bd21a85ee2 [68a31e9eca7b7527f86c6ca9, 68a325d712844ae893875a09, 68a5ffc9536a7a985c76561d, 68a605e24d31d8fb8241a71c] [2] [SYSTEM] [i-nCCMCPyxCCEP, i-nCCMCPyxCCET] [NT AUTHORITY] [C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\cp.dll] [Servers] [Servers Audit] [v2248.849, v2253.852, v2307.897] [] [BeyondTrust Corporation] [C:\Windows\System32\LogonUI.exe] [C:\Windows\System32\winlogon.exe] [2025-08-18T12:37:48Z, 2025-08-18T13:02:33Z, 2025-08-20T16:53:05Z, 2025-08-20T17:27:13Z] [672aff5f06e5ac0ac9259768c54498d5] [deb676605b5883a1afcefaadb06d2feba1959a5e] [40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a] [5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85] [172.17.22.217, 172.17.22.211] [172.17.22.217, 172.17.22.211] 2 Success cp.dll C:\Program Files\BeyondTrust\bomgar-scc\68761134022\ ACH Credential Provider 1174696 672aff5f06e5ac0ac9259768c54498d5 Automated Credential Handling 24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6) BeyondTrust Corporation 2025-07-15 08:28:36 +0000 UTC 2025-07-15 08:28:36 +0000 UTC deb676605b5883a1afcefaadb06d2feba1959a5e 40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a 5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85 2025-07-15 08:28:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
68e27e7a76de394402eb3d25ba0772f4b0192293f4d969fedfb793697583a122 [68a62c390de66b6bd84ed650, 68a62cbbbad0c3891c052031] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.ImageProcessor.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z] [40e9672f5104713cd10b2d229a4711f4] [102515d3b0a510b9a18bb4752d73022ec2b0b398] [7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95] [7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.ImageProcessor.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Utility.ImageProcessor 11776 40e9672f5104713cd10b2d229a4711f4 FormFast.Utility.ImageProcessor 1.0.0.0 Not Signed 2023-06-20 18:27:46 +0000 UTC 2023-06-20 18:27:46 +0000 UTC 102515d3b0a510b9a18bb4752d73022ec2b0b398 7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95 7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e 2025-05-06 18:30:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5ff0922ec426c97cdafae576ce456d5db7ca1113c50c94aba499afeff0a52daa [68a162ca5b8354c34e8aa922, 68a172395f4b12ae90c10d00, 68a2b4553b82e453c561f8da, 68a2c2ce81a308ec5f3f61a6, 68a40605126890019f479267, 68a41470bba721704ee37de4, 68a557a64e41d80738b8079c, 68a5660d5c30e7a0a3efd4cf, 68a6a954914f15cd51f7eac0, 68a6b7b6b67e8645d1d7e374] [2] [ldapuser] [I-PANWVUHS, U-PanWVUHS] [WVUHS] [C:\Scripts\NoIE.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:01Z, 2025-08-17T06:00:01Z, 2025-08-18T05:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T05:00:02Z, 2025-08-19T06:00:02Z, 2025-08-20T05:00:01Z, 2025-08-20T06:00:02Z, 2025-08-21T05:00:02Z, 2025-08-21T06:00:01Z] [1777d70e7e9b66f797bc70bad2f58a4e] [29e5acaff6e761a8bb35434d5be41b4655ffd81c] [96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a] [f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255] [172.17.252.77, 172.25.18.244] [172.17.252.77, 172.25.18.244] 2 Success NoIE.bat C:\Scripts\ 186 1777d70e7e9b66f797bc70bad2f58a4e Not Signed 2018-10-18 01:52:16 +0000 UTC 2015-10-08 19:24:30 +0000 UTC 29e5acaff6e761a8bb35434d5be41b4655ffd81c 96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255 2025-08-09 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5f68908d42bc24d1f7a4917064be3dfed6ec4b072ab253e556a448d413428e66 [68a62c2f20141caa2973b29c, 68a62c4fe0cb7d1d0b6ef993, 68a62cb1297e2a61afff0f6c, 68a62dbdd3f22bde37b5f4ef, 68a62dbdd3f22bde37b5f4f8, 68a62ea8e82920a204bd4be7] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z] [c3e5479f47487756de025353487272a1] [acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e] [7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a] [8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.SharePoint.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.SharePoint 16384 c3e5479f47487756de025353487272a1 FormFast.Common.SharePoint 1.0.0.0 Not Signed 2023-06-20 18:19:58 +0000 UTC 2023-06-20 18:19:58 +0000 UTC acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e 7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a 8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5aa21712477223afaa29abd43e991240704025ec113d55483a1b6b9332a4bc29 [68a62c2f20141caa2973b29e, 68a62cb1297e2a61afff0f6f] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebApis.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z] [f3e2b470701f45a53147e0a6d0da5b28] [097e220f5d49b3be195408c35eaff96c131ea7db] [33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8] [a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.WebApis.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.Common.WebApis 101376 f3e2b470701f45a53147e0a6d0da5b28 FormFast.Common.WebApis 1.0.0.0 Not Signed 2023-06-20 18:25:14 +0000 UTC 2023-06-20 18:25:14 +0000 UTC 097e220f5d49b3be195408c35eaff96c131ea7db 33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8 a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
55b4937fa698d440b91765926a8686076067011c091b47d990de13a2101f050d [68a2620f3d370ccdd5f6a21e, 68a2620f3d370ccdd5f6a21f, 68a2620f3d370ccdd5f6a220, 68a2620f3d370ccdd5f6a221, 68a2620f3d370ccdd5f6a222, 68a2620f3d370ccdd5f6a223, 68a2620f3d370ccdd5f6a224, 68a2620f3d370ccdd5f6a225, 68a2620f3d370ccdd5f6a226, 68a2620f3d370ccdd5f6a227, 68a2620f3d370ccdd5f6a228, 68a2620f3d370ccdd5f6a229, 68a2620f3d370ccdd5f6a22a, 68a2620f3d370ccdd5f6a22b, 68a2620f3d370ccdd5f6a22c, 68a2620f3d370ccdd5f6a22d, 68a2620f3d370ccdd5f6a22e, 68a2620f3d370ccdd5f6a22f, 68a2620fc7a43de1b4392b1d, 68a2620fc7a43de1b4392b1e, 68a2620fc7a43de1b4392b1f, 68a2620fc7a43de1b4392b20, 68a2620fc7a43de1b4392b21, 68a2620fc7a43de1b4392b22, 68a2620fc7a43de1b4392b23, 68a2620fc7a43de1b4392b24, 68a2620fc7a43de1b4392b25, 68a2620fc7a43de1b4392b26, 68a2620fc7a43de1b4392b27, 68a2620fc7a43de1b4392b28, 68a2620fc7a43de1b4392b29, 68a2620fc7a43de1b4392b2a, 68a2620fc7a43de1b4392b2b, 68a2620fc7a43de1b4392b2c, 68a3b15eb4f6bc6c55ecf84d, 68a3b15eb4f6bc6c55ecf84e, 68a3b15eb4f6bc6c55ecf84f, 68a3b15eb4f6bc6c55ecf850, 68a3b15eb4f6bc6c55ecf851, 68a3b15eb4f6bc6c55ecf852, 68a3b15eb4f6bc6c55ecf853, 68a3b15eb4f6bc6c55ecf854, 68a3b34e2075304ed4fd60a7, 68a3b34e2075304ed4fd60a8, 68a3b34e2075304ed4fd60a9, 68a3b34e2075304ed4fd60aa, 68a3b34e2075304ed4fd60ab, 68a3b34e2075304ed4fd60ac, 68a3b34e2075304ed4fd60ad, 68a3b34e2075304ed4fd60ae, 68a3b34e2075304ed4fd60af, 68a3b34e2075304ed4fd60b0, 68a3b34e2075304ed4fd60b1, 68a3b34e2075304ed4fd60b2, 68a3b34e2075304ed4fd60b3, 68a3b34e2075304ed4fd60b4, 68a3b34e2075304ed4fd60b5, 68a3b34e2075304ed4fd60b6, 68a3b34e2075304ed4fd60b7, 68a3b3b72c5fa0efe17df9ce, 68a3b3b72c5fa0efe17df9cf, 68a3b3b72c5fa0efe17df9d0, 68a3b3b72c5fa0efe17df9d1, 68a3b3b72c5fa0efe17df9d2, 68a3b3b72c5fa0efe17df9d3, 68a3b3b72c5fa0efe17df9d4, 68a3b3b72c5fa0efe17df9d5, 68a3b3b72c5fa0efe17df9d6, 68a502fd6e086e0dc1367514, 68a502fd6e086e0dc1367515, 68a502fd6e086e0dc1367516, 68a502fd6e086e0dc1367517, 68a502fd6e086e0dc1367518, 68a502fd6e086e0dc1367519, 68a502fd6e086e0dc136751a, 68a502fd6e086e0dc136751b, 68a502fd6e086e0dc136751c, 68a502fd6e086e0dc136751d, 68a502fd6e086e0dc136751e, 68a502fd6e086e0dc136751f, 68a502ff61a62c94a5dd231e, 68a502ff61a62c94a5dd231f, 68a502ff61a62c94a5dd2320, 68a502ff61a62c94a5dd2321, 68a502ff61a62c94a5dd2322, 68a502ff61a62c94a5dd2323, 68a502ff61a62c94a5dd2324, 68a502ff61a62c94a5dd2325, 68a502ff61a62c94a5dd2326, 68a502ff61a62c94a5dd2327, 68a502ff61a62c94a5dd2328, 68a50555504093853cdbd2eb, 68a50555504093853cdbd2ec, 68a50555504093853cdbd2ed, 68a50555504093853cdbd2ee, 68a50555504093853cdbd2ef, 68a505573598c9ecc0b6ba83, 68a505573598c9ecc0b6ba84, 68a505573598c9ecc0b6ba85, 68a505573598c9ecc0b6ba86, ...] [2] [SYSTEM] [CIAS2D1, CIAS2D2] [NT AUTHORITY] [C:\Program Files (x86)\Veeam\Backup Transport\x64\NtfsLib.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Program Files (x86)\Veeam\Backup Transport\x64\VeeamAgent.exe] [C:\Program Files (x86)\Veeam\Backup Transport\VeeamTransportSvc.exe] [2025-08-17T23:04:49Z, 2025-08-17T23:04:53Z, 2025-08-17T23:05:39Z, 2025-08-17T23:05:46Z, 2025-08-17T23:06:09Z, 2025-08-17T23:06:13Z, 2025-08-17T23:06:40Z, 2025-08-17T23:06:42Z, 2025-08-17T23:06:47Z, 2025-08-17T23:07:17Z, 2025-08-17T23:07:50Z, 2025-08-17T23:07:55Z, 2025-08-17T23:08:16Z, 2025-08-17T23:08:46Z, 2025-08-17T23:12:30Z, 2025-08-17T23:12:40Z, 2025-08-17T23:12:42Z, 2025-08-17T23:12:47Z, 2025-08-17T23:04:47Z, 2025-08-17T23:04:56Z, 2025-08-17T23:05:06Z, 2025-08-17T23:05:41Z, 2025-08-17T23:05:54Z, 2025-08-17T23:06:05Z, 2025-08-17T23:06:10Z, 2025-08-17T23:06:32Z, 2025-08-17T23:06:38Z, 2025-08-17T23:07:04Z, 2025-08-17T23:07:07Z, 2025-08-17T23:07:53Z, 2025-08-17T23:08:06Z, 2025-08-17T23:12:36Z, 2025-08-17T23:13:13Z, 2025-08-18T23:02:14Z, 2025-08-18T23:02:15Z, 2025-08-18T23:02:20Z, 2025-08-18T23:02:30Z, 2025-08-18T23:03:08Z, 2025-08-18T23:03:13Z, 2025-08-18T23:03:19Z, 2025-08-18T23:03:29Z, 2025-08-18T23:02:10Z, 2025-08-18T23:02:11Z, 2025-08-18T23:02:22Z, 2025-08-18T23:02:26Z, 2025-08-18T23:03:14Z, 2025-08-18T23:03:18Z, 2025-08-18T23:03:28Z, 2025-08-18T23:03:30Z, 2025-08-18T23:04:05Z, 2025-08-18T23:04:11Z, 2025-08-18T23:04:25Z, 2025-08-18T23:04:30Z, 2025-08-18T23:04:31Z, 2025-08-18T23:05:10Z, 2025-08-18T23:05:35Z, 2025-08-18T23:04:07Z, 2025-08-18T23:04:14Z, 2025-08-18T23:04:28Z, 2025-08-18T23:05:11Z, 2025-08-18T23:05:24Z, 2025-08-18T23:06:12Z, 2025-08-18T23:06:13Z, 2025-08-19T23:02:03Z, 2025-08-19T23:02:09Z, 2025-08-19T23:02:19Z, 2025-08-19T23:02:52Z, 2025-08-19T23:02:58Z, 2025-08-19T23:03:11Z, 2025-08-19T23:03:14Z, 2025-08-19T23:03:18Z, 2025-08-19T23:03:49Z, 2025-08-19T23:03:53Z, 2025-08-19T23:04:13Z, 2025-08-19T23:04:23Z, 2025-08-19T23:02:01Z, 2025-08-19T23:02:04Z, 2025-08-19T23:02:05Z, 2025-08-19T23:02:53Z, 2025-08-19T23:02:56Z, 2025-08-19T23:03:12Z, 2025-08-19T23:03:16Z, 2025-08-19T23:03:56Z, 2025-08-19T23:04:08Z, 2025-08-19T23:04:15Z, 2025-08-19T23:04:39Z, 2025-08-19T23:04:40Z, 2025-08-19T23:04:42Z, 2025-08-19T23:05:43Z, 2025-08-19T23:05:46Z, 2025-08-19T23:04:53Z, 2025-08-19T23:04:58Z, 2025-08-19T23:05:16Z, 2025-08-19T23:05:21Z, 2025-08-19T23:06:10Z, 2025-08-20T23:02:20Z, 2025-08-20T23:02:26Z, 2025-08-20T23:02:37Z, 2025-08-20T23:03:21Z, 2025-08-20T23:03:23Z, ...] [523c117e044e5e7be912541ce9af9ad0] [51f43090d465594dd9ef6085bfc28ef5fbc30b04] [91c7870ae326e6a054ff210271bd9a8d1ef395c7db6f42312cbbd17f0a40cca6b00e725d9b4692e1756a10bc83cd3355] [3f3cc69ecda66a0ab6df78386b1d35ecafdb3ef02cec61975e8f844851e9d1981942868dfe09bb7ef6cf1035535a8dea7d1c088eccd549b32753c02393ebf63f] [172.18.114.69, 172.18.114.70] [172.18.114.69, 172.18.114.70] 2 Success NtfsLib.dll C:\Program Files (x86)\Veeam\Backup Transport\x64\ NtfsLib 510976 523c117e044e5e7be912541ce9af9ad0 Veeam Backup and Replication 9.5.4.2866 Not Signed 2019-06-29 09:50:12 +0000 UTC 2019-06-29 09:50:12 +0000 UTC 51f43090d465594dd9ef6085bfc28ef5fbc30b04 91c7870ae326e6a054ff210271bd9a8d1ef395c7db6f42312cbbd17f0a40cca6b00e725d9b4692e1756a10bc83cd3355 3f3cc69ecda66a0ab6df78386b1d35ecafdb3ef02cec61975e8f844851e9d1981942868dfe09bb7ef6cf1035535a8dea7d1c088eccd549b32753c02393ebf63f 2025-07-16 23:02:21 +0000 UTC None None 2020-06-19 17:51:17 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-16 23:06:06.673 +0000 UTC
476a8c77b72ac987cf971d96f3cd4d06a1097b69c15b00dd8558bd0eb0d291b8 [68a62c57d96ab29dcabe19a9, 68a62d5b4fa1f463a5481cd1] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FFAdminPanel.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:07Z, 2025-08-20T20:17:29Z] [7e3986d0b83be86c9bd73da60ac9c757] [a9d2fb1648bf369ac3c49b19cfe88229428bf05a] [02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45] [600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FFAdminPanel.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ ffAdminPanel 642048 7e3986d0b83be86c9bd73da60ac9c757 ffAdminPanel 1.0.0.0 Not Signed 2023-06-20 18:25:16 +0000 UTC 2023-06-20 18:25:16 +0000 UTC a9d2fb1648bf369ac3c49b19cfe88229428bf05a 02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45 600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4608826d15c9b0013ef43372373ac5c1c3d4a93c7b39658115e0f6568bfcf9ad [68a62c2f20141caa2973b297, 68a62cb1297e2a61afff0f66] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:27Z, 2025-08-20T20:14:33Z] [b1a9f00e7f16af894f7d762f31f04103] [aea24bcf206640f8e3fe8d855ee4a105dea5a326] [6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474] [f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ 631296 b1a9f00e7f16af894f7d762f31f04103 1.0.0.0 Not Signed 2023-06-20 18:27:54 +0000 UTC 2023-06-20 18:27:54 +0000 UTC aea24bcf206640f8e3fe8d855ee4a105dea5a326 6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474 f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
458ea525c7c23be64712ffb0c5e92f2f76912d0b22c9a3ce8abcbc4b798154c6 [68a62c2f20141caa2973b2a2, 68a62cb1297e2a61afff0f73] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] [4585c873644131690c95ff47f4e97a26] [2f6fc084641cf96435b0521abab90b4be05e9954] [52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f] [9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.FFWFI 218112 4585c873644131690c95ff47f4e97a26 FormFast.FFWFI 1.0.0.0 Not Signed 2023-06-20 18:27:56 +0000 UTC 2023-06-20 18:27:56 +0000 UTC 2f6fc084641cf96435b0521abab90b4be05e9954 52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f 9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
451e993a076564310629300dceda6e38d0749f6cf590a9e49882d033deca879b [68a62c2f20141caa2973b2a0, 68a62cb1297e2a61afff0f71] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.PrintEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z] [83d1c497cddbb8bd7c89d0f58850d8cb] [ab2968ee9868bbc6603b705c27963003a68b942e] [414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b] [e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FastPrint.PrintEngine.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ FormFast.FastPrint.PrintEngine 252416 83d1c497cddbb8bd7c89d0f58850d8cb FastPrint 5.0.8571.24236 Not Signed 2023-06-20 18:27:54 +0000 UTC 2023-06-20 18:27:54 +0000 UTC ab2968ee9868bbc6603b705c27963003a68b942e 414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4a0c6fdffe4a3fcc7eb5b53b90645cd60b01e50ca640413f3f6c4810a44b667a [68a2a2b145e54eb8011b598d, 68a3f3b82b0ad9191f472695, 68a545ad1588ee149e3e4b08, 68a6a04ba1132f2e5ae457dc, 68a6fd7ba1e81760c2a03b4e] [2] [jskwv] [I-nMoveItXfer, I-nMoveItAuto] [WVUHS] [E:\Program Files\MOVEit\MOVEitTransfer\MOVEitCrypto.dll, C:\Program Files\MOVEit\MOVEitAutomation\MOVEitCrypto.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [E:\Program Files\MOVEit\MOVEitTransfer\ExportCerts.exe, C:\Program Files\MOVEit\MOVEitAutomation\MICentralCfg.exe] [E:\MOVEitTransfer\Scheduler\DMZBackup.exe, C:\Windows\System32\svchost.exe] [2025-08-18T03:39:13Z, 2025-08-19T03:39:18Z, 2025-08-20T03:39:17Z, 2025-08-21T04:20:27Z, 2025-08-21T11:05:28Z] [1f54e36616d3a07d546b7e5ef7bc7e36] [a65cc714e1490b5498ddecafb67f979f5bbc7990] [52d8000c0c7bc0db578095f7b31bd6e6d0c6d51e98fea87c375e27f41491d03aee5730002248331d21d7fd309464a29e] [a3a6efa4151aa2fee89b7438a13c15487d82c2cfa58b54ca00a1c76ec13f0e9ab603bdcc5eb5193759904b552959d9f940c7652733f49a5df2a7ce917223c127] [172.17.253.253, 172.17.253.254] [172.17.253.253, 172.17.253.254] 2 Success MOVEitCrypto.dll E:\Program Files\MOVEit\MOVEitTransfer\ MOVEitCrypto - Library of cryptographic routines 154112 1f54e36616d3a07d546b7e5ef7bc7e36 MOVEitCrypto 1.3.0.0 Not Signed 2024-06-26 17:10:43 +0000 UTC 2024-06-08 01:58:58 +0000 UTC a65cc714e1490b5498ddecafb67f979f5bbc7990 52d8000c0c7bc0db578095f7b31bd6e6d0c6d51e98fea87c375e27f41491d03aee5730002248331d21d7fd309464a29e a3a6efa4151aa2fee89b7438a13c15487d82c2cfa58b54ca00a1c76ec13f0e9ab603bdcc5eb5193759904b552959d9f940c7652733f49a5df2a7ce917223c127 2025-05-01 04:19:29 +0000 UTC None None 2023-07-28 02:47:05 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-05-01 04:20:30.057 +0000 UTC
490a7505dee3e81999a414fcce3d198b21bbd62ff60d35dfdf1d6618552fb20e [68a62c61512061b0a03001e6, 68a62d65c4509fd4abd51f62] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.XmlSerializers.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] [d1da2ba18a45195587ac85e4c452ca09] [15b8ff50b85e3c93821ace49b827d283d81b0d51] [bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77] [3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.FFWFI.XmlSerializers.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ 289792 d1da2ba18a45195587ac85e4c452ca09 1.0.0.0 Not Signed 2023-06-20 18:28:42 +0000 UTC 2023-06-20 18:28:42 +0000 UTC 15b8ff50b85e3c93821ace49b827d283d81b0d51 bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77 3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
48c00f0cf8e81b7136ae6aad795978d4d6bbe8959aa93c8c88002439b65c35e0 [68a62c2f20141caa2973b295, 68a62cb1297e2a61afff0f6e] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common_WebService.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:24Z, 2025-08-20T20:14:34Z] [6cc80ab6d1e337607c99b7836f897b7a] [b7769363d5ece7b0a8d827223972357eabf93698] [ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19] [cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Common_WebService.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ Common_WebService 116224 6cc80ab6d1e337607c99b7836f897b7a Common_WebService 1.0.0.0 Not Signed 2023-06-20 18:25:20 +0000 UTC 2023-06-20 18:25:20 +0000 UTC b7769363d5ece7b0a8d827223972357eabf93698 ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19 cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0 2025-05-06 18:29:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
47c150187166b4399b815710fdd231c7060bfb92b005876b25f730e7facfbe53 [68a62c2f20141caa2973b294, 68a62cb1297e2a61afff0f68] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:23Z, 2025-08-20T20:14:34Z] [5d8c166bc8f04a2e850cf9de89166d2c] [11da266542a9b64f4e75f6edda8287f6efbf56f9] [03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7] [f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Common.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ FormFast.Common 449024 5d8c166bc8f04a2e850cf9de89166d2c FormFast.Common 4.3.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC 11da266542a9b64f4e75f6edda8287f6efbf56f9 03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7 f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd 2025-05-06 18:29:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3c18a9fccb3204a7c75bfcb401aefbe3887d079ae5e77d862c1a71f1c7ccddad [68a1630bf6e8920a96bd8fb8, 68a164cdde38c806f081815e, 68a2b48ff48ce007dac7acfd, 68a2b651d3e43b5dd374f131, 68a40646d9f12aef1f9954e2, 68a4082197086979fc9ed945, 68a557f1b2b6b5c32c84a885, 68a559cc6ef9d803fa606147, 68a6a9a35e87f5dda332a736, 68a6ab563120dcdd6b9736f4] [2] [SYSTEM] [U-VAWHDSB, I-VAWHDSA] [NT AUTHORITY] [C:\icm\pcce\aw\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:01Z, 2025-08-21T05:05:00Z] [93f3e8fb47c860b1e51e77c4c8a113cd] [e01d84238ee1050f10c3199ecd00cc8918c6cc3b] [ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3] [ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5] [172.25.196.40, 172.17.196.47] [172.25.196.40, 172.17.196.47] 2 Success purgeold.bat C:\icm\pcce\aw\bin\ 406 93f3e8fb47c860b1e51e77c4c8a113cd Not Signed 2021-10-07 20:04:52 +0000 UTC 2021-10-07 20:04:52 +0000 UTC e01d84238ee1050f10c3199ecd00cc8918c6cc3b ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3 ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
435e925a046549dc8d69886dc9a6e2cb57abf5910eb50d36d783fd3dd804196e [68a62c390de66b6bd84ed654, 68a62cbbbad0c3891c052035] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\PDFEditor.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:37Z, 2025-08-20T20:14:47Z] [85f88b003ea039bdaf0d0a20b7ec8baa] [09a37d44fc1c5879d9fa372a1c8f83720273e0da] [3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49] [70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success PDFEditor.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ PDFEditor 109568 85f88b003ea039bdaf0d0a20b7ec8baa PDFEditor 1.0.0.0 Not Signed 2023-06-20 18:27:40 +0000 UTC 2023-06-20 18:27:40 +0000 UTC 09a37d44fc1c5879d9fa372a1c8f83720273e0da 3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49 70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e 2025-05-06 18:30:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4398f7df96dfec614731513fdb359fd1a7d2716a23b6375bcdc770db8d4dda79 [68a62c390de66b6bd84ed637, 68a62cb1297e2a61afff0f79] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Imaging.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:30Z, 2025-08-20T20:14:37Z] [46c2b221fd3e580477fb246dd2281781] [1b657b8af04151127213b220c217ebcec01ebf45] [28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b] [cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Imaging.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ Imaging 22528 46c2b221fd3e580477fb246dd2281781 Imaging 1.0.0.0 Not Signed 2023-06-20 18:27:50 +0000 UTC 2023-06-20 18:27:50 +0000 UTC 1b657b8af04151127213b220c217ebcec01ebf45 28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609 2025-05-06 18:28:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
43fb47284a0923c6f526905acaf6ed471ce98dc12e90ead9b1f6caaafd07a6c9 [68a1630bf6e8920a96bd8fb7, 68a164cdde38c806f081815d, 68a2b48ff48ce007dac7acfe, 68a2b651d3e43b5dd374f130, 68a40646d9f12aef1f9954e1, 68a4082197086979fc9ed946, 68a557f1b2b6b5c32c84a884, 68a559cc6ef9d803fa606146, 68a6a9a35e87f5dda332a735, 68a6ab563120dcdd6b9736f5] [2] [SYSTEM] [U-VAWHDSB, I-VAWHDSA] [NT AUTHORITY] [C:\icm\pcce\aw\bin\purgedist.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:01Z, 2025-08-21T05:05:00Z] [3cbc298ab5d529bf52f94797407148d9] [2d26db4453bb3314c5785876f9b54fd8c21f74cb] [ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774] [ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71] [172.25.196.40, 172.17.196.47] [172.25.196.40, 172.17.196.47] 2 Success purgedist.bat C:\icm\pcce\aw\bin\ 408 3cbc298ab5d529bf52f94797407148d9 Not Signed 2021-10-07 20:04:52 +0000 UTC 2021-10-07 20:04:52 +0000 UTC 2d26db4453bb3314c5785876f9b54fd8c21f74cb ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774 ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2ea93e5d1e2693678dc2163c15548f9ba23b053efe5e52fffad3f4ee0c7c20c0 [68a62c61512061b0a03001ec, 68a62d65c4509fd4abd51f68] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\WorkflowEngine.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] [656f58217faf83ea2207b1aabc3b938c] [810871eb710d1cf89c23775cd24d6b72587118a7] [c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54] [bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success WorkflowEngine.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ WorkflowEngine 450560 656f58217faf83ea2207b1aabc3b938c WorkflowEngine 1.0.0.0 Not Signed 2023-06-20 18:28:42 +0000 UTC 2023-06-20 18:28:42 +0000 UTC 810871eb710d1cf89c23775cd24d6b72587118a7 c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54 bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce 2025-07-11 22:49:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2f1ab6bfc8904fb057a0b212fc8180d8b2d9eddef225312b93bc83d0dd5838d0 [68a62c61512061b0a03001e7, 68a62d65c4509fd4abd51f63] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z] [cd91d4125d2d7ea93bd38165e12a535f] [dd21e13ba0794addd890f89f5640cac6376722e6] [7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326] [739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Utility.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Utility 140800 cd91d4125d2d7ea93bd38165e12a535f FormFast.Utility 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC dd21e13ba0794addd890f89f5640cac6376722e6 7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326 739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
268f47905bc543b8f4470c34eed1c7e5dabf07bb05c82b60fa57a92eb0b2c613 [68a62c57d96ab29dcabe19b0, 68a62d65c4509fd4abd51f5f] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Fastflow.Migration.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z] [bcbe340f0385ed5826017df20efa6eb4] [59625c822c0d5e524694a47fbf1286a3f41b0ec2] [5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7] [9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Fastflow.Migration.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common.Migration 135168 bcbe340f0385ed5826017df20efa6eb4 FormFast.Common.Migration 1.0.0.0 Not Signed 2023-06-20 18:28:44 +0000 UTC 2023-06-20 18:28:44 +0000 UTC 59625c822c0d5e524694a47fbf1286a3f41b0ec2 5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7 9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3a803dda1b5f33d0de97556e1cab952f0f97bb16bdff3657617328d29d35f3e5 [68a62c390de66b6bd84ed653, 68a62cbbbad0c3891c052034] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Magick.NET-Q16-AnyCPU.dll] [Servers] [Servers Audit] [v2310.898] [] [ImageMagick Studio LLC] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z] [2eb1441d4b71f974045d417bf0d83244] [19eb935d5c140f87e225a72d084e32a65302eca3] [f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6] [ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Magick.NET-Q16-AnyCPU.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ Magick.NET Q16 AnyCPU net40 12438072 2eb1441d4b71f974045d417bf0d83244 Magick.NET-Q16-AnyCPU 7.4.3.0 ImageMagick Studio LLC 2018-03-12 04:16:00 +0000 UTC 2018-03-12 04:16:00 +0000 UTC 19eb935d5c140f87e225a72d084e32a65302eca3 f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6 ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb 2025-05-06 18:30:02 +0000 UTC None None 2022-06-21 13:00:33 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.67 +0000 UTC
2d9e507ea0396ee9d5c53adb9c9779afdd27a7640b28727be4db46148af51998 [68a62c61512061b0a03001eb, 68a62d65c4509fd4abd51f67] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\PDFEditor.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z] [52e620fb3543935b9751f35b299fdc9a] [03375654731e846fb0937dd67f3ae03d553f8a01] [832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323] [63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success PDFEditor.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ PDFEditor 109568 52e620fb3543935b9751f35b299fdc9a PDFEditor 1.0.0.0 Not Signed 2023-06-20 18:28:36 +0000 UTC 2023-06-20 18:28:36 +0000 UTC 03375654731e846fb0937dd67f3ae03d553f8a01 832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323 63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1694645d5e73d2175861326fa89194dc2a82c7e21d1dcd894800714772c170a8 [68a62c254d354bf933e4d350, 68a62c4fe0cb7d1d0b6ef990, 68a62c4fe0cb7d1d0b6ef999, 68a62ca798fdd4aa74a31739, 68a62dbdd3f22bde37b5f4ec, 68a62dbdd3f22bde37b5f4f5] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ceTe.DynamicPDF.40.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:17Z, 2025-08-20T20:12:23Z, 2025-08-20T20:12:59Z, 2025-08-20T20:14:25Z, 2025-08-20T20:14:33Z, 2025-08-20T20:17:21Z] [998fde807ceac8f3bbd4916ff954fb8c] [53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520] [18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7] [68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success ceTe.DynamicPDF.40.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ DynamicPDF for .NET (Framework 4.0) 4350464 998fde807ceac8f3bbd4916ff954fb8c DynamicPDF for .NET 6.0.3.40 Not Signed 2023-05-24 16:40:28 +0000 UTC 2023-05-24 16:40:28 +0000 UTC 53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520 18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7 68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364 2025-05-06 18:27:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
164935501a9f5781b5ebf62e5a27fbd6ea0cbacc0d64190c8aaea9f3d3b83720 [68a62c390de66b6bd84ed638, 68a62cb1297e2a61afff0f7a] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\JsonDiffPatchDotNet.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z] [003939520fecd04ebdfde04df06300c6] [0f64c193284ff1282af07d564d6a77a439b6c5a1] [f374b5f6d6a6e671d05a83959575adff70da16013c31c7a5fb9932e6cc6ba597221f889368f87079581bfefa69aade74] [b8ee22d95029d4a20edc2fa83c9f32856871c306bd42a00cdb7dcddc77ffea2893663621cac18a11b07a1acea09a0d70f3b9883b11078ecf821e5c4512428e6c] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success JsonDiffPatchDotNet.dll C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ JsonDiffPatchDotNet 36352 003939520fecd04ebdfde04df06300c6 JsonDiffPatchDotNet 2.1.0.0 Not Signed 2018-03-03 19:34:18 +0000 UTC 2018-03-03 19:34:18 +0000 UTC 0f64c193284ff1282af07d564d6a77a439b6c5a1 f374b5f6d6a6e671d05a83959575adff70da16013c31c7a5fb9932e6cc6ba597221f889368f87079581bfefa69aade74 b8ee22d95029d4a20edc2fa83c9f32856871c306bd42a00cdb7dcddc77ffea2893663621cac18a11b07a1acea09a0d70f3b9883b11078ecf821e5c4512428e6c 2025-05-06 18:28:12 +0000 UTC None None 2022-09-15 03:34:58 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-05-06 18:32:19.67 +0000 UTC
14ca60e7625341579b1a31b4434c90b105cc67d697b6437ff26d9763228e9eea [68a62c2f20141caa2973b293, 68a62cb1297e2a61afff0f65] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Base.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:12:22Z, 2025-08-20T20:14:33Z] [677d91239489ea7691c5d9bda03dc3ec] [83fbd4375983c2ccc048304d475521e933e55a7e] [654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b] [c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success Base.dll C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ Base 200192 677d91239489ea7691c5d9bda03dc3ec Base 1.0.0.0 Not Signed 2023-06-20 18:27:42 +0000 UTC 2023-06-20 18:27:42 +0000 UTC 83fbd4375983c2ccc048304d475521e933e55a7e 654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131 2025-05-06 18:29:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fa3402afae16af05fbba53d005803e74825eb1a222d135ed8b0f2009514bf45d [68a62c57d96ab29dcabe19ab, 68a62d5b4fa1f463a5481cd3] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z] [80cbeb9ab7ad2d7f01f2a53273bf59a6] [9db1f88469a23adaabce2f09c7b0acc618bb174f] [0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9] [19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.ECM.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.ECM 499712 80cbeb9ab7ad2d7f01f2a53273bf59a6 FormFast.ECM 1.0.0.0 Not Signed 2023-06-20 18:28:38 +0000 UTC 2023-06-20 18:28:38 +0000 UTC 9db1f88469a23adaabce2f09c7b0acc618bb174f 0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9 19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
004cd2403dd39a5b0f37521d49d96e6aa5dc4cec3c497c18fb3e2ca7251f1839 [68a31e9eca7b7527f86c6ca8, 68a31fe23d59934069ead436, 68a31fe23d59934069ead437, 68a31fe23d59934069ead438, 68a31fe23d59934069ead439, 68a322138bd13b5696d44fb0, 68a325d712844ae893875a07, 68a325d712844ae893875a08, 68a325d712844ae893875a0a, 68a3282fff5407347547ca9e, 68a33191ac64423ea16822ee, 68a33191ac64423ea16822ef, 68a5fd7014523931e7db330f, 68a5ffc9536a7a985c76561c, 68a5ffc9536a7a985c76561e, 68a5ffc9536a7a985c76561f, 68a5ffc9536a7a985c765620, 68a605e24d31d8fb8241a71d, 68a6083bfcc918b33d1bbc03] [2] [SYSTEM, CFNAdmin] [i-nCCMCPyxCCEP, i-nCCMCPyxCCET] [NT AUTHORITY, WVUHS] [C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] [Servers] [Servers Audit] [v2248.849, v2250.850, v2253.852, v2255.853, v2307.897] ["C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\scc-ui;qm=1;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\ui-stream-server-2931303782688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-7bafb86c-77a0-425c-9aba-05e07f22a813.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" -execfunc enum_cp 632515080, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic1.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-5b3e7749-b40a-4dd4-9d9f-d7ab08f7e111.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" -execfunc enum_cp 1854494281, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --kill-image-processes --kill-image-processes-exclude 7980, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-493f53c1-5930-4a24-87e2-28e204cfa4e3.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040619106, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040621110, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2042633891, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --uninstall] [BeyondTrust Corporation] [C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe, C:\Windows\System32\services.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] [C:\Program Files (x86)\CareFusion\RSS Remote Access Agent\RemoteAccess.Service.exe, C:\Windows\System32\wininit.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe] [2025-08-18T12:37:44Z, 2025-08-18T12:37:45Z, 2025-08-18T12:41:44Z, 2025-08-18T12:41:45Z, 2025-08-18T12:42:11Z, 2025-08-18T12:45:40Z, 2025-08-18T13:02:31Z, 2025-08-18T13:02:32Z, 2025-08-18T13:03:11Z, 2025-08-18T13:11:54Z, 2025-08-18T13:55:17Z, 2025-08-18T13:55:18Z, 2025-08-20T16:53:03Z, 2025-08-20T16:53:04Z, 2025-08-20T16:53:09Z, 2025-08-20T16:53:44Z, 2025-08-20T16:53:46Z, 2025-08-20T17:27:19Z, 2025-08-20T17:29:51Z] [8447ea171cfef99d48c36cd3fe58e75e] [277e7c83686ce8b1d840cd8b10b952121f8dddcb] [cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab] [a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c] [172.17.22.217, 172.17.22.211] [172.17.22.217, 172.17.22.211] 2 Success bomgar-scc.exe C:\Program Files\BeyondTrust\bomgar-scc\68761134022\ Remote Support Customer Client 22436520 8447ea171cfef99d48c36cd3fe58e75e Remote Support Customer Client 24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6) BeyondTrust Corporation 2025-07-15 08:28:36 +0000 UTC 2025-07-15 08:28:36 +0000 UTC 277e7c83686ce8b1d840cd8b10b952121f8dddcb cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c 2025-07-15 08:28:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
00c6b318328222b31bd155f24d07548e0ba90568823b8df5840d4b0971eab969 [68a1770dd3846084cd8926c4, 68a17852d53457e99d2a1d45, 68a2c891ae6692437dac4713, 68a2c9d68407e99239d86f04, 68a41a2804359c03b93864eb, 68a41c4ef3fe2c4d2e402021, 68a56bb8e11ed76bf9fec9d5, 68a56d164742aa172d2a956b, 68a6bd5381a74eaece016383, 68a6bec159c9feaca86c6593] [2] [SYSTEM] [GRMC-ECW-APP, GRMC-ECW-IF] [NT AUTHORITY] [D:\eClinicalWorks\tomcat8\bin\tomcat_start.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T06:30:01Z, 2025-08-18T06:30:01Z, 2025-08-19T06:30:01Z, 2025-08-20T06:30:01Z, 2025-08-21T06:30:01Z] [df88c440808e6359a60eef459a5ceb07] [d47b6b7f51ae26794af8a564e9603ca6be804212] [9be6b6accf362a5c503599a9762f36ebe15decd0d0836b98a637bb445f6fdd48eb4634c921b1ec4a7fc5ec97408a012e] [974674f52c0c7ac875c2829605944a9ef1b8cc3720af02d368f09e18b2cc888ad16c53738e005d0da5f4b1642cb6cbcd60443e1be47cefab1a0b824ce8b9d91a] [192.168.3.239, 192.168.3.242] [192.168.3.239, 192.168.3.242] 2 Success tomcat_start.bat D:\eClinicalWorks\tomcat8\bin\ 17 df88c440808e6359a60eef459a5ceb07 Not Signed 2021-07-04 18:01:24 +0000 UTC 2021-07-04 18:01:24 +0000 UTC d47b6b7f51ae26794af8a564e9603ca6be804212 9be6b6accf362a5c503599a9762f36ebe15decd0d0836b98a637bb445f6fdd48eb4634c921b1ec4a7fc5ec97408a012e 974674f52c0c7ac875c2829605944a9ef1b8cc3720af02d368f09e18b2cc888ad16c53738e005d0da5f4b1642cb6cbcd60443e1be47cefab1a0b824ce8b9d91a 2025-08-09 06:30:22 +0000 UTC None None 2022-06-17 12:06:39 +0000 UTC 55 0 KNOWN 0 Benign 0.00 2025-08-09 06:31:04.225 +0000 UTC
00e3c6e87750065c6bf4ac8e05b77166dbd90c677c933984055f0db56dbf13c9 [68a62c57d96ab29dcabe19ae, 68a62d65c4509fd4abd51f5d] [2] [SYSTEM] [u-NFP2, i-NFP1] [NT AUTHORITY] [C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Sfdc.dll] [Servers] [Servers Audit] [v2310.898] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z] [b49cce3d89159feea34f0a8c83dec7f9] [4f11eb48337e1c91f298f0288db6ef5c6fc43b54] [86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705] [c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3] [172.25.17.195, 172.17.253.162] [172.25.17.195, 172.17.253.162] 2 Success FormFast.Common.Sfdc.dll C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ FormFast.Common.Sfdc 44544 b49cce3d89159feea34f0a8c83dec7f9 FormFast.Common.Sfdc 1.0.0.0 Not Signed 2023-06-20 18:28:42 +0000 UTC 2023-06-20 18:28:42 +0000 UTC 4f11eb48337e1c91f298f0288db6ef5c6fc43b54 86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705 c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3 2025-07-11 22:49:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
00cfdd2c637c38676581b9cf2cdb647024cb185f4ef32d3f89b1d9f0b8d26848 [68a4d180b5900ae066920597] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:33:11Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:33:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f6f2c2ee898da74b0dae817a69b5674e23eea37d19051be446e361736afbc9b6 [68a5cc349d52e7a8b7af63d6] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:50Z] [2b188a65d88d897daf549bee406d1735] [e24730bac7f5091db0bf3b218b2d38ee31e53464] [8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d] [548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61] [172.17.252.194] [172.17.252.194] 1 Success 77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1 C:\_work_devops_mdi\_temp\ 374 2b188a65d88d897daf549bee406d1735 Not Signed 2025-08-20 13:22:50 +0000 UTC 2025-08-20 13:22:50 +0000 UTC e24730bac7f5091db0bf3b218b2d38ee31e53464 8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d 548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61 2025-08-20 13:23:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f6cc0c6e39a3862e6454569877b09be485ad28a2887a38d735ba8d3f2ee0a41e [68a6ffbfa2394f9c2d72c8ec] [2] [ca_tsk_peak] [i-npeak01] [WVUHS] [\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\EGScript1.vbs] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Windows\SysWOW64\cscript.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T11:15:02Z] [527a2bb6babe9bcc3ec59cd82c163982] [cf293589bef5ebac58879fcce2b88be84af94943] [d290ad896981482bbfa201cb1670798f5de84ce1d7db21b6278ae149bd7a790150b5e620f0d83a3c2b3e71b34212292a] [5563b3fa19f232d6ca560abb628aa0996987564b45865745d65af8b0d23bc60672461da99a6dff95e5210fb5eb09c248558055fe65b8c07d31868cf04691eea8] [172.17.22.1] [172.17.22.1] 1 Success EGScript1.vbs \\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\ 1747 527a2bb6babe9bcc3ec59cd82c163982 Not Signed 2025-06-19 18:26:11 +0000 UTC 2025-06-19 18:26:11 +0000 UTC cf293589bef5ebac58879fcce2b88be84af94943 d290ad896981482bbfa201cb1670798f5de84ce1d7db21b6278ae149bd7a790150b5e620f0d83a3c2b3e71b34212292a 5563b3fa19f232d6ca560abb628aa0996987564b45865745d65af8b0d23bc60672461da99a6dff95e5210fb5eb09c248558055fe65b8c07d31868cf04691eea8 2025-08-21 11:15:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0623b5670b57e995db06e8dba8e8ec36c7879f0d12dfd3f1c21f0aec1da7ef49 [68a226e5ea27d2f962eac02e] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\tmpEXO_pugsznk4.2dj.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T19:00:49Z] [037fb6f1dc934749df5f6ce3c6c612c4] [f803186e516651994aa74b575f9814d93d526eea] [3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59] [cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_pugsznk4.2dj.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\ 2290479 037fb6f1dc934749df5f6ce3c6c612c4 Not Signed 2025-08-17 19:00:48 +0000 UTC 2025-08-17 19:00:48 +0000 UTC f803186e516651994aa74b575f9814d93d526eea 3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59 cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75 2025-08-17 19:00:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
05d621eeca2e4255114d141aa7d6c5ccf117856e38d20d40678858873ba58e24 [68a50205736560052fcd1831] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_wlmxcr2s.rhk.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-19T23:00:14Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_wlmxcr2s.rhk.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-19 23:00:14 +0000 UTC 2025-08-19 23:00:14 +0000 UTC 2025-08-19 23:00:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
05b40542c9d286b4f585f15fbeaf5aecac45a37eb286e2547b08aac26bbdb40b [68a15ba378816d499880391d, 68a2ad22384f426252d8416c, 68a3feaf3cf52344d4e64238, 68a5516fbc962067806d3c43, 68a6a4665f03c27de6a15471] [2] [SYSTEM] [i-hnocmon] [NT AUTHORITY] [C:\Program Files (x86)\Java\jre1.8.0_311\lib\rt.jar] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_729318203\java.exe] [E:\nessus\nessusd.exe] [2025-08-17T04:27:09Z, 2025-08-18T04:29:38Z, 2025-08-19T04:29:07Z, 2025-08-20T04:29:08Z, 2025-08-21T04:35:25Z] [0690b67a96e0d254baf7ab4934884cbe] [62fdb53b85395e0d1e0fc0e528d822a419764f8d] [408daab016672fd13f517b2a443651ebb2ae06779115370013d530a1309d64749cab35b8b653116e69fade9fab32ed4d] [3d7ed7b26258084d04325d5890f0b80777ef1b2da7327ed4974669543fcc0511c780201f258325f25601c4a276746a2f1414b3aec46090413bd98ddf150db1f4] [172.18.0.10] [172.18.0.10] 1 Success rt.jar C:\Program Files (x86)\Java\jre1.8.0_311\lib\ 55695854 0690b67a96e0d254baf7ab4934884cbe Not Signed 2021-10-20 15:43:07 +0000 UTC 2021-10-20 15:43:12 +0000 UTC 62fdb53b85395e0d1e0fc0e528d822a419764f8d 408daab016672fd13f517b2a443651ebb2ae06779115370013d530a1309d64749cab35b8b653116e69fade9fab32ed4d 3d7ed7b26258084d04325d5890f0b80777ef1b2da7327ed4974669543fcc0511c780201f258325f25601c4a276746a2f1414b3aec46090413bd98ddf150db1f4 2025-08-09 04:29:28 +0000 UTC None None 2022-01-15 08:34:47 +0000 UTC 43 0 KNOWN 0 Benign 0.00 2025-08-09 04:30:26.067 +0000 UTC
05483be54fb184ec487226ec2f966cb470c73998877ae425b560dffb5fca531d [68a35c84047df79ddfd2415c] [2] [ghermanc] [I-CAJump] [WVUHS] [C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\tmpEXO_evkptwwz.wjs.psm1] [Servers] [Servers Audit] [v2260.859] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T17:01:20Z] [42fefd8b7428fc4f9aa0c97458e55c4f] [59be0f0decf9173c38d32fd5716316788fc77ad5] [94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e] [0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_evkptwwz.wjs.psm1 C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\ 2308296 42fefd8b7428fc4f9aa0c97458e55c4f Not Signed 2025-08-18 17:01:20 +0000 UTC 2025-08-18 17:01:20 +0000 UTC 59be0f0decf9173c38d32fd5716316788fc77ad5 94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e 0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c 2025-08-18 17:01:56 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0444971c7c19df0c4e5f8ad75c12ac277638470460eb7747122539960ed5e99f [68a5c64d54e5003d1abde4c4, 68a5c77e05aa879ada66b41f, 68a5c77e05aa879ada66b425, 68a5c77e05aa879ada66b42a, 68a5c77e05aa879ada66b42f, 68a5c77e05aa879ada66b433, 68a5c9d7599432010e418bd2] [2] [SVC_SL_RedSailTech, SYSTEM] [i-nQS1mgtn] [WVUHS, NT AUTHORITY] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe, C:\Windows\Temp\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe] [Servers] [Servers Audit] [v2287.880] [C:\Users\SVC_SL~1\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{58A25255-3CB8-4A17-A3C9-25023F29F7DC}, C:\Users\SVC_SL~1\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B8671B6F-617B-4826-9178-B43475CF91A7}, C:\Users\SVC_SL~1\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{5E032894-5063-4E54-A90B-D897D40099F5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D1371EF7-61B8-4622-BE96-DFE6C3D3E0A5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{8AD7745A-E0F4-41FE-8319-EFF8019D00DB}, C:\Users\SVC_SL~1\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{A3368B19-6720-427C-9D69-260D34BE8359}, C:\Windows\TEMP\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FBE48F2E-1398-48BF-8AE6-2A235E268844}] [Macrovision Corporation (Invalid Certificate Chain)] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE, D:\QS1\QIA\03050201002QiaInst.EXE] [C:\Windows\explorer.exe, D:\QS1\QIA\Qia.exe] [2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z, 2025-08-20T13:12:45Z] [4b56c021299344676f123fcb48f53c1e] [cbef3152c477c9176120030b164a4a807b527d8e] [949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c] [097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a] [172.17.20.104] [172.17.20.104] 1 Success ISBEW64.exe C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\ InstallShield (R) 64-bit Setup Engine 70064 4b56c021299344676f123fcb48f53c1e InstallShield 12.0 Macrovision Corporation (Invalid Certificate Chain) 2025-07-17 15:57:14 +0000 UTC 2006-05-17 14:21:40 +0000 UTC cbef3152c477c9176120030b164a4a807b527d8e 949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c 097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a 2025-07-17 15:57:20 +0000 UTC None None 2025-06-23 01:43:21 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-17 15:57:43.354 +0000 UTC
03f227d3eda403e620c45f4986ee30554111c0ce60910e7d6858e3d887a40a7b [68a16f23887230bce1ef3f8c] [2] [SYSTEM] [i-hBMCCure] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxignfvp.mzk.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:56:39Z] [] [] [] [] [172.17.252.100] [172.17.252.100] 1 Success __PSScriptPolicyTest_nxignfvp.mzk.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:56:39 +0000 UTC 2025-08-17 05:56:39 +0000 UTC 2025-08-17 05:56:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
039c0bb5ecd416b639ddc4a4241d8d92bc8ae366000d1bfbc3e845f33f76cda2 [68a306a5ba5832f49fe9cf53] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXDBEDD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [a3020f38300be8ce99da0f3296b30a4f] [4f5628a4960050691f65909266940185f174702a] [adc9b664acb1a9eec9370f3696771086aed69f60eaf7383f9a7807f4ac3157ddcb5edb62504479f53076b5865d190de7] [12a704c000d93439dab373772b26b41407caae50cded32ae9907b34922fb18430471112a0cc926a0b523d021c649cd7fe987cda3249e57e9f3e569b8c664dfb3] [172.17.146.33] [172.17.146.33] 1 Success DXDBEDD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express DB Inplace Editors 49664 a3020f38300be8ce99da0f3296b30a4f ExpressEditors 3.2 Not Signed 2022-07-06 14:52:10 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 4f5628a4960050691f65909266940185f174702a adc9b664acb1a9eec9370f3696771086aed69f60eaf7383f9a7807f4ac3157ddcb5edb62504479f53076b5865d190de7 12a704c000d93439dab373772b26b41407caae50cded32ae9907b34922fb18430471112a0cc926a0b523d021c649cd7fe987cda3249e57e9f3e569b8c664dfb3 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:22:26 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
038390889beb53877bcb82beff610051215f0d7773f5452fbb150d45afe4594b [68a46f87474e4ad446dca4d9, 68a4728c1dfbce27769ea0bc] [2] [my10040sa, SYSTEM] [i-nkalani25] [WVUHS, NT AUTHORITY] [C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\_isuser_0x0409.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\software\Storage Manager Client 20.1.2.14.exe, C:\Windows\SysWOW64\msiexec.exe] [C:\Windows\System32\svchost.exe, C:\Windows\System32\msiexec.exe] [2025-08-19T12:35:14Z, 2025-08-19T12:35:29Z] [92698c5a6197382994093641c6a72d29] [f535aab772d9bf505b48124f8e076e830c4af33b] [3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0] [addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24] [172.17.23.146] [172.17.23.146] 1 Success _isuser_0x0409.dll C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\ 24576 92698c5a6197382994093641c6a72d29 Not Signed 2025-08-19 12:35:02 +0000 UTC 2025-08-19 12:35:02 +0000 UTC f535aab772d9bf505b48124f8e076e830c4af33b 3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0 addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24 2025-08-19 12:35:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
037dca15295313174f3f88cc9631db4896d8726a3be3e0cd65e6c2534ad22ed3 [68a472a799ad3734d804e2ef] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcpkix-jdk15on-1.50.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [4947238c5ab9942f299cc15ffb368da9] [f82f869cbf31fdb3419487dd58f4189c33ec9acd] [f055f7eaee4153e071820e0462f729c8ab17e95b111b773e2e724b6202b2066ebdca8074dc18402a5d7102b1a1db56a4] [7ad806bf1d1897b45fd9677bd6ae8ee3646967cdf6fbb29ab919b0840689368ec040a9aa6efd91a48b18475e949cff19264570c54a25a452e9a62c71fe97e7ff] [172.17.23.146] [172.17.23.146] 1 Success bcpkix-jdk15on-1.50.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 598674 4947238c5ab9942f299cc15ffb368da9 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC f82f869cbf31fdb3419487dd58f4189c33ec9acd f055f7eaee4153e071820e0462f729c8ab17e95b111b773e2e724b6202b2066ebdca8074dc18402a5d7102b1a1db56a4 7ad806bf1d1897b45fd9677bd6ae8ee3646967cdf6fbb29ab919b0840689368ec040a9aa6efd91a48b18475e949cff19264570c54a25a452e9a62c71fe97e7ff 2025-03-28 16:07:06 +0000 UTC None None 2023-11-27 06:21:46 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
ffe3124098b0563b1e14d197acb10ddebf2e80a6fb27e7946acbd9b171bb62b2 [68a4b0fb13fac5171eeef0d6] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Helper.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:08Z] [0dddb86c5714681c7ed39d2bd59b1753] [994abcb6dbb3dee2ba51f2e0b530dbdf640c0857] [fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24] [6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.AlliancePD.UI.Helper.dll C:\Program Files (x86)\Cyrun\Alliance 7 Client\ Cyrun.AlliancePD.UI.Helper 76800 0dddb86c5714681c7ed39d2bd59b1753 Pegasus 7.0.4.4644 Not Signed 2019-09-13 20:45:36 +0000 UTC 2025-05-22 18:18:01 +0000 UTC 994abcb6dbb3dee2ba51f2e0b530dbdf640c0857 fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24 6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64 2025-05-22 18:54:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ff28639f74d693212ee201bb3eb552ea3aa6e485d828399380883531b6915fad [68a3146b5f0c41860c8c8514, 68a3146b5f0c41860c8c8567] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\quoprimime.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [e8fe369f2c3111f2db22b808a1388e10] [01bff92af9b094657904ccf3844f4017b6dd0883] [070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe] [178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96] [172.17.252.131] [172.17.252.131] 1 Success quoprimime.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 9911 e8fe369f2c3111f2db22b808a1388e10 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 01bff92af9b094657904ccf3844f4017b6dd0883 070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe 178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fee3b9415fb905520bbd31be902e8cc2ce253e0d150539392e33846564d2644a [68a6afe50e0f3bd8deac4d06, 68a6afe50e0f3bd8deac4d1a, 68a6afe50e0f3bd8deac4d48, 68a6afe50e0f3bd8deac4d68, 68a6afe50e0f3bd8deac4d88, 68a6afe50e0f3bd8deac4da8, 68a6afe50e0f3bd8deac4dc8, 68a6afe50e0f3bd8deac4de7, 68a6afe50e0f3bd8deac4e08, 68a6afe50e0f3bd8deac4e28, 68a6afe50e0f3bd8deac4e48, 68a6afe50e0f3bd8deac4e68, 68a6afe50e0f3bd8deac4e88, 68a6afe50e0f3bd8deac4ea7, 68a6afe50e0f3bd8deac4eb5, 68a6afe50e0f3bd8deac4ee8, 68a6afe50e0f3bd8deac4f08, 68a6afe50e0f3bd8deac4f28, 68a6afe50e0f3bd8deac4f48, 68a6afe50e0f3bd8deac4f72, 68a6afe50e0f3bd8deac4f91, 68a6afe50e0f3bd8deac4fb1, 68a6afe50e0f3bd8deac4fd2, 68a6afe50e0f3bd8deac4ff2, 68a6afe50e0f3bd8deac5012, 68a6afe50e0f3bd8deac5032, 68a6afe50e0f3bd8deac5052, 68a6afe50e0f3bd8deac5072, 68a6afe50e0f3bd8deac5092, 68a6afe50e0f3bd8deac50bc, 68a6afe50e0f3bd8deac50db, 68a6afe50e0f3bd8deac50fc, 68a6afe50e0f3bd8deac5125, 68a6afe50e0f3bd8deac5143, 68a6afe50e0f3bd8deac5166, 68a6afe50e0f3bd8deac5190, 68a6afe50e0f3bd8deac51b0, 68a6afe50e0f3bd8deac51d0, 68a6afe50e0f3bd8deac51f1, 68a6afe50e0f3bd8deac5203, 68a6afe50e0f3bd8deac521a, 68a6afe50e0f3bd8deac5251, 68a6afe50e0f3bd8deac5271, 68a6afe50e0f3bd8deac5285, 68a6afe50e0f3bd8deac52a5, 68a6afe50e0f3bd8deac52c5, 68a6afe50e0f3bd8deac52e5, 68a6afe50e0f3bd8deac5305, 68a6afe50e0f3bd8deac5325, 68a6afe50e0f3bd8deac5345, 68a6afe50e0f3bd8deac5365, 68a6afe50e0f3bd8deac5385, 68a6afe50e0f3bd8deac53ab, 68a6afe50e0f3bd8deac53c6, 68a6afe50e0f3bd8deac53eb, 68a6afe50e0f3bd8deac5409, 68a6afe50e0f3bd8deac542b, 68a6afe50e0f3bd8deac5445, 68a6afe50e0f3bd8deac546b, 68a6afe50e0f3bd8deac548b, 68a6afe50e0f3bd8deac54ab, 68a6afe50e0f3bd8deac54cb, 68a6afe50e0f3bd8deac54eb, 68a6afe50e0f3bd8deac550b, 68a6afe50e0f3bd8deac552b, 68a6afe50e0f3bd8deac554b, 68a6afe50e0f3bd8deac5575, 68a6afe50e0f3bd8deac5595, 68a6afe50e0f3bd8deac55b5, 68a6afe50e0f3bd8deac55d5, 68a6afe50e0f3bd8deac55f5, 68a6afe50e0f3bd8deac5615, 68a6afe50e0f3bd8deac5635, 68a6afe50e0f3bd8deac5665, 68a6afe50e0f3bd8deac5685, 68a6afe50e0f3bd8deac5693, 68a6afe50e0f3bd8deac56b3, 68a6afe50e0f3bd8deac56d3, 68a6afe50e0f3bd8deac56eb, 68a6afe50e0f3bd8deac5713, 68a6afe50e0f3bd8deac572d, 68a6afe50e0f3bd8deac5753, 68a6afe50e0f3bd8deac575c, 68a6afe50e0f3bd8deac579b, 68a6afe50e0f3bd8deac57a7, 68a6afe50e0f3bd8deac57dc, 68a6afe50e0f3bd8deac57e7, 68a6afe50e0f3bd8deac581b, 68a6afe50e0f3bd8deac5834, 68a6afe50e0f3bd8deac585d, 68a6afe50e0f3bd8deac5865, 68a6afe50e0f3bd8deac5896, 68a6afe50e0f3bd8deac58ad, 68a6afe50e0f3bd8deac58dd, 68a6afe50e0f3bd8deac58e3, 68a6afe50e0f3bd8deac5917, 68a6afe50e0f3bd8deac592e, 68a6afe50e0f3bd8deac595c, 68a6afe50e0f3bd8deac597d, 68a6afe50e0f3bd8deac5993, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\libpq.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [9302c185e48ff078a06dbd745e2df5e7] [ebd2ebd39286a18831509874db0a8bc7498e524f] [1f8090d1c23a8a427928446b3dc1adbe449bb0ecf1bba4e04556282a29b22c0c4d94cee3fbc6ea10248523cfea39c093] [13cac90780593f653f9be3c3ea03e6cfb02b2c47c11414f64af310a85f0b3e98bdbdf51d1aa44f69ba927ac7af8534791e33ae3e7ffab7d89eaa45e1f983d062] [172.17.30.60] [172.17.30.60] 1 Success libpq.dll C:\Program Files\Fujifilm\NaxisWS6\ PostgreSQL Access Library 290816 9302c185e48ff078a06dbd745e2df5e7 PostgreSQL 12.0 Not Signed 2023-11-03 20:25:46 +0000 UTC 2023-03-07 00:33:42 +0000 UTC ebd2ebd39286a18831509874db0a8bc7498e524f 1f8090d1c23a8a427928446b3dc1adbe449bb0ecf1bba4e04556282a29b22c0c4d94cee3fbc6ea10248523cfea39c093 13cac90780593f653f9be3c3ea03e6cfb02b2c47c11414f64af310a85f0b3e98bdbdf51d1aa44f69ba927ac7af8534791e33ae3e7ffab7d89eaa45e1f983d062 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
f6b501b9214e63a29c2c4568350f7b6b145946c144d9b014300fbcc0784f7c60 [68a5f159551ff431c0c2f46a] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_b2yelpqr.qj0.ps1] [Servers] [Servers Audit] [v2306.895] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-20T16:01:26Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_b2yelpqr.qj0.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ 81 Not Signed 2025-08-20 16:01:26 +0000 UTC 2025-08-20 16:01:26 +0000 UTC 2025-08-20 16:01:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f6a6c9f6b882d5870f8663518d1227f52605393e27eedf1dfbd79b2a5f4d8859 [68a3146b5f0c41860c8c8552, 68a3146b5f0c41860c8c8578] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\tokenize.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [d4f62a3f3588da7cf8adaae6570edf2b] [ebda299175433b27ac007f69f74952d20ae5202b] [4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5] [7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d] [172.17.252.131] [172.17.252.131] 1 Success tokenize.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 24812 d4f62a3f3588da7cf8adaae6570edf2b Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC ebda299175433b27ac007f69f74952d20ae5202b 4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5 7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e [68a4e8a1ad898641af98fd98, 68a4f315247c4b5c9ccb9234, 68a4fcd0011d94a251a4ef34, 68a4fcd0011d94a251a4ef3e] [2] [CA_gs10109, ReevesJoe] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\nsExec.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\nsExec.dll] [Servers] [Servers Audit] [v2283, v2284.877, v2284] [] [Not Signed] [C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe] [C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp] [2025-08-19T21:11:56Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z] [acc2b699edfea5bf5aae45aba3a41e96] [d2accf4d494e43ceb2cff69abe4dd17147d29cc2] [1aeca18ee2f81d26577411ac88cab27728055b9d915f4854f6695ca39b714df808c4ea69ed206829b5b17059c4df1cf9] [e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe] [172.17.23.18] [172.17.23.18] 1 Success nsExec.dll C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\ 6656 acc2b699edfea5bf5aae45aba3a41e96 Not Signed 2025-08-19 21:11:56 +0000 UTC 2025-08-19 21:11:56 +0000 UTC d2accf4d494e43ceb2cff69abe4dd17147d29cc2 1aeca18ee2f81d26577411ac88cab27728055b9d915f4854f6695ca39b714df808c4ea69ed206829b5b17059c4df1cf9 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe 2025-08-19 21:12:01 +0000 UTC None None 2025-08-18 13:55:21 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-08-19 20:31:43.668 +0000 UTC
160cfc3154da71d4c8ed0e7c4dd19174f32559494376e201ed965cefd9dc435d [68a4ccc785b914a60d739e50, 68a4ce1fc826337212f53bed, 68a4d07753a851daf11e6938, 68a4d07753a851daf11e694e, 68a4d2d1ff2b441b84428130, 68a4d2d1ff2b441b84428146] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\Socket.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [ee721e727ce3d694cd3c11559b0b0401] [ec40590cc3d3c54522340b50199a2eaff31c991a] [576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799] [6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f] [10.36.132.49] [10.36.132.49] 1 Success Socket.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\ 26624 ee721e727ce3d694cd3c11559b0b0401 Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:44 +0000 UTC ec40590cc3d3c54522340b50199a2eaff31c991a 576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799 6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
15e55b7cc63532d4cab6dbff900c648ae8606b33cea00b22ed88f71bbfeb192e [68a5cd8dca130478244c7a07] [2] [SYSTEM] [vm-talisint] [NT AUTHORITY] [C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe] [Servers] [Servers Audit] [v2287.880] ["C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T13:24:13Z] [d3e1b261bff7f95d7bc1d8188b9f99bf] [91e0d15152db9868e6fd7f89305b43da341048ee] [6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652] [f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2] [172.17.252.192] [172.17.252.192] 1 Success HL7TCPIPInbound.exe C:\TalisClinical\Applications\HL7TCPIPInbound\ADT01_Service\ Talis Clinical ACG HL7 TCP/IP Inbound Service 46592 d3e1b261bff7f95d7bc1d8188b9f99bf HL7TCPIPInbound 2.0.0.1 Not Signed 2019-12-20 19:58:05 +0000 UTC 2018-02-19 21:25:50 +0000 UTC 91e0d15152db9868e6fd7f89305b43da341048ee 6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652 f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2 2025-04-28 02:12:26 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
154aa488e0abd508880818e2049df9c1c2cbaca6669dfa5bd5a69dd6e007c0e8 [68a4ccd13efa8341e1766c87, 68a4d07753a851daf11e694a, 68a4d2d1ff2b441b84428140] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcienginerun.bat] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:11Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:11Z] [e0dddf23a7f7275657349542c5a78a26] [c31d3a860abf2ff1f28233268f1267acb4399351] [9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd] [a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd] [10.36.132.49] [10.36.132.49] 1 Success hcienginerun.bat C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ 135 e0dddf23a7f7275657349542c5a78a26 Not Signed 2021-10-20 13:42:29 +0000 UTC 2021-10-20 13:42:29 +0000 UTC c31d3a860abf2ff1f28233268f1267acb4399351 9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd 2025-08-19 19:13:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
14cff831fedb21345ae1e9d261be91db71cade583ee95eee142b420fa7f14bc6 [68a48674c4cb2500be692619, 68a48674c4cb2500be69262f] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.BusinessEntities.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [673377d67ea0e4d61e412e2511cdd987] [62f1432c45e44d92fad2645de312136f6c729af3] [7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228] [6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d] [172.17.252.226] [172.17.252.226] 1 Success SEWSI.BusinessEntities.dll C:\Stryker\iBed Server Application\Stryker.IOT\ SEWSI.BusinessEntities 139520 673377d67ea0e4d61e412e2511cdd987 Connected Hospital 1.0.0.0 Stryker Corporation 2023-03-16 10:22:36 +0000 UTC 2024-02-15 18:02:04 +0000 UTC 62f1432c45e44d92fad2645de312136f6c729af3 7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228 6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
14b60a12a6bc23c91c98e91b22169f7f0d9c5aec4243a93fc6d12ed0943b9b6b [68a5088cd058c7d42b5da44e] [2] [SYSTEM] [CI1TFS1] [NT AUTHORITY] [D:\Program Files\Microsoft Team Foundation Server 2018\Application Tier\Web Services\bin\Plugins\DotNetOpenAuth.dll] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T23:28:07Z] [0ce5b2b873c076ceb47234716e9e30d1] [065d28d05c351d6a5cda4438cddbccd944b3441a] [a65626b3241b29ed79c375ae1bba55a4588eda4b492a058f99cc54f6fda558512397f04963fd681df9586aeaae02c94b] [8f32aa9e94947c91344a4e90e162d32c624a4a7c4a2fd2e97c147a6758903f2b935475b505850efeccc313bcf55a56af5a64f8fb378398549edaf3e6bdd2ad71] [172.18.112.46] [172.18.112.46] 1 Success DotNetOpenAuth.dll D:\Program Files\Microsoft Team Foundation Server 2018\Application Tier\Web Services\bin\Plugins\ DotNetOpenAuth 1145344 0ce5b2b873c076ceb47234716e9e30d1 DotNetOpenAuth 4.2.2+build.13055.e555d8a766 Not Signed 2016-10-18 18:06:36 +0000 UTC 2016-10-18 18:06:36 +0000 UTC 065d28d05c351d6a5cda4438cddbccd944b3441a a65626b3241b29ed79c375ae1bba55a4588eda4b492a058f99cc54f6fda558512397f04963fd681df9586aeaae02c94b 8f32aa9e94947c91344a4e90e162d32c624a4a7c4a2fd2e97c147a6758903f2b935475b505850efeccc313bcf55a56af5a64f8fb378398549edaf3e6bdd2ad71 2025-08-19 23:28:12 +0000 UTC None None 2021-03-02 13:01:02 +0000 UTC 67 0 KNOWN 0 Microsoft attested file 2025-08-19 23:31:12.471 +0000 UTC
fb13efdab407d25197c99859a87c75991096ea4d59d6424e5bcd07160100eb32 [68a472b1b022648922e2359a] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\pdf-transcoder-1.0beta2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [43a6ef2246d90909244f73238d3fa6b2] [41d206ee233c3a653fb22be74128f637a5ec262f] [a33e0a4c97e853016e5b5188f74bcbcabbe2d66fdb9ba5fc341df63ce2b8090bf9f7b212c75f6154e03d28ebc4a8f303] [86129c3f1b687c469e331d0cdddc5371a00ceb82f19379963f18f473e6ceba11102b1a5abf7610c88232bcd942cdfc78d17fce104cc27d0765c06dea40227986] [172.17.23.146] [172.17.23.146] 1 Success pdf-transcoder-1.0beta2.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 749716 43a6ef2246d90909244f73238d3fa6b2 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 41d206ee233c3a653fb22be74128f637a5ec262f a33e0a4c97e853016e5b5188f74bcbcabbe2d66fdb9ba5fc341df63ce2b8090bf9f7b212c75f6154e03d28ebc4a8f303 86129c3f1b687c469e331d0cdddc5371a00ceb82f19379963f18f473e6ceba11102b1a5abf7610c88232bcd942cdfc78d17fce104cc27d0765c06dea40227986 2025-08-19 11:29:31 +0000 UTC None None 2023-06-16 17:42:12 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
fb058ffbceee4ef274dfbe4e7b134597e54597bc39b59abbf0cee9e6809e7902 [68a306a5ba5832f49fe9cf35] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\TXTPRINT.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [6782e21ee633cab053444241e4431f50] [0154511ffb4d9954e96fd5119f319c0413a5fbaf] [304772274c1bb364c3fd4d86d750fbc13931e9c623378df7a93d7ba33bdedc069530f6d665c0be6b3880d8c5c2ed6049] [ec5df62c98b891431dfadb5bdf8c72ceb05959f953a8606084a7f0ae083af4480ac94a65fd74797de7c6213b71e439a963bd776540922815ce48953b517c2e69] [172.17.146.33] [172.17.146.33] 1 Success TXTPRINT.DLL C:\DICORP\DICORP_V5\RW\APPS\ 29184 6782e21ee633cab053444241e4431f50 1.4.0.3 Not Signed 2022-07-06 14:52:39 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 0154511ffb4d9954e96fd5119f319c0413a5fbaf 304772274c1bb364c3fd4d86d750fbc13931e9c623378df7a93d7ba33bdedc069530f6d665c0be6b3880d8c5c2ed6049 ec5df62c98b891431dfadb5bdf8c72ceb05959f953a8606084a7f0ae083af4480ac94a65fd74797de7c6213b71e439a963bd776540922815ce48953b517c2e69 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:07:34 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
fa86ea9326765d5be075d1129e08150246ac0bd2f394d97c39cafae921f0e1ff [68a16bd60756fe54a9918fab, 68a2149cb58debea69d7c756, 68a2bd5ff793a9057f329c11, 68a3663261f8067c48423ec4, 68a40efceddb3a9f1a71a60d, 68a4b7cd36bc5d38057e2372] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zTelemetryBiz.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:03Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] [74980fb5a35295d4c1aace7f401a721a] [0dfbd25d4b0994b137a2f914752804d5edba75b3] [bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c] [dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f] [10.20.20.68] [10.20.20.68] 1 Success zTelemetryBiz.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 134968 74980fb5a35295d4c1aace7f401a721a Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:38 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 0dfbd25d4b0994b137a2f914752804d5edba75b3 bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 05:59:41 +0000 UTC 71 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
f9dbf373a0c9dbd2cfec0b8b93b75f7dde92efd616102a060db5d7371caefb01 [68a71d98771132224a617f83] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Helpers.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [0ca0bae638a84068500ed831c223e25e] [36f9b5820a6c989289c679a2be1a35b30a3d9b00] [54bc75e3430870a206df30856c9e3f4ae8438f6dbdc94c825a82e0f92594a096c2118081e785fe4d7bee28027ae16708] [e0b4e2e70c27349ac54a97f2c5d462fbc40fc77e4c91ba56a1ba2625fee1b210bfb75b27807c267655ef357f7dbf8e9e7727d55bde3114adcacdacf5dd74b871] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.Helpers.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOs.Mobile.Helpers 67072 0ca0bae638a84068500ed831c223e25e VideoOs.Mobile.Helpers 20.2.2516.1 Not Signed 2020-05-11 15:01:56 +0000 UTC 2020-05-11 15:01:56 +0000 UTC 36f9b5820a6c989289c679a2be1a35b30a3d9b00 54bc75e3430870a206df30856c9e3f4ae8438f6dbdc94c825a82e0f92594a096c2118081e785fe4d7bee28027ae16708 e0b4e2e70c27349ac54a97f2c5d462fbc40fc77e4c91ba56a1ba2625fee1b210bfb75b27807c267655ef357f7dbf8e9e7727d55bde3114adcacdacf5dd74b871 2025-07-16 19:27:14 +0000 UTC None None 2021-09-16 06:10:33 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
f9c13d4ce6cf1962eb8e3cb201bb974b32f0db3a1806b0c6352a0a12e7877d30 [68a3f034978467a3921f39ac] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_be420adaea8f45e69ad3e341273a38ab.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T03:31:59Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_be420adaea8f45e69ad3e341273a38ab.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 03:32:04 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f9a0f6cdf5c1aa62deaffa6fbffbb56bf484a879e88f5d7f775bcadbb2a0c34e [68a1a4c40fc81084514a3a34] [2] [SYSTEM] [U-nCTX-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ie2wsj0b.m1p.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:45:38Z] [] [] [] [] [172.25.246.19] [172.25.246.19] 1 Success __PSScriptPolicyTest_ie2wsj0b.m1p.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:45:38 +0000 UTC 2025-08-17 09:45:38 +0000 UTC 2025-08-17 09:45:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f8d7b2befffa01c23b301f5168c7e7e2282997099904057bfc6cac0ffaf53265 [68a17e555329b4ad00f14830] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ynbbntyr.zmr.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:01:31Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_ynbbntyr.zmr.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:01:31 +0000 UTC 2025-08-17 07:01:31 +0000 UTC 2025-08-17 07:01:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f86bbdcf20149796065c2615ecfff56ddd1aaa311e74d7952014b8d81dc3bc7b [68a5bdfb54e99efcaf1f8db9] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\vkgsr1ui.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T12:22:14Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success vkgsr1ui.dll C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 12:22:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
004dc4972b75bfbd1376f38f1f4b423d21a2a79e908a721697d1a1db3d7055f7 [68a240c4e6cd2ce37129562d] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hf4ikxag.z2f.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:51:08Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_hf4ikxag.z2f.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:51:08 +0000 UTC 2025-08-17 20:51:08 +0000 UTC 2025-08-17 20:51:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0339b3dae7a5b6041c5bbb3def63e10b124a467d5e1f2bf3af0ab8fa500073ce [68a5c8eceb9e7b7716dce208] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\Talis\Atlas\temp\DownloadFiles.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:08:58Z] [a3a891260bd6c4b8107fc2851f015d10] [8ff719c4242076946baef37ae6acef7fdc21f05b] [0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe] [9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d] [172.17.252.194] [172.17.252.194] 1 Success DownloadFiles.ps1 C:\Talis\Atlas\temp\ 1905 a3a891260bd6c4b8107fc2851f015d10 Not Signed 2025-08-20 13:08:55 +0000 UTC 2025-08-20 13:08:55 +0000 UTC 8ff719c4242076946baef37ae6acef7fdc21f05b 0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe 9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
197fea9fc376fde139a59fa4689a84ebc896b2afd1802d222c6dc86f6810c078 [68a16f7de3fc40447cda5394] [2] [SYSTEM] [WH1EMGSQL1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1cwr4aqw.s5r.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:58:09Z] [] [] [] [] [172.18.99.115] [172.18.99.115] 1 Success __PSScriptPolicyTest_1cwr4aqw.s5r.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:58:09 +0000 UTC 2025-08-17 05:58:09 +0000 UTC 2025-08-17 05:58:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
19662d119168e78bacd4b3a8bd2078e969aae42289688dc5f70271ba774c9b2e [68a32fce1e3a6c23a9ae63ca] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2255.853] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T13:51:06Z] [431533e50a4a795e0182a41c54b870a6] [363cf7b11b02371fbdbd3d036cf77f4f477ef7d9] [10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f] [7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2226 431533e50a4a795e0182a41c54b870a6 Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 13:51:02 +0000 UTC 363cf7b11b02371fbdbd3d036cf77f4f477ef7d9 10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f 7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc 2025-08-18 13:51:10 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
19557978a15b783d556c4aca4eda4cbe58d36a15fe30474abd2b6e6991490d4e [68a472b1b022648922e235a2] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\setupapi-1.4.0.109.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [4bb0b1f8960c908d0a4826ac6e06b044] [51a5a3c50bcc35e32a8da6c27fedbc5d043b13dd] [51ffb9fec38c9a13c7aebaa3745998040c928cf28c43fd7331576e2d28bebc23cf50f3dc0569c23e0f64ef2f7ec575c8] [c72fb5656486a56d5d1f21b8a6b21af8ce6a0913c9fef2346e82a7d5fab412aa89473ec12d47f18417629ae072573546a871db24ccd18bd42845828032b94388] [172.17.23.146] [172.17.23.146] 1 Success setupapi-1.4.0.109.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\dell\storage\setupapi\main\ 52894 4bb0b1f8960c908d0a4826ac6e06b044 Not Signed 2024-04-05 21:54:59 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 51a5a3c50bcc35e32a8da6c27fedbc5d043b13dd 51ffb9fec38c9a13c7aebaa3745998040c928cf28c43fd7331576e2d28bebc23cf50f3dc0569c23e0f64ef2f7ec575c8 c72fb5656486a56d5d1f21b8a6b21af8ce6a0913c9fef2346e82a7d5fab412aa89473ec12d47f18417629ae072573546a871db24ccd18bd42845828032b94388 2025-03-28 16:07:06 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
1937781879992180304a96bdd855b4ce13ea1252dd609c7fdd9521d8bd88edbf [68a472b1b022648922e23585] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.mail-api-1.5.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [8e80aed267f0dee527692b3aba2bfe1c] [d40cb48faf5f39e86a6a5a8d8bee7b9673abf674] [4a3e2a1193482dcab0a1b6d31043acfe15afe9162bf1502228e4191bd6d4f428f0d81771ea1feb6a812bb24ed36e95a7] [e91d2b989f5822c5c91872b9ded74f04981e79f061962d7c0a9ab4cb59d6b253316a2ac94f894ebbbc3abec6c3023844b532d7b748e37c9834da0d5f42b00703] [172.17.23.146] [172.17.23.146] 1 Success javax.mail-api-1.5.1.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 192494 8e80aed267f0dee527692b3aba2bfe1c Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC d40cb48faf5f39e86a6a5a8d8bee7b9673abf674 4a3e2a1193482dcab0a1b6d31043acfe15afe9162bf1502228e4191bd6d4f428f0d81771ea1feb6a812bb24ed36e95a7 e91d2b989f5822c5c91872b9ded74f04981e79f061962d7c0a9ab4cb59d6b253316a2ac94f894ebbbc3abec6c3023844b532d7b748e37c9834da0d5f42b00703 2025-03-28 16:04:26 +0000 UTC None None 2022-11-28 02:58:40 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
192a97f6a2e408c36d9ec8a0eee6bba33a516ddedf3662c031d88e744629f991 [68a48674c4cb2500be692638, 68a48674c4cb2500be69264a] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.File.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.File.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z] [e5ae6947f5ef06d6a52a86d07cebcb3b] [ae0bd8bd58231799c2d116b50081a6ee06b6b081] [94724cd196b1adfa30d4112eedc776fb28bec172a66cb717475e8615dbd9eae1eeb61ad2d9ecc257aace0f5d4f3bc734] [64884fcf807f3cb5edb6f3958683ce075a6a75451992ebc409f551efebe54e5559923c314cdc834477fac9f2975a7cb454fa6f519e87522981ba998a16fc2849] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.File.dll C:\ProgramData\Laurel Bridge Software\Compass\www\ Serilog.Sinks.File 31232 e5ae6947f5ef06d6a52a86d07cebcb3b Serilog.Sinks.File 5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468 Not Signed 2024-08-30 13:04:08 +0000 UTC 2024-08-30 13:04:08 +0000 UTC ae0bd8bd58231799c2d116b50081a6ee06b6b081 94724cd196b1adfa30d4112eedc776fb28bec172a66cb717475e8615dbd9eae1eeb61ad2d9ecc257aace0f5d4f3bc734 64884fcf807f3cb5edb6f3958683ce075a6a75451992ebc409f551efebe54e5559923c314cdc834477fac9f2975a7cb454fa6f519e87522981ba998a16fc2849 2025-04-29 13:21:39 +0000 UTC None None 2025-04-24 09:01:53 +0000 UTC 73 0 KNOWN 0 Microsoft attested file 2025-04-28 17:54:25.557 +0000 UTC
184e0f3785ff2cf00bf741f90110338443603e4ca169be51e866764145c5c1b4 [68a6afe50e0f3bd8deac4cfd, 68a6afe50e0f3bd8deac4d10, 68a6afe50e0f3bd8deac4d3f, 68a6afe50e0f3bd8deac4d5f, 68a6afe50e0f3bd8deac4d7e, 68a6afe50e0f3bd8deac4d9e, 68a6afe50e0f3bd8deac4dbe, 68a6afe50e0f3bd8deac4dde, 68a6afe50e0f3bd8deac4dfe, 68a6afe50e0f3bd8deac4e1e, 68a6afe50e0f3bd8deac4e3e, 68a6afe50e0f3bd8deac4e5e, 68a6afe50e0f3bd8deac4e7e, 68a6afe50e0f3bd8deac4e9e, 68a6afe50e0f3bd8deac4eb0, 68a6afe50e0f3bd8deac4ede, 68a6afe50e0f3bd8deac4efe, 68a6afe50e0f3bd8deac4f1f, 68a6afe50e0f3bd8deac4f3e, 68a6afe50e0f3bd8deac4f68, 68a6afe50e0f3bd8deac4f88, 68a6afe50e0f3bd8deac4fa8, 68a6afe50e0f3bd8deac4fc8, 68a6afe50e0f3bd8deac4fe8, 68a6afe50e0f3bd8deac5008, 68a6afe50e0f3bd8deac5028, 68a6afe50e0f3bd8deac5048, 68a6afe50e0f3bd8deac5068, 68a6afe50e0f3bd8deac5088, 68a6afe50e0f3bd8deac50b3, 68a6afe50e0f3bd8deac50d1, 68a6afe50e0f3bd8deac50f2, 68a6afe50e0f3bd8deac511c, 68a6afe50e0f3bd8deac513c, 68a6afe50e0f3bd8deac515c, 68a6afe50e0f3bd8deac5186, 68a6afe50e0f3bd8deac51a6, 68a6afe50e0f3bd8deac51c6, 68a6afe50e0f3bd8deac51e7, 68a6afe50e0f3bd8deac51f9, 68a6afe50e0f3bd8deac5231, 68a6afe50e0f3bd8deac5247, 68a6afe50e0f3bd8deac5267, 68a6afe50e0f3bd8deac527c, 68a6afe50e0f3bd8deac529b, 68a6afe50e0f3bd8deac52bb, 68a6afe50e0f3bd8deac52dc, 68a6afe50e0f3bd8deac52fb, 68a6afe50e0f3bd8deac531b, 68a6afe50e0f3bd8deac533b, 68a6afe50e0f3bd8deac535b, 68a6afe50e0f3bd8deac537b, 68a6afe50e0f3bd8deac53a2, 68a6afe50e0f3bd8deac53bd, 68a6afe50e0f3bd8deac53e2, 68a6afe50e0f3bd8deac5400, 68a6afe50e0f3bd8deac5421, 68a6afe50e0f3bd8deac543c, 68a6afe50e0f3bd8deac5462, 68a6afe50e0f3bd8deac5481, 68a6afe50e0f3bd8deac54a1, 68a6afe50e0f3bd8deac54c1, 68a6afe50e0f3bd8deac54e1, 68a6afe50e0f3bd8deac5501, 68a6afe50e0f3bd8deac5521, 68a6afe50e0f3bd8deac5541, 68a6afe50e0f3bd8deac556b, 68a6afe50e0f3bd8deac558b, 68a6afe50e0f3bd8deac55ab, 68a6afe50e0f3bd8deac55cc, 68a6afe50e0f3bd8deac55eb, 68a6afe50e0f3bd8deac560c, 68a6afe50e0f3bd8deac562b, 68a6afe50e0f3bd8deac565b, 68a6afe50e0f3bd8deac567b, 68a6afe50e0f3bd8deac568c, 68a6afe50e0f3bd8deac56a9, 68a6afe50e0f3bd8deac56c9, 68a6afe50e0f3bd8deac56e2, 68a6afe50e0f3bd8deac570a, 68a6afe50e0f3bd8deac5724, 68a6afe50e0f3bd8deac5749, 68a6afe50e0f3bd8deac577d, 68a6afe50e0f3bd8deac5792, 68a6afe50e0f3bd8deac57bd, 68a6afe50e0f3bd8deac57d3, 68a6afe50e0f3bd8deac57fc, 68a6afe50e0f3bd8deac5812, 68a6afe50e0f3bd8deac582b, 68a6afe50e0f3bd8deac5853, 68a6afe50e0f3bd8deac587c, 68a6afe50e0f3bd8deac5893, 68a6afe50e0f3bd8deac58a3, 68a6afe50e0f3bd8deac58d3, 68a6afe50e0f3bd8deac58e5, 68a6afe50e0f3bd8deac590d, 68a6afe50e0f3bd8deac5924, 68a6afe50e0f3bd8deac5954, 68a6afe50e0f3bd8deac5974, 68a6afe50e0f3bd8deac598a, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-xena-10-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [d0ed1edf3a32f88240f40aa8a4cded96] [a1d11389c783f5ee22c5977f28f2ecda957a720a] [d17543c1fc6fd685b3208fc21e5a3ff64979119318645bb77f4954e6aef2b6649f5ab992f4a38ec5ca10a406c2f44df4] [ce254acfc756a589313f8b6f3beebeaf4071d01fc19658acd93305057479f433fd1e8f3528bf48ef044303c1ac3caff08200e84225d5c8ca9492bff57a33d097] [172.17.30.60] [172.17.30.60] 1 Success cip-xena-10-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-xena-10-vc140-64 ダイナミックリンクライブラリ 52224 d0ed1edf3a32f88240f40aa8a4cded96 CIP-Xena 1.0.0.0 Not Signed 2023-11-03 20:25:43 +0000 UTC 2016-02-01 07:54:52 +0000 UTC a1d11389c783f5ee22c5977f28f2ecda957a720a d17543c1fc6fd685b3208fc21e5a3ff64979119318645bb77f4954e6aef2b6649f5ab992f4a38ec5ca10a406c2f44df4 ce254acfc756a589313f8b6f3beebeaf4071d01fc19658acd93305057479f433fd1e8f3528bf48ef044303c1ac3caff08200e84225d5c8ca9492bff57a33d097 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
1841dccf8ab1e7d9158f73a6f21a031567a84f61a72df756223ddfee32401333 [68a523a99ba7c92b34976f9e] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.Controls.v7.0.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:44Z] [40b1f198a5469c65d74646e22aeb3b5c] [b8c2f379906dd10c0136c5c4151cd5486a361d46] [7d2f561f9bec7368f2e57eaa4acd66e5d77f033483451f25dde84df39a462116dc8d327c0ac83d5c2f94aedae5cc3b80] [6cddb4188e1cad83e3c1b8efa12f61a572d05339885d2bb02381a8afa6eeeed4bfce05afdf65993b39753d5b7cd0b3c154177a9b35ad48895fa4cbc48c81750b] [172.17.22.40] [172.17.22.40] 1 Success Xceed.Wpf.Controls.v7.0.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Xceed Controls for WPF 195072 40b1f198a5469c65d74646e22aeb3b5c Xceed Controls for WPF 7.0.20452.13100 Not Signed 2023-06-15 02:37:34 +0000 UTC 2023-06-15 02:37:34 +0000 UTC b8c2f379906dd10c0136c5c4151cd5486a361d46 7d2f561f9bec7368f2e57eaa4acd66e5d77f033483451f25dde84df39a462116dc8d327c0ac83d5c2f94aedae5cc3b80 6cddb4188e1cad83e3c1b8efa12f61a572d05339885d2bb02381a8afa6eeeed4bfce05afdf65993b39753d5b7cd0b3c154177a9b35ad48895fa4cbc48c81750b 2025-08-20 01:23:53 +0000 UTC None None 2023-12-28 16:31:08 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
17e48334a38dbd836fe464e5c186505984d2cce8d90c271067a21ce18c41d6f2 [68a3f034978467a3921f39ab] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T03:31:58Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 03:32:04 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
17b63ace273280d515dc03790cc9616ab0e642ac676752b7a8428f489ab2c6d6 [68a22f92c12f0e944e5d68ee] [2] [SYSTEM] [DP-Fairmont] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gdwb5ppl.3to.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:37:41Z] [] [] [] [] [172.16.121.132] [172.16.121.132] 1 Success __PSScriptPolicyTest_gdwb5ppl.3to.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:37:41 +0000 UTC 2025-08-17 19:37:41 +0000 UTC 2025-08-17 19:37:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
179832435871d03884d0c7276e49a11f82974cdb823c3738f69ab8092647fcac [68a17d46e874e98975d27502] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjl5psll.in3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:57:01Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_hjl5psll.in3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:57:01 +0000 UTC 2025-08-17 06:57:01 +0000 UTC 2025-08-17 06:57:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1773c2dd43140d329f6e0955d6d76b67f1600ad0c4a641f0050cfe5efe225efc [68a5c8eceb9e7b7716dce201, 68a5ca39b5df6e9c598d9a13, 68a5ca39b5df6e9c598d9a20, 68a5ccf2ddfdba423e488636, 68a5ccf2ddfdba423e488644, 68a5ccf2ddfdba423e488652, 68a5ccf2ddfdba423e48865f, 68a5ccf2ddfdba423e48866c, 68a5ccf2ddfdba423e488679, 68a5ccf2ddfdba423e488686, 68a5ccf2ddfdba423e488693] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\TraceFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [125f529a46ab4aa74577b49ec21e30c4] [6a5e7e81ad0215822fcdaa684dd94a1e03854b01] [2cc689b234c5f1f7670d28917f68ea20ccf64038596ba533da7d45f3e7e14e9727fe4312755d74a390682879a39817d5] [9b48bbe95bb98c487a240922d55930227af2176098fdbc59625b0ee88281b09a0657f718d8a2df828287be2692a948474a3cf9206f4091573ecdf70889e1107a] [172.17.252.194] [172.17.252.194] 1 Success TraceFunctions.ps1 C:\azagent\A2\_work\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.247.1\ps_modules\VstsTaskSdk\ 4510 125f529a46ab4aa74577b49ec21e30c4 Not Signed 2024-11-19 14:57:26 +0000 UTC 2024-10-22 15:45:10 +0000 UTC 6a5e7e81ad0215822fcdaa684dd94a1e03854b01 2cc689b234c5f1f7670d28917f68ea20ccf64038596ba533da7d45f3e7e14e9727fe4312755d74a390682879a39817d5 9b48bbe95bb98c487a240922d55930227af2176098fdbc59625b0ee88281b09a0657f718d8a2df828287be2692a948474a3cf9206f4091573ecdf70889e1107a 2025-04-16 18:41:40 +0000 UTC None None 2024-08-08 19:43:04 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-16 18:46:05.968 +0000 UTC
17731fe321a7a7cc3b56cb797634b8ec29fa0322004886a1523bbc7bc7eecf71 [68a472a799ad3734d804e2d8] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\avalon-framework-4.1.3.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:35Z] [bef9f9be8ba066273fdef72b3503a307] [92315ee1c4a4c90bee05055713811f28f8509075] [dc477c2c42df78b8b8807c3c3ea419e5c356d90dfef63c218da537026f689b67811bb3b16279bbee970b682df4401b7f] [2673fa0a9eaf80bf6c3675131b1fc6ff8df4a75c400fdf37a968684633335f0b9113567c7e6f7ae0750a0713af47a4ac6c07728dcd320b443c3bc30ef4f1e608] [172.17.23.146] [172.17.23.146] 1 Success avalon-framework-4.1.3.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 63966 bef9f9be8ba066273fdef72b3503a307 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 92315ee1c4a4c90bee05055713811f28f8509075 dc477c2c42df78b8b8807c3c3ea419e5c356d90dfef63c218da537026f689b67811bb3b16279bbee970b682df4401b7f 2673fa0a9eaf80bf6c3675131b1fc6ff8df4a75c400fdf37a968684633335f0b9113567c7e6f7ae0750a0713af47a4ac6c07728dcd320b443c3bc30ef4f1e608 2025-08-19 11:29:20 +0000 UTC None None 2024-11-15 08:42:51 +0000 UTC 67 0 KNOWN 0 Microsoft attested file 2025-08-19 11:30:19.65 +0000 UTC
1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb [68a472b1b022648922e23580] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-jaxrs-1.9.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [8481e1904d9bfe974157a6af04b4445e] [534d72d2b9d6199dd531dfb27083dd4844082bba] [abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936] [9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741] [172.17.23.146] [172.17.23.146] 1 Success jackson-jaxrs-1.9.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 18336 8481e1904d9bfe974157a6af04b4445e Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 534d72d2b9d6199dd531dfb27083dd4844082bba abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936 9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741 2025-03-28 16:04:26 +0000 UTC None None 2022-06-24 07:50:59 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-10 12:40:40.528 +0000 UTC
170d4b7c2de7fb1c9deb285fdeff1310fcb485e918c7d9aa2a2ae1ec916ff314 [68a3146b5f0c41860c8c84f5, 68a3146b5f0c41860c8c854e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\heapq.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [3b625d3d2635c2e9ea41265880245e3b] [6ee317e222aef1f732a799eca5285b2f3fe532b6] [7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8] [d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59] [172.17.252.131] [172.17.252.131] 1 Success heapq.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 17762 3b625d3d2635c2e9ea41265880245e3b Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 6ee317e222aef1f732a799eca5285b2f3fe532b6 7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8 d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
16baef4033a192466a85d09a61bbe23a5b321e833b215a3678c2a815b180cf58 [68a523949cec397f02de9f42] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Altova.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:25Z] [df68553b3db6fab749316db4a9160ac7] [2eb60ad1902625e818d26dbf381aa0b0fea843b2] [1131ef04b60ccbd837e698f4b0c8dc11d3aa14de3602acb9cb40d868df950dafcec5216c5fa59930e51fd1fe9daa9d2b] [bc22e597c97883c886c90517c9697e1efdc60a4cceaf762d54661f21e31aab571fe4f05391d7cb6dfa822e42f26fb0f09183e093d1aa676b31aa5b4141314a5b] [172.17.22.40] [172.17.22.40] 1 Success Altova.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 69632 df68553b3db6fab749316db4a9160ac7 1.0.3483.28696 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC 2eb60ad1902625e818d26dbf381aa0b0fea843b2 1131ef04b60ccbd837e698f4b0c8dc11d3aa14de3602acb9cb40d868df950dafcec5216c5fa59930e51fd1fe9daa9d2b bc22e597c97883c886c90517c9697e1efdc60a4cceaf762d54661f21e31aab571fe4f05391d7cb6dfa822e42f26fb0f09183e093d1aa676b31aa5b4141314a5b 2025-08-20 01:23:32 +0000 UTC None None 2021-06-12 09:06:59 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
169a203c4334a81d8e0095f34baa1cf1840ad60a6689a336cb19e9d41acbae6b [68a6afe50e0f3bd8deac4cfe, 68a6afe50e0f3bd8deac4d11, 68a6afe50e0f3bd8deac4d40, 68a6afe50e0f3bd8deac4d60, 68a6afe50e0f3bd8deac4d7f, 68a6afe50e0f3bd8deac4d9f, 68a6afe50e0f3bd8deac4dbf, 68a6afe50e0f3bd8deac4ddf, 68a6afe50e0f3bd8deac4dff, 68a6afe50e0f3bd8deac4e1f, 68a6afe50e0f3bd8deac4e3f, 68a6afe50e0f3bd8deac4e5f, 68a6afe50e0f3bd8deac4e7f, 68a6afe50e0f3bd8deac4e9f, 68a6afe50e0f3bd8deac4eb1, 68a6afe50e0f3bd8deac4edf, 68a6afe50e0f3bd8deac4eff, 68a6afe50e0f3bd8deac4f20, 68a6afe50e0f3bd8deac4f3f, 68a6afe50e0f3bd8deac4f69, 68a6afe50e0f3bd8deac4f89, 68a6afe50e0f3bd8deac4fa9, 68a6afe50e0f3bd8deac4fc9, 68a6afe50e0f3bd8deac4fe9, 68a6afe50e0f3bd8deac5009, 68a6afe50e0f3bd8deac5029, 68a6afe50e0f3bd8deac5049, 68a6afe50e0f3bd8deac5069, 68a6afe50e0f3bd8deac5089, 68a6afe50e0f3bd8deac50b4, 68a6afe50e0f3bd8deac50d2, 68a6afe50e0f3bd8deac50f3, 68a6afe50e0f3bd8deac511d, 68a6afe50e0f3bd8deac513d, 68a6afe50e0f3bd8deac515d, 68a6afe50e0f3bd8deac5187, 68a6afe50e0f3bd8deac51a7, 68a6afe50e0f3bd8deac51c7, 68a6afe50e0f3bd8deac51e8, 68a6afe50e0f3bd8deac51fa, 68a6afe50e0f3bd8deac5232, 68a6afe50e0f3bd8deac5248, 68a6afe50e0f3bd8deac5268, 68a6afe50e0f3bd8deac527d, 68a6afe50e0f3bd8deac529c, 68a6afe50e0f3bd8deac52bd, 68a6afe50e0f3bd8deac52dd, 68a6afe50e0f3bd8deac52fc, 68a6afe50e0f3bd8deac531c, 68a6afe50e0f3bd8deac533c, 68a6afe50e0f3bd8deac535c, 68a6afe50e0f3bd8deac537c, 68a6afe50e0f3bd8deac53a3, 68a6afe50e0f3bd8deac53be, 68a6afe50e0f3bd8deac53e3, 68a6afe50e0f3bd8deac5401, 68a6afe50e0f3bd8deac5422, 68a6afe50e0f3bd8deac543d, 68a6afe50e0f3bd8deac5463, 68a6afe50e0f3bd8deac5482, 68a6afe50e0f3bd8deac54a2, 68a6afe50e0f3bd8deac54c2, 68a6afe50e0f3bd8deac54e2, 68a6afe50e0f3bd8deac5502, 68a6afe50e0f3bd8deac5522, 68a6afe50e0f3bd8deac5542, 68a6afe50e0f3bd8deac556c, 68a6afe50e0f3bd8deac558c, 68a6afe50e0f3bd8deac55ac, 68a6afe50e0f3bd8deac55cd, 68a6afe50e0f3bd8deac55ec, 68a6afe50e0f3bd8deac560d, 68a6afe50e0f3bd8deac562c, 68a6afe50e0f3bd8deac565c, 68a6afe50e0f3bd8deac567c, 68a6afe50e0f3bd8deac568d, 68a6afe50e0f3bd8deac56aa, 68a6afe50e0f3bd8deac56ca, 68a6afe50e0f3bd8deac56e3, 68a6afe50e0f3bd8deac570b, 68a6afe50e0f3bd8deac5725, 68a6afe50e0f3bd8deac574a, 68a6afe50e0f3bd8deac577e, 68a6afe50e0f3bd8deac5793, 68a6afe50e0f3bd8deac57be, 68a6afe50e0f3bd8deac57d4, 68a6afe50e0f3bd8deac57fe, 68a6afe50e0f3bd8deac5813, 68a6afe50e0f3bd8deac582c, 68a6afe50e0f3bd8deac5854, 68a6afe50e0f3bd8deac587b, 68a6afe50e0f3bd8deac5894, 68a6afe50e0f3bd8deac58a4, 68a6afe50e0f3bd8deac58d4, 68a6afe50e0f3bd8deac58e6, 68a6afe50e0f3bd8deac590e, 68a6afe50e0f3bd8deac5925, 68a6afe50e0f3bd8deac5955, 68a6afe50e0f3bd8deac5975, 68a6afe50e0f3bd8deac598b, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-ohbz-14-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [6fc8a4b8b320677eb4993ca674392938] [240f91e3ed1d661abc106067240036f1a823580b] [1a87fb2a454af8f5e5e3e113382b9bc14d0cc50004b5845ce84542396f51c43687a9ee34bc2cad5d8ee0c4fac756b896] [bf9d284f19b609ec66ed21c959f8841f9253e711f1f52d3917b8c58b9761d951b19b80e2d4256065b1451727b97850f6726ae0985a6b330b7f7a154b52d6146c] [172.17.30.60] [172.17.30.60] 1 Success cip-ohbz-14-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-ohbz-14-vc140-64 ダイナミックリンクライブラリ 116224 6fc8a4b8b320677eb4993ca674392938 CIP-Ohbz 1.4.1.0 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-20 05:15:19 +0000 UTC 240f91e3ed1d661abc106067240036f1a823580b 1a87fb2a454af8f5e5e3e113382b9bc14d0cc50004b5845ce84542396f51c43687a9ee34bc2cad5d8ee0c4fac756b896 bf9d284f19b609ec66ed21c959f8841f9253e711f1f52d3917b8c58b9761d951b19b80e2d4256065b1451727b97850f6726ae0985a6b330b7f7a154b52d6146c 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
1c99e83e5bb1e752b6a081d36ecb4a804a4bf6a51f76c096ef4a30ebc8b44345 [68a34d6610b57c5bffc57daf] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:29Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1c91077087037870eb7a63ed7d989ad265f5c3c8f356ccd3e724aefacdae6905 [68a4a67eb5e8554bc2e83559] [2] [be10045eu] [i-nsdprodmon1] [WVUHS] [\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:29:43Z] [b12cf42ff23c2057b9f1443b8014f97a] [174c49890a68701f720d6ac4f822aff1798dc9d2] [5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822] [9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d] [172.17.252.208] [172.17.252.208] 1 Success PC Info.ps1 \\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ 2060 b12cf42ff23c2057b9f1443b8014f97a Not Signed 2025-04-22 13:59:56 +0000 UTC 2025-08-19 16:29:43 +0000 UTC 174c49890a68701f720d6ac4f822aff1798dc9d2 5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822 9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d 2025-08-19 16:29:50 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
1c86a4cba96b9d9de38004df34ecbfc2617178870a9958ad4f17f1308c06dd5b [68a5c8eceb9e7b7716dce200, 68a5ca39b5df6e9c598d9a12, 68a5ca39b5df6e9c598d9a1f, 68a5ccf2ddfdba423e488635, 68a5ccf2ddfdba423e488643, 68a5ccf2ddfdba423e488651, 68a5ccf2ddfdba423e48865e, 68a5ccf2ddfdba423e48866b, 68a5ccf2ddfdba423e488678, 68a5ccf2ddfdba423e488685, 68a5ccf2ddfdba423e488692] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ToolFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [cbab792c0208a46dc59082f0030efd4c] [22eb034a2ff6ed4052bfa18fd9acaedd5c3028fd] [2dcc0e1741aaa8179733d8b708c870840a1195b1928f6f3639be6cdec10b53cb45f70128667c85e0cbf1bc503c3cd118] [97250faa6cabd45cd291bb3075aa6438103385b65f25e24d2ce3117f71314aa204df7a2ba16952b65edd353694297b0b16cae9c42b932418d45111f85049fc49] [172.17.252.194] [172.17.252.194] 1 Success ToolFunctions.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 4041 cbab792c0208a46dc59082f0030efd4c Not Signed 2025-08-20 13:08:41 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 22eb034a2ff6ed4052bfa18fd9acaedd5c3028fd 2dcc0e1741aaa8179733d8b708c870840a1195b1928f6f3639be6cdec10b53cb45f70128667c85e0cbf1bc503c3cd118 97250faa6cabd45cd291bb3075aa6438103385b65f25e24d2ce3117f71314aa204df7a2ba16952b65edd353694297b0b16cae9c42b932418d45111f85049fc49 2025-08-20 13:09:00 +0000 UTC None None 2024-08-08 19:43:03 +0000 UTC 61 0 KNOWN 0 Microsoft attested file 2025-08-20 13:10:54.011 +0000 UTC
1c4f4a46ffb6c9b0b7b73281cc81801cd838a1d4b95e5bd01ed90e38527489ca [68a3146b5f0c41860c8c8546, 68a3146b5f0c41860c8c8574] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\traceback.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [55adb6e2f9b392dd9d272956ce4405f8] [245bf99c09cd2c80e54d4d6c044a46088e0712f1] [1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e] [6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1] [172.17.252.131] [172.17.252.131] 1 Success traceback.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 70311 55adb6e2f9b392dd9d272956ce4405f8 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 245bf99c09cd2c80e54d4d6c044a46088e0712f1 1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e 6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1c3dafc22b5aa4e6d0e812a90056047091c833bb5a9cfeaac5cc792909857dcb [68a6afe50e0f3bd8deac4d01, 68a6afe50e0f3bd8deac4d16, 68a6afe50e0f3bd8deac4d43, 68a6afe50e0f3bd8deac4d64, 68a6afe50e0f3bd8deac4d83, 68a6afe50e0f3bd8deac4da3, 68a6afe50e0f3bd8deac4dc5, 68a6afe50e0f3bd8deac4de4, 68a6afe50e0f3bd8deac4e04, 68a6afe50e0f3bd8deac4e24, 68a6afe50e0f3bd8deac4e44, 68a6afe50e0f3bd8deac4e64, 68a6afe50e0f3bd8deac4e84, 68a6afe50e0f3bd8deac4ea4, 68a6afe50e0f3bd8deac4eb6, 68a6afe50e0f3bd8deac4ee5, 68a6afe50e0f3bd8deac4f04, 68a6afe50e0f3bd8deac4f24, 68a6afe50e0f3bd8deac4f45, 68a6afe50e0f3bd8deac4f6d, 68a6afe50e0f3bd8deac4f8e, 68a6afe50e0f3bd8deac4fae, 68a6afe50e0f3bd8deac4fce, 68a6afe50e0f3bd8deac4fee, 68a6afe50e0f3bd8deac500e, 68a6afe50e0f3bd8deac502e, 68a6afe50e0f3bd8deac504d, 68a6afe50e0f3bd8deac506e, 68a6afe50e0f3bd8deac508e, 68a6afe50e0f3bd8deac50b8, 68a6afe50e0f3bd8deac50d7, 68a6afe50e0f3bd8deac50f8, 68a6afe50e0f3bd8deac5122, 68a6afe50e0f3bd8deac5144, 68a6afe50e0f3bd8deac5162, 68a6afe50e0f3bd8deac518c, 68a6afe50e0f3bd8deac51ac, 68a6afe50e0f3bd8deac51cb, 68a6afe50e0f3bd8deac51ec, 68a6afe50e0f3bd8deac51ff, 68a6afe50e0f3bd8deac5216, 68a6afe50e0f3bd8deac524d, 68a6afe50e0f3bd8deac526d, 68a6afe50e0f3bd8deac5280, 68a6afe50e0f3bd8deac52a1, 68a6afe50e0f3bd8deac52c1, 68a6afe50e0f3bd8deac52e1, 68a6afe50e0f3bd8deac5301, 68a6afe50e0f3bd8deac5322, 68a6afe50e0f3bd8deac5341, 68a6afe50e0f3bd8deac5361, 68a6afe50e0f3bd8deac5381, 68a6afe50e0f3bd8deac53a7, 68a6afe50e0f3bd8deac53c2, 68a6afe50e0f3bd8deac53e6, 68a6afe50e0f3bd8deac5406, 68a6afe50e0f3bd8deac5427, 68a6afe50e0f3bd8deac5442, 68a6afe50e0f3bd8deac5468, 68a6afe50e0f3bd8deac5487, 68a6afe50e0f3bd8deac54a6, 68a6afe50e0f3bd8deac54c7, 68a6afe50e0f3bd8deac54e7, 68a6afe50e0f3bd8deac5507, 68a6afe50e0f3bd8deac5527, 68a6afe50e0f3bd8deac5547, 68a6afe50e0f3bd8deac5571, 68a6afe50e0f3bd8deac5591, 68a6afe50e0f3bd8deac55b1, 68a6afe50e0f3bd8deac55d1, 68a6afe50e0f3bd8deac55f1, 68a6afe50e0f3bd8deac5612, 68a6afe50e0f3bd8deac5631, 68a6afe50e0f3bd8deac563a, 68a6afe50e0f3bd8deac5660, 68a6afe50e0f3bd8deac5680, 68a6afe50e0f3bd8deac568f, 68a6afe50e0f3bd8deac56af, 68a6afe50e0f3bd8deac56cf, 68a6afe50e0f3bd8deac56e7, 68a6afe50e0f3bd8deac570f, 68a6afe50e0f3bd8deac5728, 68a6afe50e0f3bd8deac574f, 68a6afe50e0f3bd8deac5758, 68a6afe50e0f3bd8deac5797, 68a6afe50e0f3bd8deac57a3, 68a6afe50e0f3bd8deac57d8, 68a6afe50e0f3bd8deac57e3, 68a6afe50e0f3bd8deac5817, 68a6afe50e0f3bd8deac5830, 68a6afe50e0f3bd8deac5859, 68a6afe50e0f3bd8deac5861, 68a6afe50e0f3bd8deac5898, 68a6afe50e0f3bd8deac58a8, 68a6afe50e0f3bd8deac58d8, 68a6afe50e0f3bd8deac58ea, 68a6afe50e0f3bd8deac5912, 68a6afe50e0f3bd8deac5929, 68a6afe50e0f3bd8deac5959, 68a6afe50e0f3bd8deac5979, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-lzwwrapper-16-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...] [0d8711eda221ecd7d62b0ce8129403e8] [4dbec9785ca3cfdf10a1f8a9a8d976075756eeac] [12e7ea204f5b9790e28ab3a2b1452be96f2c2805e26906d12e28eafaea0430322f4b70ce7d0b6d234e196032fea40b37] [9d16cb297c365ffac4d638b2b6562440cbf8910ef13d39d19b8ede03ad2b780c218e4ecef2bfb999c92b91a732179b8a54a0d48379e1bff68e55fdd18a34dab8] [172.17.30.60] [172.17.30.60] 1 Success cip-lzwwrapper-16-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-lzwwrapper-16-vc140-64 ダイナミックリンクライブラリ 20992 0d8711eda221ecd7d62b0ce8129403e8 CIP 1.6.5.2 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-13 05:40:52 +0000 UTC 4dbec9785ca3cfdf10a1f8a9a8d976075756eeac 12e7ea204f5b9790e28ab3a2b1452be96f2c2805e26906d12e28eafaea0430322f4b70ce7d0b6d234e196032fea40b37 9d16cb297c365ffac4d638b2b6562440cbf8910ef13d39d19b8ede03ad2b780c218e4ecef2bfb999c92b91a732179b8a54a0d48379e1bff68e55fdd18a34dab8 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
1c0d104a8743951cc262698fd2ad920b4fcfed18090a9f1a67144ee21b7b0049 [68a1b11e62bedacdcc003190] [2] [SYSTEM] [u-nLanSweep1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_10ru0x02.3yt.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:38:12Z] [] [] [] [] [172.25.17.127] [172.25.17.127] 1 Success __PSScriptPolicyTest_10ru0x02.3yt.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:38:12 +0000 UTC 2025-08-17 10:38:12 +0000 UTC 2025-08-17 10:38:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1bec31633cd92c7e7b6897b5b7a117c32f9bec3abc83a5ae122dc67cfe770e0f [68a16bd60756fe54a9918f91, 68a2149cb58debea69d7c73f, 68a2bd5ff793a9057f329bf9, 68a3663261f8067c48423ead, 68a40efceddb3a9f1a71a5f3, 68a4b7cd36bc5d38057e235b] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\reslib.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [db53771ef4c80df47010df1b9b74ccca] [04235cf9f35465752309b98f0f11bcc5886f45db] [2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410] [7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354] [10.20.20.68] [10.20.20.68] 1 Success reslib.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 57144 db53771ef4c80df47010df1b9b74ccca Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 04235cf9f35465752309b98f0f11bcc5886f45db 2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410 7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 05:59:58 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
1b64fc501fa205199281de9b95c53dc185838e68da9587c549e9e6f1cdc43e55 [68a472b1b022648922e2356f] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmHostIntegrationApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [f17f58d6cb8b6edcc0823121d0af3163] [2a65fa40e480abf34189a309e084b000bb0c0220] [e5533ff248fc3923954e34d399a1d26934f6db28317aad7d594b3dea8c33ec7521c3851c0a2ee0f003f37d42897f78e7] [f7db28e94728ec58ba5dfdc9f056db84d94bdcb3a23c9df843d89a2a0b6096e7c745644e6407a30f0df8d57f446724064fba4ae8e15741169492338b63a625ee] [172.17.23.146] [172.17.23.146] 1 Success DsmHostIntegrationApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 121140 f17f58d6cb8b6edcc0823121d0af3163 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 2a65fa40e480abf34189a309e084b000bb0c0220 e5533ff248fc3923954e34d399a1d26934f6db28317aad7d594b3dea8c33ec7521c3851c0a2ee0f003f37d42897f78e7 f7db28e94728ec58ba5dfdc9f056db84d94bdcb3a23c9df843d89a2a0b6096e7c745644e6407a30f0df8d57f446724064fba4ae8e15741169492338b63a625ee 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
1b1e6e65d2b28da1a31023fe1c0a4071c001db0ab55947e0d2d50a4aa335e321 [68a5c7657732fa5006a7acf0] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe] [Servers] [Servers Audit] [v2287.880] [C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe -package:"D:\QS1\QAU\Updates\QAUInst.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\" -tempdisk1folder:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\" -IS_OriginalLauncher:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\QAUInst.exe"] [Not Signed] [D:\QS1\QAU\Updates\QAUInst.exe] [C:\Windows\explorer.exe] [2025-08-20T13:02:23Z] [c1478d20d872971cf6b4615e79ecfa72] [31faaac28aa42532c4121fa4ea689db8248db888] [747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215] [58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502] [172.17.20.104] [172.17.20.104] 1 Success QAUInst.exe C:\Windows\Temp\{7ECE6BBA-38D7-4AA8-BD90-D64A990063CA}\ InstallScript Setup Launcher Unicode 914944 c1478d20d872971cf6b4615e79ecfa72 QS/1 Automatic Updates 1.0.0.297 Not Signed 2025-05-22 21:33:33 +0000 UTC 2025-05-22 21:33:33 +0000 UTC 31faaac28aa42532c4121fa4ea689db8248db888 747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215 58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502 2025-05-22 21:33:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1b096ab7c58272c64f17e7a582777c8e9ea3d42f42e14b605ec148acf45d3fd1 [68a1abc4f0472d34305de372] [2] [SYSTEM] [i-nctx-pvs4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_rupfwq53.gwm.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:15:24Z] [] [] [] [] [172.17.246.6] [172.17.246.6] 1 Success __PSScriptPolicyTest_rupfwq53.gwm.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:15:24 +0000 UTC 2025-08-17 10:15:24 +0000 UTC 2025-08-17 10:15:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1ac7ceb23e48ad66e86d0e748a2eb1125d5131a459d24779854d2bd381a9a2dc [68a4855388937a93ff144377] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Web.Core.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:08:10Z] [e420fcc66faf3bb597920bc95092bc82] [225c1cb6bde189a744287718d5838279c6495f70] [8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b] [f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Authentication.Web.Core.dll C:\Stryker\iBed Server Application\Stryker.Authentication\ Stryker.iBedServer.Authentication.Web.Core 18432 e420fcc66faf3bb597920bc95092bc82 Stryker.iBedServer.Authentication.Web.Core 1.0.0 Not Signed 2023-03-16 10:22:22 +0000 UTC 2023-03-16 10:22:22 +0000 UTC 225c1cb6bde189a744287718d5838279c6495f70 8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58 2025-08-19 14:08:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1ab5b7413053d06ca8df013b5f75357726018a0766346e49aec09ccd4c70b83f [68a34b98a6132bf659cce5bb, 68a34df0b71eea1289980a20] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Blue.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [e5725239798a7d08e4b943d6a7fdf979] [3741d4afd24407f229141ed701c02bd1c7f5ed93] [d56d26dc6d609ae4566e52dcef0fac9b8720d7a1956f547bc92d60c4918012cf67bf73c5e440a567cfbb4cf31debdedc] [e9a1c47d6cf6ae6e7cf314789cebd48317deb1fd2401af878998d6e52d1018840eb14845cdc4e029fbe168f6c91eae517e757a160cf965ae082357e1295de7ea] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Office2010Blue.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Office2010Blue 804352 e5725239798a7d08e4b943d6a7fdf979 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 3741d4afd24407f229141ed701c02bd1c7f5ed93 d56d26dc6d609ae4566e52dcef0fac9b8720d7a1956f547bc92d60c4918012cf67bf73c5e440a567cfbb4cf31debdedc e9a1c47d6cf6ae6e7cf314789cebd48317deb1fd2401af878998d6e52d1018840eb14845cdc4e029fbe168f6c91eae517e757a160cf965ae082357e1295de7ea 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:17 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
1aa0f52be8015d5624a34baa8ff09a5e51a84ee1d541fefb6e42312cd8266209 [68a1a82b7de272dd853193b1] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_768146f715644334a001f4d6f657b99a.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-17T10:00:07Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_768146f715644334a001f4d6f657b99a.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-17 10:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
19f6ab70ded4feceef4245317e13cc2723dba13451347a16410ff088aa94ed9e [68a4ac67cfad262556985011, 68a4dda823653165b0c6ea28] [2] [CA_Jnt_DAWS3] [i-hMSFT-ODA] [WVUHS] [C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\Microsoft.PowerShell.Oms.Assessments.dll] [Servers] [Servers Audit] [v2278.870, v2283.876] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T16:51:09Z, 2025-08-19T20:20:41Z] [73567d31f6f5a57f178f72390032e4a7] [da44ee8ec0db86402e5d6c017827ba77fa19bf72] [86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483] [ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac] [172.17.23.172] [172.17.23.172] 1 Success Microsoft.PowerShell.Oms.Assessments.dll C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\ Microsoft.PowerShell.Oms.Assessments 111616 73567d31f6f5a57f178f72390032e4a7 Microsoft.PowerShell.Oms.Assessments 1.0.0.0 Not Signed 2024-10-07 15:47:40 +0000 UTC 2024-10-07 15:46:58 +0000 UTC da44ee8ec0db86402e5d6c017827ba77fa19bf72 86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483 ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac 2025-07-15 16:51:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
19bbcc16c175702ae348e14d03804631d4f852e8d03c5001e4255c2e583fb086 [68a50936a0536b4a4308bb01] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\DatascopeB_5_0_2_9.msi] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:30:55Z] [91d6ed9ec25335c8993911305fa93660] [9e017857441e23e5cc32d68e6f941671dac75216] [111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3] [36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139] [172.17.23.18] [172.17.23.18] 1 Success DatascopeB_5_0_2_9.msi C:\Users\CA_gs10109\Downloads\ 828928 91d6ed9ec25335c8993911305fa93660 Not Signed 2025-08-19 23:30:20 +0000 UTC 2025-08-19 23:30:21 +0000 UTC 9e017857441e23e5cc32d68e6f941671dac75216 111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3 36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139 2025-08-19 23:31:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1993206ba43487d40316b266c2a25a246a8eccafd1d33d2be091b1ca11ced920 [68a5c64d54e5003d1abde4c7] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\qsettings32.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z] [8e4734c2dd89067c370a2f4ff047ef17] [849ad81198cbf053cc629d04148d50c66f26c2d5] [4bd179374f7858b3db7b28a275d8fcec260fab1986e55d77aa3aa50cc0e26ef12b11ad4684fb6d3ff13b2145c894717c] [ba7e954082a57b8e8937ce7d57063165ba66cbec31d6899d61b9c8b0200b78082d8136a5cf949c530604c65b7017fb17617f02fbfddfcffff9245e9ec90592e1] [172.17.20.104] [172.17.20.104] 1 Success qsettings32.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\ 32822 8e4734c2dd89067c370a2f4ff047ef17 Not Signed 2025-08-20 12:57:41 +0000 UTC 2009-10-28 21:10:06 +0000 UTC 849ad81198cbf053cc629d04148d50c66f26c2d5 4bd179374f7858b3db7b28a275d8fcec260fab1986e55d77aa3aa50cc0e26ef12b11ad4684fb6d3ff13b2145c894717c ba7e954082a57b8e8937ce7d57063165ba66cbec31d6899d61b9c8b0200b78082d8136a5cf949c530604c65b7017fb17617f02fbfddfcffff9245e9ec90592e1 2025-08-20 12:57:49 +0000 UTC None None 2024-06-05 23:33:46 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 13:00:50.983 +0000 UTC
20aedfcc2009362bc8633f6532da1ed127c65bfe62a162c12bec185791071da2 [68a3146b5f0c41860c8c84f3, 68a3146b5f0c41860c8c8524] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\operator.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [4d902c5d88140a642fe4ef1a19911781] [faf9cceba79990efbfcc000ae2d94a21dba89a1f] [a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140] [54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3] [172.17.252.131] [172.17.252.131] 1 Success operator.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 17367 4d902c5d88140a642fe4ef1a19911781 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC faf9cceba79990efbfcc000ae2d94a21dba89a1f a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140 54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
209d605e45aba340d5ddd93ce438fd4f8178d56ecb4911f3c4cd04badca4f0cd [68a1bfd674ff3871c4d1c5c9] [2] [SYSTEM] [i-nosccapp2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jba2l2dq.vnn.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T11:41:04Z] [] [] [] [] [172.17.250.140] [172.17.250.140] 1 Success __PSScriptPolicyTest_jba2l2dq.vnn.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 11:41:04 +0000 UTC 2025-08-17 11:41:04 +0000 UTC 2025-08-17 11:41:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
208fe14221f4de86e1d3367e7e3af0431b468c606a965f94078806268cd1fcd9 [68a5c8eceb9e7b7716dce1f8, 68a5ca39b5df6e9c598d9a0a, 68a5ca39b5df6e9c598d9a17, 68a5ccf2ddfdba423e48862d, 68a5ccf2ddfdba423e48863b, 68a5ccf2ddfdba423e488649, 68a5ccf2ddfdba423e488656, 68a5ccf2ddfdba423e488663, 68a5ccf2ddfdba423e488670, 68a5ccf2ddfdba423e48867d, 68a5ccf2ddfdba423e48868a] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\VstsTaskSdk.psm1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:51Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [a2b60434350ac0955961357829a8a1c5] [8e37dd79783b74df97a476dff753c6e1753affb2] [5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0] [bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1] [172.17.252.194] [172.17.252.194] 1 Success VstsTaskSdk.psm1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 6727 a2b60434350ac0955961357829a8a1c5 Not Signed 2025-08-20 13:08:41 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 8e37dd79783b74df97a476dff753c6e1753affb2 5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0 bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2063d0c99b559ee70851bb6ef469403083548a7de9815d5d75c9091079f51e7a [68a5239e621d09b2b1ed5e47] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfigurationSchema.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:33Z] [4d713ca1bcb6151d41a165fa97487752] [d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1] [b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2] [ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb] [172.17.22.40] [172.17.22.40] 1 Success MonitoringConfigurationSchema.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 187392 4d713ca1bcb6151d41a165fa97487752 1.0.8565.40745 Not Signed 2023-06-15 02:38:14 +0000 UTC 2023-06-15 02:38:14 +0000 UTC d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1 b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2 ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1f477058702261b995bc18234ff867b47234569c3cd8255454037b74cddd65bc [68a5239e621d09b2b1ed5e5d] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SQLiteHelper.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [05c2fabec68ff1d6f465b6934a1a3647] [802732afb976e598f0121b892ad0826871e83ab9] [204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2] [7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0] [172.17.22.40] [172.17.22.40] 1 Success SQLiteHelper.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ AeroScout.MobileView.Common 10240 05c2fabec68ff1d6f465b6934a1a3647 AeroScout.MobileView.Common 1.0.0.0 Not Signed 2023-06-15 02:37:22 +0000 UTC 2023-06-15 02:37:22 +0000 UTC 802732afb976e598f0121b892ad0826871e83ab9 204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2 7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1ed3e1c588280d115f883456dbe63b1f2610c8f2b0bae609b75c22c0f36382ca [68a306a5ba5832f49fe9cf4c] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RPRT30D4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [983b74b53f11dc71fffef7e10c6e030d] [93034b2b19724dd41179d410a034545354d5247c] [2bbfa19e3f893ac556e390762372c3ad25c10caf16729e56da37a1218fdac4b360cf31f74d158915899c57a9d8320f5f] [8d6cd5372e3d92aed986f962f9fd20f29096a908660eaa2ae20b6ef128ef9a6b40a4dcb45cd6e0bc26498693159e55fcd82586ce8ac39723e88c21982f5bb668] [172.17.146.33] [172.17.146.33] 1 Success RPRT30D4.BPL C:\DICORP\DICORP_V5\RW\APPS\ 426496 983b74b53f11dc71fffef7e10c6e030d Not Signed 2022-07-06 14:52:25 +0000 UTC 2024-09-14 04:02:52 +0000 UTC 93034b2b19724dd41179d410a034545354d5247c 2bbfa19e3f893ac556e390762372c3ad25c10caf16729e56da37a1218fdac4b360cf31f74d158915899c57a9d8320f5f 8d6cd5372e3d92aed986f962f9fd20f29096a908660eaa2ae20b6ef128ef9a6b40a4dcb45cd6e0bc26498693159e55fcd82586ce8ac39723e88c21982f5bb668 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:32:27 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
1e7677f18861b48d241ad124822203b017bd2503bc70ea46bdd133be3c0acad3 [68a523a99ba7c92b34976f9d] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Validators.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:43Z] [ff4b8004d67dd2a1c2ba1c7e778a0049] [81a1ce5f39a72ab8469e75017bf3fa7077f3487b] [137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550] [ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3] [172.17.22.40] [172.17.22.40] 1 Success Validators.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Validators 13312 ff4b8004d67dd2a1c2ba1c7e778a0049 Validators 1.0.0.0 Not Signed 2023-06-15 02:38:16 +0000 UTC 2023-06-15 02:38:16 +0000 UTC 81a1ce5f39a72ab8469e75017bf3fa7077f3487b 137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550 ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1e3bc76525ba81e4e7118d671058905654cac19e6edd50213ec252b56526db0c [68a3146b5f0c41860c8c84f4, 68a3146b5f0c41860c8c8530] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\reprlib.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [b3f6d0b4b7085fd925967d507f8aaebf] [1baa1965e6507527b405a8e8c18b4d61a8f4c6cb] [dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3] [32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af] [172.17.252.131] [172.17.252.131] 1 Success reprlib.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 10117 b3f6d0b4b7085fd925967d507f8aaebf Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 1baa1965e6507527b405a8e8c18b4d61a8f4c6cb dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3 32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1e3ae688305501b61ca04a7b50d76d4e55e84350f6966c695ae0c0c8c2076bfb [68a523949cec397f02de9f61] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\IPAddressControlLib.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:31Z] [d7cb593f2a75e63808f0520ecec6d003] [ecf814407df1abfecc4a93e83579a1463c33aca6] [cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936] [54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7] [172.17.22.40] [172.17.22.40] 1 Success IPAddressControlLib.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 28672 d7cb593f2a75e63808f0520ecec6d003 1.0.8565.40691 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC ecf814407df1abfecc4a93e83579a1463c33aca6 cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936 54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a [68a5c64d54e5003d1abde4c2, 68a5c77e05aa879ada66b41e, 68a5c77e05aa879ada66b424, 68a5c77e05aa879ada66b429, 68a5c77e05aa879ada66b42e, 68a5c77e05aa879ada66b432] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\_IsRes.dll] [Servers] [Servers Audit] [v2287.880] [] [Macrovision Corporation (Invalid Certificate Chain)] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z] [e54601d8a464a455de081d63d4b7927d] [0ff6da399c123394cca3b4cc64a41d8037787b73] [34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa] [5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05] [172.17.20.104] [172.17.20.104] 1 Success _IsRes.dll C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\ FLEXnet (R) InstallShield (R) Dialog Resources 123312 e54601d8a464a455de081d63d4b7927d InstallShield 12.0 Macrovision Corporation (Invalid Certificate Chain) 2025-07-17 15:57:15 +0000 UTC 2006-05-17 14:19:28 +0000 UTC 0ff6da399c123394cca3b4cc64a41d8037787b73 34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa 5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05 2025-07-17 15:57:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1df39083a555ad2e4301b24f8970c3cf88fad01b9393cb5f8e7e5aee5332cac7 [68a2408816f43bddda2dc0c4] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hlln0dgm.sse.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:50:09Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_hlln0dgm.sse.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:50:09 +0000 UTC 2025-08-17 20:50:09 +0000 UTC 2025-08-17 20:50:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1db1a44f9537b17f981cac0e51c92988e6f6e64f555249b2e267276ac42c6643 [68a4c47e2db3c760ec3d2a2c] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_5b304b09fa8941c399c57da1067eb872.dll] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T18:37:42Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_5b304b09fa8941c399c57da1067eb872.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 18:37:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1d45142af79b7d23419c8a0ba0d90624a70f7a43168748de97bd56e98d06a564 [68a306a5ba5832f49fe9cf5f] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FORMENGC.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:38Z] [54173cd6524ad642ed45b3a1fbd8e398] [695c112f407b054652f69beb4ee4cbd2419214a4] [c29d42fd607af2976f0d4ac82d69cb8dd3cbb3e068118e1a2c3a39e17b722443b1c8522fbb576a08a990b4a07b4fb7dd] [133fe36e794d5582a65cf2ca57a9a83d72329e8f94cb58f029e8ebb13c226a6284f5ee6be873fe0d84ba5b5c908c4edcb34d108361e748c6748d8a7f62127069] [172.17.146.33] [172.17.146.33] 1 Success FORMENGC.DLL C:\DICORP\DICORP_V5\RW\APPS\ 48128 54173cd6524ad642ed45b3a1fbd8e398 Not Signed 2022-07-06 14:52:15 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 695c112f407b054652f69beb4ee4cbd2419214a4 c29d42fd607af2976f0d4ac82d69cb8dd3cbb3e068118e1a2c3a39e17b722443b1c8522fbb576a08a990b4a07b4fb7dd 133fe36e794d5582a65cf2ca57a9a83d72329e8f94cb58f029e8ebb13c226a6284f5ee6be873fe0d84ba5b5c908c4edcb34d108361e748c6748d8a7f62127069 2025-04-30 20:03:13 +0000 UTC None None 2025-03-17 05:13:22 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
1d36cdd250632c13e621811c31c46889a5b8e5703cefdf3cc1d70d8fd33ade51 [68a2429a92c7d722f343012e] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4u5rhbcj.vq2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:59:00Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_4u5rhbcj.vq2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:59:00 +0000 UTC 2025-08-17 20:59:00 +0000 UTC 2025-08-17 20:59:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
1d2978f61d75fe69b8ed93b5bcc1b8fd25cb8a460294bdb695478118aa5ff636 [68a16bd60756fe54a9918fa8, 68a2149cb58debea69d7c753, 68a2bd5ff793a9057f329c0e, 68a3663261f8067c48423ec1, 68a40efceddb3a9f1a71a60a, 68a4b7cd36bc5d38057e236f] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMeshNetAgent.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] [2bf5f0103f41ad0f489491f5449ed8fc] [710375edab7207797e5c1934876f5aad0835c0ed] [aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627] [7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7] [10.20.20.68] [10.20.20.68] 1 Success zMeshNetAgent.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 505656 2bf5f0103f41ad0f489491f5449ed8fc Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 710375edab7207797e5c1934876f5aad0835c0ed aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627 7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:02:45 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
1cd31123183f98fa54f76a0aefddad0b56efda5633c421baad6c049271c47811 [68a4ccc785b914a60d739e49, 68a4ce1fc826337212f53be9, 68a4d07753a851daf11e6933, 68a4d07753a851daf11e6946, 68a4d07753a851daf11e694d, 68a4d2d1ff2b441b8442812b, 68a4d2d1ff2b441b8442813e, 68a4d2d1ff2b441b84428145] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\WinError.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] [98c935ab759b31b868ce685c550a2d27] [010b6e43cb224a92837e476bab31e4f8983cf513] [6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79] [6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199] [10.36.132.49] [10.36.132.49] 1 Success WinError.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\ 73728 98c935ab759b31b868ce685c550a2d27 Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:13:00 +0000 UTC 010b6e43cb224a92837e476bab31e4f8983cf513 6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79 6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
233fd2e9b361be99ce56a380a8ef954b2f0f14e7571e470860b9a862e4a4b4ed [68a180c1aa5e4fe2dc53b3d5] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqv4gtvi.vua.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:11:54Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_dqv4gtvi.vua.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:11:54 +0000 UTC 2025-08-17 07:11:54 +0000 UTC 2025-08-17 07:12:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
233cda908dbe688d1964cdba2ae0c67c0336dd94f040e969e824e4716fafa610 [68a4cf1f4971da3ff4f65d7b] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:23:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:23:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2308d71301f35c862f39d38bfbefdb09372ea138f938c58875f8f6a84635ecf3 [68a243bcea61ab2e604201ef] [2] [SYSTEM] [i-hPRNRemisol] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1mkxt511.2qd.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:03:48Z] [] [] [] [] [172.17.23.88] [172.17.23.88] 1 Success __PSScriptPolicyTest_1mkxt511.2qd.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:03:48 +0000 UTC 2025-08-17 21:03:48 +0000 UTC 2025-08-17 21:03:56 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
22d76128e43dcda3bf06d4f9d0b0c37120688fba142a594fb6c2855cf92c634d [68a162e82a638d4aa3f3a7dd, 68a2b471d463128b1e9bad1b, 68a4061e04f40cbca7b61c8c, 68a557c15db6cbee6e2f08cb, 68a6a9787a86f4672b9b6280] [2] [svc_sunnuc] [NT-SUNCHECK] [WVUHS] [D:\SNC\Script\imagevwr_clean.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:01Z, 2025-08-18T05:00:01Z, 2025-08-19T05:00:01Z, 2025-08-20T05:00:01Z, 2025-08-21T05:00:01Z] [e91533b86712d32131a81409f3b031df] [beceab015ae24e529a6f8fd1139e8c9a0fd3ed02] [bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00] [3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d] [172.17.36.3] [172.17.36.3] 1 Success imagevwr_clean.bat D:\SNC\Script\ 115 e91533b86712d32131a81409f3b031df Not Signed 2022-03-21 15:11:15 +0000 UTC 2022-03-21 15:11:46 +0000 UTC beceab015ae24e529a6f8fd1139e8c9a0fd3ed02 bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00 3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d 2025-08-09 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
22be3449469641a3b6c5d4f7483dbea6cee9923a6d231814fdcf85d3b0eb8c9c [68a3401733e8ca6597dd2da4] [2] [SYSTEM] [DP-Garrett] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w25oryih.dxh.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T15:00:33Z] [] [] [] [] [172.30.48.2] [172.30.48.2] 1 Success __PSScriptPolicyTest_w25oryih.dxh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 15:00:33 +0000 UTC 2025-08-18 15:00:33 +0000 UTC 2025-08-18 15:00:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
22b0f3100973b824e8bb0d1c171a742b29fc8876f6d05cfd2683b3480820c4e2 [68a5c8eceb9e7b7716dce205, 68a5ccf2ddfdba423e48863a] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\5560f244-d35c-4531-951d-c286d0f86bc1.ps1, C:\_work_devops_mdi\_temp\79b011f7-d177-464f-ade0-ed0f83404238.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:08:53Z, 2025-08-20T13:22:24Z] [9e7c41c8a61927e846853cc41c52d2ad] [5cc1d41b8d768427ff9a860f4703f860288ad947] [ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0] [d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8] [172.17.252.194] [172.17.252.194] 1 Success 5560f244-d35c-4531-951d-c286d0f86bc1.ps1 C:\_work_devops_mdi\_temp\ 556 9e7c41c8a61927e846853cc41c52d2ad Not Signed 2025-08-20 13:08:53 +0000 UTC 2025-08-20 13:08:53 +0000 UTC 5cc1d41b8d768427ff9a860f4703f860288ad947 ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0 d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
228fc0493527ecb62f2122e00925e443bc1d5c73f9baaa085fc59131ecf29d88 [68a5239e621d09b2b1ed5e63] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.Utils.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:39Z] [c814e1099b4aec41ac5b5ae5c19fd55f] [c817ab73ce96627a1f128ad8090763b8dec0f24e] [3bd1ae56da320ca85db7c1e4db64263fd37793011e7fe4945ef1419565c7a02753607db6c34f3a5635a6480fcd0facf8] [dde541130c219b92632326528f9602e9b01832eea53b9ce2560077b2e9b8975f9cb462b92c6268c7ce2fac715383743bea9435c2f36a9fa3e19e1fcf66ddd120] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.Utils.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.Utils 24064 c814e1099b4aec41ac5b5ae5c19fd55f Stanley.Infra.Utils 1.0.0.0 Not Signed 2023-06-15 02:36:16 +0000 UTC 2023-06-15 02:36:16 +0000 UTC c817ab73ce96627a1f128ad8090763b8dec0f24e 3bd1ae56da320ca85db7c1e4db64263fd37793011e7fe4945ef1419565c7a02753607db6c34f3a5635a6480fcd0facf8 dde541130c219b92632326528f9602e9b01832eea53b9ce2560077b2e9b8975f9cb462b92c6268c7ce2fac715383743bea9435c2f36a9fa3e19e1fcf66ddd120 2025-08-20 01:23:42 +0000 UTC None None 2022-09-16 00:02:13 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
22469202a2b13e3a019c5dfea82acb5ced6e6a3cc8ba34ec2e760a380c24ed8b [68a472a799ad3734d804e2e6] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-script-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [4261d298e514aee833501762ed9af58e] [1359da49bdbf10786fc9cb592833ded11b97e432] [0e0c5abb13703b546189c68885ed0a008c736aa890784399201397d98a109962ef007500f500cdab50b0671bdbcdeb3d] [411b952b48c024dc23e1e84d2da43758ada4c3eadc24c9d979aeaefaa63f073aa174461203e63e62daf81dc7fe27bfb083edd4933abcf283ebc4301a064d4053] [172.17.23.146] [172.17.23.146] 1 Success batik-script-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 25715 4261d298e514aee833501762ed9af58e Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 1359da49bdbf10786fc9cb592833ded11b97e432 0e0c5abb13703b546189c68885ed0a008c736aa890784399201397d98a109962ef007500f500cdab50b0671bdbcdeb3d 411b952b48c024dc23e1e84d2da43758ada4c3eadc24c9d979aeaefaa63f073aa174461203e63e62daf81dc7fe27bfb083edd4933abcf283ebc4301a064d4053 2025-08-19 11:29:20 +0000 UTC None None 2022-09-04 06:54:57 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
2233d2241c36f41cc078985b2edb866cd7d395607d5d836f5cc6a9e9a818d906 [68a6afe50e0f3bd8deac4ce5, 68a6afe50e0f3bd8deac4cf4, 68a6afe50e0f3bd8deac4d28, 68a6afe50e0f3bd8deac4d36, 68a6afe50e0f3bd8deac4d56, 68a6afe50e0f3bd8deac4d76, 68a6afe50e0f3bd8deac4d96, 68a6afe50e0f3bd8deac4db6, 68a6afe50e0f3bd8deac4dd6, 68a6afe50e0f3bd8deac4df6, 68a6afe50e0f3bd8deac4e16, 68a6afe50e0f3bd8deac4e36, 68a6afe50e0f3bd8deac4e55, 68a6afe50e0f3bd8deac4e76, 68a6afe50e0f3bd8deac4e96, 68a6afe50e0f3bd8deac4ec7, 68a6afe50e0f3bd8deac4ed6, 68a6afe50e0f3bd8deac4ef6, 68a6afe50e0f3bd8deac4f16, 68a6afe50e0f3bd8deac4f36, 68a6afe50e0f3bd8deac4f60, 68a6afe50e0f3bd8deac4f80, 68a6afe50e0f3bd8deac4fa0, 68a6afe50e0f3bd8deac4fc0, 68a6afe50e0f3bd8deac4fe0, 68a6afe50e0f3bd8deac5000, 68a6afe50e0f3bd8deac5020, 68a6afe50e0f3bd8deac5040, 68a6afe50e0f3bd8deac5060, 68a6afe50e0f3bd8deac5080, 68a6afe50e0f3bd8deac50aa, 68a6afe50e0f3bd8deac50ca, 68a6afe50e0f3bd8deac50ea, 68a6afe50e0f3bd8deac5114, 68a6afe50e0f3bd8deac5134, 68a6afe50e0f3bd8deac5154, 68a6afe50e0f3bd8deac517e, 68a6afe50e0f3bd8deac519e, 68a6afe50e0f3bd8deac51be, 68a6afe50e0f3bd8deac51df, 68a6afe50e0f3bd8deac5211, 68a6afe50e0f3bd8deac5228, 68a6afe50e0f3bd8deac523f, 68a6afe50e0f3bd8deac525f, 68a6afe50e0f3bd8deac5293, 68a6afe50e0f3bd8deac52b3, 68a6afe50e0f3bd8deac52d3, 68a6afe50e0f3bd8deac52f3, 68a6afe50e0f3bd8deac5313, 68a6afe50e0f3bd8deac5333, 68a6afe50e0f3bd8deac5353, 68a6afe50e0f3bd8deac5373, 68a6afe50e0f3bd8deac5399, 68a6afe50e0f3bd8deac53b5, 68a6afe50e0f3bd8deac53d9, 68a6afe50e0f3bd8deac53f8, 68a6afe50e0f3bd8deac5419, 68a6afe50e0f3bd8deac5433, 68a6afe50e0f3bd8deac5459, 68a6afe50e0f3bd8deac5479, 68a6afe50e0f3bd8deac5499, 68a6afe50e0f3bd8deac54b9, 68a6afe50e0f3bd8deac54d9, 68a6afe50e0f3bd8deac54f9, 68a6afe50e0f3bd8deac5519, 68a6afe50e0f3bd8deac5539, 68a6afe50e0f3bd8deac5563, 68a6afe50e0f3bd8deac5583, 68a6afe50e0f3bd8deac55a3, 68a6afe50e0f3bd8deac55c3, 68a6afe50e0f3bd8deac55e3, 68a6afe50e0f3bd8deac5603, 68a6afe50e0f3bd8deac5623, 68a6afe50e0f3bd8deac5652, 68a6afe50e0f3bd8deac5673, 68a6afe50e0f3bd8deac56a1, 68a6afe50e0f3bd8deac56c1, 68a6afe50e0f3bd8deac56d8, 68a6afe50e0f3bd8deac5700, 68a6afe50e0f3bd8deac571b, 68a6afe50e0f3bd8deac5741, 68a6afe50e0f3bd8deac5774, 68a6afe50e0f3bd8deac5787, 68a6afe50e0f3bd8deac57b5, 68a6afe50e0f3bd8deac57cb, 68a6afe50e0f3bd8deac57f5, 68a6afe50e0f3bd8deac5809, 68a6afe50e0f3bd8deac5822, 68a6afe50e0f3bd8deac584b, 68a6afe50e0f3bd8deac5873, 68a6afe50e0f3bd8deac5888, 68a6afe50e0f3bd8deac58bd, 68a6afe50e0f3bd8deac58cb, 68a6afe50e0f3bd8deac58fa, 68a6afe50e0f3bd8deac5905, 68a6afe50e0f3bd8deac593c, 68a6afe50e0f3bd8deac594b, 68a6afe50e0f3bd8deac596b, 68a6afe50e0f3bd8deac5982, 68a6afe50e0f3bd8deac59ab, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeUtils.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [8ce4a50ac3ce8a3e96a3de89466c795b] [6197e0d412b2b12c05a7ca02b19dc9ac592f2bb7] [b2c71b9d4622fe114e379d66c37d3981162b39ab94b2591dcb1367665c2041b13365e4fc1953e2a77f5b4e311362dd51] [d60d1899ca054c6328637e33d17c10d7bd97384e1b56dfd567df0be96034d1f08ab2ffa77637d88a9f07805086a3de1bfe9979f12a2a33f55cfdf0a89a5e025b] [172.17.30.60] [172.17.30.60] 1 Success AmeUtils.dll C:\Program Files\Fujifilm\NaxisWS6\ 651776 8ce4a50ac3ce8a3e96a3de89466c795b Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 02:58:12 +0000 UTC 6197e0d412b2b12c05a7ca02b19dc9ac592f2bb7 b2c71b9d4622fe114e379d66c37d3981162b39ab94b2591dcb1367665c2041b13365e4fc1953e2a77f5b4e311362dd51 d60d1899ca054c6328637e33d17c10d7bd97384e1b56dfd567df0be96034d1f08ab2ffa77637d88a9f07805086a3de1bfe9979f12a2a33f55cfdf0a89a5e025b 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
22201473661fe80882437e0c7debc4ba2c4140860390d21f164b62bcbbf2a7d6 [68a5239e621d09b2b1ed5e69] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:41Z] [ced1c8a2bd6fba76fdf05a5900e970e5] [3f4cc42f538b7584f4ac7582833a836db6136fc8] [e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a] [d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a] [172.17.22.40] [172.17.22.40] 1 Success SystemManagerData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ SystemManagerApplicationData 32256 ced1c8a2bd6fba76fdf05a5900e970e5 SystemManagerApplicationData 1.0.0.0 Not Signed 2023-06-15 02:37:30 +0000 UTC 2023-06-15 02:37:30 +0000 UTC 3f4cc42f538b7584f4ac7582833a836db6136fc8 e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
21b7c7e77c8cd9fc2a9e839d9b3ecb2d8ec09f95788fcac0b77950402171ff51 [68a472a799ad3734d804e2e3] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-gvt-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [fbed0d17663cd8747081a3637db4c890] [c2b801412806277ade24cae0a2af286523105d71] [553c9df8f8867c70058fed69f6d3ef3f98b939d1edd538c63d52e83e2674599c322446ddbb37203ab45639e30a73bb27] [cf8e06596f0e34fca731279d53205269aeb93d85d3352788ef2ac6241e34d90341e12e3cc99c8b43af800f13160128199fefd44952c41b3f727b916e5ef5089d] [172.17.23.146] [172.17.23.146] 1 Success batik-gvt-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 191437 fbed0d17663cd8747081a3637db4c890 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC c2b801412806277ade24cae0a2af286523105d71 553c9df8f8867c70058fed69f6d3ef3f98b939d1edd538c63d52e83e2674599c322446ddbb37203ab45639e30a73bb27 cf8e06596f0e34fca731279d53205269aeb93d85d3352788ef2ac6241e34d90341e12e3cc99c8b43af800f13160128199fefd44952c41b3f727b916e5ef5089d 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:27:50 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
21b77f5fe87f2e11a022a614e6fc52d52b7c2d35e1f5984b09efff3e86e8b2b2 [68a6afe50e0f3bd8deac4f52, 68a6afe50e0f3bd8deac509c, 68a6afe50e0f3bd8deac5106, 68a6afe50e0f3bd8deac5170, 68a6afe50e0f3bd8deac5555, 68a6afe50e0f3bd8deac564d, 68a6afe50e0f3bd8deac5766, 68a6afe50e0f3bd8deac5d30, 68a6afe50e0f3bd8deac5db1, 68a6afe50e0f3bd8deac5eef] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\libiconv-2.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [4966b117e4b909f990b2a8ac8138dc46] [7239da6d51a4f2af3627be6f21b47d0ed4565f00] [e4f36862a575ecc18f0108ca65d415be36e30e8ee951a5959e2c689fc8fdac94baa82b254709a0b06499be98909ccb5b] [ae114cddd517da6741355455b9a5ad0ac7e42a73fdb0e974c1de09f744504226dc9b8e212ea8cb8885da7dacc94e7bb293fef440985d412ef7ac07411a783a1c] [172.17.30.60] [172.17.30.60] 1 Success libiconv-2.dll C:\Program Files\PostgreSQL\12\bin\ LGPLed libiconv for Windows 1872271 4966b117e4b909f990b2a8ac8138dc46 libiconv: character set conversion library 1.16 Not Signed 2023-10-19 17:59:22 +0000 UTC 2019-12-13 12:43:49 +0000 UTC 7239da6d51a4f2af3627be6f21b47d0ed4565f00 e4f36862a575ecc18f0108ca65d415be36e30e8ee951a5959e2c689fc8fdac94baa82b254709a0b06499be98909ccb5b ae114cddd517da6741355455b9a5ad0ac7e42a73fdb0e974c1de09f744504226dc9b8e212ea8cb8885da7dacc94e7bb293fef440985d412ef7ac07411a783a1c 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-20 16:26:11 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:01:04.066 +0000 UTC
217ae6173e31d07e55dffe8fc77d2f8f4324cee5a2ad841dba2c948131f71837 [68a34b98a6132bf659cce5ae, 68a34df0b71eea1289980a13] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Squirrel.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z] [023642309c7555ca224d948c3cf04a4f] [8b05040573daec47919cfcabca5dd30f79842c72] [a19e8eb7464a6fa73de83995f9d92ec19cd0b89137b32950e67010625597b989995bb20c45d42cb05e49024b6b36f325] [1e6beff9207a00ba93207c5c2b3121d75dc84275678822fd9ad33eaf9383b3afff39c236b464234327bfd72ec4e5b4cbed83a260524abd483e943e11cff430f8] [172.17.253.114] [172.17.253.114] 1 Success Squirrel.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Squirrel 267264 023642309c7555ca224d948c3cf04a4f Squirrel 2.0.1+eef37460ae Not Signed 2023-07-25 16:11:58 +0000 UTC 2023-07-25 16:11:58 +0000 UTC 8b05040573daec47919cfcabca5dd30f79842c72 a19e8eb7464a6fa73de83995f9d92ec19cd0b89137b32950e67010625597b989995bb20c45d42cb05e49024b6b36f325 1e6beff9207a00ba93207c5c2b3121d75dc84275678822fd9ad33eaf9383b3afff39c236b464234327bfd72ec4e5b4cbed83a260524abd483e943e11cff430f8 2025-06-09 21:58:41 +0000 UTC None None 2025-03-27 20:54:04 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
2138453e8f358ff4ffdf4c4ee8edffb8752e3ddd99697791bb067c086334522c [68a5c8eceb9e7b7716dce1fe, 68a5ca39b5df6e9c598d9a10, 68a5ca39b5df6e9c598d9a1d, 68a5ccf2ddfdba423e488633, 68a5ccf2ddfdba423e488641, 68a5ccf2ddfdba423e48864f, 68a5ccf2ddfdba423e48865c, 68a5ccf2ddfdba423e488669, 68a5ccf2ddfdba423e488676, 68a5ccf2ddfdba423e488683, 68a5ccf2ddfdba423e488690] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LongPathFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [04c730bac93e37a873d8c662db38f1a4] [e7a1314c887f52f44649489d5d33e0be76f88f90] [fda5548e620c9eaa66594870e70e934688ca30a8759333624a6a657bcf39dc8e6eec1fe0a3391aa93f2d9a2b5179edaa] [e2a4137e2592fad0623a79751ada576030d2b5fa7ff33b49ceb2f558698e962621b2d7ba0e5977602be99ba5d1af8c121be31ea177a4f381bc19d483265a5697] [172.17.252.194] [172.17.252.194] 1 Success LongPathFunctions.ps1 C:\azagent\A2\_work\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.247.1\ps_modules\VstsTaskSdk\ 9108 04c730bac93e37a873d8c662db38f1a4 Not Signed 2024-11-19 14:57:26 +0000 UTC 2024-10-22 15:45:10 +0000 UTC e7a1314c887f52f44649489d5d33e0be76f88f90 fda5548e620c9eaa66594870e70e934688ca30a8759333624a6a657bcf39dc8e6eec1fe0a3391aa93f2d9a2b5179edaa e2a4137e2592fad0623a79751ada576030d2b5fa7ff33b49ceb2f558698e962621b2d7ba0e5977602be99ba5d1af8c121be31ea177a4f381bc19d483265a5697 2025-04-16 18:41:40 +0000 UTC None None 2024-08-08 19:43:04 +0000 UTC 64 0 KNOWN 0 Microsoft attested file 2025-04-16 18:46:05.968 +0000 UTC
212af7c4b44a918b3060ef55417f27f14b15bf0f7a19cd52de911c36d5ef9ea2 [68a4ccc785b914a60d739e4d, 68a4d07753a851daf11e6935, 68a4d2d1ff2b441b8442812d] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisitectl.bat] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z] [514ed83234038d4fdb35855046c46bea] [6ddf7c13900920915184c88693c24703856086d0] [415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091] [67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff] [10.36.132.49] [10.36.132.49] 1 Success hcisitectl.bat C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ 133 514ed83234038d4fdb35855046c46bea Not Signed 2021-10-20 13:42:29 +0000 UTC 2021-10-20 13:42:29 +0000 UTC 6ddf7c13900920915184c88693c24703856086d0 415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091 67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
20b9ac86095a725783035db578d94d79959e492461d50fd0f8ab6274eab39534 [68a47bc2880fc3ea1ff87615] [2] [AdminJKM] [PDQ-INFRA] [WHI] [\\wheelinghospital.com\sysvol\wheelinghospital.com\Policies\{4E0157AA-F18B-43AF-8DC2-A4FC7E414E88}\User\Scripts\Logoff\ClinicalInformatics_Servers.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\gpscript.exe] [2025-08-19T13:27:24Z] [eae3ad65cf0b5377f069a0667ba10043] [a37860bb1e075fa074434b286d2e0b5e7414368f] [d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee] [aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104] [172.24.26.60] [172.24.26.60] 1 Success ClinicalInformatics_Servers.ps1 \\wheelinghospital.com\SysVol\wheelinghospital.com\Policies\{44822848-47D6-4FB7-BB91-7BBCA7B70574}\User\Scripts\Logon\ 2091 eae3ad65cf0b5377f069a0667ba10043 Not Signed 2015-05-12 19:09:52 +0000 UTC 2017-09-06 21:55:22 +0000 UTC a37860bb1e075fa074434b286d2e0b5e7414368f d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104 2025-08-02 13:43:30 +0000 UTC [{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}, {'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65 [68a472b1b022648922e235ac] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\woodstox-core-asl-4.4.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [1f53f91f117288fb2ef2e120f27e5498] [84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1] [e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa] [33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0] [172.17.23.146] [172.17.23.146] 1 Success woodstox-core-asl-4.4.1.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\woodstox-core-asl-4.4.1.jar-90b76e194d05ab9a\ 486013 1f53f91f117288fb2ef2e120f27e5498 Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC 84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1 e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa 33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0 2025-03-28 16:06:36 +0000 UTC None None 2025-03-25 04:34:50 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
270d051fc9cbb8cb66497b8dea30b5008c9ae9ffb0e15f79c4e7cb490f8abdca [68a25f08a862a9b86d2b3e0d] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_mi1gobfg.pks.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:13Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_mi1gobfg.pks.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-17 23:00:13 +0000 UTC 2025-08-17 23:00:13 +0000 UTC 2025-08-17 23:00:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
270c1c3c1e64123a4db1558966578672ef7a14530882f818792f481f02abf3f3 [68a472b1b022648922e23576] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFSEMServiceClient.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [74808dbd1c651755962d9f78f74fd61f] [20c98c008db8ac2325a8bc2e473e5121062916e5] [f37c94b93ab9ae467b0d849a4644a5e1a2f9bc73e7385e5f5f47bafcf9462e624f4edad20c26ae753030990296e82c52] [50eb41001f88e2cfd9219d24bfe8edb12c2b9a2c7ceed7c4df7ce5e1a19e27d74c6492dab6542a76a250a93552700c1bedc8daa83c0cf4034cfa602c2d8edbc3] [172.17.23.146] [172.17.23.146] 1 Success FluidFSEMServiceClient-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\compellent\fluidfsclient\main\ 39080 74808dbd1c651755962d9f78f74fd61f Not Signed 2024-04-05 21:54:57 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 20c98c008db8ac2325a8bc2e473e5121062916e5 f37c94b93ab9ae467b0d849a4644a5e1a2f9bc73e7385e5f5f47bafcf9462e624f4edad20c26ae753030990296e82c52 50eb41001f88e2cfd9219d24bfe8edb12c2b9a2c7ceed7c4df7ce5e1a19e27d74c6492dab6542a76a250a93552700c1bedc8daa83c0cf4034cfa602c2d8edbc3 2025-03-28 16:07:06 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
270aff5383a4742b7159a21eeb3bc8c3620478cb561e6db80510f187e3ab50d6 [68a246eb395eca2c3f17fa04] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zfqr5yrd.w2r.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:17:27Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_zfqr5yrd.w2r.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:17:27 +0000 UTC 2025-08-17 21:17:27 +0000 UTC 2025-08-17 21:17:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
25a1d161a927d2f4137696882e75cbfba197acf96590c7062a3fb31383548698 [68a1830c2dc56a47504409e0] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3gsdtrcc.e1e.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:21:44Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_3gsdtrcc.e1e.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:21:44 +0000 UTC 2025-08-17 07:21:44 +0000 UTC 2025-08-17 07:21:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
254f47a4a8697b42051ab2cd2b081a76c48204bd8a57ac9527ac623733119c7d [68a1e71b93264a29fd1ee60a] [2] [SYSTEM] [i-nSwisslog] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xw0tqpga.deh.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:28:31Z] [] [] [] [] [172.17.253.93] [172.17.253.93] 1 Success __PSScriptPolicyTest_xw0tqpga.deh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:28:31 +0000 UTC 2025-08-17 14:28:31 +0000 UTC 2025-08-17 14:28:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2539cd16bb06022c2a25860732b37be246b51dc74e2b6b991d06594d04b705b0 [68a3146b5f0c41860c8c84f8, 68a3146b5f0c41860c8c8539] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\collections\__pycache__\abc.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [cc29eb47fb461ae6f3b5406ff37c01ae] [36b89b966daf9b3254160799ea992b61d85e7c15] [f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177] [a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f] [172.17.252.131] [172.17.252.131] 1 Success abc.cpython-313.pyc C:\Program Files\Python\Lib\collections\__pycache__\ 253 cc29eb47fb461ae6f3b5406ff37c01ae Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 36b89b966daf9b3254160799ea992b61d85e7c15 f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177 a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2522bec3a9e8b209bd9a270dfd1bdc12122b5d6f0eabca8d1d0446d744fc6dfe [68a232eef903f5e7e0112d84] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a3ih1mon.uvf.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:52:02Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_a3ih1mon.uvf.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:52:02 +0000 UTC 2025-08-17 19:52:02 +0000 UTC 2025-08-17 19:52:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
24eef93b4f74e3757ec2d460a19fe531ec83318175c43314e0191b2ed987c0e3 [68a6afe50e0f3bd8deac4f51, 68a6afe50e0f3bd8deac509a, 68a6afe50e0f3bd8deac5105, 68a6afe50e0f3bd8deac516f, 68a6afe50e0f3bd8deac5554, 68a6afe50e0f3bd8deac564a, 68a6afe50e0f3bd8deac5765, 68a6afe50e0f3bd8deac5d2f, 68a6afe50e0f3bd8deac5db0, 68a6afe50e0f3bd8deac5eee] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\libxml2.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [dd4f9e570c7b2d78f4b1c9b0e3b9694b] [4de55a20b2fd9d9e5ca14d82953d51ed9ce33931] [9310e3dc26d5474ec190860ff2e77970763d4d36a8c4406c5ebeaba37130418825f5b8e9049a7fa23564c5583f8c3ee5] [9931da42a06625259fa741a57040d1683beaffc394597cd6e9312661ba6b3f31578c8277987b7e40d17c36cb692bf280e7db8dad3eac7c14d1d848ccaf977789] [172.17.30.60] [172.17.30.60] 1 Success libxml2.dll D:\biomerieux\programs\postgresql\12.5\bin\ libxml2 library 2269696 dd4f9e570c7b2d78f4b1c9b0e3b9694b libxml2 2.9.9 Not Signed 2023-12-04 17:20:07 +0000 UTC 2020-11-11 04:09:34 +0000 UTC 4de55a20b2fd9d9e5ca14d82953d51ed9ce33931 9310e3dc26d5474ec190860ff2e77970763d4d36a8c4406c5ebeaba37130418825f5b8e9049a7fa23564c5583f8c3ee5 9931da42a06625259fa741a57040d1683beaffc394597cd6e9312661ba6b3f31578c8277987b7e40d17c36cb692bf280e7db8dad3eac7c14d1d848ccaf977789 2025-04-23 19:05:50 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-02-05 11:42:43 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-04-23 19:10:35.739 +0000 UTC
24caf033e838c16b0cd2adbc677d4d30b06124b25b7a2d2c11781fbd86da2f84 [68a311cdc2d0d6e3eb77f21b] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\RoboCopyStuff.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:49Z] [d7083504aa22f3989277128edc021706] [1a6bc93829561a0da597a0e7118345b217271476] [617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838] [ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14] [172.25.17.86] [172.25.17.86] 1 Success RoboCopyStuff.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 638 d7083504aa22f3989277128edc021706 Not Signed 2025-06-06 12:04:04 +0000 UTC 2025-06-06 20:43:59 +0000 UTC 1a6bc93829561a0da597a0e7118345b217271476 617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838 ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
248bec056cfb1959e62f399e24e6ebb6d6502d074b6749f27fb402df4b9603df [68a472a799ad3734d804e2dc] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-codec-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [f98a5254fe07321bde47e880d85bf3ea] [67584aea83603188e4611f35209b020258907d6c] [2e63ffca7574615c7d6145224edde379701e8a536dfca37aeb3d9150390cb97bdd61b6771538832cf1df7b4472499a20] [6945fbf246d1a9816b89a20b3d4277d8f2aa31a5560c9f075f8ccea227026d6182aa7762cf4385736acbd27608501f2e83b25be28a861739200ce97233b96b8a] [172.17.23.146] [172.17.23.146] 1 Success batik-codec-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 111948 f98a5254fe07321bde47e880d85bf3ea Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 67584aea83603188e4611f35209b020258907d6c 2e63ffca7574615c7d6145224edde379701e8a536dfca37aeb3d9150390cb97bdd61b6771538832cf1df7b4472499a20 6945fbf246d1a9816b89a20b3d4277d8f2aa31a5560c9f075f8ccea227026d6182aa7762cf4385736acbd27608501f2e83b25be28a861739200ce97233b96b8a 2025-08-19 11:29:20 +0000 UTC None None 2022-10-07 01:13:18 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
247834099661008e2e66f0f29941d1402246e7afdeafd3c902c36d3c280c6ccc [68a48674c4cb2500be69260e, 68a48674c4cb2500be692624] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Formatting.Compact.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [a500c5577afb7e7c1fc08779e5447f39] [f4fe77f7f9dbafb9a1f09302d9d7704762cd5048] [9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb] [fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Formatting.Compact.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Formatting.Compact 20744 a500c5577afb7e7c1fc08779e5447f39 Serilog.Formatting.Compact 1.1.0 Stryker Corporation 2019-10-17 10:18:46 +0000 UTC 2024-02-15 18:02:03 +0000 UTC f4fe77f7f9dbafb9a1f09302d9d7704762cd5048 9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2476c367fffa78e58eb0abf44459362577b5ff6503f33a81f07f5748120d3e4c [68a3b07b89708f7e107efecf] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_pympxbs0.15a.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-18T23:00:04Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_pympxbs0.15a.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-18 23:00:04 +0000 UTC 2025-08-18 23:00:04 +0000 UTC 2025-08-18 23:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2418072fd708bbc588f91d1f5e9ecbea5f79e006a3543f85f39cbfb4c6dae201 [68a5c90aab7f84c2d5a0971f] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\LocalizerDll.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe] [C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe] [2025-08-20T13:09:27Z] [b835819d6c896ab4423ff2cc68174662] [0e836eba45513c3c40fa966f00bd54b92c35f10a] [53064442cf2136ecc87376bd41f52dd0c98e2ed86d01263491a7b7761510e90b17790591976afd9bc4dec4a871cb925a] [792997b6e227d9940c8b489c36995dc54d119d1a20a3fdb1c3386925bbfc83b1498bbfcefb70e46f1daa9fbae72e8631a3657e1d2466521115dd672084827105] [172.17.20.104] [172.17.20.104] 1 Success LocalizerDll.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\ 108032 b835819d6c896ab4423ff2cc68174662 Not Signed 2025-08-20 13:09:26 +0000 UTC 2017-04-28 12:00:02 +0000 UTC 0e836eba45513c3c40fa966f00bd54b92c35f10a 53064442cf2136ecc87376bd41f52dd0c98e2ed86d01263491a7b7761510e90b17790591976afd9bc4dec4a871cb925a 792997b6e227d9940c8b489c36995dc54d119d1a20a3fdb1c3386925bbfc83b1498bbfcefb70e46f1daa9fbae72e8631a3657e1d2466521115dd672084827105 2025-08-20 13:09:30 +0000 UTC None None 2025-03-24 05:01:44 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
23e6cd4f28988c0bddca07f10c3a1daa496bc19b12766b988c3a6007a0e4a6ab [68a6afe50e0f3bd8deac4d04, 68a6afe50e0f3bd8deac4d19, 68a6afe50e0f3bd8deac4d46, 68a6afe50e0f3bd8deac4d67, 68a6afe50e0f3bd8deac4d86, 68a6afe50e0f3bd8deac4da6, 68a6afe50e0f3bd8deac4dc7, 68a6afe50e0f3bd8deac4de8, 68a6afe50e0f3bd8deac4e07, 68a6afe50e0f3bd8deac4e27, 68a6afe50e0f3bd8deac4e47, 68a6afe50e0f3bd8deac4e67, 68a6afe50e0f3bd8deac4e87, 68a6afe50e0f3bd8deac4ea8, 68a6afe50e0f3bd8deac4eb4, 68a6afe50e0f3bd8deac4ee4, 68a6afe50e0f3bd8deac4f07, 68a6afe50e0f3bd8deac4f27, 68a6afe50e0f3bd8deac4f44, 68a6afe50e0f3bd8deac4f70, 68a6afe50e0f3bd8deac4f92, 68a6afe50e0f3bd8deac4fb2, 68a6afe50e0f3bd8deac4fd1, 68a6afe50e0f3bd8deac4ff1, 68a6afe50e0f3bd8deac5011, 68a6afe50e0f3bd8deac5031, 68a6afe50e0f3bd8deac5051, 68a6afe50e0f3bd8deac5071, 68a6afe50e0f3bd8deac5091, 68a6afe50e0f3bd8deac50bb, 68a6afe50e0f3bd8deac50de, 68a6afe50e0f3bd8deac50fb, 68a6afe50e0f3bd8deac5126, 68a6afe50e0f3bd8deac5142, 68a6afe50e0f3bd8deac5165, 68a6afe50e0f3bd8deac518f, 68a6afe50e0f3bd8deac51af, 68a6afe50e0f3bd8deac51ce, 68a6afe50e0f3bd8deac51ef, 68a6afe50e0f3bd8deac5202, 68a6afe50e0f3bd8deac5219, 68a6afe50e0f3bd8deac5250, 68a6afe50e0f3bd8deac5270, 68a6afe50e0f3bd8deac5283, 68a6afe50e0f3bd8deac52a4, 68a6afe50e0f3bd8deac52c4, 68a6afe50e0f3bd8deac52e4, 68a6afe50e0f3bd8deac5304, 68a6afe50e0f3bd8deac5324, 68a6afe50e0f3bd8deac5344, 68a6afe50e0f3bd8deac5364, 68a6afe50e0f3bd8deac5384, 68a6afe50e0f3bd8deac53aa, 68a6afe50e0f3bd8deac53c5, 68a6afe50e0f3bd8deac53e9, 68a6afe50e0f3bd8deac540a, 68a6afe50e0f3bd8deac542a, 68a6afe50e0f3bd8deac5448, 68a6afe50e0f3bd8deac5467, 68a6afe50e0f3bd8deac548a, 68a6afe50e0f3bd8deac54aa, 68a6afe50e0f3bd8deac54ca, 68a6afe50e0f3bd8deac54ea, 68a6afe50e0f3bd8deac550a, 68a6afe50e0f3bd8deac552a, 68a6afe50e0f3bd8deac554a, 68a6afe50e0f3bd8deac5574, 68a6afe50e0f3bd8deac5594, 68a6afe50e0f3bd8deac55b4, 68a6afe50e0f3bd8deac55d4, 68a6afe50e0f3bd8deac55f4, 68a6afe50e0f3bd8deac5611, 68a6afe50e0f3bd8deac5634, 68a6afe50e0f3bd8deac563d, 68a6afe50e0f3bd8deac5663, 68a6afe50e0f3bd8deac5683, 68a6afe50e0f3bd8deac5692, 68a6afe50e0f3bd8deac56b2, 68a6afe50e0f3bd8deac56d2, 68a6afe50e0f3bd8deac56ea, 68a6afe50e0f3bd8deac5712, 68a6afe50e0f3bd8deac572b, 68a6afe50e0f3bd8deac5752, 68a6afe50e0f3bd8deac575b, 68a6afe50e0f3bd8deac579a, 68a6afe50e0f3bd8deac57a6, 68a6afe50e0f3bd8deac57df, 68a6afe50e0f3bd8deac57e6, 68a6afe50e0f3bd8deac581a, 68a6afe50e0f3bd8deac5833, 68a6afe50e0f3bd8deac585c, 68a6afe50e0f3bd8deac5864, 68a6afe50e0f3bd8deac589b, 68a6afe50e0f3bd8deac58ac, 68a6afe50e0f3bd8deac58dc, 68a6afe50e0f3bd8deac58ed, 68a6afe50e0f3bd8deac5915, 68a6afe50e0f3bd8deac592c, 68a6afe50e0f3bd8deac595d, 68a6afe50e0f3bd8deac597c, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-ringbuffersync-10-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...] [cff1a57834c0c67902ed4abbf7fef414] [338762af9ba89b3a85fccc8b3ae5e7ca526445d8] [40f13c181a8796ca6414425f894f04dc9efd4478dd2303f6c920cc4e5ce40717ef18e5bbefef98d9557e3590a4511644] [21994b3d139941f748c28f9af1b8ce93488ee69b28ffd5f3553b517731993c32b652e4b55811ceda5e79dace68da24a52ebaa694856a4c42b7275f19f5f992d0] [172.17.30.60] [172.17.30.60] 1 Success cip-ringbuffersync-10-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-ringbuffersync-10-vc140-64 ダイナミックリンクライブラリ 18944 cff1a57834c0c67902ed4abbf7fef414 CIP-RingBufferSync 1.0.0.0 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-20 05:22:35 +0000 UTC 338762af9ba89b3a85fccc8b3ae5e7ca526445d8 40f13c181a8796ca6414425f894f04dc9efd4478dd2303f6c920cc4e5ce40717ef18e5bbefef98d9557e3590a4511644 21994b3d139941f748c28f9af1b8ce93488ee69b28ffd5f3553b517731993c32b652e4b55811ceda5e79dace68da24a52ebaa694856a4c42b7275f19f5f992d0 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
23d2a28820aa7269c8e12b57fe64354de0b4e14f7ea29bf7a7f4dab6efbab0fc [68a5d0f7f298663174d8aef1] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_bmeb2ak5.xwg.ps1] [Servers] [Servers Audit] [v2291.881] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-20T13:43:16Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_bmeb2ak5.xwg.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ 80 Not Signed 2025-08-20 13:43:16 +0000 UTC 2025-08-20 13:43:16 +0000 UTC 2025-08-20 13:43:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2a71f00384903af1b59a3e2e6eec836f8e710ecb30d4ace38eefd70df1259a04 [68a156b7b8a9d1158beec7c0] [2] [SYSTEM] [WHL-STOREFRONT1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_i3bblstt.0ux.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:12:24Z] [] [] [] [] [172.18.112.145] [172.18.112.145] 1 Success __PSScriptPolicyTest_i3bblstt.0ux.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:12:24 +0000 UTC 2025-08-17 04:12:24 +0000 UTC 2025-08-17 04:12:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2a630e3a0f83a914e2e497a7a90ba1d8cdf2a4eba126318cc394192700fce5d1 [68a1ca94eae0fd62a51f5224] [2] [SYSTEM] [CI1BEFS3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_urevov14.ccs.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T12:26:47Z] [] [] [] [] [172.18.112.86] [172.18.112.86] 1 Success __PSScriptPolicyTest_urevov14.ccs.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 12:26:47 +0000 UTC 2025-08-17 12:26:47 +0000 UTC 2025-08-17 12:27:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2a1e58ab32b65708a720962e3169ef3d00125fba6bd4879e799dfc871985c452 [68a523a99ba7c92b34976fa0] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.DataGrid.v7.0.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:45Z] [42cb442252a825cf7eb0af412fbb303e] [b64c7987c309ecd84f9d7c1318e5753b848fa71a] [b121d9aa356ec4f069b7f81b76caf509745c79f9290712af129d2a8ec08e397439732ac03314860df3fc4458b1cb18d6] [1f553747599b75987f7f4091dddb937d9b8d5b33bf78bf3583cd6577d13af12c5b319c855f4e1d156c697efd285d6140ab0f00900c082f0eeeaca18073e5e476] [172.17.22.40] [172.17.22.40] 1 Success Xceed.Wpf.DataGrid.v7.0.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Xceed DataGrid for WPF 5462016 42cb442252a825cf7eb0af412fbb303e Xceed DataGrid for WPF 7.0.20452.13100 Not Signed 2023-06-15 02:37:34 +0000 UTC 2023-06-15 02:37:34 +0000 UTC b64c7987c309ecd84f9d7c1318e5753b848fa71a b121d9aa356ec4f069b7f81b76caf509745c79f9290712af129d2a8ec08e397439732ac03314860df3fc4458b1cb18d6 1f553747599b75987f7f4091dddb937d9b8d5b33bf78bf3583cd6577d13af12c5b319c855f4e1d156c697efd285d6140ab0f00900c082f0eeeaca18073e5e476 2025-08-20 01:23:53 +0000 UTC None None 2023-12-28 16:38:23 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
29d815794c1360b53ba4549d8441bc4929756fcec041c7cbcc743f4e1add177a [68a5c81947601aee5f76e912, 68a5c9d7599432010e418bca] [2] [SYSTEM, SVC_SL_RedSailTech] [i-nQS1mgtn] [NT AUTHORITY, WVUHS] [D:\QS1\ltimg14N.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe] [C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe] [2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z] [efa7f3606628820a1f7c41ab730436d7] [e72ef9934fd0b7443d5e9edefaac3422a2844bf6] [c0641215c952711ea97a11956eff3e185e7a9ebea5b9658649aa5bf068138da6fe9f85fd75487b3c4dc750a983e5ba37] [72a0f837fb33c12bd8b9004628dcae1ea3d3b43f2c7498569331ec5e52872abb31f5d859f96a93cd86c911a91466ea63942c8288ece23209299a8a70555c7071] [172.17.20.104] [172.17.20.104] 1 Success ltimg14N.dll C:\QS1\ LEADTOOLS(r) DLL for Win32 1122304 efa7f3606628820a1f7c41ab730436d7 LEADTOOLS(r) DLL for Win32 14.5.0.013 Not Signed 2025-07-17 16:13:27 +0000 UTC 2006-06-04 16:31:28 +0000 UTC e72ef9934fd0b7443d5e9edefaac3422a2844bf6 c0641215c952711ea97a11956eff3e185e7a9ebea5b9658649aa5bf068138da6fe9f85fd75487b3c4dc750a983e5ba37 72a0f837fb33c12bd8b9004628dcae1ea3d3b43f2c7498569331ec5e52872abb31f5d859f96a93cd86c911a91466ea63942c8288ece23209299a8a70555c7071 2025-07-17 16:15:22 +0000 UTC None None 2024-05-13 00:47:08 +0000 UTC 57 1 KNOWN 0 Benign 0.20 2025-07-17 16:17:46.576 +0000 UTC
29877ebec7f64ecd376dea7bc916b4547ac036f84ab40e78edde56b014708a34 [68a241001a4f473f56688bb2] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t4ptnebx.hz2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:52:03Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_t4ptnebx.hz2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:52:03 +0000 UTC 2025-08-17 20:52:03 +0000 UTC 2025-08-17 20:52:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
297d493d5e5cb60eb0efb9655c35018b6deb10e9cafe24a8e83065ea6531237b [68a345f4e4355f704785fb54] [2] [SYSTEM] [u-nsdprodconn1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l5fz4t12.5ye.ps1] [Servers] [Servers Audit] [v2258.856] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T15:25:35Z] [] [] [] [] [172.25.23.179] [172.25.23.179] 1 Success __PSScriptPolicyTest_l5fz4t12.5ye.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 15:25:35 +0000 UTC 2025-08-18 15:25:35 +0000 UTC 2025-08-18 15:25:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2942b263d56edddcb66177748a35f7be115f1afd60e80fa55f0ee09629494d15 [68a3146b5f0c41860c8c850a, 68a3146b5f0c41860c8c855d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\ipaddress.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [2c3b87b89037f45d258d52a25767f1b0] [550d2ad97228d271783e4378c7541b6800f11e9c] [76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85] [5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d] [172.17.252.131] [172.17.252.131] 1 Success ipaddress.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 91036 2c3b87b89037f45d258d52a25767f1b0 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 550d2ad97228d271783e4378c7541b6800f11e9c 76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85 5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
28dc4aee3f28fbfad8067e4d849cee25edb2180d156ebdba8a2b46cfc7bba79b [68a472b1b022648922e2356a] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmBaseApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [e90381e9af9ffb6b05d47e7f98282ec6] [fe20ccd89a26cc7582d7fb438572dfc454e7e93f] [33e7ed8537bf1c662d81718742eec3d090ce2886d34c55d456fb7208de7ac8d61a45f1231de0fc3df6b013f53f908846] [e5329754b5ea8bbd24560d39a7d2ad409620d56a0b46171e2c3e24def5ad869c0d0ac81a55706cf0b4721ae97f49e20d24fcaa8f55a8bbfa8195773988fea84d] [172.17.23.146] [172.17.23.146] 1 Success DsmBaseApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 7640423 e90381e9af9ffb6b05d47e7f98282ec6 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC fe20ccd89a26cc7582d7fb438572dfc454e7e93f 33e7ed8537bf1c662d81718742eec3d090ce2886d34c55d456fb7208de7ac8d61a45f1231de0fc3df6b013f53f908846 e5329754b5ea8bbd24560d39a7d2ad409620d56a0b46171e2c3e24def5ad869c0d0ac81a55706cf0b4721ae97f49e20d24fcaa8f55a8bbfa8195773988fea84d 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
28a6ddc7b83ff25e1c70b0fed71b0ca7654225cc971081844355bc58edf112e5 [68a31af24db7fedadb153881] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:03Z] [6bace707dc12b04a2ca321a88f309f57] [58584ffc334e08a10bada624c0466596e38b099c] [e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a] [5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2198 6bace707dc12b04a2ca321a88f309f57 Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-07-30 13:01:59 +0000 UTC 58584ffc334e08a10bada624c0466596e38b099c e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a 5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379 2025-08-18 12:22:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
286bda5fe51f78dda99863ac6ee4becee74c4b75bca67685ae614db4a63a2388 [68a2c2f1ecaae62fd9d56685] [2] [IUSR] [u-nUHCPaging] [NT AUTHORITY] [C:\inetpub\pgscripts\webgate.exe] [Servers] [Servers Audit] [v2248.849] ["C:\inetpub\pgscripts\webgate.exe" ] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T06:01:12Z] [a9cb58cad33d4c3b6903c2493966f71f] [b1ea2f963fb91644838e7e03faeafd62b44e0e42] [43bb540bc9719f42db74f0d87b7579636fd84f944f6ab517adfcef393bb3d269eff3b72617a9044defa71de36a32a757] [bfa11fd3c70649a33fe59bef4072f921b8ebddbfa97894cbe4dff4e8614dd2e02efc00d93799f206f594dfbf62508c5291f9c61204acbd4571f80951798ede8b] [172.25.22.57] [172.25.22.57] 1 Success webgate.exe C:\inetpub\pgscripts\ 57856 a9cb58cad33d4c3b6903c2493966f71f Not Signed 2023-02-09 15:53:42 +0000 UTC 2000-09-15 15:22:40 +0000 UTC b1ea2f963fb91644838e7e03faeafd62b44e0e42 43bb540bc9719f42db74f0d87b7579636fd84f944f6ab517adfcef393bb3d269eff3b72617a9044defa71de36a32a757 bfa11fd3c70649a33fe59bef4072f921b8ebddbfa97894cbe4dff4e8614dd2e02efc00d93799f206f594dfbf62508c5291f9c61204acbd4571f80951798ede8b 2025-05-01 19:01:12 +0000 UTC None None 2024-01-26 02:34:29 +0000 UTC 71 1 KNOWN 0 Benign 0.20 2025-05-01 19:04:44.439 +0000 UTC
282bb98037b6bcd2ce92e9f3f49f31157d927aa087b03b0e43910c9726b1fd9d [68a34d6610b57c5bffc57dab] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:28Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2829bf3587fea06178f33415f46a9bda7c11ffde0ee0b82e286e9a1475c475df [68a472a799ad3734d804e2ee] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcmail-jdk15on-1.50.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [e67997e62162367c28fdf23aea6f28e5] [84dcd26a35af8b561b22a3f50bef2c58046e4351] [cf5af9ceebab29fb92dab6cf39c2d15ce66d1c8ba29fdd2bb1434a617541541f9e0ada181d174dcad49dc8a675cf9a6b] [61e82e81a6d814d4c6035c10534976e1eb6e7038f7bff4fb36a8d5486092f83046fd7cb6279d5d99f2c8737b4cfbffe4926c46ad11863cd1f86dcba69545feca] [172.17.23.146] [172.17.23.146] 1 Success bcmail-jdk15on-1.50.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 92311 e67997e62162367c28fdf23aea6f28e5 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 84dcd26a35af8b561b22a3f50bef2c58046e4351 cf5af9ceebab29fb92dab6cf39c2d15ce66d1c8ba29fdd2bb1434a617541541f9e0ada181d174dcad49dc8a675cf9a6b 61e82e81a6d814d4c6035c10534976e1eb6e7038f7bff4fb36a8d5486092f83046fd7cb6279d5d99f2c8737b4cfbffe4926c46ad11863cd1f86dcba69545feca 2025-03-28 16:07:06 +0000 UTC None None 2022-07-04 04:37:57 +0000 UTC 60 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
27e9c1cf191627924c1b5ff9bc0c8f7927779ecacffed7f85d3968f819a72749 [68a1e0a88404c6cec2db4a20] [2] [SYSTEM] [I-NCTXSA-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_er4hfvz1.km1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:01:01Z] [] [] [] [] [172.17.188.22] [172.17.188.22] 1 Success __PSScriptPolicyTest_er4hfvz1.km1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:01:01 +0000 UTC 2025-08-17 14:01:01 +0000 UTC 2025-08-17 14:01:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
27bbf833fcaa2960b9ee59bb02f1e331d2bc2cb9f4cca1eda8cbfeafaf4bdcf4 [68a1628b267ecd2812a04628, 68a18e5a6551d5c53747f65e, 68a1b6ecbe5c72e648d21629, 68a1e120531e0ca3ba96eb26, 68a20b4fadd40ccee42bde95, 68a2357ef2f54b1728fb0813, 68a2614c3f2e6a5dec3baf18, 68a289e116193e2cd8f24c47, 68a2b41273bf4601c4cc56cd, 68a2de4297bbbb1ebcb6cf61, 68a308710a7b8d912880836c, 68a332ae0313772628837632, 68a35cf18216a1feae2f70c7, 68a3871e9ff2ca2a71809fbd, 68a3b1528c40e2da223cb62b, 68a3db8314b8acff2e9fadaa, 68a405b59388481b8e731cf0, 68a4315b5318f9f79113cba5, 68a45a1544f0d7805650e8bc, 68a4844542b9ebb43736804b, 68a4ae7c8e355abf3b39a7be, 68a4da1b8141e25bf2adffb8, 68a502e63da3e5c1b0f463bb, 68a52e7cfb04c6faf57cc88b, 68a55747ebdf87cb5fee9ae2, 68a582da54a9620183e92742, 68a5aba7b336d276a8e9eab7, 68a5d5e21910cfe0f0de35b8, 68a6016bf4dd6ac2cce6e47e, 68a62a5363df737e3bb9fb3e, 68a654899c2e8c06d5684638, 68a67ebae711ae898d7aead8, 68a6a8ebe9a4fb2cedcfe642, 68a6d31dd1543ce3c700d734, 68a6fd4e0df9cfba68e08b42, 68a727884f41788f2e391f97] [2] [iatricservice] [i-nSam6Test] [WVUH] [F:\RecycleSSRS\RecycleSSRSWarmup.ps1] [Servers] [Servers Audit] [v2248.849, v2255.853, v2260.859, v2268.865, v2272.867, v2273.867, v2280.871, v2283.876, v2284.877, v2293.885, v2307.897, v2310.898, v2314.902, v2324.910] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:02Z, 2025-08-17T08:00:02Z, 2025-08-17T11:00:02Z, 2025-08-17T14:00:02Z, 2025-08-17T17:00:02Z, 2025-08-17T20:00:02Z, 2025-08-17T23:00:02Z, 2025-08-18T02:00:02Z, 2025-08-18T05:00:01Z, 2025-08-18T08:00:02Z, 2025-08-18T11:00:01Z, 2025-08-18T14:00:02Z, 2025-08-18T17:00:03Z, 2025-08-18T20:00:02Z, 2025-08-18T23:00:02Z, 2025-08-19T02:00:02Z, 2025-08-19T05:00:01Z, 2025-08-19T08:00:02Z, 2025-08-19T11:00:02Z, 2025-08-19T14:00:01Z, 2025-08-19T17:00:03Z, 2025-08-19T20:00:02Z, 2025-08-19T23:00:02Z, 2025-08-20T02:00:01Z, 2025-08-20T05:00:01Z, 2025-08-20T08:00:01Z, 2025-08-20T11:00:01Z, 2025-08-20T14:00:02Z, 2025-08-20T17:00:01Z, 2025-08-20T20:00:09Z, 2025-08-20T23:00:02Z, 2025-08-21T02:00:02Z, 2025-08-21T05:00:02Z, 2025-08-21T08:00:02Z, 2025-08-21T11:00:02Z, 2025-08-21T14:00:03Z] [0ec934ef2b8857c6529b162149d8151a] [622113c956a7814f286597edbc589c8657d55fb4] [531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0] [e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f] [172.17.252.138] [172.17.252.138] 1 Success RecycleSSRSWarmup.ps1 F:\RecycleSSRS\ 998 0ec934ef2b8857c6529b162149d8151a Not Signed 2022-01-10 19:31:26 +0000 UTC 2024-03-18 16:06:03 +0000 UTC 622113c956a7814f286597edbc589c8657d55fb4 531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0 e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f 2025-08-08 17:00:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
27a77db909f3c2833c0b1a37c55af1db06045118ad2eed96ce567b6632bce038 [68a472b1b022648922e23575] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FastInfoset-1.2.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [4f941b36a4c9e827e68e8f3249253240] [098f56b9354e27bd2941cc5d461344e240ae51ae] [90e39b3c6b6cc623d4f3f040d322f90321a7446c1462952600bd308beface4b714eb1c4a171c29a17fd3878e26cd540d] [3ead1bbc9aeddf16cf270518b5ef63b4a020154c5ce4b4d1aaf3ed7d5ba312d952122d656a5a57e11e947d752404d5d3f6fdff9e9b5b2e72f06d3dc9c400c252] [172.17.23.146] [172.17.23.146] 1 Success FastInfoset-1.2.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\sun\xml\fastinfoset\main\ 296714 4f941b36a4c9e827e68e8f3249253240 Not Signed 2024-04-05 21:55:04 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 098f56b9354e27bd2941cc5d461344e240ae51ae 90e39b3c6b6cc623d4f3f040d322f90321a7446c1462952600bd308beface4b714eb1c4a171c29a17fd3878e26cd540d 3ead1bbc9aeddf16cf270518b5ef63b4a020154c5ce4b4d1aaf3ed7d5ba312d952122d656a5a57e11e947d752404d5d3f6fdff9e9b5b2e72f06d3dc9c400c252 2025-03-28 16:06:26 +0000 UTC None None 2024-10-26 17:18:14 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:03:16.254 +0000 UTC
277c4d11a57d20bbf9bfeef15f0a72ec98264bbae569700636e85dfffca1e293 [68a306a5ba5832f49fe9cf36] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\HTMLVWR.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [0791e37231175eeb053e8ca3e00020bc] [782cfb2f326a7b4d13b07c0813805ca3959bc278] [2ea8f572f51bd603487da7757fc1fe261a2b1f817887797b75b4e52a90b173283ba6923e30d912ec684ab323cf207931] [00d9c9676c1fdc88665a9e11e8c731e8795cb848096270627e38f651b16cb1de57d76ef27f70ec7758798b56b780f97cd9f966e8aa899944fe8a44dbe7121dd6] [172.17.146.33] [172.17.146.33] 1 Success HTMLVWR.DLL C:\DICORP\DICORP_V5\RW\APPS\ 22528 0791e37231175eeb053e8ca3e00020bc Not Signed 2022-07-06 14:52:17 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 782cfb2f326a7b4d13b07c0813805ca3959bc278 2ea8f572f51bd603487da7757fc1fe261a2b1f817887797b75b4e52a90b173283ba6923e30d912ec684ab323cf207931 00d9c9676c1fdc88665a9e11e8c731e8795cb848096270627e38f651b16cb1de57d76ef27f70ec7758798b56b780f97cd9f966e8aa899944fe8a44dbe7121dd6 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:20:29 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
2d7b9c0019374c8a0443bd2100e09c42ea88e60ccd9a6c8e95cd6e8733b695ee [68a6afe50e0f3bd8deac4f4c, 68a6afe50e0f3bd8deac5098, 68a6afe50e0f3bd8deac5100, 68a6afe50e0f3bd8deac516a, 68a6afe50e0f3bd8deac554f, 68a6afe50e0f3bd8deac5641, 68a6afe50e0f3bd8deac5760, 68a6afe50e0f3bd8deac5d29, 68a6afe50e0f3bd8deac5dab, 68a6afe50e0f3bd8deac5ee9] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\libssl-1_1-x64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [dba7c14a534b3ef46ccb8982202eff3b] [5a990ff964e4b4cc87d4f6407fd71b6c079c4a07] [605eca459d2a6b27e64d497f84c00a6b6e091bdc875c643231634b013f5f39405700a543c6e47ec53ff60b8ddaabe907] [97d4654fac700f7da04e701ede9dea79c35c08b9bba060a3fd7876375180b6baefd39dcc91b28dce123b2ff960074e41996abed01bbcd2e45b122e9ae683112e] [172.17.30.60] [172.17.30.60] 1 Success libssl-1_1-x64.dll C:\Program Files\PostgreSQL\12\bin\ OpenSSL library 680960 dba7c14a534b3ef46ccb8982202eff3b The OpenSSL Toolkit 1.1.1d Not Signed 2023-10-19 17:59:22 +0000 UTC 2019-12-13 12:43:49 +0000 UTC 5a990ff964e4b4cc87d4f6407fd71b6c079c4a07 605eca459d2a6b27e64d497f84c00a6b6e091bdc875c643231634b013f5f39405700a543c6e47ec53ff60b8ddaabe907 97d4654fac700f7da04e701ede9dea79c35c08b9bba060a3fd7876375180b6baefd39dcc91b28dce123b2ff960074e41996abed01bbcd2e45b122e9ae683112e 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-20 16:24:20 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-30 20:01:04.066 +0000 UTC
2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7 [68a472b1b022648922e23582] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-xc-1.9.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [49f6a735bae30745dcf5ecec27090720] [e3480072bc95c202476ffa1de99ff7ee9149f29c] [7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c] [09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d] [172.17.23.146] [172.17.23.146] 1 Success jackson-xc-1.9.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 27084 49f6a735bae30745dcf5ecec27090720 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC e3480072bc95c202476ffa1de99ff7ee9149f29c 7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c 09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d 2025-03-28 16:04:26 +0000 UTC None None 2022-07-08 00:03:24 +0000 UTC 60 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
2d1a368c62e35627f1a59cfcc822a56431d635f1baf14b387bb3ebd1299d0ea8 [68a306a5ba5832f49fe9cf58] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DIGRDSRV.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [86cb820d4af0b2e8ae99aab48ad42cde] [2abeae8089d579c27064f1ee1522c5a7d09bee80] [5fa60410c96a76dfbc9cde03625f46ff3228902cc0cfe76672b91996fc49fd9a65b8ab0e2546bc2178974beffdd9c681] [1d9cd089725110bd5613cafe3191277bf08f023d474d15bd926dfd64f41893ccbdf85edbd281c7946d1817e31f11f0696448a9d26f7ccd99c8dee3f5d14b842a] [172.17.146.33] [172.17.146.33] 1 Success DIGRDSRV.BPL C:\DICORP\DICORP_V5\RW\APPS\ 107520 86cb820d4af0b2e8ae99aab48ad42cde 1.13.1.1 Not Signed 2022-07-06 14:52:10 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 2abeae8089d579c27064f1ee1522c5a7d09bee80 5fa60410c96a76dfbc9cde03625f46ff3228902cc0cfe76672b91996fc49fd9a65b8ab0e2546bc2178974beffdd9c681 1d9cd089725110bd5613cafe3191277bf08f023d474d15bd926dfd64f41893ccbdf85edbd281c7946d1817e31f11f0696448a9d26f7ccd99c8dee3f5d14b842a 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:49:00 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
2ca0a1ad7eaba11089dfabece0c29e383fbbbad90b82be3ca2774e7d3bb5acc9 [68a5c64d54e5003d1abde4c5] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\NTSetup.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z] [8d7374c2b71c19e8ff64ef4125e6139a] [dad0aac372f6e2a0310ef7570b4648cea203cea0] [8fa6938c48bfa7e920eed7aff4a6132660696a69cd64b154c33a9277403b5bec7561a3e37fe1ca1b610342aaa7d5bfbf] [fffea038d10b4a2d2236590ed1381431d88ccbe217b38b7804e89bdb22fb5a74c8973d8a66e1b4d9de663fcd6f55e5fae7e87b8e01c30aaabc3b48a4a74f85ab] [172.17.20.104] [172.17.20.104] 1 Success NTSetup.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\ NTSetup DLL 131072 8d7374c2b71c19e8ff64ef4125e6139a NTSetup Dynamic Link Library 1, 4, 0, 0 Not Signed 2025-08-20 12:57:41 +0000 UTC 2002-10-07 17:18:04 +0000 UTC dad0aac372f6e2a0310ef7570b4648cea203cea0 8fa6938c48bfa7e920eed7aff4a6132660696a69cd64b154c33a9277403b5bec7561a3e37fe1ca1b610342aaa7d5bfbf fffea038d10b4a2d2236590ed1381431d88ccbe217b38b7804e89bdb22fb5a74c8973d8a66e1b4d9de663fcd6f55e5fae7e87b8e01c30aaabc3b48a4a74f85ab 2025-08-20 12:57:49 +0000 UTC None None 2024-06-05 23:33:50 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 13:00:50.983 +0000 UTC
2c73f99ad12864d0c9b8f810de30c8ac9d3b89b9129169865c5c3837c7a6856c [68a18f0549fba6e1a58ed5a8, 68a2e08b03d8e95044c937d3, 68a432305af3ecc3cb0504f6, 68a585326688127c061e72f3, 68a6d573cceb2b8a964b3383] [2] [svc_Iatric] [i-nSamDB1] [WVUHS] [D:\Program Files (x86)\CoreFTP\SunquestRH.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T08:10:00Z, 2025-08-18T08:10:00Z, 2025-08-19T08:10:00Z, 2025-08-20T08:10:00Z, 2025-08-21T08:10:00Z] [a930976021610a665899490be2be6e36] [007eda380db0425df9a36638bfdf85e77c259ae1] [3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532] [68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be] [172.17.21.136] [172.17.21.136] 1 Success SunquestRH.bat D:\Program Files (x86)\CoreFTP\ 511 a930976021610a665899490be2be6e36 Not Signed 2023-11-01 13:02:24 +0000 UTC 2023-11-01 13:05:15 +0000 UTC 007eda380db0425df9a36638bfdf85e77c259ae1 3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532 68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be 2025-08-09 08:10:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2c62fa36ba4071ca3ae4f3fad23da407915c3464caf444548ef5b63546835a12 [68a4b0fb13fac5171eeef0dc] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\WPFToolkit.Extended.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:37Z] [017e10a4e1dd8d99d78701ed8d793307] [05171709895e3c65e2eb4a7a29ba9f70be7bdecd] [be509cac62a9cecb95fcd9eac763ad961ea5567bca2cace68e3323a9022e278b377988b0a8682a494862ba8cc728f6da] [45d8b842d7656f1455dcd8b071222235dc86f7e7fa44494ba810ae60ec0592c590f73908840e4eae1236a65897321ea2ae65b02bb9b491d8597a0d5d83aaff2e] [172.17.252.160] [172.17.252.160] 1 Success WPFToolkit.Extended.dll C:\Program Files (x86)\Cyrun\Alliance 7 Client\ Extended WPF Toolkit 345600 017e10a4e1dd8d99d78701ed8d793307 Extended WPF Toolkit 1.5.0.0 Not Signed 2019-09-13 20:45:42 +0000 UTC 2025-05-22 18:18:11 +0000 UTC 05171709895e3c65e2eb4a7a29ba9f70be7bdecd be509cac62a9cecb95fcd9eac763ad961ea5567bca2cace68e3323a9022e278b377988b0a8682a494862ba8cc728f6da 45d8b842d7656f1455dcd8b071222235dc86f7e7fa44494ba810ae60ec0592c590f73908840e4eae1236a65897321ea2ae65b02bb9b491d8597a0d5d83aaff2e 2025-05-22 18:56:03 +0000 UTC None None 2025-03-12 20:59:42 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-22 19:00:56.976 +0000 UTC
2bee0e09b0add0c35eda78f7379069960dac061c4e215792c32e6afe3414f579 [68a5d382bd3935126ed513eb] [2] [CA_Jnt_SVA12] [I-CA-PSM] [WVUHS] [C:\Users\CA_Jnt_SVA12\Desktop\GatewayWindowsDefenderATPOnboardingPackage\WindowsDefenderATPLocalOnboardingScript.cmd] [Servers] [Servers Audit] [v2293.885] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T13:54:00Z] [f50eda75d10c6f119c6cd40966efea67] [0c73d106cbfa403bf59db7d87ff1ea8314baac1d] [6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33] [282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0] [172.17.252.63] [172.17.252.63] 1 Success WindowsDefenderATPLocalOnboardingScript.cmd C:\Users\CA_Jnt_SVA9\Desktop\GatewayWindowsDefenderATPOnboardingPackage\ 17354 f50eda75d10c6f119c6cd40966efea67 Not Signed 2024-10-17 00:26:56 +0000 UTC 2025-03-24 19:48:16 +0000 UTC 0c73d106cbfa403bf59db7d87ff1ea8314baac1d 6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33 282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0 2025-03-24 19:52:38 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2be3b84d9b1ddf317e94d3345117c0192e80ff50445538ae0c54066ae2c8e607 [68a48674c4cb2500be692614, 68a48674c4cb2500be69262a] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.DataAccessLayer.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [7585a161b995fa0f4eb3ddc40d2d0f48] [00e62d3ef0e9c5eab320fb45443f6a5b77079a89] [a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11] [deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907] [172.17.252.226] [172.17.252.226] 1 Success StrykerIOTAPI.DataAccessLayer.dll C:\Stryker\iBed Server Application\Stryker.IOT\ StrykerIOTAPI.DataAccessLayer 27920 7585a161b995fa0f4eb3ddc40d2d0f48 StrykerIOTAPI.DataAccessLayer 1.0.0 Stryker Corporation 2023-03-16 10:22:36 +0000 UTC 2024-02-15 18:02:05 +0000 UTC 00e62d3ef0e9c5eab320fb45443f6a5b77079a89 a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11 deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2b531f26102d0687325387dac16e037621852063de02203aa4674e01d589374a [68a19be542f4bad561883042] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dr1aymbt.j23.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:07:42Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_dr1aymbt.j23.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:07:42 +0000 UTC 2025-08-17 09:07:42 +0000 UTC 2025-08-17 09:07:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2b3c5867c013952c0c01a0604e9fab348297e52f7a1ceee65318d3ebb2be888d [68a25fb2e970d941642e7edd, 68a25fb2e970d941642e7eea, 68a3b2cf09045b56b2a707b5, 68a3b2cf09045b56b2a707c2, 68a502e12ae1a61fbf4caf13, 68a502e12ae1a61fbf4caf20, 68a65489c4cae84feadc5713, 68a65489c4cae84feadc5720] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\dbatools.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:06Z, 2025-08-20T23:00:15Z] [b51cf28a2350177a4572c66c016c2103] [5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa] [c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386] [55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb] [172.17.252.12] [172.17.252.12] 1 Success dbatools.dll C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\ dbatools 160672 b51cf28a2350177a4572c66c016c2103 dbatools 1.0.0 dbatools 2024-03-28 18:35:12 +0000 UTC 2024-03-09 14:53:34 +0000 UTC 5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386 55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb 2025-05-10 23:00:33 +0000 UTC None None 2024-03-24 01:06:35 +0000 UTC 43 0 KNOWN 0 Benign 0.00 2025-05-10 23:01:16.463 +0000 UTC
2b26d356e02d80baf5c4ca4efaee0098d4babcadfa1aae9bfab2082b04a5bc34 [68a5c8eceb9e7b7716dce1fa, 68a5ca39b5df6e9c598d9a0c, 68a5ca39b5df6e9c598d9a19, 68a5ccf2ddfdba423e48862f, 68a5ccf2ddfdba423e48863d, 68a5ccf2ddfdba423e48864b, 68a5ccf2ddfdba423e488658, 68a5ccf2ddfdba423e488665, 68a5ccf2ddfdba423e488672, 68a5ccf2ddfdba423e48867f, 68a5ccf2ddfdba423e48868c] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\InputFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [cfc9166756e8368d8b06cde331d490e5] [6c011eddf69df54f41e0d7b8be2d5b2528af7ca2] [f1856edd7a27a2d96073a9304da17fe25be15b68036186dca7747758afddafc495780ce10ce2226f7962788e515a70b7] [b76e01f596b88af67ec3a8ed50ed5fba05bd67b75aa253dde511c5ae7767f53e5cc69135a1920cfba8be238a4d33c8a137c3ad027fb43f7301aa889b38c90b0c] [172.17.252.194] [172.17.252.194] 1 Success InputFunctions.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 16284 cfc9166756e8368d8b06cde331d490e5 Not Signed 2025-08-20 13:08:40 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 6c011eddf69df54f41e0d7b8be2d5b2528af7ca2 f1856edd7a27a2d96073a9304da17fe25be15b68036186dca7747758afddafc495780ce10ce2226f7962788e515a70b7 b76e01f596b88af67ec3a8ed50ed5fba05bd67b75aa253dde511c5ae7767f53e5cc69135a1920cfba8be238a4d33c8a137c3ad027fb43f7301aa889b38c90b0c 2025-08-20 13:09:00 +0000 UTC None None 2024-08-08 19:43:02 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
2b13145185c874dede90e8f4656daa3b60d93459e476545dbad90746d750c458 [68a4698d5445b9aa205794eb] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_0e99f74a14614d68b1464e32cd41867d.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:09:46Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_0e99f74a14614d68b1464e32cd41867d.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:09:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2ad4cc623a5619920ce1d4ce674a6cb47b5706f757e0dbccd2c89616e626900c [68a3165f22b7418ee6d4590f] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cm32l4nf.gxu.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:02:31Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_cm32l4nf.gxu.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:02:31 +0000 UTC 2025-08-18 12:02:31 +0000 UTC 2025-08-18 12:02:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2ad327190254cfabf1ce372b9eb3080fde80527f9afb95609744c84b069f01af [68a48674c4cb2500be692641] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.BedClient.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z] [53bb6bf6e10f31058b313d251d35a3ee] [bd121b21353174db9fbf449b13da23abf6841825] [00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73] [c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Clinical.BedClient.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Stryker.iBedServer.Clinical.BedClient 12800 53bb6bf6e10f31058b313d251d35a3ee Stryker.iBedServer.Clinical.BedClient 1.0.0 Not Signed 2023-03-16 10:22:28 +0000 UTC 2023-03-16 10:22:28 +0000 UTC bd121b21353174db9fbf449b13da23abf6841825 00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73 c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631 2025-07-15 14:08:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2a9fef8db4e3a019e32d440cc704ed0b8a15a439567000c15c6f6570c9096783 [68a5239e621d09b2b1ed5e52] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackSchema_icd.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:36Z] [6a9ba4094531a25a391fa577c7c6c08b] [b0879b11bc79c994c3083b9a2e5c646465c0b075] [6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308] [af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3] [172.17.22.40] [172.17.22.40] 1 Success PlaybackSchema_icd.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 74240 6a9ba4094531a25a391fa577c7c6c08b 1.0.8565.40719 Not Signed 2023-06-15 02:37:20 +0000 UTC 2023-06-15 02:37:20 +0000 UTC b0879b11bc79c994c3083b9a2e5c646465c0b075 6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308 af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2a9a5636e4828e6f3bfe77608737599ea956c596c3cbfe3da67e1f219e767035 [68a523a99ba7c92b34976f97] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViewModel.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:42Z] [29caf1a5cf79c811d9204a9c7b60261e] [9922a071d594279b368fdda2c79df68cf19efaf4] [a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465] [91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44] [172.17.22.40] [172.17.22.40] 1 Success SystemManagerViewModel.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ SystemManagerViewModel 1076224 29caf1a5cf79c811d9204a9c7b60261e SystemManagerViewModel 1.0.0.0 Not Signed 2023-06-15 02:37:32 +0000 UTC 2023-06-15 02:37:32 +0000 UTC 9922a071d594279b368fdda2c79df68cf19efaf4 a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465 91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
31617bc6d788d17e9d6b4e157c61ff4f5aa99ff6dd12390aaec350e1dad59cfd [68a1abd81464ade8cebc30df] [2] [SYSTEM] [i-nctxddc-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jpj1pwcu.2im.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:15:40Z] [] [] [] [] [172.17.146.23] [172.17.146.23] 1 Success __PSScriptPolicyTest_jpj1pwcu.2im.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:15:40 +0000 UTC 2025-08-17 10:15:40 +0000 UTC 2025-08-17 10:15:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3129528d911f66c7bb4157add40fd6f5e831069ce89676d412d7a3f781baf5d4 [68a194b6a53d5390bd32653e] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wbyd23ye.0vk.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:37:02Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_wbyd23ye.0vk.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:37:02 +0000 UTC 2025-08-17 08:37:02 +0000 UTC 2025-08-17 08:37:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
30f6420e30c14493561c208144082198b6ef8921d5584e99ce925a2859ccbf4c [68a311cdc2d0d6e3eb77f20b] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindPasswordLastSet.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [305adcf21d1608c85d2bad7b2ee17f27] [e3ef3170c8936e8e00b1e0bd20050c116cba3dc3] [4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200] [6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713] [172.25.17.86] [172.25.17.86] 1 Success FindPasswordLastSet.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 3800 305adcf21d1608c85d2bad7b2ee17f27 Not Signed 2021-11-18 18:17:20 +0000 UTC 2025-06-05 20:58:32 +0000 UTC e3ef3170c8936e8e00b1e0bd20050c116cba3dc3 4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200 6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
30dbaca4c387bc212e326f653c535f315e111997840af61c4cceaafc2c2b7b6e [68a18d08c761638e1c82e3dc, 68a2dfdc19028bf24d272e37, 68a4315aac209890fd02860e, 68a581c7ea8ad1c4ecc342b9, 68a675a8d9e8ba5c8c053675, 68a678012a384e856ec0536a, 68a678012a384e856ec0536b, 68a67a593958445599787145, 68a6d3680ea780744e57b835, 68a70821cb4641958b20b7b3, 68a70821cb4641958b20b7b4, 68a70ace6496c8f136b8d2e6] [2] [hyperwebsvc, CA_Jnt_ECSA5] [I-NCTXEHH-001] [WVUHS] [C:\HomeHealth\__SCRIPT REF Files\REFEpicHHEnvPLY_ACE3_Refresh.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe, C:\Windows\explorer.exe] [2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T01:18:06Z, 2025-08-21T01:26:12Z, 2025-08-21T01:30:24Z, 2025-08-21T01:36:08Z, 2025-08-21T08:00:02Z, 2025-08-21T11:40:55Z, 2025-08-21T11:46:45Z, 2025-08-21T11:52:21Z] [fe11a07acc95a9d0efd502c6c79f11ea] [d2d2aa489d4f51c3d533906b9f1adcde16ae28b0] [d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b] [74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe] [172.17.146.25] [172.17.146.25] 1 Success REFEpicHHEnvPLY_ACE3_Refresh.bat C:\HomeHealth\__SCRIPT REF Files\ 588 fe11a07acc95a9d0efd502c6c79f11ea Not Signed 2023-04-26 14:42:09 +0000 UTC 2025-04-17 14:45:25 +0000 UTC d2d2aa489d4f51c3d533906b9f1adcde16ae28b0 d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b 74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe 2025-08-09 08:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
30c40b2e85aea20466293274a208494617b0ec644dc769ba34320f80a1fd712d [68a5c9dc84f2b6dc03121e9b] [2] [SYSTEM] [i-nQS1mgtn] [NT AUTHORITY] [D:\QS1\191\POS\191009002POSH.EXE] [Servers] [Servers Audit] [v2287.880] [D:\QS1\191\POS\191009002POSH.EXE D:\QS1\191\POS -OVERWRITE] [Not Signed] [D:\QS1\QIA\Qia.exe] [D:\QS1\QIA\Qia.exe] [2025-08-20T13:12:57Z] [a99c86c5bcf6da46479c9b6d2de2d67a] [cca47bb481644c9ef6eac0e5d17958e0cbd3fd4a] [7df31ac7a85e7f932e0b1aa15c6ff92eae1df06d374aa6122b3a01dd996e337349626475f8ad3a903d2500619ef6ec81] [1f446bd154c8572d4e53bb921a8ebe62b04b78e65c6e3dc9dbd2d32de7a9e2f28f93fc381701ca88bbe04ea3b3df50e392d57a464ad2e3615bdf6eb4df3d4874] [172.17.20.104] [172.17.20.104] 1 Success 191009002POSH.exe C:\QS1\191\POS\ PKSFX® Command Line for Windows 9417433 a99c86c5bcf6da46479c9b6d2de2d67a PKSFX® Command Line for Windows 5, 0, 1, 0 Not Signed 2025-07-17 16:15:58 +0000 UTC 2012-02-27 15:33:12 +0000 UTC cca47bb481644c9ef6eac0e5d17958e0cbd3fd4a 7df31ac7a85e7f932e0b1aa15c6ff92eae1df06d374aa6122b3a01dd996e337349626475f8ad3a903d2500619ef6ec81 1f446bd154c8572d4e53bb921a8ebe62b04b78e65c6e3dc9dbd2d32de7a9e2f28f93fc381701ca88bbe04ea3b3df50e392d57a464ad2e3615bdf6eb4df3d4874 2025-07-17 16:16:02 +0000 UTC None None 2021-11-22 05:02:47 +0000 UTC 65 3 KNOWN 0 Benign 0.10 2025-07-17 16:17:46.576 +0000 UTC
30ba0c3d915cdd4487952120eba8205e1d1acd2017b272c1c1a30c08427bf548 [68a16bd60756fe54a9918f93, 68a2149cb58debea69d7c740, 68a2bd5ff793a9057f329bfa, 68a3663261f8067c48423eae, 68a40efceddb3a9f1a71a5f4, 68a4b7cd36bc5d38057e235c] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetUtils.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [230b8336c1852e9a94a3df36af12c82c] [54d436628aa6c32a6e72b86ef79da23d455eeca9] [3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd] [36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b] [10.20.20.68] [10.20.20.68] 1 Success zNetUtils.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 638264 230b8336c1852e9a94a3df36af12c82c Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 54d436628aa6c32a6e72b86ef79da23d455eeca9 3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd 36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:39 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
30637f470d50f8e4e55ca6bf69130a74b83e9b51f757d487a2c076ed7397eaa9 [68a1781303efa29c2490c53e] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_por1serl.ypl.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:34:54Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_por1serl.ypl.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:34:54 +0000 UTC 2025-08-17 06:34:54 +0000 UTC 2025-08-17 06:34:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
301cf50872c1e5c8b34b970892ba731a492642a1afee8c89cc1de5411b3a099a [68a62a95414ce37e5511e739] [2] [NETWORK SERVICE] [u-NFP2] [NT AUTHORITY] [C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe] [Servers] [Servers Audit] [v2310.898] ["C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T20:05:34Z] [4b09a5c54dd9c4160a0153c47e6b6b5d] [f2a30745b256ff1540a76e75cf58aad763febdc8] [e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956] [ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45] [172.25.17.195] [172.25.17.195] 1 Success IPDataListenerService.exe C:\Program Files (x86)\FormFast\IPDataListenerService\ FormFast.FastPrint.IPDataListener 25088 4b09a5c54dd9c4160a0153c47e6b6b5d FormFast.FastPrint.IPDataListener 23.6.0.20130 Not Signed 2023-06-20 18:20:04 +0000 UTC 2023-06-20 18:20:04 +0000 UTC f2a30745b256ff1540a76e75cf58aad763febdc8 e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956 ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45 2025-08-20 20:05:41 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
3019e0e4ed37e5ef7b0c577519a67e7acac4fd4fbdda1a9b88785338286c4e1d [68a48674c4cb2500be692635, 68a48674c4cb2500be692647] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z] [26661aa51c547414f531e8b13455d674] [88d59516fbf7ef6b499d7e33195681be2e31b799] [f440ed67572ee0f1d34a5bc19784ccef448172dd526454d60e593d9226cf15a82537e69f24366518c6b3a12b253ae0ed] [74bcd1277e80ed3d01346a4eb60e094098c45b1b5f9c35679ea5be6db7a94a35796df0be9388ed8bf753505aea685f9827fe8533fbb7247334dea3c84e1d3c36] [172.17.252.226] [172.17.252.226] 1 Success Serilog.dll C:\ProgramData\chocolatey\lib\IdentityManagement_App\Content\WebPub\FederationHelperCore\ Serilog 136192 26661aa51c547414f531e8b13455d674 Serilog 2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19 Not Signed 2025-06-12 20:05:24 +0000 UTC 2024-10-22 09:32:58 +0000 UTC 88d59516fbf7ef6b499d7e33195681be2e31b799 f440ed67572ee0f1d34a5bc19784ccef448172dd526454d60e593d9226cf15a82537e69f24366518c6b3a12b253ae0ed 74bcd1277e80ed3d01346a4eb60e094098c45b1b5f9c35679ea5be6db7a94a35796df0be9388ed8bf753505aea685f9827fe8533fbb7247334dea3c84e1d3c36 2025-06-12 20:06:21 +0000 UTC None None 2024-08-01 19:31:17 +0000 UTC 75 0 KNOWN 0 Benign 0.00 2025-06-12 20:11:15.307 +0000 UTC
2fab00aa354289df924737e7fe31040d7048812306926c53eea3ee0e64db95f4 [68a2fecafcf4c946042d757a] [2] [SYSTEM] [probe] [NT AUTHORITY] [C:\Program Files\Npcap\CheckStatus.bat] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T10:21:53Z] [3075c353f24617be908f7e952de085f2] [a380da5dcac37716092c0eda4b9f97c909d87ab2] [5a65486318864f0287918bcd89d053a52b1dc0405e9b37317b4f4713af756e65f7924f44c9aa12aa9bf4eec082f66f4d] [0caac4037e821f144c6f4fbe25c2e364e31c3b1c314d2c14ede4565501553950f6266f8c28c099f126d4b5950bb1f71be38eb5ec54ee4a206e723f0f30799c8a] [172.23.26.35] [172.23.26.35] 1 Success CheckStatus.bat C:\Program Files\Npcap\ 862 3075c353f24617be908f7e952de085f2 Not Signed 2020-06-09 19:14:10 +0000 UTC 2020-06-09 19:14:10 +0000 UTC a380da5dcac37716092c0eda4b9f97c909d87ab2 5a65486318864f0287918bcd89d053a52b1dc0405e9b37317b4f4713af756e65f7924f44c9aa12aa9bf4eec082f66f4d 0caac4037e821f144c6f4fbe25c2e364e31c3b1c314d2c14ede4565501553950f6266f8c28c099f126d4b5950bb1f71be38eb5ec54ee4a206e723f0f30799c8a 2025-08-09 05:12:00 +0000 UTC None None 2025-07-20 09:34:17 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-08 12:00:10.068 +0000 UTC
2fa0c8055ed4dd4b3be006b6ae7fb7f563b79393f21a66d682b56f92e221dc01 [68a611738671451adb8f5997] [2] [DEVSCCMADM] [DP-Warehouse] [DEV-WVUHS] [C:\Windows\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp] [Servers] [Servers Audit] [v2307.897] ["C:\WINDOWS\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp" /SL5="$70C2C,11857990,180224,C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe" /VERYSILENT /DIR=C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\ /EXTRACT="YES"] [Lenovo] [C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe] [C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe] [2025-08-20T18:16:58Z] [61431127214fa224f8da58e06ba8831e] [472aa381a40e1455ce7aadd87d2a2b47d4e05cb5] [1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc] [c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7] [172.16.200.2] [172.16.200.2] 1 Success m2wlg08us14.tmp C:\Windows\TempInst\is-Q9LLO.tmp\ Setup/Uninstall 2917392 61431127214fa224f8da58e06ba8831e Lenovo 2025-05-12 18:26:03 +0000 UTC 2025-05-12 18:26:03 +0000 UTC 472aa381a40e1455ce7aadd87d2a2b47d4e05cb5 1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7 2025-05-12 18:26:13 +0000 UTC None None 2022-11-05 07:38:45 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-05-12 18:28:22.207 +0000 UTC
2f9fcdaf7ccf5b9ce1e4da934121df5ca0fe0f447b60d7be848f380a0dd6c250 [68a71866f94bca2e233c5e49] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\is-50FHK.tmp\azuredatastudio-windows-setup.tmp] [Servers] [Servers Audit] [v2319.906] ["C:\Users\CA_TSK~1\AppData\Local\Temp\is-50FHK.tmp\azuredatastudio-windows-setup.tmp" /SL5="$1B0B2A,103027367,800768,C:\ProgramData\Package Cache\6F788251C464622D41B23CB393BD406BEAEA63CE\azuredatastudio-windows-setup.exe" /VERYSILENT /NORESTART /RESTARTEXITCODE=3010 /FORCECLOSEAPPLICATIONS /MERGETASKS=!runcode /LOG="C:\Users\CA_TSK~1\AppData\Local\Temp\SsmsSetup\SSMS-Setup-ENU_20250821085621_13_AzureDataStudio.log"] [Not Signed] [C:\ProgramData\Package Cache\6F788251C464622D41B23CB393BD406BEAEA63CE\azuredatastudio-windows-setup.exe] [C:\Installs\SSMS-Setup-ENU.exe] [2025-08-21T13:00:20Z] [010148a8d44b449ea4a6196fb68df83c] [6d21310644af6d6a06e634af48d09614c875539d] [a7b58b3fe6fc66e6e1f197619cd863eab3fec98e05d4407fcb581f8e1450cab422d6e6ae2cca85fdb8662d319a15a1e7] [8a66f47d47f012eea37b1be5a31a71abbf387892b9950d760c3ade68026b0cdf5ef96e03183add6aeaead11f2876fb7cd817f059f691108949614252eb6b8ac1] [172.17.37.230] [172.17.36.114] 1 Success azuredatastudio-windows-setup.tmp C:\Users\ca_tsk_pacs1\AppData\Local\Temp\is-50FHK.tmp\ Setup/Uninstall 2591232 010148a8d44b449ea4a6196fb68df83c Azure Data Studio 1.28.0 Not Signed 2025-08-21 13:00:20 +0000 UTC 2025-08-21 13:00:20 +0000 UTC 6d21310644af6d6a06e634af48d09614c875539d a7b58b3fe6fc66e6e1f197619cd863eab3fec98e05d4407fcb581f8e1450cab422d6e6ae2cca85fdb8662d319a15a1e7 8a66f47d47f012eea37b1be5a31a71abbf387892b9950d760c3ade68026b0cdf5ef96e03183add6aeaead11f2876fb7cd817f059f691108949614252eb6b8ac1 2025-08-21 13:00:22 +0000 UTC None None 2023-06-22 12:04:36 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-08-21 13:00:32.768 +0000 UTC
2f9e817844b4d82cf8abae043af1a9572cb39d52185f1a337ad12a15c83d01f8 [68a34b98a6132bf659cce5ba, 68a34df0b71eea1289980a1f] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.HighContrastBlack.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [3d755d8629f654f4625ea2529a0846e3] [eab2bab31f1de9a244d26909b0807d6eca76f369] [fc26c1f4ab858d27489f3bc54433e134b73d5c28a70702e28c91191a3e4c85762e2330cbfe285fd4c351f32d15fa1ff7] [a02fc068c7e917bf6420c2f6199e7a9f16cf4a144674b150fc5f6ee0ed493ad9f9fdecca8ec4f1ad016d1032302eaaa96b4155cb9bec710ad49f8328b435cff5] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.HighContrastBlack.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.HighContrastBlack 253952 3d755d8629f654f4625ea2529a0846e3 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC eab2bab31f1de9a244d26909b0807d6eca76f369 fc26c1f4ab858d27489f3bc54433e134b73d5c28a70702e28c91191a3e4c85762e2330cbfe285fd4c351f32d15fa1ff7 a02fc068c7e917bf6420c2f6199e7a9f16cf4a144674b150fc5f6ee0ed493ad9f9fdecca8ec4f1ad016d1032302eaaa96b4155cb9bec710ad49f8328b435cff5 2025-06-09 21:58:51 +0000 UTC None None 2022-12-21 16:35:44 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
2e24f5990f0ba6248fa08bf4d4782db2aad9974e518c0e1e233efa92494be937 [68a50f31981abdebabc95a70] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ek2lcwm3.ikq.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T23:56:21Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_ek2lcwm3.ikq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 23:56:21 +0000 UTC 2025-08-19 23:56:21 +0000 UTC 2025-08-19 23:56:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
2e2080bfb96ee899e9ddbc4d7d3fc32bb0c8b70e167c44af62861c3b6bba2753 [68a16bd60756fe54a9918fa2, 68a2149cb58debea69d7c74d, 68a2bd5ff793a9057f329c08, 68a3663261f8067c48423ebb, 68a40efceddb3a9f1a71a604, 68a4b7cd36bc5d38057e2369] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zAutoUpdate.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [9f75a49b3b2b2629b9292a2500a37bb7] [bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3] [317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81] [8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4] [10.20.20.68] [10.20.20.68] 1 Success zAutoUpdate.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 56632 9f75a49b3b2b2629b9292a2500a37bb7 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3 317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81 8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:17 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
2e04fd3951fbb534d097ed620d224eb5876826669ab7d633fda596e061b7a985 [68a52f3a711130a12eb554ea] [2] [SYSTEM] [u-v3mWebTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm4pscpp.fzz.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T02:13:10Z] [] [] [] [] [172.25.19.83] [172.25.19.83] 1 Success __PSScriptPolicyTest_mm4pscpp.fzz.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 02:13:10 +0000 UTC 2025-08-20 02:13:10 +0000 UTC 2025-08-20 02:13:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
33a3d3d9bd487908bea1e47b090ea5599628d2f4ee8fe3fda515360828377884 [68a48674c4cb2500be692612, 68a48674c4cb2500be692628] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.DataAccessLayer.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z] [a7216a138fc22c7273f6edec8e3b41a6] [115294144ead55ae4d0975d87bf46e84d568a87b] [6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8] [ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200] [172.17.252.226] [172.17.252.226] 1 Success SEWSI.DataAccessLayer.dll C:\Stryker\iBed Server Application\Stryker.IOT\ SEWSI.DataAccessLayer 59648 a7216a138fc22c7273f6edec8e3b41a6 Connected Hospital 1.0.0.0 Stryker Corporation 2023-03-16 10:22:38 +0000 UTC 2024-02-15 18:02:04 +0000 UTC 115294144ead55ae4d0975d87bf46e84d568a87b 6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8 ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c [68a31c5575f8857a10efc136] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\workday\lib\BouncyCastle.Crypto.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:29Z] [f0b3e112ce4807a28e2b5d66a840ed7f] [54a6743781fd4ceb720331fce92f16186931192d] [9522bd52af2523db8504fbb8574a63aabf6ef291a2df8793eccdef28b13f20ab9f1df611778854ffb654d943b3ffcf15] [dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190] [172.17.252.10] [172.17.252.10] 1 Success BouncyCastle.Crypto.dll C:\ProgramData\CareFusion\DepConInstall\ BouncyCastle.Crypto 2609152 f0b3e112ce4807a28e2b5d66a840ed7f Bouncy Castle for .NET 1.8.9 Not Signed 2024-12-11 02:17:36 +0000 UTC 2024-12-11 02:17:36 +0000 UTC 54a6743781fd4ceb720331fce92f16186931192d 9522bd52af2523db8504fbb8574a63aabf6ef291a2df8793eccdef28b13f20ab9f1df611778854ffb654d943b3ffcf15 dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190 2025-06-12 20:35:23 +0000 UTC None None 2025-05-12 20:24:56 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-06-12 20:46:38.174 +0000 UTC
3307319ddc221f1b23e8a1445aef10d2d2308e0ec46977b3f17cbb15c0ef335b [68a472a799ad3734d804e2f9] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-io-1.3.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [2e55c05d3386889af97caae4517ac9df] [b90b6ac57cf27a2858eaa490d02ba7945d18ca7b] [f274993847fd46b8aa27e96c812fae0aacd0934fcd5670ba366b451b74079a21f295bb62ff676e7c7bdca13fe536d723] [fbefc32530253cc3fe5638da036a85567cdce9c9f748522725f58b349b07a37b474e16cec329b333b7f720e3c385a2ff7024d51d0a93bc26d201726f559e42f1] [172.17.23.146] [172.17.23.146] 1 Success commons-io-1.3.1.jar C:\glassfish4\glassfish\lib\install\applications\__admingui\WEB-INF\extra\ 83613 2e55c05d3386889af97caae4517ac9df Not Signed 2019-01-14 16:36:43 +0000 UTC 2015-09-19 17:06:20 +0000 UTC b90b6ac57cf27a2858eaa490d02ba7945d18ca7b f274993847fd46b8aa27e96c812fae0aacd0934fcd5670ba366b451b74079a21f295bb62ff676e7c7bdca13fe536d723 fbefc32530253cc3fe5638da036a85567cdce9c9f748522725f58b349b07a37b474e16cec329b333b7f720e3c385a2ff7024d51d0a93bc26d201726f559e42f1 2025-05-01 15:25:51 +0000 UTC None None 2024-07-29 22:36:17 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-05-01 15:28:55.484 +0000 UTC
33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b [68a472b1b022648922e23588] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-core-2.3.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [c97c33a3fa1ba9c96b7fd640337a2361] [d044c784e41d026778693fb44a8026c1fd9a7506] [b9f74db7d73f19099497fe325affda1eea54c614b6bffc168fefd39aef69d96f27346e81eece79e8637d60d6cfb3df9e] [c09afdcd1ff46605975ef0baaf2e81fbb8016f2d3ead844db68c4142bdebf251a500972c1bc9f4311fd14ed5ed2a2a61533d0c459f535d5960284cf1cd38cae3] [172.17.23.146] [172.17.23.146] 1 Success jaxb-core-2.3.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxb-core-2.3.0.jar-bc61f504a44bfe3a\ 255502 c97c33a3fa1ba9c96b7fd640337a2361 Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC d044c784e41d026778693fb44a8026c1fd9a7506 b9f74db7d73f19099497fe325affda1eea54c614b6bffc168fefd39aef69d96f27346e81eece79e8637d60d6cfb3df9e c09afdcd1ff46605975ef0baaf2e81fbb8016f2d3ead844db68c4142bdebf251a500972c1bc9f4311fd14ed5ed2a2a61533d0c459f535d5960284cf1cd38cae3 2025-03-28 16:06:36 +0000 UTC None None 2024-08-06 23:15:17 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-10 12:45:43.084 +0000 UTC
32f5d6d34be928b478ea57af9b97eb06222f7782ef96890ddacb6e27a78c3ed3 [68a6c3f97697b1e2890aed9e] [2] [sccmcpa] [vm-POWERSHELL] [WVUHS] [C:\Scripts\BMCR5.ps1] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T07:00:01Z] [289218942f0009b9b8521baa43479f70] [9e7627966ff79611e91191280095c648fb8160fe] [d483dd88d880db13bc150cbd5f24f0f98002c9f13ceb9dd07b9fd924bc4db7622de925e5f49b3e3cf5cfa09a0c1ba1a8] [95c692501307cb66293b5c0da1838697de90e17cda42f725dde765c8e09465d8650a3b946857cf0b47ded115cfcccf3e5188b773941608e73abf40d5b442a6af] [172.17.251.192] [172.17.251.192] 1 Success BMCR5.ps1 C:\Scripts\ 3852 289218942f0009b9b8521baa43479f70 Not Signed 2023-01-12 13:52:57 +0000 UTC 2023-02-16 15:31:05 +0000 UTC 9e7627966ff79611e91191280095c648fb8160fe d483dd88d880db13bc150cbd5f24f0f98002c9f13ceb9dd07b9fd924bc4db7622de925e5f49b3e3cf5cfa09a0c1ba1a8 95c692501307cb66293b5c0da1838697de90e17cda42f725dde765c8e09465d8650a3b946857cf0b47ded115cfcccf3e5188b773941608e73abf40d5b442a6af 2025-08-21 07:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
32ddd6f42f62b47cab7ac4493310b7cf3203726c13615f7f57e289fc623fedd0 [68a48674c4cb2500be69263f] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Data.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z] [2ab8001eba88698a847e929579af07ac] [d5b67246ce5168b6e967a0b52138ff0cae92f784] [f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7] [9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Clinical.Data.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Stryker.iBedServer.Clinical.Data 5632 2ab8001eba88698a847e929579af07ac Stryker.iBedServer.Clinical.Data 1.0.0 Not Signed 2023-03-16 10:22:28 +0000 UTC 2023-03-16 10:22:28 +0000 UTC d5b67246ce5168b6e967a0b52138ff0cae92f784 f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7 9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479 2025-07-15 14:08:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
32a27f811c9d40b323b4038a2955c537a32f8ebf1d27dd7b84531f1e52f8015d [68a472b1b022648922e23574] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\EmSetupApi-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [95356690b1b791a53c150c8f439ab707] [0348c2c6ed6da8693981588795b5dadf1f4c825f] [1196637bdff6fcc7a08b021f581e1406ef6097bc91e47c4dc2815f6c6ec0433bf074bd5a56c6dc5ba213e372e67c54ef] [eec40f727216648d609280169860ed9a6ca279a20c612acb4476e5e8eadcec208d9f8d1391683efe90613c6777bc2c00c111c37b283c7f962c82d825f737e90e] [172.17.23.146] [172.17.23.146] 1 Success EmSetupApi-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\EmSetupApi-20.1.2.14.jar-d28dbbd0356db56f\ 137050 95356690b1b791a53c150c8f439ab707 Not Signed 2025-03-28 16:06:15 +0000 UTC 2025-03-28 16:06:15 +0000 UTC 0348c2c6ed6da8693981588795b5dadf1f4c825f 1196637bdff6fcc7a08b021f581e1406ef6097bc91e47c4dc2815f6c6ec0433bf074bd5a56c6dc5ba213e372e67c54ef eec40f727216648d609280169860ed9a6ca279a20c612acb4476e5e8eadcec208d9f8d1391683efe90613c6777bc2c00c111c37b283c7f962c82d825f737e90e 2025-03-28 16:06:36 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
326b621474786c3a956a35665f74162d6368f683f36a3279c8ba87ff4db0c088 [68a26ec274eb3d0bf454e3f7, 68a26ec274eb3d0bf454e3f8, 68a3dc7b3a4d559703d13f32, 68a3dc7b3a4d559703d13f33, 68a54a317a345dcf1b41bfa9, 68a54a317a345dcf1b41bfaa, 68a54a317a345dcf1b41bfab, 68a6b943a019f30e13887e91, 68a6b943a019f30e13887e92, 68a6b943a019f30e13887e93] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-17T23:59:47Z, 2025-08-17T23:59:50Z, 2025-08-19T02:00:28Z, 2025-08-19T02:00:30Z, 2025-08-20T04:00:28Z, 2025-08-20T04:00:30Z, 2025-08-20T04:00:31Z, 2025-08-21T06:00:59Z, 2025-08-21T06:01:01Z, 2025-08-21T06:01:02Z] [5fbdd10ee7659f1aee5335bd7e198fb9] [c20c64d0f39da127033b6d188e35ec7ff4223707] [09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd] [56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb] [172.29.132.47] [172.29.132.47] 1 Success Microsoft.PowerShell_profile.ps1 C:\Windows\System32\WindowsPowerShell\v1.0\ 86 5fbdd10ee7659f1aee5335bd7e198fb9 Not Signed 2018-07-30 20:39:44 +0000 UTC 2018-07-30 20:39:44 +0000 UTC c20c64d0f39da127033b6d188e35ec7ff4223707 09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd 56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb 2025-08-09 08:03:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
322b2b5c4044e2657eb4e703d336eac4e2cf0f8ba8fa111c62d0474eb76db2a9 [68a4ccc785b914a60d739e44, 68a4ce1fc826337212f53be4, 68a4d07753a851daf11e692e, 68a4d07753a851daf11e6941, 68a4d2d1ff2b441b84428126, 68a4d2d1ff2b441b84428139] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setroot.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] [d3087075a6dd224443a1f6aac8e03744] [78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5] [e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579] [fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f] [10.36.132.49] [10.36.132.49] 1 Success setroot.cmd C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\ 937 d3087075a6dd224443a1f6aac8e03744 Not Signed 2021-10-20 13:41:06 +0000 UTC 2016-12-02 07:18:54 +0000 UTC 78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5 e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579 fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
321acf2e7ad2071fa443468fce5535f6614be43029bd05b5c38e86e0ef393a11 [68a4b0fb13fac5171eeef0d8] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.DTO.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:08Z] [71da969b9025ad135aef8a5a5df701be] [e0a0af76470e1bfe566cf15d4590c4401e6bac98] [cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408] [c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.Pegasus.DTO.dll C:\Program Files (x86)\Cyrun\ADS - 17978\ 740352 71da969b9025ad135aef8a5a5df701be Pegasus 7.0.4.4644 Not Signed 2019-09-13 08:50:00 +0000 UTC 2025-05-22 18:17:49 +0000 UTC e0a0af76470e1bfe566cf15d4590c4401e6bac98 cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408 c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5 2025-05-22 18:47:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
31f330b81ab52a1bdb723d63871b80d93b13e89fb24a04986909f54abb7eae82 [68a472cff502bbc3c30ebf3f, 68a474e54bf464a98201b8d1, 68a474e54bf464a98201b8d3] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\SuperPutty\WeifenLuo.WinFormsUI.Docking.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\SuperPutty\SuperPutty.exe] [C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T12:49:18Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z] [d648dd097b893b61d4ca48a9c46d1ad3] [6c74bee5592c503e7d375478bb08922203b4b327] [ae92aecfeb8c9ab586691f0f7a59a50c7f449544645d3778321c08744fc1cec16e8e6a44bdeb5652d0f0d65696d657b6] [81ad3300efb430582a9e3f8e3e19ee0897ab3aa7166d48917f15c16b40987817988a4716078a2b29aee3097a5025edd5753bacce10edbeb1e629e13d6af4bc42] [172.17.23.146] [172.17.23.146] 1 Success WeifenLuo.WinFormsUI.Docking.dll C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\ DockPanel Suite for .Net 364544 d648dd097b893b61d4ca48a9c46d1ad3 DockPanel Suite 2.9.0.0 Not Signed 2018-10-23 18:59:38 +0000 UTC 2024-04-16 15:29:39 +0000 UTC 6c74bee5592c503e7d375478bb08922203b4b327 ae92aecfeb8c9ab586691f0f7a59a50c7f449544645d3778321c08744fc1cec16e8e6a44bdeb5652d0f0d65696d657b6 81ad3300efb430582a9e3f8e3e19ee0897ab3aa7166d48917f15c16b40987817988a4716078a2b29aee3097a5025edd5753bacce10edbeb1e629e13d6af4bc42 2025-03-28 16:06:36 +0000 UTC None None 2025-02-06 09:25:37 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
31b5da4436dcda99daa9b4d389df222f22f4709159f9165c955fe24fd5323762 [68a3146b5f0c41860c8c8556, 68a3146b5f0c41860c8c857a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\ast.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [d5f2228dec6e8dc3cbdc9862ec1605cd] [79342d19808ee815e433f96728b0e4d3ff1e5c29] [86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06] [868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0] [172.17.252.131] [172.17.252.131] 1 Success ast.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 102841 d5f2228dec6e8dc3cbdc9862ec1605cd Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 79342d19808ee815e433f96728b0e4d3ff1e5c29 86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06 868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
31ace35747ecced749c928084db3f90c66e95bd9602971bb5ceef131a953689f [68a389627bcaf39ed5409b94] [2] [ellisonmea] [i-hvmigration3] [WVUHS] [C:\Scripts\Onedriveownership.ps1] [Servers] [Servers Audit] [v2269.866] [] [Not Signed] [C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T20:13:13Z] [9aae1bdf85a8905cf2d96a5f8ef25933] [3065aa4cbf9f3a2341c95212ea1891817294a142] [c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e] [9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16] [172.17.23.32] [172.17.23.32] 1 Success Onedriveownership.ps1 C:\Scripts\ 910 9aae1bdf85a8905cf2d96a5f8ef25933 Not Signed 2025-04-08 20:39:11 +0000 UTC 2025-04-08 20:39:11 +0000 UTC 3065aa4cbf9f3a2341c95212ea1891817294a142 c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e 9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16 2025-08-18 20:13:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3196423864811fbe22bf53f80cc68526cf48ea70190a212e4cc48db649034591 [68a50ddd41a24e74bb2aa5d2] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\NellcorPuritanBennettB_5_0_3_6.msi] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:50:47Z] [a95a1bbcab7cae689156d805a65bdd9e] [b55cf6fa2977d2fc1917b131c20390b3c1f26613] [66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f] [ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220] [172.17.23.18] [172.17.23.18] 1 Success NellcorPuritanBennettB_5_0_3_6.msi C:\Users\CA_gs10109\Downloads\ 832000 a95a1bbcab7cae689156d805a65bdd9e Not Signed 2025-08-19 23:50:41 +0000 UTC 2025-08-19 23:50:42 +0000 UTC b55cf6fa2977d2fc1917b131c20390b3c1f26613 66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220 2025-08-19 23:50:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
318d814bff375eefc6e29af2e0c2de1b068f1446506cc5f35016243e3a35300f [68a1ab83995f21981882f87f, 68a2fd0889defb6e59ac74ce, 68a44ea8ec4473d55579feaa, 68a5a03ec841a3410bc8c339, 68a6f1e15639a382a0bc50f8] [2] [hyperwebsvc] [I-NCTXEHH-001] [WVUHS] [C:\HomeHealth\EpicHHEnvSUP_SmartUpdate.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T10:06:06Z, 2025-08-18T10:06:06Z, 2025-08-19T10:06:06Z, 2025-08-20T10:06:06Z, 2025-08-21T10:06:06Z] [8594a55773a5d5e9c9180136966b5739] [596dbf0a2adc99c52a2c70c81b17d94db0c605e0] [35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc] [7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8] [172.17.146.25] [172.17.146.25] 1 Success EpicHHEnvSUP_SmartUpdate.bat C:\HomeHealth\ 94 8594a55773a5d5e9c9180136966b5739 Not Signed 2023-04-26 14:42:09 +0000 UTC 2025-04-17 14:46:58 +0000 UTC 596dbf0a2adc99c52a2c70c81b17d94db0c605e0 35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc 7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8 2025-08-09 10:06:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3183ca151646505652e1fc5a9b93bc995d5e96e9edb292db6b3b408675579dcb [68a4ccc785b914a60d739e52, 68a4ce1fc826337212f53bef, 68a4d07753a851daf11e693a, 68a4d07753a851daf11e6950, 68a4d2d1ff2b441b84428132, 68a4d2d1ff2b441b84428148] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\Process.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [d2f5da45fcdf1a8df76585382af60f4d] [8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e] [3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad] [813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0] [10.36.132.49] [10.36.132.49] 1 Success Process.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\ 22528 d2f5da45fcdf1a8df76585382af60f4d Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:12:50 +0000 UTC 8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e 3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad 813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
369f51727e50dcf477a40a933c8267fe16a92545b1338a513585d445367b7fc7 [68a71d98771132224a617f87] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.UI.ViewModel.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:41Z] [66179cdf28f4b1c4a642cb3cb643d1f6] [e254511fba63b72ce68c42fd81c0b68d19eb238c] [08ac91c202280cd79fe77b6bda4417ec52b4556a22650ed967f9cb3286e82672a473a1a7b26e5590050d1f4d9939d9d8] [dacfde5491621f7bf9c310e0765a411cbe7773106960333cb5350b7831d614fc3119e9deb5283ff845bfec37c23c21b444a6b5cad95a5d2c31239c885a60d829] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.UI.ViewModel.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.UI.ViewModel 11776 66179cdf28f4b1c4a642cb3cb643d1f6 VideoOS.Mobile.UI.ViewModel 20.2.2516.1 Not Signed 2020-05-11 15:02:02 +0000 UTC 2020-05-11 15:02:02 +0000 UTC e254511fba63b72ce68c42fd81c0b68d19eb238c 08ac91c202280cd79fe77b6bda4417ec52b4556a22650ed967f9cb3286e82672a473a1a7b26e5590050d1f4d9939d9d8 dacfde5491621f7bf9c310e0765a411cbe7773106960333cb5350b7831d614fc3119e9deb5283ff845bfec37c23c21b444a6b5cad95a5d2c31239c885a60d829 2025-07-16 19:27:14 +0000 UTC None None 2021-08-31 07:41:59 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
369ed67f529db9ddc1b609f2c9340263faa72cd366a4e56589df29de1df74c5c [68a48674c4cb2500be692611, 68a48674c4cb2500be692627] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Stryker.iBedServer.Common.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [597d9c63bf971dd23ead4d6abf7295b8] [9ba9d7d94b70830e230ef01b19bab207b253f1d5] [442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5] [8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Common.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Stryker.iBedServer.Common 38664 597d9c63bf971dd23ead4d6abf7295b8 Stryker.iBedServer.Common 1.0.0 Stryker Corporation 2023-03-16 10:22:14 +0000 UTC 2024-02-15 18:02:05 +0000 UTC 9ba9d7d94b70830e230ef01b19bab207b253f1d5 442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5 8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3691c63ee84b2628e0c021418d0dee979b50ce550178db3efc5e19fe5bad5b4c [68a472cff502bbc3c30ebf3e, 68a474e54bf464a98201b8d0, 68a474e54bf464a98201b8d2] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\SuperPutty\log4net.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\SuperPutty\SuperPutty.exe] [C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T12:49:17Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z] [f69c36bbf1220bdd2a114f4abc6b0fc1] [d0bb80306ce3dc12cc0c893e28fef27d721c1b7e] [9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f] [6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633] [172.17.23.146] [172.17.23.146] 1 Success log4net.dll C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\ Apache log4net for .NET Framework 2.0 311296 f69c36bbf1220bdd2a114f4abc6b0fc1 log4net 1.2 Not Signed 2018-10-23 18:59:50 +0000 UTC 2024-04-16 15:29:39 +0000 UTC d0bb80306ce3dc12cc0c893e28fef27d721c1b7e 9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f 6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633 2025-03-28 16:06:36 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
36584a0b85a7d69a4e99e80ffd83d0860b0769d634d7e6c5e03dad289d61c026 [68a34b98a6132bf659cce5b8, 68a34df0b71eea1289980a1d] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Black.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [a436424bbdddc4db06320959ee1cfb6d] [20408e8bff0281afd498580863ace0478c8367cf] [a68dd6bea9a81aec680b701fd8e02cf4490b4d832b80c9ffa19bd6a7a3d8feb47af89a92e9e3df25cddca6abae543263] [eadfd5592b03efff930d9c73b81429613b2fba8af82f4d387ebfdba36d2962d64b7a3acc02af99b17ea31a4ca1fe465a70c7175f8eec74924427917536610059] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Office2010Black.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Office2010Black 756224 a436424bbdddc4db06320959ee1cfb6d Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 20408e8bff0281afd498580863ace0478c8367cf a68dd6bea9a81aec680b701fd8e02cf4490b4d832b80c9ffa19bd6a7a3d8feb47af89a92e9e3df25cddca6abae543263 eadfd5592b03efff930d9c73b81429613b2fba8af82f4d387ebfdba36d2962d64b7a3acc02af99b17ea31a4ca1fe465a70c7175f8eec74924427917536610059 2025-06-09 21:58:51 +0000 UTC None None 2022-04-22 07:51:17 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
36490d3c9471838f3c20f0d365fb262e57a7b0a20eee7edd0b4e4cff4df5a381 [68a1e0bc5a612562ec7682af] [2] [SYSTEM] [I-NCTXSA-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_diuxbi12.wl4.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:01:20Z] [] [] [] [] [172.17.188.22] [172.17.188.22] 1 Success __PSScriptPolicyTest_diuxbi12.wl4.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:01:20 +0000 UTC 2025-08-17 14:01:20 +0000 UTC 2025-08-17 14:01:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
35831e10050275f4a36fb93aa4db13d2edf34749154ef4636a29477d9f30c565 [68a4ccc785b914a60d739e43, 68a4ce1fc826337212f53be3, 68a4d07753a851daf11e692d, 68a4d07753a851daf11e6940, 68a4d2d1ff2b441b84428125, 68a4d2d1ff2b441b84428138] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [D:\Qdx_work\custom_scripts\CloverleafInterfaceRecycle.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] [829df969d661e3a13c15827ed7d696a3] [b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b] [d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91] [95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b] [10.36.132.49] [10.36.132.49] 1 Success CloverleafInterfaceRecycle.cmd D:\Qdx_work\custom_scripts\ 1212 829df969d661e3a13c15827ed7d696a3 Not Signed 2020-03-23 18:22:50 +0000 UTC 2020-03-23 18:22:50 +0000 UTC b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91 95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
357fd5748acb778b1de6237309eb65fe0290be08d5e32fc02134e884c12a1306 [68a4855388937a93ff144375] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Core.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:08:10Z] [3ba54cdf80da731b9f6ebe6c649cf015] [8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6] [9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8] [ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Authentication.Core.dll C:\Stryker\iBed Server Application\Stryker.Authentication\ Stryker.iBedServer.Authentication.Core 12800 3ba54cdf80da731b9f6ebe6c649cf015 Stryker.iBedServer.Authentication.Core 1.0.0 Not Signed 2023-03-16 10:22:14 +0000 UTC 2023-03-16 10:22:14 +0000 UTC 8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6 9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8 ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691 2025-08-19 14:08:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
355e3be9137603e9406af1b3997df90c37792223758a0296e3e1d445eee50130 [68a48674c4cb2500be69263c, 68a48674c4cb2500be69264e] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Formatting.Compact.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Formatting.Compact.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z] [e325b6bbf9e72388bec675215ea5833f] [6acca41bbb6bba20550815353a03fdace8750697] [b067bb201c025089b927dab4c8fd6497f8434a227734b1bd82e2a74888db5923e0d59399c65e296db6cbfe2ccee368fe] [f24db26199445f962b88260d56f0525298010bc2eda451ba283beb8534422b1817562454ada9f6c96e6eb001399b31eeec7e9c16e27cdd8f91526ab9e543f4df] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Formatting.Compact.dll C:\ProgramData\Laurel Bridge Software\Compass\www\ Serilog.Formatting.Compact 8704 e325b6bbf9e72388bec675215ea5833f Serilog.Formatting.Compact 1.1.0 Not Signed 2024-08-30 13:04:08 +0000 UTC 2024-08-30 13:04:08 +0000 UTC 6acca41bbb6bba20550815353a03fdace8750697 b067bb201c025089b927dab4c8fd6497f8434a227734b1bd82e2a74888db5923e0d59399c65e296db6cbfe2ccee368fe f24db26199445f962b88260d56f0525298010bc2eda451ba283beb8534422b1817562454ada9f6c96e6eb001399b31eeec7e9c16e27cdd8f91526ab9e543f4df 2025-04-29 13:21:39 +0000 UTC None None 2025-03-17 10:21:57 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-29 06:25:09.433 +0000 UTC
3554782b0252734754cb8fc6c12b1f6561ae7b70d0158ce40cfe36f9f7bcba5c [68a31df4554d4b0dc35a15ad] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:34:58Z] [c85702cbbe5bef4fbdffdd797532d073] [8dcf05881e2b6cb1764d87d63a94201380891187] [5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a] [d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2199 c85702cbbe5bef4fbdffdd797532d073 Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 12:34:57 +0000 UTC 8dcf05881e2b6cb1764d87d63a94201380891187 5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a 2025-08-18 12:35:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3549bd34bf9410489c6cb1ddd32d5fac8ca1c2eef1db975d40d7957cc15ca81d [68a71d98771132224a617f86] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.UI.Mobile.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:41Z] [50703aa2aed8f66888228f50fb113350] [4b296e74deab8d2e24695dbe20dac26e33c79c49] [12f62289035dbea4e81c9990e8d9624383636d020be7dcef5650b34e18e6f23ff883d39e028d9d13bf454f7697e88323] [aa60600b00dcb7b6ecca70b918b0c2a0a1bf2d1b7e2ce089ba7a59f8a171a47f2ff9e457a0da1a1dc4f4608b20a57c78ba795aa0d015c9ec78e6d3a9636c8392] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.UI.Mobile.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.UI.Mobile 88576 50703aa2aed8f66888228f50fb113350 UI library assembly 20.2.2516.1 Not Signed 2020-05-11 15:02:06 +0000 UTC 2020-05-11 15:02:06 +0000 UTC 4b296e74deab8d2e24695dbe20dac26e33c79c49 12f62289035dbea4e81c9990e8d9624383636d020be7dcef5650b34e18e6f23ff883d39e028d9d13bf454f7697e88323 aa60600b00dcb7b6ecca70b918b0c2a0a1bf2d1b7e2ce089ba7a59f8a171a47f2ff9e457a0da1a1dc4f4608b20a57c78ba795aa0d015c9ec78e6d3a9636c8392 2025-07-16 19:27:14 +0000 UTC None None 2021-10-22 06:12:51 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
35318a9ab7f60d956cd28206294996eff20bd8bf818a962b29b6c9f61407e40f [68a1abb04b15d6efe3e372b4] [2] [SYSTEM] [i-nctx-pvs4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1nabrctk.jfe.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:15:03Z] [] [] [] [] [172.17.246.6] [172.17.246.6] 1 Success __PSScriptPolicyTest_1nabrctk.jfe.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:15:03 +0000 UTC 2025-08-17 10:15:03 +0000 UTC 2025-08-17 10:15:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
34ed77bd9b38d618a2ce47893a58840cb425e0a575f531fa6a9e86af4af738c2 [68a4864ff17c458cfe4c9f0b] [2] [SYSTEM] [i-niBedV_Prod] [NT AUTHORITY] [C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe] [Servers] [Servers Audit] [v2273] ["C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-19T14:02:35Z] [e8b2a9bad33ebe53ffc666fc129e0697] [c85a5eabbb0ae0cd9d748394f38b8b58a77723b8] [415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b] [9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33] [172.17.252.225] [172.17.252.225] 1 Success Stryker.Vision.WhiteboardApi.exe C:\Stryker\Stryker Vision\WhiteboardApi\ Stryker.Vision.WhiteboardApi 140800 e8b2a9bad33ebe53ffc666fc129e0697 Stryker.Vision.WhiteboardApi 1.1.0 Not Signed 2024-10-22 11:41:12 +0000 UTC 2024-10-22 11:41:12 +0000 UTC c85a5eabbb0ae0cd9d748394f38b8b58a77723b8 415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b 9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33 2025-05-20 14:56:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
34d12dc79fcede9d992ec588dd1c36b3cf98c2193e81e1bdd00b3e512eb0c0a7 [68a34b98a6132bf659cce5be, 68a34df0b71eea1289980a23] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2013Light.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [56accd290c79e8c4d6e4471c1c02cd59] [268c37ffeea68e27fcc1c1994820068e8dcba272] [1085ce2659347fd24079fe99912d86ed5e0c66bd51ee88d15ac9586a7b4f3e3f8b08463bdb731859ba57054bb42b9538] [1da12aa8e1da32ae7df7d6c4f3853997cf5d886ae4b4a5bb6aa0021c534fc813ce1563e0067d2fd64ea7f6b1d26b41a67f51763c44bed6f23674ccabac3845df] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Office2013Light.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Office2013Light 230400 56accd290c79e8c4d6e4471c1c02cd59 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 268c37ffeea68e27fcc1c1994820068e8dcba272 1085ce2659347fd24079fe99912d86ed5e0c66bd51ee88d15ac9586a7b4f3e3f8b08463bdb731859ba57054bb42b9538 1da12aa8e1da32ae7df7d6c4f3853997cf5d886ae4b4a5bb6aa0021c534fc813ce1563e0067d2fd64ea7f6b1d26b41a67f51763c44bed6f23674ccabac3845df 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:16 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
346ccc90937cdf654b3d5f9ac9c7809c033d6eddb18e9bd2e22f6b423dd54df3 [68a19cd53b5aad0f9d7b2018] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_do1v2xwp.v3q.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:11:40Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_do1v2xwp.v3q.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:11:40 +0000 UTC 2025-08-17 09:11:40 +0000 UTC 2025-08-17 09:11:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3448afe3dc141186a6c6b620a1311cba33347e39cca4770bd490971f1ad4b720 [68a5e788692da313f892a120, 68a5e788692da313f892a121, 68a5e788692da313f892a123, 68a5e788692da313f892a124, 68a5f7f47c4424bb71e0a54c, 68a5f7f47c4424bb71e0a54d, 68a614164c5f9631798f265b, 68a614164c5f9631798f265c, 68a6aa95090a80acc84f9b3c] [2] [SYSTEM, GEHEALTHCARE] [u-nviewpoint01] [NT AUTHORITY, U-NVIEWPOINT01] [C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] [Servers] [Servers Audit] [v2299.891, v2306.895, v2307.897, v2314.900] ["C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --install-setup elevated --original-installer C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\scc-ui;qm=0;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\ui-stream-server-2598735024688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179926804, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179928823, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184107212, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184110252, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191731809, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191733079, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --uninstall] [Bomgar Corporation] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe] [2025-08-20T15:09:53Z, 2025-08-20T15:09:54Z, 2025-08-20T15:10:10Z, 2025-08-20T15:10:12Z, 2025-08-20T16:19:50Z, 2025-08-20T16:19:53Z, 2025-08-20T18:26:55Z, 2025-08-20T18:26:56Z, 2025-08-21T05:01:48Z] [0c77dd32f741f6067ac3e399b74f593e] [e15772572e59e0f8609c248781896b10b164c38a] [01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b] [349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36] [172.25.17.210] [172.25.17.210] 1 Success bomgar-scc.exe C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\ Remote Support Customer Client 21975120 0c77dd32f741f6067ac3e399b74f593e Remote Support Customer Client 24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) Bomgar Corporation 2025-07-23 17:47:08 +0000 UTC 2025-07-23 17:47:08 +0000 UTC e15772572e59e0f8609c248781896b10b164c38a 01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b 349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36 2025-07-23 17:47:21 +0000 UTC None None 2025-05-23 06:26:22 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-23 17:51:40.399 +0000 UTC
340b1e0cf28c5acf2a35fd68cce8eca955b13e2e3856924ec7010dc5ab33929d [68a34b98a6132bf659cce5ac, 68a34df0b71eea1289980a11] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.UI.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:11Z, 2025-08-18T15:58:04Z] [4f4246307795f0720126aede580f6e25] [e0ecd802924d2d01e3e0f7f2f0844b245d5664db] [dd5d4d45ee09f79acb1998e96ab0616a928fe69e93a0244da331cf98c247be9f75bf01502a07a46c66d0c689fb4afc76] [5fbc2654c22000f16b5caca83e1ef18e3926a7f0fb4055cf6ae45555a7552d283ff2890d13274e72efda41cd7fb3f6a36d4a1dd478310358dd377e00baeabfa6] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.UI.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Telerik.WinControls.UI 6871040 4f4246307795f0720126aede580f6e25 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-03-17 19:52:02 +0000 UTC 2023-03-17 19:52:02 +0000 UTC e0ecd802924d2d01e3e0f7f2f0844b245d5664db dd5d4d45ee09f79acb1998e96ab0616a928fe69e93a0244da331cf98c247be9f75bf01502a07a46c66d0c689fb4afc76 5fbc2654c22000f16b5caca83e1ef18e3926a7f0fb4055cf6ae45555a7552d283ff2890d13274e72efda41cd7fb3f6a36d4a1dd478310358dd377e00baeabfa6 2025-05-13 12:24:10 +0000 UTC None None 2025-03-08 07:52:37 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-13 12:26:34.203 +0000 UTC
38f61b0d050e3e36ff68ea1ed7a8dbeedbcb041e12ac3143dd62b76583f337f0 [68a22d269d187f48e0f4adf9] [2] [SYSTEM] [DP-Fairmont] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tsuxgn5g.ban.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:27:28Z] [] [] [] [] [172.16.121.132] [172.16.121.132] 1 Success __PSScriptPolicyTest_tsuxgn5g.ban.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:27:28 +0000 UTC 2025-08-17 19:27:28 +0000 UTC 2025-08-17 19:27:34 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
38e07a6cfe8521a9bb62ef936912ec9893b76764259e17981c2a5ac93141cfb4 [68a311cdc2d0d6e3eb77f20c] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindADObjectFromSID.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [70ba383b483595c149fabc6fd71ebb84] [e7399b87d114d31ba0b5f7ac26958144347857f5] [94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c] [4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f] [172.25.17.86] [172.25.17.86] 1 Success FindADObjectFromSID.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 277 70ba383b483595c149fabc6fd71ebb84 Not Signed 2021-11-18 18:17:20 +0000 UTC 2024-09-27 21:01:33 +0000 UTC e7399b87d114d31ba0b5f7ac26958144347857f5 94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c 4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
389f405cfa66b26004484733937a22624782a5d86456e0c35e007b60ebc8e359 [68a472a799ad3734d804e2ed] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcmail-jdk14-138.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [e2c72e958b82b9373c13739c9f14009c] [14ff2dfec8578f5f6838c4d6a77a86789afe5382] [f2bfdfba137836e5bb03bb4fa7a9cadedc080b6fb066bc300750bc7cece257f3d952d7fd91ec317e09ad2f676051c0de] [60ed9f6519b4cac617fb0968380c618b09bad399799632c112c864661d44e09aeb957482edba3fcb0de96ab61af5aef905a7548df21a72d3a6dc7d421e640bc4] [172.17.23.146] [172.17.23.146] 1 Success bcmail-jdk14-138.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 192035 e2c72e958b82b9373c13739c9f14009c Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 14ff2dfec8578f5f6838c4d6a77a86789afe5382 f2bfdfba137836e5bb03bb4fa7a9cadedc080b6fb066bc300750bc7cece257f3d952d7fd91ec317e09ad2f676051c0de 60ed9f6519b4cac617fb0968380c618b09bad399799632c112c864661d44e09aeb957482edba3fcb0de96ab61af5aef905a7548df21a72d3a6dc7d421e640bc4 2025-08-19 11:29:20 +0000 UTC None None 2025-06-03 01:02:11 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
387c409da5f22f77cc7fbb0573725479735b7be82d5222adf27f95c32d216f83 [68a33f79adaf7aae4bae834a] [2] [CA_Jnt_NVR2] [I-NNVRMANAGE] [WVUHS] [C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\__PSScriptPolicyTest_bcrnu3px.2x4.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-18T14:57:57Z] [] [] [] [] [172.17.250.210] [172.17.250.210] 1 Success __PSScriptPolicyTest_bcrnu3px.2x4.ps1 C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\ 82 Not Signed 2025-08-18 14:57:56 +0000 UTC 2025-08-18 14:57:56 +0000 UTC 2025-08-18 14:58:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
386fb9fefc2fb12d818524ec24b17da4af6f60f65ab46d19559debde3b35d34a [68a3187c68080fcb17789d1a] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikmcgc3u.bvf.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:11:38Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_ikmcgc3u.bvf.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:11:38 +0000 UTC 2025-08-18 12:11:38 +0000 UTC 2025-08-18 12:11:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
38658fc457cb062f25a6d2cc2d3f4f09c2b6124808493dcc3d4cd0c1f83693fe [68a5bdfb54e99efcaf1f8dba] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\tmpEXO_zeon5nwa.typ.psm1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T12:22:14Z] [9d8a18d3a880992b126f3dd17953b974] [6bb542e32d192bbae6733b08f789135c8ec45195] [074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800] [c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_zeon5nwa.typ.psm1 C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\ 2317071 9d8a18d3a880992b126f3dd17953b974 Not Signed 2025-08-20 12:22:13 +0000 UTC 2025-08-20 12:22:13 +0000 UTC 6bb542e32d192bbae6733b08f789135c8ec45195 074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800 c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672 2025-08-20 12:22:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3835813efce6ebbdfdf7f3ba1c8f247707bb0b9440f8ef4ce8c504d3471524f3 [68a472a799ad3734d804e2db] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-bridge-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [bc1d0f4235f20ce8864eac37c0a3f9d4] [fbe0ddb2479947b626488a9782a6cf10358a5316] [b98b2ca9d261f7370056251a990fedd02aaee6b77b02ea6dcb3c15abe2c8944359f624731a6d3883b3964df1812ef357] [18d4b260311c45a66d244d997a27d0da262afd273f209b6d6cb16026d6ee4562a2a09e1f9749dc404ff193b0e5bb81be6613b9cf7fa79790cd306a53f2581fe2] [172.17.23.146] [172.17.23.146] 1 Success batik-bridge-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 695968 bc1d0f4235f20ce8864eac37c0a3f9d4 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC fbe0ddb2479947b626488a9782a6cf10358a5316 b98b2ca9d261f7370056251a990fedd02aaee6b77b02ea6dcb3c15abe2c8944359f624731a6d3883b3964df1812ef357 18d4b260311c45a66d244d997a27d0da262afd273f209b6d6cb16026d6ee4562a2a09e1f9749dc404ff193b0e5bb81be6613b9cf7fa79790cd306a53f2581fe2 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:08:29 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
382316c0afc6d7d32fee0b4c79c925a641feceaa99a2d6eb0ad98837cfca0098 [68a16162e584c22c75f72ecb] [2] [SYSTEM] [u-v3MIntGTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vowrvir1.zyf.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:58:03Z] [] [] [] [] [172.25.19.86] [172.25.19.86] 1 Success __PSScriptPolicyTest_vowrvir1.zyf.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:58:03 +0000 UTC 2025-08-17 04:58:03 +0000 UTC 2025-08-17 04:58:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
37f8f5baccac320025e4005fff81ee9450f58762f2482b2d8124aa926fd8e0d2 [68a51fae0e8ba9c7b816e25c] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_msc5vhgd.1kv.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T01:06:44Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_msc5vhgd.1kv.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 01:06:44 +0000 UTC 2025-08-20 01:06:44 +0000 UTC 2025-08-20 01:06:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
37dd404326012449bea2fd9f621015f7ac963703300830b1a7a1b1a9990d7348 [68a472b1b022648922e23570] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmPeerStorageGroupApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [3f105e0abae2a8df645bbda1c96f7268] [9e7258c3f6743f5bb9ab4447c1333096b27ce752] [62c39ff35a323693c947260526c73d7ef56ec22c7438daca67281b663247237465f5bc8865eaac9cff27e12cea2abff4] [012df513b36aa7755b2c65f8d0c5342a89b2f2d862dcb2b45bb7e3d458b134c8f692f42d6283fff4e19e73d73a5716f71317aa89d5d4a7a5267192552514b299] [172.17.23.146] [172.17.23.146] 1 Success DsmPeerStorageGroupApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 772267 3f105e0abae2a8df645bbda1c96f7268 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 9e7258c3f6743f5bb9ab4447c1333096b27ce752 62c39ff35a323693c947260526c73d7ef56ec22c7438daca67281b663247237465f5bc8865eaac9cff27e12cea2abff4 012df513b36aa7755b2c65f8d0c5342a89b2f2d862dcb2b45bb7e3d458b134c8f692f42d6283fff4e19e73d73a5716f71317aa89d5d4a7a5267192552514b299 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
37b56e0bca875191ee27659359aecd65ee5e5833e6bc19b044442533ce78bff2 [68a48674c4cb2500be692645] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Entities.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:54Z] [115d4be1403b934451bb9297167cb005] [4252f6cecd12bc6bc9da84e1180aabd9f0dfe591] [fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8] [729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Clinical.Entities.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Stryker.iBedServer.Clinical.Entities 23040 115d4be1403b934451bb9297167cb005 Stryker.iBedServer.Clinical.Entities 1.0.0 Not Signed 2023-03-16 10:22:28 +0000 UTC 2023-03-16 10:22:28 +0000 UTC 4252f6cecd12bc6bc9da84e1180aabd9f0dfe591 fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8 729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895 2025-07-15 14:08:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
37973c4d4f335faef35c48b7934647201ca7416711b3134bf73278153d73c79d [68a472b1b022648922e23573] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmThresholdAlertApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [4ea8ffb426d665355f047dcaa9eb48c8] [c7e0d40fc89f16091c63eb293baa8a1f3ae86203] [85fedcfad9317f835dd297e277990113eb7dd678d2af3378815742caacd6276395f144a9a9f4e3bebd1b150592828e31] [9032c2aa5245972d6beaa6c06391e82904eae9283c06202a41c2b3d967266bd8a392b3b060a8c5dd7f3b52a5f8d342444ef0ea0cca197350e3603234a20d6553] [172.17.23.146] [172.17.23.146] 1 Success DsmThresholdAlertApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 72100 4ea8ffb426d665355f047dcaa9eb48c8 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC c7e0d40fc89f16091c63eb293baa8a1f3ae86203 85fedcfad9317f835dd297e277990113eb7dd678d2af3378815742caacd6276395f144a9a9f4e3bebd1b150592828e31 9032c2aa5245972d6beaa6c06391e82904eae9283c06202a41c2b3d967266bd8a392b3b060a8c5dd7f3b52a5f8d342444ef0ea0cca197350e3603234a20d6553 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
37964b88bbc9fb3258e7706bec8a095b69e2d98d18644191a95d997a6928d61b [68a523949cec397f02de9f5c] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Google.ProtocolBuffers.Serialization.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [98a8f79e5645ea95b7726493e931315a] [86842c68a759bae9ee3fa1703973342cf88cff77] [82e22bbdd37efb510b22078750491664e7c33e3ba190247fa6a953b33404f1dcbedf00c20a1a0d490facbc1369983bc1] [d9205a5799eef7a4f7d702cd51961868a0732d373ed99709cd094b6278ef2b2e34a3694ee3801f61afc87b32dfbf186feea010d2d096c318dac449081abd27e3] [172.17.22.40] [172.17.22.40] 1 Success Google.ProtocolBuffers.Serialization.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ ProtocolBuffers 57856 98a8f79e5645ea95b7726493e931315a ProtocolBuffers 2.4.1.555 Not Signed 2023-06-15 02:36:18 +0000 UTC 2023-06-15 02:36:18 +0000 UTC 86842c68a759bae9ee3fa1703973342cf88cff77 82e22bbdd37efb510b22078750491664e7c33e3ba190247fa6a953b33404f1dcbedf00c20a1a0d490facbc1369983bc1 d9205a5799eef7a4f7d702cd51961868a0732d373ed99709cd094b6278ef2b2e34a3694ee3801f61afc87b32dfbf186feea010d2d096c318dac449081abd27e3 2025-08-20 01:23:32 +0000 UTC None None 2025-08-18 20:11:03 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 07:07:07.573 +0000 UTC
3784cb0ecd01dcaca0d860cdc5fa6cefc5a66bf272faab0e32e8e010fa29a878 [68a5c689292e6715a31a0a25] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\qsettings32.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:58:48Z] [83acc2e8f5f8dc5029693cdf91758312] [8e09408e67c73503f0914d87779309194743b02a] [8fa823cc28cfe9b62f66d4aef11e2b8a9c59c3700e5f42fef3b9fbf2464c98ade6eae33bb1cba134ee6ff0f2eca1f313] [e6516b2fc2f4bdea47c6f121ab6d5b8a6b4d2056ba6c1706cd7595afcea8c7d5ae85caae863e2cc47e735588f4f5411251bc478cb9b6a662c9877bc8cc14207f] [172.17.20.104] [172.17.20.104] 1 Success qsettings32.dll C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\ qsettings32 41014 83acc2e8f5f8dc5029693cdf91758312 QS/1 Data Systems qsettings32 0, 0, 1, 20 Not Signed 2025-07-17 15:57:14 +0000 UTC 2020-05-15 13:49:38 +0000 UTC 8e09408e67c73503f0914d87779309194743b02a 8fa823cc28cfe9b62f66d4aef11e2b8a9c59c3700e5f42fef3b9fbf2464c98ade6eae33bb1cba134ee6ff0f2eca1f313 e6516b2fc2f4bdea47c6f121ab6d5b8a6b4d2056ba6c1706cd7595afcea8c7d5ae85caae863e2cc47e735588f4f5411251bc478cb9b6a662c9877bc8cc14207f 2025-07-17 15:57:20 +0000 UTC None None 2021-11-09 13:46:57 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-17 15:57:43.354 +0000 UTC
378451dd833761309947110ca8079fa3b6c1ad60a87feb1c235c423640d82be7 [68a23709d838072c28f2c580] [2] [SYSTEM] [u-nUHCPaging] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uuh0mg2w.eid.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:09:32Z] [] [] [] [] [172.25.22.57] [172.25.22.57] 1 Success __PSScriptPolicyTest_uuh0mg2w.eid.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:09:32 +0000 UTC 2025-08-17 20:09:32 +0000 UTC 2025-08-17 20:09:45 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3742126367753aaa1e94fbbc1c0f86375127f0024d89b5f22406b39dc7082c02 [68a48674c4cb2500be692607, 68a48674c4cb2500be69261d] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] [253a5be96bc1ef00690a3397f704cbe2] [c15efe63cb85ec86abe7a6be8d185207ec6a7df4] [1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517] [c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259] [172.17.252.226] [172.17.252.226] 1 Success Serilog.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog 148192 253a5be96bc1ef00690a3397f704cbe2 Serilog 2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19 Stryker Corporation 2022-04-24 05:03:44 +0000 UTC 2024-02-15 18:02:03 +0000 UTC c15efe63cb85ec86abe7a6be8d185207ec6a7df4 1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517 c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3c873753c906fb01e21cf7bcf337e6fa474ed3ef1e9ccc508c198a7aa4f2842d [68a4710327010168d4b669b8] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x3h3gz1y.44q.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T12:41:36Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_x3h3gz1y.44q.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 12:41:36 +0000 UTC 2025-08-19 12:41:36 +0000 UTC 2025-08-19 12:41:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3c821227f2dc92e0c1de7a26082facf9b0e85a2b2e3b225fab87dc6edb34453e [68a3b07b89708f7e107efed0] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\qtdzz51j.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-18T23:00:05Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success qtdzz51j.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 23:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3ba6c727c92b41483a366d4b2fd01ef6e3a8ceb7be816e024f8a0d5faf856473 [68a34b98a6132bf659cce5a9, 68a34df0b71eea1289980a0e] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [Servers] [Servers Audit] [v2258.855] ["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe" ] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [C:\Windows\explorer.exe] [2025-08-18T15:47:09Z, 2025-08-18T15:58:03Z] [804fa0b65d9ba3c4d4cec6e4d310d70d] [f23e8bbf5af98bc0c2c2df7790dea8b5db238598] [f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89] [c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e] [172.17.253.114] [172.17.253.114] 1 Success AIUniWksNET.exe C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Access It! 22830592 804fa0b65d9ba3c4d4cec6e4d310d70d Access It! 10.1.0.7 Not Signed 2023-07-25 16:11:38 +0000 UTC 2023-07-25 16:11:38 +0000 UTC f23e8bbf5af98bc0c2c2df7790dea8b5db238598 f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89 c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e 2025-06-09 21:58:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3ba0dde62898ed08dc4f55cbed827a684b970fc9f43d69de9560c7bf9dc14cd4 [68a5c71fb45a26b65db7a290] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_ISUser.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\02010125001WsgInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T13:01:11Z] [3ef6f1c756c57e30a9fd0e227865981f] [d61460d652ba2e0997e708d97b6aba533084732c] [a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783] [5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4] [172.17.20.104] [172.17.20.104] 1 Success _ISUser.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\ 94208 3ef6f1c756c57e30a9fd0e227865981f Not Signed 2025-08-20 13:01:10 +0000 UTC 2023-03-22 15:26:00 +0000 UTC d61460d652ba2e0997e708d97b6aba533084732c a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783 5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4 2025-08-20 13:01:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3b8f553d303e73365438a3420b0500b2be0c1bfd956792c327142ebb8944b62e [68a6afe50e0f3bd8deac4ce4, 68a6afe50e0f3bd8deac4cf3, 68a6afe50e0f3bd8deac4d27, 68a6afe50e0f3bd8deac4d35, 68a6afe50e0f3bd8deac4d55, 68a6afe50e0f3bd8deac4d75, 68a6afe50e0f3bd8deac4d95, 68a6afe50e0f3bd8deac4db5, 68a6afe50e0f3bd8deac4dd5, 68a6afe50e0f3bd8deac4df5, 68a6afe50e0f3bd8deac4e15, 68a6afe50e0f3bd8deac4e35, 68a6afe50e0f3bd8deac4e54, 68a6afe50e0f3bd8deac4e75, 68a6afe50e0f3bd8deac4e95, 68a6afe50e0f3bd8deac4ec6, 68a6afe50e0f3bd8deac4ed5, 68a6afe50e0f3bd8deac4ef5, 68a6afe50e0f3bd8deac4f15, 68a6afe50e0f3bd8deac4f35, 68a6afe50e0f3bd8deac4f5f, 68a6afe50e0f3bd8deac4f7f, 68a6afe50e0f3bd8deac4f9f, 68a6afe50e0f3bd8deac4fbf, 68a6afe50e0f3bd8deac4fdf, 68a6afe50e0f3bd8deac4fff, 68a6afe50e0f3bd8deac501f, 68a6afe50e0f3bd8deac503f, 68a6afe50e0f3bd8deac505f, 68a6afe50e0f3bd8deac507f, 68a6afe50e0f3bd8deac50a9, 68a6afe50e0f3bd8deac50c9, 68a6afe50e0f3bd8deac50e9, 68a6afe50e0f3bd8deac5113, 68a6afe50e0f3bd8deac5133, 68a6afe50e0f3bd8deac5153, 68a6afe50e0f3bd8deac517d, 68a6afe50e0f3bd8deac519d, 68a6afe50e0f3bd8deac51bd, 68a6afe50e0f3bd8deac51de, 68a6afe50e0f3bd8deac5210, 68a6afe50e0f3bd8deac5227, 68a6afe50e0f3bd8deac523e, 68a6afe50e0f3bd8deac525e, 68a6afe50e0f3bd8deac5292, 68a6afe50e0f3bd8deac52b2, 68a6afe50e0f3bd8deac52d2, 68a6afe50e0f3bd8deac52f2, 68a6afe50e0f3bd8deac5312, 68a6afe50e0f3bd8deac5332, 68a6afe50e0f3bd8deac5352, 68a6afe50e0f3bd8deac5372, 68a6afe50e0f3bd8deac5398, 68a6afe50e0f3bd8deac53b4, 68a6afe50e0f3bd8deac53d7, 68a6afe50e0f3bd8deac53f7, 68a6afe50e0f3bd8deac5418, 68a6afe50e0f3bd8deac5432, 68a6afe50e0f3bd8deac5457, 68a6afe50e0f3bd8deac5478, 68a6afe50e0f3bd8deac5498, 68a6afe50e0f3bd8deac54b8, 68a6afe50e0f3bd8deac54d8, 68a6afe50e0f3bd8deac54f8, 68a6afe50e0f3bd8deac5518, 68a6afe50e0f3bd8deac5538, 68a6afe50e0f3bd8deac5562, 68a6afe50e0f3bd8deac5582, 68a6afe50e0f3bd8deac55a2, 68a6afe50e0f3bd8deac55c2, 68a6afe50e0f3bd8deac55e2, 68a6afe50e0f3bd8deac5602, 68a6afe50e0f3bd8deac5622, 68a6afe50e0f3bd8deac5651, 68a6afe50e0f3bd8deac5672, 68a6afe50e0f3bd8deac56a0, 68a6afe50e0f3bd8deac56c0, 68a6afe50e0f3bd8deac56d7, 68a6afe50e0f3bd8deac56ff, 68a6afe50e0f3bd8deac571a, 68a6afe50e0f3bd8deac5740, 68a6afe50e0f3bd8deac5773, 68a6afe50e0f3bd8deac5786, 68a6afe50e0f3bd8deac57b4, 68a6afe50e0f3bd8deac57ca, 68a6afe50e0f3bd8deac57f4, 68a6afe50e0f3bd8deac5808, 68a6afe50e0f3bd8deac5821, 68a6afe50e0f3bd8deac584a, 68a6afe50e0f3bd8deac5872, 68a6afe50e0f3bd8deac5887, 68a6afe50e0f3bd8deac58b9, 68a6afe50e0f3bd8deac58ca, 68a6afe50e0f3bd8deac58f9, 68a6afe50e0f3bd8deac5904, 68a6afe50e0f3bd8deac593b, 68a6afe50e0f3bd8deac594a, 68a6afe50e0f3bd8deac596a, 68a6afe50e0f3bd8deac5981, 68a6afe50e0f3bd8deac59a9, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeImageGenerator.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [e1352cbba570b86480377cd17ade44ea] [aecca08a5aa4454630dbcaa2801f5e5a6ca728f7] [33486932710f84a58f63ce2ac6b1aa98a16983aaeb617586aee49468f57812f7f56fffff12e36f7c42da0b1b41bd2405] [3fc334ee5fab473ca1976e34ebd1f25a8d61f725c0966d61de6c6062fd331ed22258019ade821813499cfe64c04289256b5e5fe3f21a12c1e4b397addf6cb833] [172.17.30.60] [172.17.30.60] 1 Success AmeImageGenerator.dll C:\Program Files\Fujifilm\NaxisWS6\ 726016 e1352cbba570b86480377cd17ade44ea Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:00:59 +0000 UTC aecca08a5aa4454630dbcaa2801f5e5a6ca728f7 33486932710f84a58f63ce2ac6b1aa98a16983aaeb617586aee49468f57812f7f56fffff12e36f7c42da0b1b41bd2405 3fc334ee5fab473ca1976e34ebd1f25a8d61f725c0966d61de6c6062fd331ed22258019ade821813499cfe64c04289256b5e5fe3f21a12c1e4b397addf6cb833 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
3b79fa3b8774cf773d2be2b43838690be854b013fb8c2d9bd2f37f785e4ae026 [68a522d623123fde9545058b] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0ssyhuf.33a.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T01:20:16Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_x0ssyhuf.33a.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 01:20:16 +0000 UTC 2025-08-20 01:20:16 +0000 UTC 2025-08-20 01:20:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3afb843f0e4918d554f9be37562cb7b547975a9abd11f4fc7cd4dce50291a15a [68a339e2be5adbffe584e4b9] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\__PSScriptPolicyTest_fbdcuvfi.npc.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-18T14:34:00Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_fbdcuvfi.npc.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\ 81 Not Signed 2025-08-18 14:34:00 +0000 UTC 2025-08-18 14:34:00 +0000 UTC 2025-08-18 14:34:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3ac0ce5ad33b643488f75945b7140ef3ec2b3f990b038636bdc2d0cd4c8d29e4 [68a738d4754bb57d3ad736db] [2] [cm10308] [UH-VAS-01] [WVUHS] [C:\vocera\server\vocera-tray.exe] [Servers] [Servers Audit] [v2324.911] ["C:\vocera\server\vocera-tray.exe" -noconsole] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-21T15:18:35Z] [28eb80287cf5e0f85be5ad9e8cdabc43] [9b1c8a18a8bf9b733b14e96e3dc5a662f2a97950] [1ad20074b394c294ee9ccdd20e82014b6229b4f23077269a7aa5952806f5c8a6cba8ab331bb4029ddf30ee9275c7988e] [59fce4ccdcb6909b2e6f4dd15d33fe72f87cd6aaaed832386a4b58ba66618298f707de466b0783f037e1342c8b2d6989c9386e68cfad424f55d85555142e81ad] [10.21.0.116] [10.21.0.116] 1 Success vocera-tray.exe C:\vocera\server\ Vocera Tray Process 179200 28eb80287cf5e0f85be5ad9e8cdabc43 vocera-t Application 5.3.1.0 Not Signed 2019-04-08 14:58:48 +0000 UTC 2019-04-08 14:58:48 +0000 UTC 9b1c8a18a8bf9b733b14e96e3dc5a662f2a97950 1ad20074b394c294ee9ccdd20e82014b6229b4f23077269a7aa5952806f5c8a6cba8ab331bb4029ddf30ee9275c7988e 59fce4ccdcb6909b2e6f4dd15d33fe72f87cd6aaaed832386a4b58ba66618298f707de466b0783f037e1342c8b2d6989c9386e68cfad424f55d85555142e81ad 2025-08-04 15:31:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3a724546eaf82269dbb7d3bdfb06e468c774707620a80d0b604ae73ee51b77c5 [68a1e030cd200d10d4db6ee9] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tzowfqkz.l4d.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:59:07Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_tzowfqkz.l4d.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:59:07 +0000 UTC 2025-08-17 13:59:07 +0000 UTC 2025-08-17 13:59:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3a407dfeb5281ff9d41a4db1b4939a108c99fb10a4ca16c15f0f3e20407edefa [68a523949cec397f02de9f5b] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Google.ProtocolBuffers.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [2d2b20eef8c443aa8fc2219a7ee4dbc3] [431d2b680edc2f6d89fa4dc0997707dc554094da] [d96ef42801499403ac7140d83eb619ea4d53edf84609c97329a6f38b84b0c1ff474c968f7f584f3fc0329f8467d340e3] [abce8dca80ba4fe0ab1dbd56813e00a8ca1e2e9a69f4e555abfd84df8d06610226147847fe6926bf7e683d92b62828e0fdffed3df5ee580d89c48e80c2146637] [172.17.22.40] [172.17.22.40] 1 Success Google.ProtocolBuffers.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ ProtocolBuffers 323072 2d2b20eef8c443aa8fc2219a7ee4dbc3 ProtocolBuffers 2.4.1.555 Not Signed 2023-06-15 02:36:18 +0000 UTC 2023-06-15 02:36:18 +0000 UTC 431d2b680edc2f6d89fa4dc0997707dc554094da d96ef42801499403ac7140d83eb619ea4d53edf84609c97329a6f38b84b0c1ff474c968f7f584f3fc0329f8467d340e3 abce8dca80ba4fe0ab1dbd56813e00a8ca1e2e9a69f4e555abfd84df8d06610226147847fe6926bf7e683d92b62828e0fdffed3df5ee580d89c48e80c2146637 2025-08-20 01:23:32 +0000 UTC None None 2024-05-01 23:33:28 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-08-19 21:54:46.884 +0000 UTC
39bbb6b1fcd1c8a929c0111fa2ebcc2fbf66c2ab7b987badcb37459a05e14b72 [68a48674c4cb2500be69260a, 68a48674c4cb2500be692620] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.File.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] [be27dd9f311cd665785bbdeaea480d98] [af0cfabc15f87dcc8e37b65d70480600a7bf5cb9] [ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5] [4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.File.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Sinks.File 43256 be27dd9f311cd665785bbdeaea480d98 Serilog.Sinks.File 5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468 Stryker Corporation 2021-06-25 13:00:48 +0000 UTC 2024-02-15 18:02:04 +0000 UTC af0cfabc15f87dcc8e37b65d70480600a7bf5cb9 ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5 4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
39babfe5a257c3f70a0122f469eb5d455f108d92ef6ed29c2671d11c8af07ca3 [68a4631d55f0b006fedad272] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\tmpEXO_ymugosv2.gkz.psm1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T11:42:16Z] [25f6f28a796e9a16e24dbc1f4b571fcd] [432556ecdc36601d6a9fac7cf788ef1d3e80e6d4] [59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738] [6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_ymugosv2.gkz.psm1 C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\ 2317071 25f6f28a796e9a16e24dbc1f4b571fcd Not Signed 2025-08-19 11:42:15 +0000 UTC 2025-08-19 11:42:15 +0000 UTC 432556ecdc36601d6a9fac7cf788ef1d3e80e6d4 59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738 6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc 2025-08-19 11:42:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
39a4a59bc23add47d95ef4a9da5ed8297c27af52f2849a0c391ab0bec771bfb9 [68a523a99ba7c92b34976f99] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ToolbarMechanism.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:42Z] [aa7a6652a4a923356890ebff6458a56b] [6d5e975aa1d77df18c0af44663d1624e8bd1b7e3] [215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32] [05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc] [172.17.22.40] [172.17.22.40] 1 Success ToolbarMechanism.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 18432 aa7a6652a4a923356890ebff6458a56b 1.0.8565.40737 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC 6d5e975aa1d77df18c0af44663d1624e8bd1b7e3 215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32 05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3962fb481c6c37dca73c6af8cfd745879ad812345f38fa82eedad254bcc9fd4a [68a7117b9fa59e7ea79359fb] [2] [ca_tsk_peak] [i-npeak01] [WVUHS] [\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\252 - MA Enrollment\EGScript1.vbs] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Windows\SysWOW64\cscript.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:30:42Z] [de0b8d59823167dd3dd07ea725105c76] [3bcd62b837b680062b3964c4d0af63e12411d994] [e97b11649641098b56c5c92dbbd476b29b98c334ab9dc54feac562442a674d4c8a159800facd84e3e37fad1697e7cb63] [d23470974c158d1f5cbf4a3d0366838639cc693e4a5beeba1c6fb0262967717592f4247f9378d602a769bac67ee3d47876ea4597c886a027f4a5258ce41d409a] [172.17.22.1] [172.17.22.1] 1 Success EGScript1.vbs \\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\252 - MA Enrollment\ 1690 de0b8d59823167dd3dd07ea725105c76 Not Signed 2025-06-19 20:56:41 +0000 UTC 2025-06-19 20:56:41 +0000 UTC 3bcd62b837b680062b3964c4d0af63e12411d994 e97b11649641098b56c5c92dbbd476b29b98c334ab9dc54feac562442a674d4c8a159800facd84e3e37fad1697e7cb63 d23470974c158d1f5cbf4a3d0366838639cc693e4a5beeba1c6fb0262967717592f4247f9378d602a769bac67ee3d47876ea4597c886a027f4a5258ce41d409a 2025-08-21 12:30:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
393e18eb0d052c6d349ad4cbe0448408e6bb2253e3e9f45d8430b420c388bd81 [68a472a799ad3734d804e2da] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-awt-util-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:35Z] [ee45236e45c1bdaeee4979c79e6c68e6] [652badd31839669cfa5f01442f8569fbecd21e8f] [677ab1f7d3e330a6d7bbc3d181394300e24e0d9a197834ac7b79250aba337a0e01879a029d5ac9319260683b56b209e4] [51caee31c2d7ffde777f7f82ab9c7fb9bff07d8647389e9f33ec6c9310e8810c87e8bd14741869a50cc26eaf408285603382091d6a814aba44c587934cab2d4a] [172.17.23.146] [172.17.23.146] 1 Success batik-awt-util-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 422448 ee45236e45c1bdaeee4979c79e6c68e6 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 652badd31839669cfa5f01442f8569fbecd21e8f 677ab1f7d3e330a6d7bbc3d181394300e24e0d9a197834ac7b79250aba337a0e01879a029d5ac9319260683b56b209e4 51caee31c2d7ffde777f7f82ab9c7fb9bff07d8647389e9f33ec6c9310e8810c87e8bd14741869a50cc26eaf408285603382091d6a814aba44c587934cab2d4a 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:00:15 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
390559b10f0df7e9467937b8aab35074299a2e8f481be7229a5152e3ffe7ed71 [68a1abecbfda59a8cbb3b139] [2] [SYSTEM] [i-nctxddc-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_vd4axank.0so.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:16:01Z] [] [] [] [] [172.17.146.23] [172.17.146.23] 1 Success __PSScriptPolicyTest_vd4axank.0so.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:16:01 +0000 UTC 2025-08-17 10:16:01 +0000 UTC 2025-08-17 10:16:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
40bc530593f9173e90aff5cd000c8cb185ebf851f9617b131d43f81989a9ad41 [68a472b1b022648922e2357e] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\itext-2.1.5.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [a42254f61f65ec0bbfca66193196ca9d] [a25c4c425ebf812c65184e81d4c84d22e8641b35] [ab94412c5142eaa0faabe3246cb64803b341407c07d2f5824a575eb7de003f72699ca244dcfbf262e5934e2d5f792389] [2d9f53d478a3497617961d8868f1c291ebf0252fc0fff8c664887be24fd326b617aa89e8e3f14303832088467e8f9a21d023a59853b598518d35ec1db45bd322] [172.17.23.146] [172.17.23.146] 1 Success iText-2.1.5.jar C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\ 1117661 a42254f61f65ec0bbfca66193196ca9d Not Signed 2022-05-18 18:38:18 +0000 UTC 2021-02-09 20:57:00 +0000 UTC a25c4c425ebf812c65184e81d4c84d22e8641b35 ab94412c5142eaa0faabe3246cb64803b341407c07d2f5824a575eb7de003f72699ca244dcfbf262e5934e2d5f792389 2d9f53d478a3497617961d8868f1c291ebf0252fc0fff8c664887be24fd326b617aa89e8e3f14303832088467e8f9a21d023a59853b598518d35ec1db45bd322 2025-08-08 17:07:24 +0000 UTC None None 2024-01-26 10:40:05 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-08 17:11:03.174 +0000 UTC
409361e2925b82cbf6cfda29f317520ff097d1d57da407655d436ed30c234c83 [68a1c38b973b3b5b863775cc] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_r1zh4xco.ihx.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T11:56:52Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_r1zh4xco.ihx.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 11:56:52 +0000 UTC 2025-08-17 11:56:52 +0000 UTC 2025-08-17 11:56:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
408d1d3e00f66c7c097415bd83df1faf13c1b569544f912c5338b77d9670d9c5 [68a223f72bb592d298740955] [2] [SYSTEM] [uvOSCCN2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hhahwsla.xvw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T18:48:17Z] [] [] [] [] [172.25.18.157] [172.25.18.157] 1 Success __PSScriptPolicyTest_hhahwsla.xvw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 18:48:17 +0000 UTC 2025-08-17 18:48:17 +0000 UTC 2025-08-17 18:48:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4050bae7cd6a7c189962cc5b8c79f8c21cb51a602b7059580ed2639dfc3e4b6c [68a25f08a862a9b86d2b3e0e] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\cm4vi1nn.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:14Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success cm4vi1nn.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-17 23:00:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3fd6123c84aa2ee51ad22f9dd1a1c58f111163f5dd88b2bb6bed125d924bb8f0 [68a2c431b2390923232c295a] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b1tu0kxe.c1z.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T06:11:49Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_b1tu0kxe.c1z.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 06:11:49 +0000 UTC 2025-08-18 06:11:49 +0000 UTC 2025-08-18 06:12:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3f4d26d2d34d6363bb0c37b814b606eb085dd4e3e56de1acc3e76b03795ad41e [68a71d98771132224a617f7d] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Event Server\VideoOS.UI.Common.WPF.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP7C7E~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [f0903894f6fc8beb71b547ccaaad08a8] [05e7c18d360e478b82dd4be7b27b9e8186a3fa09] [4f161f73a0193eae199aacf8c4ab06403fe7286924dd549cc6705dffcdf4fb69f0565238db89afd7289a5243876fd129] [c599cf0fac3fe56121fb1bc5eacf2e8227d9e48a28d610fd45592943225bda08a83c6b6c5037b26177ba6547ade6bbdd144da9b335ea7ac9d90e520bef261636] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.UI.Common.WPF.dll C:\Program Files\Milestone\XProtect Event Server\ Common WPF 1626112 f0903894f6fc8beb71b547ccaaad08a8 VideoOS 20.2.1928.1 Not Signed 2020-05-01 19:25:28 +0000 UTC 2020-05-01 19:25:28 +0000 UTC 05e7c18d360e478b82dd4be7b27b9e8186a3fa09 4f161f73a0193eae199aacf8c4ab06403fe7286924dd549cc6705dffcdf4fb69f0565238db89afd7289a5243876fd129 c599cf0fac3fe56121fb1bc5eacf2e8227d9e48a28d610fd45592943225bda08a83c6b6c5037b26177ba6547ade6bbdd144da9b335ea7ac9d90e520bef261636 2025-07-16 19:27:14 +0000 UTC None None 2022-04-11 13:26:54 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
3f307e3d89f6577b8a0da2aa01b182740d6e157ee29c09338dc0f206c4a73ed0 [68a34b98a6132bf659cce5b7, 68a34df0b71eea1289980a1c] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataEntities.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z] [23f4c4bf3f3744246e5d5a9e7a94a624] [d5847e3644ee656be1d90f885a09ecadd39c7073] [d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d] [56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.DataEntities.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Data Entities 3763712 23f4c4bf3f3744246e5d5a9e7a94a624 Access It! 10.1.0.7 Not Signed 2023-04-26 15:02:48 +0000 UTC 2023-04-26 15:02:48 +0000 UTC d5847e3644ee656be1d90f885a09ecadd39c7073 d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d 56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18 2025-05-13 05:13:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3f1b19d863fe5465ce545c4b8d093cff1a7d4196615f002f775e75020c5dafd9 [68a5d4b82ee390c0e8baf302] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_501hqqj5.bkq.ps1] [Servers] [Servers Audit] [v2293.885] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-20T13:59:18Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_501hqqj5.bkq.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ 80 Not Signed 2025-08-20 13:59:18 +0000 UTC 2025-08-20 13:59:18 +0000 UTC 2025-08-20 13:59:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3ef437ab8a91bb07396f993eb1b443ed52f2f878e4c147b7a765d21366286724 [68a472a799ad3734d804e2d7] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [Servers] [Servers Audit] [v2272] ["C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-19T12:48:34Z] [ac40dff88cd86949564533d4f5287f9e] [6caf9afb09910475ace60c4e392fea305e9b3732] [9e10faeb4f5a1b06dbbaf01ac68ca0de7eca5e1f8db1152d64762ba16fcd0c41f1236c575cb1ab9fce0e834116a74592] [993036a8fe3277e35f383b0745250c3eac1944cab5e7ad190aeec21b54b1cb1f78392c95d4f588dfb556fb601eddb03e2199888b68efb8c5dc4e4f399904b95b] [172.17.23.146] [172.17.23.146] 1 Success EnterpriseClient.exe C:\Program Files (x86)\Dell\Enterprise Manager\msagui\ Dell Storage Manager Client 12285399 ac40dff88cd86949564533d4f5287f9e Dell Storage Manager Client 20.1.2.14 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 6caf9afb09910475ace60c4e392fea305e9b3732 9e10faeb4f5a1b06dbbaf01ac68ca0de7eca5e1f8db1152d64762ba16fcd0c41f1236c575cb1ab9fce0e834116a74592 993036a8fe3277e35f383b0745250c3eac1944cab5e7ad190aeec21b54b1cb1f78392c95d4f588dfb556fb601eddb03e2199888b68efb8c5dc4e4f399904b95b 2025-03-20 18:48:13 +0000 UTC None None 2024-01-30 14:25:21 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-10 19:13:39 +0000 UTC
3ed751253cac2e36e658b51aadd1c769514ba9f17d8ad49a9d80100e2741564a [68a4ccd13efa8341e1766c86] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:11Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:13:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3eb85a6d8d93e0d3ee61087dfb0427718c11cba113e404d84a4e203359470984 [68a4d176f9567d58ffcb80f3] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:33:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:33:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3d4881f311273e05e78c1fa3cf266ae0c57ed5af21815a74e6e67eec4a25a155 [68a472b1b022648922e2359e] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\saaj-impl-1.4.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [5309e6caa579acbcd2fcb34403cca27c] [6bfb1664ab42506a6547a3972395ea3f5b59ef6c] [420714d9662dd30451b9a27a0a5977c43f487b53d1e5f7fa50057b5eb9917b8e9cc6aa7896d6ebd75bfd60b1e7d60739] [962ff03e03aeb0ac98172634b7b8027942561317d411d9d8ec821881c5e5040d2f1c9648dda8658327ad4326c82c9db5c5920f2a817459576c1732684f03764f] [172.17.23.146] [172.17.23.146] 1 Success saaj-impl-1.4.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\saaj-impl-1.4.0.jar-8295c14d5d975fef\ 498924 5309e6caa579acbcd2fcb34403cca27c Not Signed 2025-03-28 16:06:15 +0000 UTC 2025-03-28 16:06:15 +0000 UTC 6bfb1664ab42506a6547a3972395ea3f5b59ef6c 420714d9662dd30451b9a27a0a5977c43f487b53d1e5f7fa50057b5eb9917b8e9cc6aa7896d6ebd75bfd60b1e7d60739 962ff03e03aeb0ac98172634b7b8027942561317d411d9d8ec821881c5e5040d2f1c9648dda8658327ad4326c82c9db5c5920f2a817459576c1732684f03764f 2025-03-28 16:06:36 +0000 UTC None None 2025-02-05 22:12:43 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-10 18:13:03.59 +0000 UTC
3ceb6eeb14c4401bc1e6e8c3322b3cb8776c6cb09fa38cd6237a60b0c334e3a7 [68a737ea9e9b12dd92373d92] [2] [jm10132] [i-nZiggy] [WVUHS] [C:\Users\jm10132\Downloads\WinMerge\Merge7z\Merge7z.dll] [Servers] [Servers Audit] [v2324.910] [] [Takashi Sawanaka] [C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe] [C:\Windows\explorer.exe] [2025-08-21T15:13:31Z] [6ccc8fbf39e19177b030852a232dc947] [13b6a2aab7693fe4cdae031dff28e261648f0783] [ba35ca36f1c5ee02830d88915ed30206daa785d0f04c28a91b252c53f0aee4c192f67208412fc8caea6bec9c68b909b4] [f3e4b92aabd74ed5b025990b48603b8c3adf63d6888fb7ae799216ddf4f6421676eccf14e4371049e9fe29f230ca916cff86d720fc08863eb951b54f3e75337a] [172.17.20.2] [172.17.20.2] 1 Success Merge7z.dll C:\Users\jm10132\Downloads\WinMerge\Merge7z\ 7-Zip GUI 331080 6ccc8fbf39e19177b030852a232dc947 7-Zip 25.00 Takashi Sawanaka 2025-07-20 18:49:52 +0000 UTC 2025-08-13 19:37:35 +0000 UTC 13b6a2aab7693fe4cdae031dff28e261648f0783 ba35ca36f1c5ee02830d88915ed30206daa785d0f04c28a91b252c53f0aee4c192f67208412fc8caea6bec9c68b909b4 f3e4b92aabd74ed5b025990b48603b8c3adf63d6888fb7ae799216ddf4f6421676eccf14e4371049e9fe29f230ca916cff86d720fc08863eb951b54f3e75337a 2025-08-13 19:38:01 +0000 UTC None None 2025-08-04 13:46:59 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-12 21:05:55.355 +0000 UTC
3cd049c2f8c5bdb6c368fb84bca681b13665b252ba5028e71ad65d5879480dff [68a16556adb18f56bab6ec7c, 68a2b4a8c289c4a5fdc2edaf, 68a4085529d877e962e90ae6, 68a557e71e5d7a1efef2595b, 68a6a990a81c561389c37865] [2] [SYSTEM] [u-vpg1b] [NT AUTHORITY] [C:\icm\pcce\PG1B\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [efcc66337aaed727c34450475323c64d] [9e1f8b6df794cb9dced363dc53ce3f6a6cc46052] [607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834] [07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9] [172.25.196.36] [172.25.196.36] 1 Success purgeold.bat C:\icm\pcce\PG1B\bin\ 410 efcc66337aaed727c34450475323c64d Not Signed 2021-10-07 20:04:30 +0000 UTC 2023-06-01 14:34:59 +0000 UTC 9e1f8b6df794cb9dced363dc53ce3f6a6cc46052 607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834 07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3c997a11c3fb8b43a3a8faa23c2e227ff786768b4d03cd0e0bfc9e74d09a02ec [68a712752561fbf503357df6] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmpEXO_a3m010sw.ls4\tmpEXO_a3m010sw.ls4.psm1] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:30:56Z] [d63ffcfd086ac879d9ff2e5bc4f61d3e] [8f83e7083c5f6bf7b367844e330f255d4d32608a] [33b170f3d3854fa7fe2b718f62e4ed763b742ce9299bb2297b6115a26e32af4e38c67bfd8ce96c7a103bf13a43e945a0] [2ba9ff311d2364071b689ee845d1a60135b68218fa461fd6e97d4c03e985766b8d3a2077b2944af6172cb524c9cd1268defca522233efb1d4f0db26ed71ad4aa] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_a3m010sw.ls4.psm1 C:\Users\georgemag\AppData\Local\Temp\tmpEXO_a3m010sw.ls4\ 2317071 d63ffcfd086ac879d9ff2e5bc4f61d3e Not Signed 2025-08-21 12:30:55 +0000 UTC 2025-08-21 12:30:55 +0000 UTC 8f83e7083c5f6bf7b367844e330f255d4d32608a 33b170f3d3854fa7fe2b718f62e4ed763b742ce9299bb2297b6115a26e32af4e38c67bfd8ce96c7a103bf13a43e945a0 2ba9ff311d2364071b689ee845d1a60135b68218fa461fd6e97d4c03e985766b8d3a2077b2944af6172cb524c9cd1268defca522233efb1d4f0db26ed71ad4aa 2025-08-21 12:35:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
3c8e1ab5ca374a7ba51b0820a46058e1d7e0c62ee95328846b7303f270189c16 [68a3146b5f0c41860c8c84fa, 68a3146b5f0c41860c8c8557] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\http\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [3a6789c5b85c6996587dd3ec235bf1d9] [df72469849f10e2db9f7ff195431d0810d0b8e64] [a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15] [81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\http\__pycache__\ 9627 3a6789c5b85c6996587dd3ec235bf1d9 Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC df72469849f10e2db9f7ff195431d0810d0b8e64 a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15 81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
12a5ca9322fea13fcb43d129b87ba2be1d566650185bf5def00b2e4602a17256 [68a19c6991a4554163504734, 68a2ecdfe7265ab6e4a25092, 68a43e759d6f6b2d5e445385, 68a5900679c659b659e73766, 68a6e1a6b5d7c1b5d0de7e65] [2] [SYSTEM] [i-nPharmguard] [NT AUTHORITY] [C:\Program Files\Smiths Medical\IISLogMaintain.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T09:00:00Z, 2025-08-18T09:00:01Z, 2025-08-19T09:00:00Z, 2025-08-20T09:00:00Z, 2025-08-21T09:00:00Z] [95fb67e179d4e07ec247bb9f783bc905] [85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e] [b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98] [74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c] [172.17.22.222] [172.17.22.222] 1 Success IISLogMaintain.bat C:\Program Files\Smiths Medical\ 147 95fb67e179d4e07ec247bb9f783bc905 Not Signed 2020-08-07 16:11:14 +0000 UTC 2016-10-31 22:24:18 +0000 UTC 85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98 74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c 2025-08-09 09:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
127668c98e4a256a396efc19add7a3d570fc1f0a411a4012199f7c630851145c [68a31a7af7c31bbfe169b9b0] [2] [SYSTEM] [i-nWHLAPP01] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bcpjzu5b.dhj.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:20:04Z] [] [] [] [] [172.17.146.33] [172.17.146.33] 1 Success __PSScriptPolicyTest_bcpjzu5b.dhj.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:20:04 +0000 UTC 2025-08-18 12:20:04 +0000 UTC 2025-08-18 12:20:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
115b14a02b91fb03cb1866d6b311d33cd5518a9d8524dd63a14f19571e420404 [68a472a799ad3734d804e2f1] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcprov-jdk15on-1.50.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [7d922548538cffd44a862fe6ce9574b1] [be504b4901d75cbe129a178f5830e6c358ec214c] [90f386fa10e4654b8da70f51ba815635a9534524e8672265072a7ffe9fc44714f8b945d0438e267479c5663006421bfa] [ea0e006829bbc78bb2eb5187302e18462a9e953b1ca4ac3d843f3362ab1cd38a134cdbbf1b85fab147d0637d6e9270d3c800e262c398a9200e56e744fef2f9aa] [172.17.23.146] [172.17.23.146] 1 Success bcprov-jdk15on-1.50.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 2732684 7d922548538cffd44a862fe6ce9574b1 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC be504b4901d75cbe129a178f5830e6c358ec214c 90f386fa10e4654b8da70f51ba815635a9534524e8672265072a7ffe9fc44714f8b945d0438e267479c5663006421bfa ea0e006829bbc78bb2eb5187302e18462a9e953b1ca4ac3d843f3362ab1cd38a134cdbbf1b85fab147d0637d6e9270d3c800e262c398a9200e56e744fef2f9aa 2025-03-28 16:07:06 +0000 UTC None None 2023-11-27 06:21:55 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.136 +0000 UTC
11355cec155129d0343a44512cb9c601d96f9014d7a3a1a5fc7ead8e84d003dc [68a7177f3667c32a076fb94c] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\BootstrapperCore.dll] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\Installs\SSMS-Setup-ENU.exe] [C:\Installs\SSMS-Setup-ENU.exe] [2025-08-21T12:56:21Z] [6720b58841b9217a2960c7f2d2b8ce2d] [7c9ef10cdefb942eaf533bc02d064c6b5a43483f] [2212c17269cc61a9b12a818335c0eccced8d2c230465935d4bd3c28f396428eafd47a573676ef90cb611ab6b4f79d895] [2bda7a55788f141e84a765b64e2412040a3eba98fa82dec426662a2d3bced0f3704fa342050662fc5aa6dff5283e5d621489899d559338ed24626062cb53dd09] [172.17.37.230] [172.17.36.114] 1 Success BootstrapperCore.dll C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\ Managed Bootstrapper Application (WiX) 77824 6720b58841b9217a2960c7f2d2b8ce2d Windows Installer XML Toolset 3.8.1128.0 Not Signed 2014-04-09 14:14:20 +0000 UTC 2014-04-09 14:14:20 +0000 UTC 7c9ef10cdefb942eaf533bc02d064c6b5a43483f 2212c17269cc61a9b12a818335c0eccced8d2c230465935d4bd3c28f396428eafd47a573676ef90cb611ab6b4f79d895 2bda7a55788f141e84a765b64e2412040a3eba98fa82dec426662a2d3bced0f3704fa342050662fc5aa6dff5283e5d621489899d559338ed24626062cb53dd09 2025-08-21 12:56:31 +0000 UTC None None 2025-07-13 23:19:28 +0000 UTC 73 0 KNOWN 0 Microsoft attested file 2025-08-20 16:09:34.191 +0000 UTC
43df47ba68eed66ab11246db13bc7b31ce6a7345d897026e6c20a7fa3ebb7038 [68a3146b5f0c41860c8c8535, 68a3146b5f0c41860c8c8571] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\ssl.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] [d3f760e4ce4ce87a49a770a3b4d8ea4e] [bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be] [34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df] [75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7] [172.17.252.131] [172.17.252.131] 1 Success ssl.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 65200 d3f760e4ce4ce87a49a770a3b4d8ea4e Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be 34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df 75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
43dd5ded2e7c88e811aed98d1b1b0ebab058cbdaa9e97214c4cd1b2d576f9ea5 [68a306a5ba5832f49fe9cf45] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2CCMPS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [561d8fef62b027dbc970310dc4a16b68] [715a7b7cbf6de6ddbdea57bb088b26338e530541] [1060254931436909e2e8d0d3ab548c02e43c57cb0ed4e985a969a633306a3906c7a44f5865c482f8447643c1fc4d6864] [ffba9a5ffe7be34ae156950f7abb7df299648ab8637ad6fdcc03af08ae0972471919ea98e89624ad23d9a20d07a81177120317a4546c2924a4eedbb7ee81a97b] [172.17.146.33] [172.17.146.33] 1 Success DI2CCMPS.BPL C:\DICORP\DICORP_V5\RW\APPS\ 22528 561d8fef62b027dbc970310dc4a16b68 1.1.0.0 Not Signed 2022-07-06 14:52:09 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 715a7b7cbf6de6ddbdea57bb088b26338e530541 1060254931436909e2e8d0d3ab548c02e43c57cb0ed4e985a969a633306a3906c7a44f5865c482f8447643c1fc4d6864 ffba9a5ffe7be34ae156950f7abb7df299648ab8637ad6fdcc03af08ae0972471919ea98e89624ad23d9a20d07a81177120317a4546c2924a4eedbb7ee81a97b 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:34:46 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
43b1b8f830df33fef0fc4f5c10069ac655b83937012cf73ad55bad235238bc97 [68a47171d049740da00e3073] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:43:21Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:43:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
436d5ae5ca7125b3a71d8c26b32dfa31d18f7a54e3919e8eaa7005aed2458567 [68a48674c4cb2500be692613, 68a48674c4cb2500be692629] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerGen.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z] [1ca814e6162846973fb2c387d0b9fb3c] [0db114a6b28dc4baf9b46f724e3f679f31903ddc] [4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d] [6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.SwaggerGen.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Swashbuckle.AspNetCore.SwaggerGen 108824 1ca814e6162846973fb2c387d0b9fb3c Swashbuckle.AspNetCore.SwaggerGen 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Stryker Corporation 2023-01-11 11:48:24 +0000 UTC 2024-02-15 18:02:06 +0000 UTC 0db114a6b28dc4baf9b46f724e3f679f31903ddc 4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d 6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
435ee201c192051b39808d6c2b43f508964332cb8ec8cd3525ff91195836c7ab [68a25fb2e970d941642e7ee2, 68a25fb2e970d941642e7eef, 68a3b2cf09045b56b2a707ba, 68a3b2cf09045b56b2a707c7, 68a502e12ae1a61fbf4caf18, 68a502e12ae1a61fbf4caf25, 68a65489c4cae84feadc5718, 68a65489c4cae84feadc5725] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\updateTeppAsync.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z] [c76d82f132b8d7a6894397fe800ccf29] [1d49d94cd6122a10fe449a097c2745bf084b7c60] [958d5d8516f19d877d164b5899a840a817e99447ed7c201a7a9d25f471e5018cb4b6ce1e17048dc5cf275dfc9633cae9] [7ea89c44345ef4ea03566fb1e0f6225e1d76749ad01fdc77dcd9712eb356b13f9e2cc8f1c364f60260b8fcd69d508c2af54e52317976bcf2d114fd657efb9908] [172.17.252.12] [172.17.252.12] 1 Success updateTeppAsync.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\ 4699 c76d82f132b8d7a6894397fe800ccf29 Not Signed 2024-03-28 19:42:27 +0000 UTC 2023-04-10 15:39:06 +0000 UTC 1d49d94cd6122a10fe449a097c2745bf084b7c60 958d5d8516f19d877d164b5899a840a817e99447ed7c201a7a9d25f471e5018cb4b6ce1e17048dc5cf275dfc9633cae9 7ea89c44345ef4ea03566fb1e0f6225e1d76749ad01fdc77dcd9712eb356b13f9e2cc8f1c364f60260b8fcd69d508c2af54e52317976bcf2d114fd657efb9908 2025-08-08 23:00:16 +0000 UTC None None 2024-04-10 17:28:22 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
4353f8a13eba82d152c814e120093ca90e1ca6ff9ddfc069f20f90b77097664b [68a472a799ad3734d804e2ec] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-xml-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [bc4ff58bfcea7628e160c0601711d11e] [104615ba0f67a463bb70e2638d87e158c882ae79] [812e6986d48fc3174148417d2f01f28d41ec14c76262ed1d6cf2b98030c54b9c14c7e928158f4a22ae4544ee44f18e7f] [0bf0afac3699ffaef9548b33ea491f08aa257770622267cf8bb87f9caa45afc5b7023abca65fc215016bf39e8ce4fbfb3d240bf62e9c5da69fc48fd9c55b24b6] [172.17.23.146] [172.17.23.146] 1 Success batik-xml-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 33497 bc4ff58bfcea7628e160c0601711d11e Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 104615ba0f67a463bb70e2638d87e158c882ae79 812e6986d48fc3174148417d2f01f28d41ec14c76262ed1d6cf2b98030c54b9c14c7e928158f4a22ae4544ee44f18e7f 0bf0afac3699ffaef9548b33ea491f08aa257770622267cf8bb87f9caa45afc5b7023abca65fc215016bf39e8ce4fbfb3d240bf62e9c5da69fc48fd9c55b24b6 2025-08-19 11:29:20 +0000 UTC None None 2022-08-25 02:07:22 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
42e566b4052546e3dff1eadc7074fe9c78c7a23247ad65d4b2d5682a99be3ed0 [68a16bd60756fe54a9918fa6, 68a2149cb58debea69d7c751, 68a2bd5ff793a9057f329c0c, 68a3663261f8067c48423ebf, 68a40efceddb3a9f1a71a608, 68a4b7cd36bc5d38057e236d] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\cares.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] [4de26bd98f5b002370bb3332692dbf66] [54751e33aea7127bf9e82ad6efe87cbbfc27c009] [364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d] [8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c] [10.20.20.68] [10.20.20.68] 1 Success cares.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ c-ares Shared Library 174904 4de26bd98f5b002370bb3332692dbf66 The c-ares library 1.27.0 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 54751e33aea7127bf9e82ad6efe87cbbfc27c009 364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d 8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:35 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
42e12d5d94581be6c15385db2bba021bc3e0991f2a12e654e3d818e763df17b2 [68a472a799ad3734d804e2de] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-css-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [dd6c88f4ee7378ef02c734fa2d8842aa] [2be539a021bfb638880a7394ad5d5a7403fbe3c9] [36abc7be855fb950534bb1af5e2cdea005600abf2febbfe64073f5e81a25e497b1fe86f4fe21dccfb8eae933e2635d6c] [8945c31be37aa68a4c669c72e720b0fb82e7e2d9b1cf12a1e7fe9821e3e6cf5294bd6d72541560dab72f792e71f431f1b149be601a6d64cf2c40aca544aec1db] [172.17.23.146] [172.17.23.146] 1 Success batik-css-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 325399 dd6c88f4ee7378ef02c734fa2d8842aa Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 2be539a021bfb638880a7394ad5d5a7403fbe3c9 36abc7be855fb950534bb1af5e2cdea005600abf2febbfe64073f5e81a25e497b1fe86f4fe21dccfb8eae933e2635d6c 8945c31be37aa68a4c669c72e720b0fb82e7e2d9b1cf12a1e7fe9821e3e6cf5294bd6d72541560dab72f792e71f431f1b149be601a6d64cf2c40aca544aec1db 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:09:27 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
42dbe93c2eb99e3258531295ef0a821bf6e90b6c91b1216c874f45cbc064b24d [68a3146b5f0c41860c8c853b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\shutil.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [a07e5e1d630d60e8a5bf81782809e650] [a139b5b35604435be902c8cce6e3431a01122151] [a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0] [db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a] [172.17.252.131] [172.17.252.131] 1 Success shutil.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 67520 a07e5e1d630d60e8a5bf81782809e650 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC a139b5b35604435be902c8cce6e3431a01122151 a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0 db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
422ff53244750a3f619a88e8a3a82ef6119bb87ad85214fba800b335ae7bb687 [68a55c701c90616dc58121dd] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2afljjje.gan.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:26:06Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_2afljjje.gan.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:26:06 +0000 UTC 2025-08-20 05:26:06 +0000 UTC 2025-08-20 05:26:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4101060247b3a6159f3d9826ef4f8368054ead4d6057410efc98469566b6231c [68a34b98a6132bf659cce5bf, 68a34df0b71eea1289980a24] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Windows7.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:18Z, 2025-08-18T15:58:07Z] [0613e501a12cb41dcf8cd8b411161b80] [02b47b0828b36e9087f52247e888028bfbd26ff5] [89ed1852c1440db35eef47bc9ba86b1152b710d6fe39da717b37c1ec0d8479124fa540f1c7d2125c3884a1ea6fbd6327] [a142dfb014434b3d0eda509f3fb482c90b5f148c1c54213bf170cfbe54278c1256b2d95c1942cc4aa47b56d039ab11c52af8b7204f0fa0beb8955cb5f258b6a9] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Windows7.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Windows7 564736 0613e501a12cb41dcf8cd8b411161b80 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 02b47b0828b36e9087f52247e888028bfbd26ff5 89ed1852c1440db35eef47bc9ba86b1152b710d6fe39da717b37c1ec0d8479124fa540f1c7d2125c3884a1ea6fbd6327 a142dfb014434b3d0eda509f3fb482c90b5f148c1c54213bf170cfbe54278c1256b2d95c1942cc4aa47b56d039ab11c52af8b7204f0fa0beb8955cb5f258b6a9 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:15 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
40ea93c6fd6397e89e2299bd791d3b19282ef70a83631dc8cc8e0bb167a7a71d [68a34b98a6132bf659cce5c3, 68a34df0b71eea1289980a28] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceContract.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:21Z, 2025-08-18T15:58:10Z] [8ceb6248045a8320552178fc2f0da3ba] [9a061be943e235b4c9992167d13dcda524afc3d4] [4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740] [73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.ServiceContract.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Access Control Service Contract 141312 8ceb6248045a8320552178fc2f0da3ba Access It! 10.1.0.7 Not Signed 2023-04-26 15:03:18 +0000 UTC 2023-04-26 15:03:18 +0000 UTC 9a061be943e235b4c9992167d13dcda524afc3d4 4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740 73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c 2025-05-13 05:13:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
443c185fe4063ccd7cfde69c8edfeb13cbfa38ea8f5b0376091d4aa34374a6b1 [68a4ea6392c32cf0fcea4869] [2] [SYSTEM] [u-nWHL-CTX-02] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gw13nbaw.an1.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T21:19:26Z] [] [] [] [] [172.25.14.129] [172.25.14.129] 1 Success __PSScriptPolicyTest_gw13nbaw.an1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 21:19:26 +0000 UTC 2025-08-19 21:19:26 +0000 UTC 2025-08-19 21:19:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
443be458dfdb7480c2d2a40f454a2b7e5f9ec12ad259b14dcd47472009439658 [68a3b568d0e193c254e786f8] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_30f65d1bc44749cebb0bca5da1468193.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T23:21:07Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_30f65d1bc44749cebb0bca5da1468193.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 23:21:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a [68a472b1b022648922e2357f] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-core-asl-1.9.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [319c49a4304e3fa9fe3cd8dcfc009d37] [3c304d70f42f832e0a86d45bd437f692129299a4] [26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f] [11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89] [172.17.23.146] [172.17.23.146] 1 Success jackson-core-asl-1.9.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 232248 319c49a4304e3fa9fe3cd8dcfc009d37 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 3c304d70f42f832e0a86d45bd437f692129299a4 26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f 11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89 2025-03-28 16:04:26 +0000 UTC None None 2024-06-04 00:46:31 +0000 UTC 67 0 KNOWN 0 Microsoft attested file 2025-04-10 12:40:40.528 +0000 UTC
440079dc739fd6291ff06a190feaf77af3f297e5e47dd010391427408ed28738 [68a3146b5f0c41860c8c84fc, 68a3146b5f0c41860c8c854a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\copy.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [33fe159d65601e2b1e1c4a751edcfa0e] [daf07ab39da555cfee521467dc63f4eae2918da0] [f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428] [081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e] [172.17.252.131] [172.17.252.131] 1 Success copy.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 10634 33fe159d65601e2b1e1c4a751edcfa0e Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC daf07ab39da555cfee521467dc63f4eae2918da0 f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428 081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
145b126185eb42beb5366b5d471b48d5698210a0e64a1cc0c1e8144071e98569 [68a55cde636cfc7814189cce] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_efld4jwd.fx5.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:27:53Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_efld4jwd.fx5.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:27:53 +0000 UTC 2025-08-20 05:27:53 +0000 UTC 2025-08-20 05:27:58 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
141dbcf08788c469ba3d747db24400108920ec7fb03ce8e7847a0d537bec5c38 [68a50589eadcd7cce3f5d686] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-1BA45DA5-154D-4207-8ED3-5352625CA0B3\CitrixReceiverUpdater.exe] [C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] [2025-08-19T23:11:52Z] [97a7cc2a8414b3679444b968b6b029b0] [64783c7c1b6a38235cd866c2446599867f6ee497] [98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225] [301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a] [10.20.20.68] [10.20.20.68] 1 Success rm.bat C:\Users\teknicor\AppData\Local\Temp\4\ 7357 97a7cc2a8414b3679444b968b6b029b0 Not Signed 2025-08-19 23:11:52 +0000 UTC 2025-08-19 23:11:52 +0000 UTC 64783c7c1b6a38235cd866c2446599867f6ee497 98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225 301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a 2025-08-19 23:15:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
141374e33be99768611a2d42b9d33571a0c5b9763beca9c2dc90900d8cc8f767 [68a472b1b022648922e23586] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.xml.soap-api-1.4.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [fb8bbe2cdda8ff7bd945fcb9f0f6b61c] [667ef2eee594ca7e05a1cbe0b37a428f7b57778f] [46ffb2747c3c2c7b0209d049dec81534b82c44399a133b1dcae2859a5fe1e3189691e216ab0820101f177eb49140e095] [359293d81529080015f79663ed8adb4a0245de99aa8ab427f57cceaa222622ada80763728fd9473eacd0e70bd24d1a5e8737ded0ade7c510b73ecd30da284109] [172.17.23.146] [172.17.23.146] 1 Success javax.xml.soap-api-1.4.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 46111 fb8bbe2cdda8ff7bd945fcb9f0f6b61c Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 667ef2eee594ca7e05a1cbe0b37a428f7b57778f 46ffb2747c3c2c7b0209d049dec81534b82c44399a133b1dcae2859a5fe1e3189691e216ab0820101f177eb49140e095 359293d81529080015f79663ed8adb4a0245de99aa8ab427f57cceaa222622ada80763728fd9473eacd0e70bd24d1a5e8737ded0ade7c510b73ecd30da284109 2025-03-28 16:04:26 +0000 UTC None None 2025-03-25 04:51:21 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
13f52f377f7b08e6179b3b9b305e9723d8c96ef5fe9f85dd455610a7b8b31844 [68a65386dfe30ebba74d31c9] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\mims2lvt.dll] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-20T23:00:15Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success mims2lvt.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 23:00:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
13d2884626fe8588a24e0cec74ab305a961c96afef3e60bbfbf506407767ea46 [68a269db7d044cbfa4a5a343] [2] [SYSTEM] [HV-I-FAMELASTIC] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yyej1nxr.c5v.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T23:46:24Z] [] [] [] [] [172.17.252.183] [172.17.252.183] 1 Success __PSScriptPolicyTest_yyej1nxr.c5v.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 23:46:24 +0000 UTC 2025-08-17 23:46:24 +0000 UTC 2025-08-17 23:46:35 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
13b1777cf27f93b4e69672bab176bbd3bdb3ba595873714a1b697739dac76125 [68a5c81947601aee5f76e915, 68a5c9d7599432010e418bcc] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\LTDIS12n.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\regsvr32.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe] [2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z] [dc01de0348cb0b9b9e6fbe13dd2cafc9] [c36b7707733d6edb6b9637ad30a687e54cdbcc8e] [73907360c0e58fe9f77d43bb4d56dd73849f9e2899a8197d79aea76bd78bd8fe04b43d2bb7225640aa7d0c81c976855e] [f24db24d00fdab87c88f85daf0b848c506eaa139f84182ece5f7ed329fec8648ac5e9d881999dcf9e04227bf58a3897f5ade6b25204f6b714301675cccbc7d14] [172.17.20.104] [172.17.20.104] 1 Success LTDIS12n.dll E:\QS1\ LEADTOOLS(r) DLL for Win32 278528 dc01de0348cb0b9b9e6fbe13dd2cafc9 LEADTOOLS(r) DLL for Win32 12.1.0.020 Not Signed 2025-04-14 13:01:36 +0000 UTC 2001-04-30 20:52:30 +0000 UTC c36b7707733d6edb6b9637ad30a687e54cdbcc8e 73907360c0e58fe9f77d43bb4d56dd73849f9e2899a8197d79aea76bd78bd8fe04b43d2bb7225640aa7d0c81c976855e f24db24d00fdab87c88f85daf0b848c506eaa139f84182ece5f7ed329fec8648ac5e9d881999dcf9e04227bf58a3897f5ade6b25204f6b714301675cccbc7d14 2025-07-17 16:15:32 +0000 UTC None None 2024-04-19 05:01:49 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-07-17 16:17:46.576 +0000 UTC
137f566c237c53bf6a59b349eb49fd635f4c8542b19024a4706ed912ec4c84c5 [68a60636046f9961fe8098a7] [2] [CA_Jnt_FormFast4] [u-NFP2] [WVUHS] [C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\__PSScriptPolicyTest_wl5srk2d.2vs.ps1] [Servers] [Servers Audit] [v2307.897] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-20T17:30:29Z] [] [] [] [] [172.25.17.195] [172.25.17.195] 1 Success __PSScriptPolicyTest_wl5srk2d.2vs.ps1 C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\ 80 Not Signed 2025-08-20 17:30:29 +0000 UTC 2025-08-20 17:30:29 +0000 UTC 2025-08-20 17:30:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
137e5a5cb2ade0a22a101541c06e699d054d556a9fdfb5f921e49aeb84c4c441 [68a3146b5f0c41860c8c84ff, 68a3146b5f0c41860c8c854b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\datetime.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [54cb321c2eed002f565e6528ea807a30] [568adbd741f0b5367410f189ae092931a364959d] [50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82] [9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e] [172.17.252.131] [172.17.252.131] 1 Success datetime.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 419 54cb321c2eed002f565e6528ea807a30 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 568adbd741f0b5367410f189ae092931a364959d 50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82 9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
13667a217d2a70dc86e0f82fe2473bcbf2ad1d99fd00dc412ad72d8d06d076ff [68a3146b5f0c41860c8c8510, 68a3146b5f0c41860c8c8563] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\feedparser.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [be27a5f36419634606677e6fa71aa08d] [cbecf541ea0883be47c01dcaefc6dbea7d643dde] [531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961] [22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823] [172.17.252.131] [172.17.252.131] 1 Success feedparser.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 20575 be27a5f36419634606677e6fa71aa08d Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC cbecf541ea0883be47c01dcaefc6dbea7d643dde 531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961 22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
131f32cd150eaa3c1bffc62780d3e3ce2ae34f91c6710e83d9bfa95dff8cc2a3 [68a70bf158372bc3075d1d4a] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Plugins\ListOutOfService.dll] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Program Files\Yabe\Yabe.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:07:06Z] [4f68c546bee47a5cc27ac372a45b9603] [99ed9ade505e7af286e568d57fc4362d0ea74984] [526828335a21eb27ffc946cdbb0e16d2653153c9ed7d598f786e535f16081d43b298811d38a052cb414951547596968a] [d70f2f276f1a20e6e35e0ab2030f7f622c0b1c8dd5b6b11f7899e80bfc11110a6148de303c0c78fd5872571bdf8090e1055b0ad9494cb67bd0e0fb402e6afb90] [172.17.20.75] [172.17.20.75] 1 Success ListOutOfService.dll C:\Program Files\Yabe\Plugins\ ListOutOfService Yabe Plugin 10240 4f68c546bee47a5cc27ac372a45b9603 ListOutOfService 1.0.0.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-01-17 11:17:44 +0000 UTC 99ed9ade505e7af286e568d57fc4362d0ea74984 526828335a21eb27ffc946cdbb0e16d2653153c9ed7d598f786e535f16081d43b298811d38a052cb414951547596968a d70f2f276f1a20e6e35e0ab2030f7f622c0b1c8dd5b6b11f7899e80bfc11110a6148de303c0c78fd5872571bdf8090e1055b0ad9494cb67bd0e0fb402e6afb90 2025-08-21 12:07:13 +0000 UTC None None 2025-02-25 18:29:05 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
130c2ee92e030b98e7c97f59010f244dd5dd381c38901ff1780f154bff8cb14d [68a472b1b022648922e2356c] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmDisasterRecoveryApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [72028a15f40c592ec85392959bc55c88] [5a373b8e0a46aeadc0ded6ec0c60e770df09e1ce] [4c9eb11f092f91804c836571af914214bbb661378423de5e9ecd840a0f902301a10a83ff617ad2d626667fd1524e4fc8] [d683d36d68038f210d7cc846ca6a529051e7ea40e19d3688b160d1da9e4375f2cbda01881105be72f479d20a35fca3e8aa7c77e3ad7959f032bb556e95118c8c] [172.17.23.146] [172.17.23.146] 1 Success DsmDisasterRecoveryApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 174382 72028a15f40c592ec85392959bc55c88 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 5a373b8e0a46aeadc0ded6ec0c60e770df09e1ce 4c9eb11f092f91804c836571af914214bbb661378423de5e9ecd840a0f902301a10a83ff617ad2d626667fd1524e4fc8 d683d36d68038f210d7cc846ca6a529051e7ea40e19d3688b160d1da9e4375f2cbda01881105be72f479d20a35fca3e8aa7c77e3ad7959f032bb556e95118c8c 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
12d861e4fb434e98ce0c5f91301a6025b5a84a108ba9a4b8644e730419eae5af [68a5239e621d09b2b1ed5e44] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MenuMechanism.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:31Z] [0c0d3646da06ec03465d50305002b13e] [478f57ff589dfbfe82f1d5326355a3a624d4f778] [9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de] [ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90] [172.17.22.40] [172.17.22.40] 1 Success MenuMechanism.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 16384 0c0d3646da06ec03465d50305002b13e 1.0.8565.40737 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC 478f57ff589dfbfe82f1d5326355a3a624d4f778 9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
46701d9aa111f855f742a1544930a7dcbb453d7e400c2509b89fa6fb6aaa6563 [68a472a799ad3734d804e2f5] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\com.lowagie.text-2.1.7.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [af7c1521ab58701d3a0cadc29ef3d15a] [18d4c7c2014447eacfd00c65c717b3cfc422407b] [f9efd08b2c96024a152c7232b040a09c3c6a8a9b682fb238012535e2bda610af6d9fc256868388cc5784e79cf75ec427] [cc2357d50e9eb53dcc9e03fc7ffc2fdc0b13dd50cfd221cafc19d3a6160da332bd2834a52f7423be62a543b577bfdea12b1cd5a3242c4fb396cbe17ab7bfd64b] [172.17.23.146] [172.17.23.146] 1 Success com.lowagie.text-2.1.7.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\eclipse\birt\main\ 1782376 af7c1521ab58701d3a0cadc29ef3d15a Not Signed 2024-04-05 21:55:23 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 18d4c7c2014447eacfd00c65c717b3cfc422407b f9efd08b2c96024a152c7232b040a09c3c6a8a9b682fb238012535e2bda610af6d9fc256868388cc5784e79cf75ec427 cc2357d50e9eb53dcc9e03fc7ffc2fdc0b13dd50cfd221cafc19d3a6160da332bd2834a52f7423be62a543b577bfdea12b1cd5a3242c4fb396cbe17ab7bfd64b 2025-03-28 16:06:16 +0000 UTC None None 2021-11-30 11:29:28 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 01:58:11.933 +0000 UTC
4663e033c1f188ed66d3c413064bfa104f6c307ed10a918afd2b8373130a779a [68a5c73d93b6924af299afe6] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\Disk1\ISSetup.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\05010142001CccInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T13:01:48Z] [a06ed9fcd8f114e270aa64c46063d8c3] [e091914d4e2ba90e468ef4e13420bed24146bac6] [05facc5d4c8fd7ffa4ce1050b01b7ef4543ddf16eba14eea40f7f45ffc444d9b47b821f8e1b28506bf86adb2af0d6cc8] [46393550796bc8211ecd96e31ccb5bf65c437d6d1857d548dbd8836192aa6b299feefb617b59fc9c7a251cb259c6dc477f17d044d201621ad315b06db5749102] [172.17.20.104] [172.17.20.104] 1 Success ISSetup.dll C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\ InstallShield (R) Setup Engine 552214 a06ed9fcd8f114e270aa64c46063d8c3 InstallShield 12.0 Not Signed 2025-07-17 15:57:14 +0000 UTC 2025-04-14 15:20:00 +0000 UTC e091914d4e2ba90e468ef4e13420bed24146bac6 05facc5d4c8fd7ffa4ce1050b01b7ef4543ddf16eba14eea40f7f45ffc444d9b47b821f8e1b28506bf86adb2af0d6cc8 46393550796bc8211ecd96e31ccb5bf65c437d6d1857d548dbd8836192aa6b299feefb617b59fc9c7a251cb259c6dc477f17d044d201621ad315b06db5749102 2025-07-17 15:57:20 +0000 UTC None None 2025-05-15 06:16:41 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-17 15:57:43.354 +0000 UTC
45ebe14be4b8b1a28b0494879eb3f86d0ce75b64526d5c99226a3bd8722976d7 [68a5c8eceb9e7b7716dce1fd, 68a5ca39b5df6e9c598d9a0f, 68a5ca39b5df6e9c598d9a1c, 68a5ccf2ddfdba423e488632, 68a5ccf2ddfdba423e488640, 68a5ccf2ddfdba423e48864e, 68a5ccf2ddfdba423e48865b, 68a5ccf2ddfdba423e488668, 68a5ccf2ddfdba423e488675, 68a5ccf2ddfdba423e488682, 68a5ccf2ddfdba423e48868f] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LoggingCommandFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [d1e99aa074468f7f34690bd52397bce3] [62b9e06417fe78123179ee9ec61e717cf1f033ea] [cd3e9a6558fadc190a141ecf4064dbad653e321134bba8d17a05c03968d9b620d0da6a5e131ed821c61f7f8c7c9fcac3] [23744c7d1144fa516a3548edf43a733f8490586626b8f8904e95efc6e2affb593334e3306ae8e2f34b4a5308df1d9cd98954c5e5b399139ac8d04adf7ac4c727] [172.17.252.194] [172.17.252.194] 1 Success LoggingCommandFunctions.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 18543 d1e99aa074468f7f34690bd52397bce3 Not Signed 2025-08-20 13:08:41 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 62b9e06417fe78123179ee9ec61e717cf1f033ea cd3e9a6558fadc190a141ecf4064dbad653e321134bba8d17a05c03968d9b620d0da6a5e131ed821c61f7f8c7c9fcac3 23744c7d1144fa516a3548edf43a733f8490586626b8f8904e95efc6e2affb593334e3306ae8e2f34b4a5308df1d9cd98954c5e5b399139ac8d04adf7ac4c727 2025-08-20 13:09:00 +0000 UTC None None 2024-08-08 19:43:16 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
45adf7f6c69c60c4dc4bae33e1b2af87209b219c55f17426027f900f4e4a9cdd [68a3146b5f0c41860c8c8508, 68a3146b5f0c41860c8c855b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\urllib\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [7ac8f76f913878aafc40578f712b8cdb] [2dd3dd047d90b42752ad03421277a6445bc35f04] [21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0] [fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\urllib\__pycache__\ 143 7ac8f76f913878aafc40578f712b8cdb Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 2dd3dd047d90b42752ad03421277a6445bc35f04 21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0 fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4584f98f1d747e4aea53cea83804037bbdfb1b342fd04183804e2616fe24274e [68a5239e621d09b2b1ed5e5a] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellFacade.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [0c2246ee9abc192383fb19860c142559] [743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94] [5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6] [b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2] [172.17.22.40] [172.17.22.40] 1 Success ShellFacade.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 6656 0c2246ee9abc192383fb19860c142559 1.0.8565.40737 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC 743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94 5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6 b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
45680ffb69374abd7c201a9028af08fea837786ba94a5b5eeab41f630c2c36b6 [68a5c75b90b41db8c2ac6a0d] [2] [SYSTEM] [i-nQS1mgtn] [NT AUTHORITY] [D:\QS1\QDirect\QDirect.exe] [Servers] [Servers Audit] [v2287.880] [D:\QS1\QDirect\QDirect.exe] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T13:02:09Z] [9abc4b5190e5b957e41335dd525011d9] [437a4efdcd877e98bb417c6f4b3b66a59ffb4ba8] [1e48e15c192c34738d0fef20729da71894f752f9d4576f08ffe197273bfbab283b749eb6f38fc3aaef7e7f8a6e5cdb6a] [dcd008fe470e024e7fa3e88ec17f37ca34235d72a767918108435869709c201d75efd3931f1f5c4a42efd6d7b932c90f369316bc7cf0206a8a90b0b7206dd083] [172.17.20.104] [172.17.20.104] 1 Success QDirect.exe D:\QS1\QDirect\ QDirect 409600 9abc4b5190e5b957e41335dd525011d9 QS/1 Data Systems QRouter 2, 0, 0, 2 Not Signed 2025-08-20 12:07:32 +0000 UTC 2012-10-16 14:06:36 +0000 UTC 437a4efdcd877e98bb417c6f4b3b66a59ffb4ba8 1e48e15c192c34738d0fef20729da71894f752f9d4576f08ffe197273bfbab283b749eb6f38fc3aaef7e7f8a6e5cdb6a dcd008fe470e024e7fa3e88ec17f37ca34235d72a767918108435869709c201d75efd3931f1f5c4a42efd6d7b932c90f369316bc7cf0206a8a90b0b7206dd083 2025-08-20 13:02:19 +0000 UTC None None 2021-02-12 08:12:00 +0000 UTC 70 1 KNOWN 0 Benign 0.00 2025-08-20 13:05:52.276 +0000 UTC
4562218ded432a9a34e515a5fb320438734199dfc95ee019d1a527271e89202c [68a55d602bb4c4aef6ea39bd] [2] [SYSTEM] [DP-Jackson] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1s3kxuc.1b0.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:30:00Z] [] [] [] [] [172.31.113.2] [172.31.113.2] 1 Success __PSScriptPolicyTest_s1s3kxuc.1b0.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:30:00 +0000 UTC 2025-08-20 05:30:00 +0000 UTC 2025-08-20 05:30:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
453486eb8a7efac6fb88de6df7d8ab54f042c3c7344c842f641fa006a0cfaac4 [68a189d9de5d48d3c147792c, 68a2dadb3dc591405ef57c41, 68a42cd899e203b32835f07d, 68a57e117df58485104aee22, 68a6cfb1b9028d5922ad93bf] [2] [hppc] [ivOSCCCRS] [IVOSCCCRS] [C:\bin\OsccBackup.cmd] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:40:49Z, 2025-08-18T07:40:47Z, 2025-08-19T07:40:47Z, 2025-08-20T07:40:47Z, 2025-08-21T07:40:47Z] [a29fb1288a2dd2d0c972e30105a63175] [15d2a944519f3b805ee4b99667fde4b9668a147d] [45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5] [41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a] [172.17.21.71] [172.17.21.71] 1 Success OsccBackup.cmd C:\bin\ 2973 a29fb1288a2dd2d0c972e30105a63175 Not Signed 2022-05-08 10:35:14 +0000 UTC 2022-03-01 18:17:44 +0000 UTC 15d2a944519f3b805ee4b99667fde4b9668a147d 45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5 41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a 2025-08-09 07:40:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4501ed01ec29f06c2d1989aa6ef3f08a3b7d285924f453c84565cc43aba296ce [68a5148159ddbe2cd55af622] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_740b673dcc864dc7858bc48f64edbaf4.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:19:09Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_740b673dcc864dc7858bc48f64edbaf4.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:19:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
44f9ad23efffcc78362a47f3e2ba1f9b47cc174f01ef1284f605cc30cda15cea [68a511cf5bc894dc77f9eaa6] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_f6a35165c321489a9856b32c2808949d.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:07:37Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_f6a35165c321489a9856b32c2808949d.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
44e564c6b36b57fa94cdcddbc11e741ffddf976ec407ac94c772bea6666f5b34 [68a3146b5f0c41860c8c8504, 68a3146b5f0c41860c8c852a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\re\__pycache__\_parser.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [51480655d8c23400bade8fc5c8ab7092] [0b0c8a12ff3634c2e31a68e7afb12b0d246588ea] [76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb] [8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1] [172.17.252.131] [172.17.252.131] 1 Success _parser.cpython-313.pyc C:\Program Files\Python\Lib\re\__pycache__\ 43572 51480655d8c23400bade8fc5c8ab7092 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 0b0c8a12ff3634c2e31a68e7afb12b0d246588ea 76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb 8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
449e8a25a86ea09ff6984ffb9d98d3dd1152b50e34ef9aeb4f5a2117594ee7ba [68a5c8eceb9e7b7716dce1fc, 68a5ca39b5df6e9c598d9a0e, 68a5ca39b5df6e9c598d9a1b, 68a5ccf2ddfdba423e488631, 68a5ccf2ddfdba423e48863f, 68a5ccf2ddfdba423e48864d, 68a5ccf2ddfdba423e48865a, 68a5ccf2ddfdba423e488667, 68a5ccf2ddfdba423e488674, 68a5ccf2ddfdba423e488681, 68a5ccf2ddfdba423e48868e] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LocalizationFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [0249a234b6eaf0c424b7309b0ef40e73] [f531803907c734b2ae865443dea0b050cb608f45] [f05edcccfa92c97c35572cdaf50d0205d1b00e7dd686393f3a097143f00ab87493b268f774c4e61b917133ff4bc2d5ca] [3026a52ac4a92bf27bc0814adaaa2a8627ac99e93b4de932d711a79434ebdbd617de93ddea49dd5ee3094db6a44466f31bcbc44535a94a7850e2715a236e0b94] [172.17.252.194] [172.17.252.194] 1 Success LocalizationFunctions.ps1 C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\ 5544 0249a234b6eaf0c424b7309b0ef40e73 Not Signed 2024-07-08 16:27:53 +0000 UTC 2024-06-18 17:58:02 +0000 UTC f531803907c734b2ae865443dea0b050cb608f45 f05edcccfa92c97c35572cdaf50d0205d1b00e7dd686393f3a097143f00ab87493b268f774c4e61b917133ff4bc2d5ca 3026a52ac4a92bf27bc0814adaaa2a8627ac99e93b4de932d711a79434ebdbd617de93ddea49dd5ee3094db6a44466f31bcbc44535a94a7850e2715a236e0b94 2025-04-16 18:42:30 +0000 UTC None None 2024-08-08 19:43:02 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-16 18:46:05.968 +0000 UTC
449602d55728262839bba25ac5fd518a4eed743e7a365de4d1558e9b0a4a4753 [68a306a5ba5832f49fe9cf32] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CMSGDLL.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:35Z] [72d218628b9377e310e9816caff1746e] [222f26ea5539cccc50a8e1ac8b244e67db07c214] [e0019f2af4492c8704ac702db8d1e3c966d34bb33e32a56acd1416103e639972fb2972c0016975125312e248e09eb0dd] [2e9ebe8065224fdaa90543ad0254cc3b5b82f27ce21d8c752cdc110766cde3f23bdde0732f940486a409987d781905645a75d065039b1af5ea6af9c5e000bb88] [172.17.146.33] [172.17.146.33] 1 Success CMSGDLL.DLL C:\DICORP\DICORP_V5\RW\APPS\ 14848 72d218628b9377e310e9816caff1746e Not Signed 2022-07-06 14:52:04 +0000 UTC 2024-09-14 04:02:48 +0000 UTC 222f26ea5539cccc50a8e1ac8b244e67db07c214 e0019f2af4492c8704ac702db8d1e3c966d34bb33e32a56acd1416103e639972fb2972c0016975125312e248e09eb0dd 2e9ebe8065224fdaa90543ad0254cc3b5b82f27ce21d8c752cdc110766cde3f23bdde0732f940486a409987d781905645a75d065039b1af5ea6af9c5e000bb88 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 16:53:39 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
448a0031998f7af8ce396b15c8432b788f34b1b698f89edace1448bcbd3de7d8 [68a1651841c74f595c525e6b] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i1vxbppv.2g2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:13:52Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_i1vxbppv.2g2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:13:52 +0000 UTC 2025-08-17 05:13:52 +0000 UTC 2025-08-17 05:14:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4476ba89b76ca08da779d8ea36322d55ae008641cc2e9a811aa72834c7e7b4c9 [68a472b1b022648922e23579] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\flying-saucer-core-9.0.5.D2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:40Z] [d7373f0c4b5a55968b69217ca7802811] [5ac2b648d836d5e9a1004a7ca844b06bac06e280] [1a506177a15356d89957bba9e010f44b03e8aed69672037e53fe0a30c76fedf459d2770d36bea90bcf73f3c568078fca] [d7be05cd6a7c9409d94e7ee9f17ebf5bfebe1b66541b34c60de489639d96b2efd717c2b9f0ec3a4df8595ac1165eeb58bd11147a511209d00d2ec4564f1649bc] [172.17.23.146] [172.17.23.146] 1 Success flying-saucer-core-9.0.5.D2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 1179057 d7373f0c4b5a55968b69217ca7802811 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 5ac2b648d836d5e9a1004a7ca844b06bac06e280 1a506177a15356d89957bba9e010f44b03e8aed69672037e53fe0a30c76fedf459d2770d36bea90bcf73f3c568078fca d7be05cd6a7c9409d94e7ee9f17ebf5bfebe1b66541b34c60de489639d96b2efd717c2b9f0ec3a4df8595ac1165eeb58bd11147a511209d00d2ec4564f1649bc 2025-03-28 16:04:26 +0000 UTC None None 2022-03-11 12:21:19 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
4469255053c3419cb7051ccc31010918a1a9dac527fe2c10bcf33d95bfbc699e [68a3146b5f0c41860c8c8501, 68a3146b5f0c41860c8c855a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\utils.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [1c9f352ef2dc6107635c941c2692875a] [7dac4531071eeb0f6c989789b241fd935231bb43] [0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78] [dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050] [172.17.252.131] [172.17.252.131] 1 Success utils.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 16103 1c9f352ef2dc6107635c941c2692875a Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 7dac4531071eeb0f6c989789b241fd935231bb43 0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78 dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4937e31e371e07aafc2b6401c5f039faf292b0b3dcac6d8a7b7bad10e1561040 [68a4732a87eb8c73e6aa5a6a] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a51riren.tsa.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T12:50:44Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_a51riren.tsa.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 12:50:44 +0000 UTC 2025-08-19 12:50:44 +0000 UTC 2025-08-19 12:50:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
491b8bd4fad8b9cc62cec4a250351477c886070eaf3a3abc35cf10aa0719772e [68a245a63bd5d44dfa80605b] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikauudym.nih.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:08:25Z] [] [] [] [] [172.29.132.47] [172.29.132.47] 1 Success __PSScriptPolicyTest_ikauudym.nih.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:08:25 +0000 UTC 2025-08-17 21:08:25 +0000 UTC 2025-08-17 21:12:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
490e4c588921a4516985398ef928a4796d02dcbab6984d7bbd8a56fecb665d42 [68a347664fc9cc000172429d] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_klxrtpvo.jas.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-18T15:31:42Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_klxrtpvo.jas.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\ 81 Not Signed 2025-08-18 15:31:42 +0000 UTC 2025-08-18 15:31:42 +0000 UTC 2025-08-18 15:31:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
48dd119b22d9e9f12a4086afc7afa9d4cc5e9ab43294342fa54531f763c0dddc [68a17f8b3d3e59587db04d3d] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fb0tna5.obn.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:06:44Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_3fb0tna5.obn.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:06:44 +0000 UTC 2025-08-17 07:06:44 +0000 UTC 2025-08-17 07:06:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
48a182856395bc38e81ae27cbfa36e1949f5cc7eafe208356e9381e8c18a4f45 [68a50d0bba435d26b71e5005] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rerrl1la.l5r.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T23:47:13Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_rerrl1la.l5r.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 23:47:13 +0000 UTC 2025-08-19 23:47:13 +0000 UTC 2025-08-19 23:47:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
489f1bbaa35649da04ffcd7ee66ad611b107b06afb4cfd919d36a186a3059188 [68a22f92c12f0e944e5d68ef] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f3m5l1ce.ht1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:37:48Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_f3m5l1ce.ht1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:37:48 +0000 UTC 2025-08-17 19:37:48 +0000 UTC 2025-08-17 19:37:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4888b61d694a7954e94a695ea563c5f4ba2e359ba1b69183743e27075bd018e3 [68a70bf158372bc3075d1d4b] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Plugins\FindPrioritiesGlobal.dll] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Program Files\Yabe\Yabe.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:07:06Z] [834483fa3b274bb181244b80f21e2b33] [8f0dec6e7eea4ce8d59d8a5bb3763525792085a4] [cfc556cfe1f57ade366c391364f45ae3f6e6929894bde5d4206fc91dd3feaff2c62bc8912c0addd315f6308fec83d413] [0ec2209922e323577530890b3cf430d98b0b2cbefcff93bb335fc41803e14abd77e7ac4a5246a7c68dc42713dd8823035345b4db650226ded04af13575d26f1f] [172.17.20.75] [172.17.20.75] 1 Success FindPrioritiesGlobal.dll C:\Program Files\Yabe\Plugins\ FindPrioritiesGlobal 35840 834483fa3b274bb181244b80f21e2b33 FindPrioritiesGlobal 1.3.4.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-01-17 11:17:44 +0000 UTC 8f0dec6e7eea4ce8d59d8a5bb3763525792085a4 cfc556cfe1f57ade366c391364f45ae3f6e6929894bde5d4206fc91dd3feaff2c62bc8912c0addd315f6308fec83d413 0ec2209922e323577530890b3cf430d98b0b2cbefcff93bb335fc41803e14abd77e7ac4a5246a7c68dc42713dd8823035345b4db650226ded04af13575d26f1f 2025-08-21 12:07:13 +0000 UTC None None 2025-02-25 18:29:05 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
4818a0297cff2e7386a18a84c2c3bb66709c591669de6ab221e9c8e84561582c [68a16bd60756fe54a9918fa9, 68a2149cb58debea69d7c754, 68a2bd5ff793a9057f329c0f, 68a3663261f8067c48423ec2, 68a40efceddb3a9f1a71a60b, 68a4b7cd36bc5d38057e2370] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zDiagnostic.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] [9efc68196d98f658640751c4762d005b] [be6cd4a37d595a950c683b19744430ae3e2dac02] [091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904] [7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90] [10.20.20.68] [10.20.20.68] 1 Success zDiagnostic.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 2399032 9efc68196d98f658640751c4762d005b Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC be6cd4a37d595a950c683b19744430ae3e2dac02 091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904 7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:02:43 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
47e046a893fbffe1108f63752b752d62771a255d6f67bdbdb1071eb843b0b0b2 [68a5646930f6badf50727f64] [2] [SQLSERVERAGENT] [SUNR1MSD] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_wjvwcszi.j0w.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] [D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] [2025-08-20T06:00:00Z] [] [] [] [] [172.24.20.7] [172.24.20.7] 1 Success __PSScriptPolicyTest_wjvwcszi.j0w.ps1 C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ 80 Not Signed 2025-08-20 06:00:00 +0000 UTC 2025-08-20 06:00:00 +0000 UTC 2025-08-20 06:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
47defea512c04bef937dc343eb7d484d41d313d5fff6b06df628bc0c3ae43c7e [68a544017e5aedf6dd6fa528] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikf4hxcy.y0e.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T03:41:43Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_ikf4hxcy.y0e.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 03:41:43 +0000 UTC 2025-08-20 03:41:43 +0000 UTC 2025-08-20 03:41:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
47d7f70f6e4544111d873b85d126334d5376cda93f44463620545a5afb127224 [68a3146b5f0c41860c8c8542, 68a3146b5f0c41860c8c8573] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\socketserver.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [a8399241bb8bb7845b245b8b45caa424] [5919c36160ce0593f1446305e684e923f91ace99] [d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b] [566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a] [172.17.252.131] [172.17.252.131] 1 Success socketserver.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 34517 a8399241bb8bb7845b245b8b45caa424 Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC 5919c36160ce0593f1446305e684e923f91ace99 d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b 566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
47270658f0796373095f1e46a93e2733bf8e6989b1a8726b7720106c3e9f031b [68a4fa7b385976ad39245b9d] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\ProgramData\Package Cache\2393A74FE27E42E37E258ADF79A39EBD8E3A0933\ForceScheduleReboot.bat] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe] [C:\Windows\Temp\{3DC0FF38-2812-41C0-94A3-517D5D56E856}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe] [2025-08-19T22:27:20Z] [b0a3e46068181df35695c9bba8751933] [2393a74fe27e42e37e258adf79a39ebd8e3a0933] [7bfe1e8e74569fc88b331b3af94fee6723297a363194408db41b79aa48c9f160ea007e2474cafa032c1f9837e8b1657a] [005d8d396d1cb2cdb745b6e7615e3ef153c472f61656e1db2037e8a9a3a584bca6f43474a1753e98ed92bce7d7aa76be611a9989de0b2ca872d7dde507945dde] [172.17.23.18] [172.17.23.18] 1 Success ForceScheduleReboot.bat C:\ProgramData\Package Cache\2393A74FE27E42E37E258ADF79A39EBD8E3A0933\ 223 b0a3e46068181df35695c9bba8751933 Not Signed 2024-11-12 21:43:14 +0000 UTC 2024-11-12 21:43:14 +0000 UTC 2393a74fe27e42e37e258adf79a39ebd8e3a0933 7bfe1e8e74569fc88b331b3af94fee6723297a363194408db41b79aa48c9f160ea007e2474cafa032c1f9837e8b1657a 005d8d396d1cb2cdb745b6e7615e3ef153c472f61656e1db2037e8a9a3a584bca6f43474a1753e98ed92bce7d7aa76be611a9989de0b2ca872d7dde507945dde 2025-08-19 22:28:11 +0000 UTC None None 2024-12-05 13:26:47 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 22:31:07.186 +0000 UTC
46d408f5c75a3494b1a5c7f8247be80a57da4b1f537a3e235d060f24f56351bf [68a34b98a6132bf659cce5c1, 68a34df0b71eea1289980a26] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceConnector.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:18Z, 2025-08-18T15:58:08Z] [ed3277338add7a694a7fc9d05affc2f7] [ff0307d1794a13aa530762c41c8bb569a520d46a] [2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916] [2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.ServiceConnector.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Access Control Service Connector 242176 ed3277338add7a694a7fc9d05affc2f7 Access It! 10.1.0.7 Not Signed 2023-07-25 16:11:57 +0000 UTC 2023-07-25 16:11:57 +0000 UTC ff0307d1794a13aa530762c41c8bb569a520d46a 2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916 2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b 2025-06-09 21:59:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
46baf1723a7b0a56fca54012a44a4fd0ab65fb89d928dce80e00920d3da9a01a [68a48b263469bcd052351305] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhl1gdaz.dy1.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T14:33:06Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_lhl1gdaz.dy1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-19 14:33:06 +0000 UTC 2025-08-19 14:33:06 +0000 UTC 2025-08-19 14:33:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
46aff86b1ea482105057d001984bf68e1c6ea6c6f592b69b96a15a4527194c32 [68a6afe50e0f3bd8deac4d00, 68a6afe50e0f3bd8deac4d14, 68a6afe50e0f3bd8deac4d41, 68a6afe50e0f3bd8deac4d62, 68a6afe50e0f3bd8deac4d82, 68a6afe50e0f3bd8deac4da2, 68a6afe50e0f3bd8deac4dc2, 68a6afe50e0f3bd8deac4de3, 68a6afe50e0f3bd8deac4e01, 68a6afe50e0f3bd8deac4e22, 68a6afe50e0f3bd8deac4e42, 68a6afe50e0f3bd8deac4e62, 68a6afe50e0f3bd8deac4e82, 68a6afe50e0f3bd8deac4ea2, 68a6afe50e0f3bd8deac4eb2, 68a6afe50e0f3bd8deac4ee2, 68a6afe50e0f3bd8deac4f02, 68a6afe50e0f3bd8deac4f22, 68a6afe50e0f3bd8deac4f42, 68a6afe50e0f3bd8deac4f6c, 68a6afe50e0f3bd8deac4f8c, 68a6afe50e0f3bd8deac4fad, 68a6afe50e0f3bd8deac4fcc, 68a6afe50e0f3bd8deac4fec, 68a6afe50e0f3bd8deac500c, 68a6afe50e0f3bd8deac502c, 68a6afe50e0f3bd8deac504c, 68a6afe50e0f3bd8deac506c, 68a6afe50e0f3bd8deac508c, 68a6afe50e0f3bd8deac50b5, 68a6afe50e0f3bd8deac50d6, 68a6afe50e0f3bd8deac50f6, 68a6afe50e0f3bd8deac5121, 68a6afe50e0f3bd8deac5140, 68a6afe50e0f3bd8deac5160, 68a6afe50e0f3bd8deac518a, 68a6afe50e0f3bd8deac51aa, 68a6afe50e0f3bd8deac51ca, 68a6afe50e0f3bd8deac51ea, 68a6afe50e0f3bd8deac51fd, 68a6afe50e0f3bd8deac5214, 68a6afe50e0f3bd8deac524b, 68a6afe50e0f3bd8deac526b, 68a6afe50e0f3bd8deac527f, 68a6afe50e0f3bd8deac529f, 68a6afe50e0f3bd8deac52bf, 68a6afe50e0f3bd8deac52df, 68a6afe50e0f3bd8deac52ff, 68a6afe50e0f3bd8deac531f, 68a6afe50e0f3bd8deac533f, 68a6afe50e0f3bd8deac535f, 68a6afe50e0f3bd8deac537f, 68a6afe50e0f3bd8deac53a4, 68a6afe50e0f3bd8deac53bf, 68a6afe50e0f3bd8deac53e4, 68a6afe50e0f3bd8deac5404, 68a6afe50e0f3bd8deac5425, 68a6afe50e0f3bd8deac5440, 68a6afe50e0f3bd8deac5464, 68a6afe50e0f3bd8deac5484, 68a6afe50e0f3bd8deac54a5, 68a6afe50e0f3bd8deac54c5, 68a6afe50e0f3bd8deac54e5, 68a6afe50e0f3bd8deac5505, 68a6afe50e0f3bd8deac5525, 68a6afe50e0f3bd8deac5545, 68a6afe50e0f3bd8deac556f, 68a6afe50e0f3bd8deac558f, 68a6afe50e0f3bd8deac55af, 68a6afe50e0f3bd8deac55cf, 68a6afe50e0f3bd8deac55ef, 68a6afe50e0f3bd8deac560e, 68a6afe50e0f3bd8deac562f, 68a6afe50e0f3bd8deac5638, 68a6afe50e0f3bd8deac565f, 68a6afe50e0f3bd8deac567f, 68a6afe50e0f3bd8deac56ad, 68a6afe50e0f3bd8deac56cc, 68a6afe50e0f3bd8deac56e4, 68a6afe50e0f3bd8deac570c, 68a6afe50e0f3bd8deac5727, 68a6afe50e0f3bd8deac574d, 68a6afe50e0f3bd8deac577f, 68a6afe50e0f3bd8deac5794, 68a6afe50e0f3bd8deac57a1, 68a6afe50e0f3bd8deac57d7, 68a6afe50e0f3bd8deac57e0, 68a6afe50e0f3bd8deac5814, 68a6afe50e0f3bd8deac582d, 68a6afe50e0f3bd8deac5856, 68a6afe50e0f3bd8deac587e, 68a6afe50e0f3bd8deac5897, 68a6afe50e0f3bd8deac58a7, 68a6afe50e0f3bd8deac58d7, 68a6afe50e0f3bd8deac58e7, 68a6afe50e0f3bd8deac5911, 68a6afe50e0f3bd8deac5928, 68a6afe50e0f3bd8deac5956, 68a6afe50e0f3bd8deac5977, 68a6afe50e0f3bd8deac598c, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-pngturbo-10-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [4083ee8a826b363e3191ff929612e3af] [e6008a05b95bb14896ff69231b2ca0d2a8f64a59] [8f4e7e68e36b2d472c5495510487ae9c732ccbf87f36b3e7bfc1df77997f98aac6a490e666cef782e8a98a43cd2afef5] [7692153bbead7a82e1ceaeea974a7fdd0d35f1d841353fe414a3dd95ab0839a9dbcd041e9b4ba646d743ef7f7dc2e46fc327189f77e2bd808b294afbbbbad452] [172.17.30.60] [172.17.30.60] 1 Success cip-pngturbo-10-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-pngturbo-10-vc140-64 ダイナミックリンクライブラリ 109056 4083ee8a826b363e3191ff929612e3af CIP-PNGTurbo 1.0.0.0 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-20 05:16:21 +0000 UTC e6008a05b95bb14896ff69231b2ca0d2a8f64a59 8f4e7e68e36b2d472c5495510487ae9c732ccbf87f36b3e7bfc1df77997f98aac6a490e666cef782e8a98a43cd2afef5 7692153bbead7a82e1ceaeea974a7fdd0d35f1d841353fe414a3dd95ab0839a9dbcd041e9b4ba646d743ef7f7dc2e46fc327189f77e2bd808b294afbbbbad452 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
4698d9455955cd75c09ba12cffbc46e561afb67dae454c6d4cfaa21e481639f9 [68a16bd60756fe54a9918f94, 68a2149cb58debea69d7c73c, 68a2bd5ff793a9057f329bfd, 68a3663261f8067c48423eac, 68a40efceddb3a9f1a71a5f8, 68a4b7cd36bc5d38057e235a] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\tp.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [849f202bfe27a29199a8365d73f3079b] [47561e1037201d35a1a22df95bbf0c1e6660d03b] [b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033] [be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8] [10.20.20.68] [10.20.20.68] 1 Success tp.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Transport Module 2134328 849f202bfe27a29199a8365d73f3079b Zoom Video Call 1, 0, 2012, 1222 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 47561e1037201d35a1a22df95bbf0c1e6660d03b b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033 be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:00:02 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
4bc305aa68c31d34a4ad18874c34792451dd19c8a60493021c251866469bd26f [68a5239e621d09b2b1ed5e59] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellEng.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [239e31ca812fad5e2f5203f7b8f5ab80] [d50aeb2d4fd31525703893f7311ea78fa7f8d2af] [3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e] [0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44] [172.17.22.40] [172.17.22.40] 1 Success ShellEng.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 87552 239e31ca812fad5e2f5203f7b8f5ab80 1.0.8565.40750 Not Signed 2023-06-15 02:38:22 +0000 UTC 2023-06-15 02:38:22 +0000 UTC d50aeb2d4fd31525703893f7311ea78fa7f8d2af 3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e 0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4b879975722f606898213bb8e96ba9186e845132251b03c60488f253608cc541 [68a4b0fb13fac5171eeef0d9] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Profile.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:09Z] [2dc079d8aa2d792a07ec17ff40d80cdf] [bed9acdfa41b77b37f4a56dd3c28617d47333087] [35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f] [a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.AlliancePD.UI.Profile.dll C:\Program Files (x86)\Cyrun\Alliance 7 Client\ Cyrun.AlliancePD.UI.Profile 10752 2dc079d8aa2d792a07ec17ff40d80cdf Pegasus 7.0.4.4644 Not Signed 2019-09-13 20:45:36 +0000 UTC 2025-05-22 18:18:01 +0000 UTC bed9acdfa41b77b37f4a56dd3c28617d47333087 35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb 2025-05-22 18:54:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4b7d94f99c341f6b208ec7b9c84579162f1279c148b2433bf5a016ed3c652bf5 [68a253db1b160b4afaf47a6f] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_132cbouk.vde.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:12:37Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_132cbouk.vde.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:12:37 +0000 UTC 2025-08-17 22:12:37 +0000 UTC 2025-08-17 22:12:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4b7c8dd878264bd4ab913b0cfe3e28bdf82fa81757e8cb8b373202e265cdbdbc [68a472b1b022648922e2357b] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\gmbal-api-only-3.1.0-b001.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:40Z] [5c18e371a6ef8dd3608d74396ece0d29] [3502c55c7ad2085ece6b38202b5169dd9177e0a2] [6de0086ffc2193f7796536b51c560d8914665813b9653460995a44d74dc40ef27c97ac827fd40c1401aa0a83aa40a5dc] [d4ccbdb7cc9f9d841b3ffbd6672affc429b5d4b01322ce8efc5563d0bc9aa91c3fd8f84ccf5f61bf5bc51cc1413b48fc30fa1084aa460ef37cacd22fc67c874f] [172.17.23.146] [172.17.23.146] 1 Success gmbal-api-only-3.1.0-b001.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\gmbal-api-only-3.1.0-b001.jar-aaeaa49eaccbace5\ 21820 5c18e371a6ef8dd3608d74396ece0d29 Not Signed 2025-03-28 16:06:10 +0000 UTC 2025-03-28 16:06:10 +0000 UTC 3502c55c7ad2085ece6b38202b5169dd9177e0a2 6de0086ffc2193f7796536b51c560d8914665813b9653460995a44d74dc40ef27c97ac827fd40c1401aa0a83aa40a5dc d4ccbdb7cc9f9d841b3ffbd6672affc429b5d4b01322ce8efc5563d0bc9aa91c3fd8f84ccf5f61bf5bc51cc1413b48fc30fa1084aa460ef37cacd22fc67c874f 2025-03-28 16:06:36 +0000 UTC None None 2024-08-01 18:36:06 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
4b531ac5e9be73d2038e308c44155f559181f17c50b985ca80a99908c38fa3d5 [68a306a5ba5832f49fe9cf42] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\BORLNDMM.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [ded1c6d9dedad4357cb852524b195e81] [1304f8c2ee6eeeee037fba24ebd081b687a4803f] [b7edc789fb8b23920762761db7d078c4808f59f15767ae9017556000908dce798d0ed5767f27917f618fc1a467206d76] [9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350] [172.17.146.33] [172.17.146.33] 1 Success BORLNDMM.DLL C:\DICORP\DICORP_V5\RW\APPS\ Borland Memory Manager 18944 ded1c6d9dedad4357cb852524b195e81 Borland Memory Manager 4.00 Not Signed 2022-07-06 14:52:02 +0000 UTC 2024-09-14 04:02:48 +0000 UTC 1304f8c2ee6eeeee037fba24ebd081b687a4803f b7edc789fb8b23920762761db7d078c4808f59f15767ae9017556000908dce798d0ed5767f27917f618fc1a467206d76 9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350 2025-04-30 20:02:43 +0000 UTC None None 2025-04-28 10:12:26 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
4b38348ebaf6360d8bf0ce8dead8fe5f6f79a2833a41152004876136b2b16d27 [68a5601c347a6435334e42e9] [2] [SYSTEM] [I-EXTHSW-NP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zst5e0yo.1ev.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:41:39Z] [] [] [] [] [172.17.46.130] [172.17.46.130] 1 Success __PSScriptPolicyTest_zst5e0yo.1ev.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:41:39 +0000 UTC 2025-08-20 05:41:39 +0000 UTC 2025-08-20 05:41:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4b26c40495a3de4c3fa37e30e815a7908ed30d11328fcfe48fef638974fb8053 [68a3584898af4cd66a2f37c4] [2] [ellisonmea] [i-hvmigration3] [WVUHS] [C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1] [Servers] [Servers Audit] [v2260.859] [] [Not Signed] [C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T16:43:44Z] [] [] [] [] [172.17.23.32] [172.17.23.32] 1 Success AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1 C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 16:43:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4b1ff1eeb076783944f448eaaa429d6c11f708d81d5926ad6700e7db10eeea21 [68a306a5ba5832f49fe9cf5e] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CFGDATAC.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:38Z] [ff92531474032c443db2e603c974f48c] [c106e0d6b7e5de14982d8f6b2bd393d41a8e981e] [e7babeb1d64f89c47223239cb828797c29c89e4235dc0e79af937964528a7d884f045404d4cfe6c98424509d35572e35] [1042c372c03b854e08a86c5dc29444b117653ab000660fee2148f4de486775756d4d10681e895256c789f7c07c9158c936225a871751ad3a9f1622854716f86f] [172.17.146.33] [172.17.146.33] 1 Success CFGDATAC.DLL C:\DICORP\DICORP_V5\RW\APPS\ 47104 ff92531474032c443db2e603c974f48c Not Signed 2022-07-06 14:52:04 +0000 UTC 2024-09-14 04:02:48 +0000 UTC c106e0d6b7e5de14982d8f6b2bd393d41a8e981e e7babeb1d64f89c47223239cb828797c29c89e4235dc0e79af937964528a7d884f045404d4cfe6c98424509d35572e35 1042c372c03b854e08a86c5dc29444b117653ab000660fee2148f4de486775756d4d10681e895256c789f7c07c9158c936225a871751ad3a9f1622854716f86f 2025-04-30 20:03:13 +0000 UTC None None 2025-03-04 16:49:46 +0000 UTC 69 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
4af3d3e1a71f70b731ca3aaa9e00cc505835f9f8574e257760dd8679cf51ea32 [68a16bd60756fe54a9918f99, 68a2149cb58debea69d7c745, 68a2bd5ff793a9057f329c00, 68a3663261f8067c48423eb3, 68a40efceddb3a9f1a71a5fb, 68a4b7cd36bc5d38057e2361] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\libssl-3-zm.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [ca33cbd72c623d073b7401dd2473ae85] [fa6724135804a2757d2fb34956f45b537a70debc] [fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf] [61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5] [10.20.20.68] [10.20.20.68] 1 Success libssl-3-zm.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ OpenSSL library 1340216 ca33cbd72c623d073b7401dd2473ae85 The OpenSSL Toolkit 3.3.3 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC fa6724135804a2757d2fb34956f45b537a70debc fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf 61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:02:30 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
4ac59fdee4dd5f083a560ae4686293bbd9550ec94e644f8ff713baeea5e5a3d2 [68a48674c4cb2500be692637, 68a48674c4cb2500be692649] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.Console.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.Console.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z] [464f86757541fc0d1b1a1b1124fed46c] [e1ca526585b1042ebcf66e1bd743ab614a936b13] [19e583d7bc735a1ffa253b3ae5a2a9b9a8efe26ffd89cfc17ce772e4b3132c020499913d9155f3e2cb5202e6003b7e62] [f4675b2899a5cb3df43a9805043c3c14f99fb6ddbafa7d4f68b007d2ebafb148b02d57f3b322324cdc4e234cb64165b9005579d8d8153821d4416e96c2814a3c] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.Console.dll C:\ProgramData\chocolatey\lib\IdentityManagement_App\Content\WebPub\FederationHelperCore\ Serilog.Sinks.Console 34304 464f86757541fc0d1b1a1b1124fed46c Serilog.Sinks.Console 4.0.1-main-37f02f5 Not Signed 2025-06-12 20:05:24 +0000 UTC 2024-10-22 09:32:58 +0000 UTC e1ca526585b1042ebcf66e1bd743ab614a936b13 19e583d7bc735a1ffa253b3ae5a2a9b9a8efe26ffd89cfc17ce772e4b3132c020499913d9155f3e2cb5202e6003b7e62 f4675b2899a5cb3df43a9805043c3c14f99fb6ddbafa7d4f68b007d2ebafb148b02d57f3b322324cdc4e234cb64165b9005579d8d8153821d4416e96c2814a3c 2025-06-12 20:06:21 +0000 UTC None None 2025-03-28 02:24:09 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-06-12 20:11:15.307 +0000 UTC
4abbc5d52aab572ad70f83554ba366e983412e57f527af95fd19758503a03f3c [68a472b1b022648922e2359d] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\resolver-20050927.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [96d75a90d89ff0cb6b96282171a212de] [ee4db4a5f15cbdb453808c2839f08240ac231e46] [a339f8e7d6e6c5c6b16190c14bfc62de1994634274982a2a41eb60883c5840b1c1412ac9628a2f97ab1137427e0eb458] [5ea1113dc37e76aa7e6b9e9353c5bd9a526573ed14c6eeeb86f4a2b1cd4c4cc9ba38a399b8637583301a9c79a0253d3ee21ef3ba645e06cd8d45deccb901cf13] [172.17.23.146] [172.17.23.146] 1 Success resolver-20050927.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\resolver-20050927.jar-1693c6cca6b6fc7c\ 68177 96d75a90d89ff0cb6b96282171a212de Not Signed 2025-03-28 16:06:12 +0000 UTC 2025-03-28 16:06:12 +0000 UTC ee4db4a5f15cbdb453808c2839f08240ac231e46 a339f8e7d6e6c5c6b16190c14bfc62de1994634274982a2a41eb60883c5840b1c1412ac9628a2f97ab1137427e0eb458 5ea1113dc37e76aa7e6b9e9353c5bd9a526573ed14c6eeeb86f4a2b1cd4c4cc9ba38a399b8637583301a9c79a0253d3ee21ef3ba645e06cd8d45deccb901cf13 2025-03-28 16:06:36 +0000 UTC None None 2025-03-18 11:00:56 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
4a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55 [68a306a5ba5832f49fe9cf40] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SSLEAY32.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [d34ecd24706dcfff478fe6fbe79026a9] [e11540244a99a5d7c95643f14cce042de1710ac7] [3f238caecc824e583257c41a70097cfe04b6f50ed044fbf13a96aa11c00a14ffdc69afeb14ef2fcd444302c7286690c5] [16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915] [172.17.146.33] [172.17.146.33] 1 Success SSLEAY32.DLL C:\DICORP\DICORP_V5\SDL\APPS\ OpenSSL Shared Library 337920 d34ecd24706dcfff478fe6fbe79026a9 The OpenSSL Toolkit 1.0.2o Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC e11540244a99a5d7c95643f14cce042de1710ac7 3f238caecc824e583257c41a70097cfe04b6f50ed044fbf13a96aa11c00a14ffdc69afeb14ef2fcd444302c7286690c5 16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915 2025-05-01 08:09:58 +0000 UTC None None 2025-03-19 09:54:13 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
4a4bca6394ecb7c89998665738f714eae195f2af789f5199519bcea198d35b9b [68a4855388937a93ff144376] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Business.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:08:10Z] [c23e03a9447ffd1ae2634f27db7037d8] [8b33abb44d4f0eecd09b614fe804d39ffe899723] [2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b] [49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Authentication.Business.dll C:\Stryker\iBed Server Application\Stryker.Authentication\ Stryker.iBedServer.Authentication.Business 11264 c23e03a9447ffd1ae2634f27db7037d8 Stryker.iBedServer.Authentication.Business 1.0.0 Not Signed 2023-03-16 10:22:22 +0000 UTC 2023-03-16 10:22:22 +0000 UTC 8b33abb44d4f0eecd09b614fe804d39ffe899723 2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b 49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42 2025-08-19 14:08:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
49c49c951820ed06d4a24a61e8443334ec50fa7680dee0335976053409408760 [68a306a5ba5832f49fe9cf3a] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SPELLCHK.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [d70c351c368378ef6901d535dfbd81b3] [dccb5917a53c3c907e9d64fc7380179e90b654ab] [435b9d50666053db41dc82179efc67c5118167d7e7107d6d19cfa9a17283285cc540ee0f8ba2c244a888c3ccd9b34629] [2fb3587dedc40b09c9c5231b3889c891ce4a03276cfe99573ac2f69dcfefd79038f3547b17d13ffc9c5ef91b64cf550f31967275279d877d206f49095224f0a1] [172.17.146.33] [172.17.146.33] 1 Success SPELLCHK.DLL C:\DICORP\DICORP_V5\RW\APPS\ 196096 d70c351c368378ef6901d535dfbd81b3 Not Signed 2022-07-06 14:52:36 +0000 UTC 2024-09-14 04:02:56 +0000 UTC dccb5917a53c3c907e9d64fc7380179e90b654ab 435b9d50666053db41dc82179efc67c5118167d7e7107d6d19cfa9a17283285cc540ee0f8ba2c244a888c3ccd9b34629 2fb3587dedc40b09c9c5231b3889c891ce4a03276cfe99573ac2f69dcfefd79038f3547b17d13ffc9c5ef91b64cf550f31967275279d877d206f49095224f0a1 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:06:55 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
49a8600cbf79c3541172933dac9ca2a8f8b7c0cbbdc073b3c93ed25d6997797a [68a472a799ad3734d804e2eb] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-util-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [240edaad133eb5f973c252fbb99db897] [a6d07d042ae8c8343eadd125d9eb76e25ffd908a] [556ba42389ff92e26ea6b926fa82a51ccc1ac0e067ccc20d4ec65c24cf7b823f8f47f0d6c26d6b738c5308ccc634464c] [4d956150ab2d9981395d9659f209a0184ac00e3b16994d241d5f3f605476226c33579fbf1d107785f318ac17490ed022275fa4cbf6b524055c06d4f593bfb633] [172.17.23.146] [172.17.23.146] 1 Success batik-util-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 127209 240edaad133eb5f973c252fbb99db897 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC a6d07d042ae8c8343eadd125d9eb76e25ffd908a 556ba42389ff92e26ea6b926fa82a51ccc1ac0e067ccc20d4ec65c24cf7b823f8f47f0d6c26d6b738c5308ccc634464c 4d956150ab2d9981395d9659f209a0184ac00e3b16994d241d5f3f605476226c33579fbf1d107785f318ac17490ed022275fa4cbf6b524055c06d4f593bfb633 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:38:11 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
4981674c47464828ef5ce68676567b7e58693b1c04b582996b90f732345f4e39 [68a28bda3bdcd0703f76f643, 68a3dfd9dd64bcf44b32b6dd, 68a533cd7c33c0fb7b88c885] [2] [xpressions] [vm-vmail] [WVUH] [C:\Users\xpressions\UnixTime.vbs] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877] [] [Not Signed] [C:\Windows\System32\cscript.exe] [C:\Windows\System32\cmd.exe] [2025-08-18T02:09:45Z, 2025-08-19T02:17:38Z, 2025-08-20T02:28:10Z] [d6a0f55ebc26152cad33d2fe7190e8e6] [bda6893fc902aad8ca74e2e942eae107c172a458] [8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719] [05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d] [172.17.252.80] [172.17.252.80] 1 Success UnixTime.vbs C:\Users\xpressions\ 58 d6a0f55ebc26152cad33d2fe7190e8e6 Not Signed 2025-08-16 02:25:49 +0000 UTC 2025-08-16 02:25:49 +0000 UTC bda6893fc902aad8ca74e2e942eae107c172a458 8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719 05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d 2025-08-16 02:25:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4ed5fa8236f9cfb27c05d1405db5ddd8c9c8e9c008f8315f1728753361749256 [68a4893274c73cd555336ec5] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gfqx553s.ed0.ps1] [Servers] [Servers Audit] [v2274.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T14:24:41Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_gfqx553s.ed0.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-19 14:24:41 +0000 UTC 2025-08-19 14:24:41 +0000 UTC 2025-08-19 14:24:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4ec5a20b06f30a4643063c89804b78887d0a3f1705da59076aa1374691ae49c0 [68a25fb2e970d941642e7ed8, 68a25fb2e970d941642e7ee5, 68a3b2cf09045b56b2a707b0, 68a3b2cf09045b56b2a707bd, 68a502e12ae1a61fbf4caf0e, 68a502e12ae1a61fbf4caf1b, 68a65489c4cae84feadc570e, 68a65489c4cae84feadc571b] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\dbatools.library.psm1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:04Z, 2025-08-20T23:00:14Z] [83b05d20cf1ac5d2691bd9e2bc7293ee] [29965b7d9a477168b9868cc8c2102d6a093e6964] [d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033] [1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d] [172.17.252.12] [172.17.252.12] 1 Success dbatools.library.psm1 C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\ 18766 83b05d20cf1ac5d2691bd9e2bc7293ee dbatools 2024-03-28 18:35:33 +0000 UTC 2024-03-09 14:53:38 +0000 UTC 29965b7d9a477168b9868cc8c2102d6a093e6964 d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033 1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d 2025-08-08 23:00:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4e2cea78b34123526cff3e94c9cd8c533e10df41799247146d9a9583c74d20c3 [68a514b3a5eadadbdc4ca182] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_77050390c5844e31a367846b79e99309.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:19:55Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_77050390c5844e31a367846b79e99309.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:20:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4d49559254a5035a13e657665d5e0e1b4da967f700a4493ca7bc6edd9ade451e [68a306a5ba5832f49fe9cf34] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FILEDLGS.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:35Z] [b8f99dd187b6de49d00009b099029cbc] [a5671b5b78e9ae980626ce0b26bbd38d9769a7e7] [f940c25be544da7ee3eeb15d1a809b73edc1578624b3845a92b42cd77f266bca7425d8ae15500b310cccaa4cd6931bdd] [cd02601c1c65a0de43345532241242d4e78b08b238507656e98bc72f003f876723b444f92f5a1b727082205e30e9a2e750bf272ad88b414bc64325c214a87a85] [172.17.146.33] [172.17.146.33] 1 Success FILEDLGS.DLL C:\DICORP\DICORP_V5\RW\APPS\ File Dialogs 15360 b8f99dd187b6de49d00009b099029cbc FileDlgs.DLL 1.0.0.0 Not Signed 2022-07-06 14:52:13 +0000 UTC 2024-09-14 04:02:50 +0000 UTC a5671b5b78e9ae980626ce0b26bbd38d9769a7e7 f940c25be544da7ee3eeb15d1a809b73edc1578624b3845a92b42cd77f266bca7425d8ae15500b310cccaa4cd6931bdd cd02601c1c65a0de43345532241242d4e78b08b238507656e98bc72f003f876723b444f92f5a1b727082205e30e9a2e750bf272ad88b414bc64325c214a87a85 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:51:10 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
4cf01886aee1fd82aef2cbb0b7ec1caf4a4f69efa8e128f9dd9e540a261cb8bc [68a4cbc3a139fdab1dc0f326] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n11iz22n.3le.ps1] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:08:42Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_n11iz22n.3le.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 19:08:42 +0000 UTC 2025-08-19 19:08:42 +0000 UTC 2025-08-19 19:08:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4ced9da1a70b4fd59d55f65240d65f560035933ce37eacd3557dbb1545f68036 [68a472b1b022648922e2356d] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmEnterpriseManagerApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [920f9f1eb15b248b888e38aeeed475b9] [feb6bc875550ca17f816acd2d6ffa8e181428966] [534cf0972da19cfff1e9c8e1cc66dd10995cc7f28a6209d62e7f3766495142814890d86b2cbe06913f0ce1cc06e249e9] [8275e57854e826779279c4b361f68b87a45cbdaf82d00ed6594832e7d0cc73445cb157f57d91a10fc8bae2c7a65c277c17a7aa611a99c601c3c521be452fc2da] [172.17.23.146] [172.17.23.146] 1 Success DsmEnterpriseManagerApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 567979 920f9f1eb15b248b888e38aeeed475b9 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC feb6bc875550ca17f816acd2d6ffa8e181428966 534cf0972da19cfff1e9c8e1cc66dd10995cc7f28a6209d62e7f3766495142814890d86b2cbe06913f0ce1cc06e249e9 8275e57854e826779279c4b361f68b87a45cbdaf82d00ed6594832e7d0cc73445cb157f57d91a10fc8bae2c7a65c277c17a7aa611a99c601c3c521be452fc2da 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
4ce80737e5e1fdd0b599eecf559f84406387d644ed5bbe4479a6a6c5f9a04e18 [68a240e2a1b8ffa7235b0746] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_lrof04w0.wuh.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:51:38Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_lrof04w0.wuh.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:51:38 +0000 UTC 2025-08-17 20:51:38 +0000 UTC 2025-08-17 20:51:46 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4cbc7fefb55e1e392d9da7cece48d8f6cef3a7d170ce265dbf944c554c9d4766 [68a5c7518a82efb8e85802e9] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\QDirect.msi] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe] [D:\QS1\QAU\Updates\02000201001QDirectInst.exe] [2025-08-20T13:02:04Z] [4d89cf5c855230c85d0439c354f32173] [c89bcd6fc648b7997e8edbba17794ad8f0011ab1] [7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6] [c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e] [172.17.20.104] [172.17.20.104] 1 Success QDirect.msi C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\ 1529344 4d89cf5c855230c85d0439c354f32173 Not Signed 2025-08-20 13:01:59 +0000 UTC 2025-08-20 13:01:59 +0000 UTC c89bcd6fc648b7997e8edbba17794ad8f0011ab1 7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6 c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e 2025-08-20 13:02:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4ca6416cc9a1d517cee067878b1f93990aad6f2363b3ce6efea6de07086d1798 [68a311cdc2d0d6e3eb77f219] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindUsersByEmployee ID.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [1c10957d91c1c61393c79b698897c1e9] [c188186442dcc7eb7f2cad3d4f49eaa481502366] [11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596] [b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304] [172.25.17.86] [172.25.17.86] 1 Success FindUsersByEmployee ID.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 4886 1c10957d91c1c61393c79b698897c1e9 Not Signed 2023-03-24 16:17:59 +0000 UTC 2023-03-24 17:06:27 +0000 UTC c188186442dcc7eb7f2cad3d4f49eaa481502366 11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596 b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4c855b375b56b1a5ace47ab9d2cc02f369a72c87fad3bc8e47d6286187d96319 [68a4cc4fe7cc38673861dc6d] [2] [my10040sa] [i-ncapsule12] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\v1w0tmgy.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:11:10Z] [] [] [] [] [172.17.23.18] [172.17.23.18] 1 Success v1w0tmgy.dll C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:11:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4c6b87954491f5f17be15f6fcde7c781665111072dcf88df0d6faa465755d210 [68a472b1b022648922e23599] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\pdf-renderer-0.9.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [064ab82a7e19145f3e6bb0cb388d8321] [866085e60f32f863c58b4a767449e54700153a64] [639d53580acb97028591b75b396502337daf7a7fce8709a64184d980fec71e48acf176cd2036a75e33add4ffdee4035e] [bbe7715bc915bae5a9c7cdd99bd663b7d8a644f1725f64d275e05bda947b5f9ad19e01b24012f7c1dc9b7512fadae53a40fa560fa69a0e6a5d81aef86b06ca90] [172.17.23.146] [172.17.23.146] 1 Success pdf-renderer-0.9.1.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 2115478 064ab82a7e19145f3e6bb0cb388d8321 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 866085e60f32f863c58b4a767449e54700153a64 639d53580acb97028591b75b396502337daf7a7fce8709a64184d980fec71e48acf176cd2036a75e33add4ffdee4035e bbe7715bc915bae5a9c7cdd99bd663b7d8a644f1725f64d275e05bda947b5f9ad19e01b24012f7c1dc9b7512fadae53a40fa560fa69a0e6a5d81aef86b06ca90 2025-08-19 11:29:31 +0000 UTC None None 2022-07-07 00:38:34 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
4c301be468518755aa67998c549dd4eea2ba0895fb55a26e1a8a885964c1299e [68a1c9ccf996ce857d01e734] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ail1oddw.4b4.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T12:23:32Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_ail1oddw.4b4.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 12:23:32 +0000 UTC 2025-08-17 12:23:32 +0000 UTC 2025-08-17 12:23:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4c1fe405524586b09643b46738f06ab76006a4516a1830cf43f2db9af291a70b [68a51e78b5a781145bf61337] [2] [SYSTEM] [i-ncapsule12] [NT AUTHORITY] [C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe] [Servers] [Servers Audit] [v2284] ["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe"] [PHILIPS FRANCE COMMERCIAL SAS] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T01:01:38Z] [4842e91bd9b7b98c4c699839dd969142] [b658ce9655e9cf14aec4089ae2a1c257ea24eb19] [cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861] [67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480] [172.17.23.18] [172.17.23.18] 1 Success DataCaptorIS.exe C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\ DataCaptor Interface Server Service 297696 4842e91bd9b7b98c4c699839dd969142 DataCaptor 11.8.1.345 PHILIPS FRANCE COMMERCIAL SAS 2024-11-12 22:03:50 +0000 UTC 2025-08-20 01:01:22 +0000 UTC b658ce9655e9cf14aec4089ae2a1c257ea24eb19 cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861 67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480 2025-08-20 01:01:44 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4c1993c3e9fd16b800a7edd4bc609db0c260fafef99cee9a08d7ed744ef5ca4d [68a306a5ba5832f49fe9cf5b] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DATEGRID.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [5837f084f90fe26946031157fd0d0e98] [c2773dc1acaaffb2b76864c8bae5cc8e1c747f73] [56dd21a5dc90bf7c44450fc49a7e057e536ed45b2d491780007b5529c59311bd4b57d4a4541cd3443b38b1e9ff1bb192] [094356d11936ebbd28242eb1da2bb7053c07f75de4e95ca24d9ff758c94333e1c5eec1ef2422f27d125f0d444561a1fdd9b85a2b472ebb62a40812b422ff319a] [172.17.146.33] [172.17.146.33] 1 Success DATEGRID.BPL C:\DICORP\DICORP_V5\RW\APPS\ 92160 5837f084f90fe26946031157fd0d0e98 DateGrid 1.4.2.1 Not Signed 2022-07-06 14:52:08 +0000 UTC 2024-09-14 04:02:50 +0000 UTC c2773dc1acaaffb2b76864c8bae5cc8e1c747f73 56dd21a5dc90bf7c44450fc49a7e057e536ed45b2d491780007b5529c59311bd4b57d4a4541cd3443b38b1e9ff1bb192 094356d11936ebbd28242eb1da2bb7053c07f75de4e95ca24d9ff758c94333e1c5eec1ef2422f27d125f0d444561a1fdd9b85a2b472ebb62a40812b422ff319a 2025-04-30 20:02:53 +0000 UTC None None 2016-07-20 01:29:46 +0000 UTC 55 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
4beef0a40f3e16f017b5ae7603974118c0724286142c2e0762b3d61af4e8ddca [68a17a76fbb9bccd45249578] [2] [SYSTEM] [i-hvhprod12] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u0tfw4sf.bjl.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:44:58Z] [] [] [] [] [172.17.21.88] [172.17.21.88] 1 Success __PSScriptPolicyTest_u0tfw4sf.bjl.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:44:58 +0000 UTC 2025-08-17 06:44:58 +0000 UTC 2025-08-17 06:45:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4be293b05c924a01de67686fe37b1a3961e423289f3f56b8f100e16b38f29fad [68a310c9ea022246fae9eedd] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Set-Get-Aduser.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [892ec401133ec2f633b3c3b4a87e6e35] [090b95a5979287aa7e50cd2d968d60c7b8f67eb6] [ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1] [1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec] [172.25.17.86] [172.25.17.86] 1 Success Set-Get-Aduser.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 11880 892ec401133ec2f633b3c3b4a87e6e35 Not Signed 2021-11-18 18:17:22 +0000 UTC 2025-08-15 20:51:43 +0000 UTC 090b95a5979287aa7e50cd2d968d60c7b8f67eb6 ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1 1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec 2025-08-18 11:38:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
51e79c52db0f5cd87ea13b0fbb6a91ac30aa575dfb29f8f44ac29abdcb4b309c [68a472a799ad3734d804e2fc] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\dnsjava-2.1.7.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [ba007fcb9d931542e9999c6d428e9d15] [441ce0c012497bf338147c8853365f955f51b9bd] [d0ee1d3e92dfed3e74c37c2a635e8971fc5e1e174012246a36c77d604911dc77885cd88fd5ee8aac8ec7f30b46e2b08f] [80908a212d88e58f5d89415b81ea046d4ffcae9f310aba6b989ec55d068365c2cac713dd2d5398165a0c869abd01611168d5a052aaa188da20b3e6a708b1b881] [172.17.23.146] [172.17.23.146] 1 Success dnsjava-2.1.7.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 306090 ba007fcb9d931542e9999c6d428e9d15 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 441ce0c012497bf338147c8853365f955f51b9bd d0ee1d3e92dfed3e74c37c2a635e8971fc5e1e174012246a36c77d604911dc77885cd88fd5ee8aac8ec7f30b46e2b08f 80908a212d88e58f5d89415b81ea046d4ffcae9f310aba6b989ec55d068365c2cac713dd2d5398165a0c869abd01611168d5a052aaa188da20b3e6a708b1b881 2025-03-28 16:04:26 +0000 UTC None None 2022-09-15 04:09:12 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
51de8bfc6a2a76476999a622438c5986131049e7095fc14dd4734df5db71c0be [68a31b2e462d6e1d77adb9b0] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:59Z] [aff7146174f1a92841e0ba8ecf07708c] [a6725b789d65d1a13bee0697a4813d334aabb024] [73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5] [9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2199 aff7146174f1a92841e0ba8ecf07708c Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 12:22:58 +0000 UTC a6725b789d65d1a13bee0697a4813d334aabb024 73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5 9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef 2025-08-18 12:23:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
51bb008368ece95516e70566f7d14bff4fddd7ff903586efea47f9072f0d6c2e [68a6afe50e0f3bd8deac4ce3, 68a6afe50e0f3bd8deac4cf2, 68a6afe50e0f3bd8deac4d26, 68a6afe50e0f3bd8deac4d34, 68a6afe50e0f3bd8deac4d54, 68a6afe50e0f3bd8deac4d74, 68a6afe50e0f3bd8deac4d94, 68a6afe50e0f3bd8deac4db4, 68a6afe50e0f3bd8deac4dd4, 68a6afe50e0f3bd8deac4df4, 68a6afe50e0f3bd8deac4e14, 68a6afe50e0f3bd8deac4e34, 68a6afe50e0f3bd8deac4e57, 68a6afe50e0f3bd8deac4e74, 68a6afe50e0f3bd8deac4e94, 68a6afe50e0f3bd8deac4ec5, 68a6afe50e0f3bd8deac4ed4, 68a6afe50e0f3bd8deac4ef4, 68a6afe50e0f3bd8deac4f14, 68a6afe50e0f3bd8deac4f34, 68a6afe50e0f3bd8deac4f5e, 68a6afe50e0f3bd8deac4f7e, 68a6afe50e0f3bd8deac4f9e, 68a6afe50e0f3bd8deac4fbe, 68a6afe50e0f3bd8deac4fde, 68a6afe50e0f3bd8deac4ffe, 68a6afe50e0f3bd8deac501e, 68a6afe50e0f3bd8deac503e, 68a6afe50e0f3bd8deac505e, 68a6afe50e0f3bd8deac507e, 68a6afe50e0f3bd8deac50a8, 68a6afe50e0f3bd8deac50c8, 68a6afe50e0f3bd8deac50e8, 68a6afe50e0f3bd8deac5112, 68a6afe50e0f3bd8deac5132, 68a6afe50e0f3bd8deac5152, 68a6afe50e0f3bd8deac517c, 68a6afe50e0f3bd8deac519c, 68a6afe50e0f3bd8deac51bc, 68a6afe50e0f3bd8deac51dd, 68a6afe50e0f3bd8deac520f, 68a6afe50e0f3bd8deac5226, 68a6afe50e0f3bd8deac523d, 68a6afe50e0f3bd8deac525d, 68a6afe50e0f3bd8deac5291, 68a6afe50e0f3bd8deac52b1, 68a6afe50e0f3bd8deac52d1, 68a6afe50e0f3bd8deac52f1, 68a6afe50e0f3bd8deac5311, 68a6afe50e0f3bd8deac5331, 68a6afe50e0f3bd8deac5351, 68a6afe50e0f3bd8deac5371, 68a6afe50e0f3bd8deac5397, 68a6afe50e0f3bd8deac53b2, 68a6afe50e0f3bd8deac53d6, 68a6afe50e0f3bd8deac53f6, 68a6afe50e0f3bd8deac5417, 68a6afe50e0f3bd8deac5431, 68a6afe50e0f3bd8deac5456, 68a6afe50e0f3bd8deac5477, 68a6afe50e0f3bd8deac5497, 68a6afe50e0f3bd8deac54b7, 68a6afe50e0f3bd8deac54d7, 68a6afe50e0f3bd8deac54f7, 68a6afe50e0f3bd8deac5517, 68a6afe50e0f3bd8deac5537, 68a6afe50e0f3bd8deac5561, 68a6afe50e0f3bd8deac5581, 68a6afe50e0f3bd8deac55a1, 68a6afe50e0f3bd8deac55c1, 68a6afe50e0f3bd8deac55e1, 68a6afe50e0f3bd8deac5601, 68a6afe50e0f3bd8deac5621, 68a6afe50e0f3bd8deac5650, 68a6afe50e0f3bd8deac5671, 68a6afe50e0f3bd8deac569f, 68a6afe50e0f3bd8deac56bf, 68a6afe50e0f3bd8deac56d6, 68a6afe50e0f3bd8deac56fe, 68a6afe50e0f3bd8deac5719, 68a6afe50e0f3bd8deac573f, 68a6afe50e0f3bd8deac5772, 68a6afe50e0f3bd8deac5785, 68a6afe50e0f3bd8deac57b2, 68a6afe50e0f3bd8deac57c9, 68a6afe50e0f3bd8deac57f3, 68a6afe50e0f3bd8deac5807, 68a6afe50e0f3bd8deac5820, 68a6afe50e0f3bd8deac5849, 68a6afe50e0f3bd8deac5871, 68a6afe50e0f3bd8deac5886, 68a6afe50e0f3bd8deac58b8, 68a6afe50e0f3bd8deac58c9, 68a6afe50e0f3bd8deac58f8, 68a6afe50e0f3bd8deac5903, 68a6afe50e0f3bd8deac593a, 68a6afe50e0f3bd8deac5949, 68a6afe50e0f3bd8deac5969, 68a6afe50e0f3bd8deac5980, 68a6afe50e0f3bd8deac59a8, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeSurfaceRenderer.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [709ae0b977b88c6b464d071705afd1b1] [f3077103844526974301b20e8c9ee384bf4ca165] [713a587cc88a36d2a69e3f4d6e05bcd7ae311f428881e144df1292bb33b14b8c541615c0bdc5c57aff2dbd84a932b019] [6432c1cd0dc1346e064d87c33b9407204085add25f332cca15278c887e9beda29d917b6cf8e788776cd64012238742c880b2a65222ab91b80fed5fe11e390443] [172.17.30.60] [172.17.30.60] 1 Success AmeSurfaceRenderer.dll C:\Program Files\Fujifilm\NaxisWS6\ 915456 709ae0b977b88c6b464d071705afd1b1 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:01:08 +0000 UTC f3077103844526974301b20e8c9ee384bf4ca165 713a587cc88a36d2a69e3f4d6e05bcd7ae311f428881e144df1292bb33b14b8c541615c0bdc5c57aff2dbd84a932b019 6432c1cd0dc1346e064d87c33b9407204085add25f332cca15278c887e9beda29d917b6cf8e788776cd64012238742c880b2a65222ab91b80fed5fe11e390443 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
51487b1d0106a1cba0f366382670dcbc556aec3967d9b90eadb81a25b1cb73b6 [68a472b1b022648922e23595] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mdnsjava-2.2.0-b4.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [996c6c22fb40d5c32fb9489c25eed721] [6951865590da9a04705901809186dd51016a22e8] [e38d41039c4acccb0bd25632c6d3302a4130ea30ada2c267aaa9d5a27ee1577f38bf299478058e3307a5fc5d90cfd16c] [5ab30f96443d3a5ef5e8833b148ce0b0a82b41b78baba4faef6af1be272a5c0ddd8eb8ecb8730f50748d59bea28ac32facf50bc6828823ac7bef6e349ea85d56] [172.17.23.146] [172.17.23.146] 1 Success mdnsjava-2.2.0-b4.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\posick\mDNS\main\ 138111 996c6c22fb40d5c32fb9489c25eed721 Not Signed 2024-04-05 21:55:13 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 6951865590da9a04705901809186dd51016a22e8 e38d41039c4acccb0bd25632c6d3302a4130ea30ada2c267aaa9d5a27ee1577f38bf299478058e3307a5fc5d90cfd16c 5ab30f96443d3a5ef5e8833b148ce0b0a82b41b78baba4faef6af1be272a5c0ddd8eb8ecb8730f50748d59bea28ac32facf50bc6828823ac7bef6e349ea85d56 2025-03-28 16:07:06 +0000 UTC None None 2022-03-17 18:11:51 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
5142d86c71c334bad9b37b907cf90abedbeadd7c1fbb7d60e606a68d22ee5bda [68a17a3a664e386e865decd2] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eykp4qxi.sdo.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:44:05Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_eykp4qxi.sdo.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:44:05 +0000 UTC 2025-08-17 06:44:05 +0000 UTC 2025-08-17 06:44:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5129f60cbae666db5bb5c417239fd41121ff15600a36410bc83b92e6bdbeec39 [68a34b98a6132bf659cce5b3, 68a34df0b71eea1289980a18] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.GridView.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z] [0fcd86e341fbfceb9360df94e6e6607a] [d84fdf7b01fd6dd7e1665d696bdf28a5dfa2a075] [215c7f95a174ddf9eb94126dbc02f17c0be6892da6deff419f443ffafada7ca7c6720698ddd9f0cdeda8d025f31f5382] [5e0069620a64e43f8e8b57cc98b68eddf95fac0d3f702d5985f904ec30aa74c702db818390366edcfc48271d7571b938afa6fff129c2966acebcf1dff20d2367] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.GridView.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.GridView 1681920 0fcd86e341fbfceb9360df94e6e6607a Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:00 +0000 UTC 2023-07-25 16:12:00 +0000 UTC d84fdf7b01fd6dd7e1665d696bdf28a5dfa2a075 215c7f95a174ddf9eb94126dbc02f17c0be6892da6deff419f443ffafada7ca7c6720698ddd9f0cdeda8d025f31f5382 5e0069620a64e43f8e8b57cc98b68eddf95fac0d3f702d5985f904ec30aa74c702db818390366edcfc48271d7571b938afa6fff129c2966acebcf1dff20d2367 2025-06-09 21:58:51 +0000 UTC None None 2025-05-15 05:23:16 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
5123ab35482a1dcca7c83332b37568cc696aee9f9e8bbcad2a654014d7364d75 [68a15a274601a96260694483] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0ucap4f1.ghu.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:27:10Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_0ucap4f1.ghu.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:27:10 +0000 UTC 2025-08-17 04:27:10 +0000 UTC 2025-08-17 04:27:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5105aafd20d9944f9076e24f001c0da20c64943ae969583811bcee3f504ac44c [68a18cc514e7a0de47067714, 68a2de4c24b13c178e1e1496, 68a42ff2cfdf5d300631abd0, 68a5818b1ea96109fbbc885a, 68a6d336fae8f75d18a38566] [2] [SYSTEM] [GRMC-ECW-EBO] [NT AUTHORITY] [D:\eClinicalWorks\eBO\eBO_stop.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T08:00:01Z] [deb1a8bcca660fac053336c625030dfd] [11893c3ae1af058fb5c6c5d724fe1df21338f9fc] [8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa] [c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2] [192.168.3.241] [192.168.3.241] 1 Success eBO_stop.bat D:\eClinicalWorks\eBO\ 12 deb1a8bcca660fac053336c625030dfd Not Signed 2021-07-04 20:05:12 +0000 UTC 2021-07-04 20:05:12 +0000 UTC 11893c3ae1af058fb5c6c5d724fe1df21338f9fc 8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2 2025-08-09 08:00:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c [68a472a799ad3734d804e2fa] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-lang-2.6.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [4d5c1693079575b362edf41500630bbd] [0ce1edb914c94ebc388f086c6827e8bdeec71ac2] [9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90] [4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42] [172.17.23.146] [172.17.23.146] 1 Success commons-lang-2.6.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\apache\commons\lang\main\ 284220 4d5c1693079575b362edf41500630bbd Not Signed 2024-04-05 21:55:16 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 0ce1edb914c94ebc388f086c6827e8bdeec71ac2 9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90 4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42 2025-03-28 16:06:16 +0000 UTC None None 2025-03-21 10:37:29 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-11 00:50:11.475 +0000 UTC
50391527cb36dfceeab0bb805595d1547ffd82ddea9edac51e6aba51ac9414aa [68a4ccc785b914a60d739e4f, 68a4ce1fc826337212f53bec, 68a4d07753a851daf11e6937, 68a4d07753a851daf11e694c, 68a4d2d1ff2b441b8442812f, 68a4d2d1ff2b441b84428144] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\Win32.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [2bc97f533732bd5d15bf8138c411a9fe] [54c6081b4a286a6d67cca3435d3c10d9cf6156c3] [d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba] [1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19] [10.36.132.49] [10.36.132.49] 1 Success Win32.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\ 40448 2bc97f533732bd5d15bf8138c411a9fe Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:50 +0000 UTC 54c6081b4a286a6d67cca3435d3c10d9cf6156c3 d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba 1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
501c23a8773ba342043991d4b182144224043dd4d31b8277b12dfbe3f90b7229 [68a472a799ad3734d804e2f6] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CommonLibrary-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [e45d8e0bcf5f5211080e6b2c818e789c] [5d1c83e5cd11aef17ca21c748eb6afa8df398f87] [c0bd6d23cb09e471d867936614605883ae06ace2e154ed66f0f7597a3279ecff08a007d9731f222298e88a89be7a286d] [39d5dfc10c417017810315ddca05cb956fcbc2bb17fa11867c13be07a98d98eee79569f0ae98a70e53357835cbeacf20f057d2ff28475b740e7b047eba2acf7b] [172.17.23.146] [172.17.23.146] 1 Success CommonLibrary-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\compellent\common\commonlibrary\main\ 380244 e45d8e0bcf5f5211080e6b2c818e789c Not Signed 2024-04-05 21:54:57 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 5d1c83e5cd11aef17ca21c748eb6afa8df398f87 c0bd6d23cb09e471d867936614605883ae06ace2e154ed66f0f7597a3279ecff08a007d9731f222298e88a89be7a286d 39d5dfc10c417017810315ddca05cb956fcbc2bb17fa11867c13be07a98d98eee79569f0ae98a70e53357835cbeacf20f057d2ff28475b740e7b047eba2acf7b 2025-03-28 16:06:06 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:58:11.933 +0000 UTC
4fe777ba7af0edac6e91e842302d7de7c476d0608ee4719c62cba23884121376 [68a326a0535549e009a51dcf] [2] [be10045] [i-nsdprint1] [WVUHS] [C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_gqc0q3rf.x2b.ps1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-18T13:11:57Z] [] [] [] [] [172.17.252.10] [172.17.252.10] 1 Success __PSScriptPolicyTest_gqc0q3rf.x2b.ps1 C:\Users\be10045\AppData\Local\Temp\2\ 80 Not Signed 2025-08-18 13:11:57 +0000 UTC 2025-08-18 13:11:57 +0000 UTC 2025-08-18 13:12:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4fa0b4ddeed831597e0a0301e37344443cea83904d99b4e24b13286070c399e3 [68a3146b5f0c41860c8c851c, 68a3146b5f0c41860c8c856b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\charset.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] [ba03f33735350044c3fc13f73c1d9e98] [7229c271c838fece9643486a3126e4537be0b291] [a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0] [dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb] [172.17.252.131] [172.17.252.131] 1 Success charset.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 14907 ba03f33735350044c3fc13f73c1d9e98 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 7229c271c838fece9643486a3126e4537be0b291 a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0 dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4f8dd5d3925e84c5bd149cbee8cb8871196d4b32acaf73a9e35250e1e6f0d1ed [68a6afe50e0f3bd8deac4d07, 68a6afe50e0f3bd8deac4d1b, 68a6afe50e0f3bd8deac4d49, 68a6afe50e0f3bd8deac4d69, 68a6afe50e0f3bd8deac4d89, 68a6afe50e0f3bd8deac4da9, 68a6afe50e0f3bd8deac4dc9, 68a6afe50e0f3bd8deac4de9, 68a6afe50e0f3bd8deac4e09, 68a6afe50e0f3bd8deac4e29, 68a6afe50e0f3bd8deac4e49, 68a6afe50e0f3bd8deac4e69, 68a6afe50e0f3bd8deac4e89, 68a6afe50e0f3bd8deac4ea9, 68a6afe50e0f3bd8deac4eb9, 68a6afe50e0f3bd8deac4ee9, 68a6afe50e0f3bd8deac4f09, 68a6afe50e0f3bd8deac4f29, 68a6afe50e0f3bd8deac4f49, 68a6afe50e0f3bd8deac4f73, 68a6afe50e0f3bd8deac4f93, 68a6afe50e0f3bd8deac4fb3, 68a6afe50e0f3bd8deac4fd3, 68a6afe50e0f3bd8deac4ff3, 68a6afe50e0f3bd8deac5013, 68a6afe50e0f3bd8deac5033, 68a6afe50e0f3bd8deac5053, 68a6afe50e0f3bd8deac5073, 68a6afe50e0f3bd8deac5093, 68a6afe50e0f3bd8deac50bd, 68a6afe50e0f3bd8deac50dc, 68a6afe50e0f3bd8deac50fd, 68a6afe50e0f3bd8deac5127, 68a6afe50e0f3bd8deac5147, 68a6afe50e0f3bd8deac5167, 68a6afe50e0f3bd8deac5191, 68a6afe50e0f3bd8deac51b1, 68a6afe50e0f3bd8deac51d1, 68a6afe50e0f3bd8deac51f2, 68a6afe50e0f3bd8deac5204, 68a6afe50e0f3bd8deac521b, 68a6afe50e0f3bd8deac5252, 68a6afe50e0f3bd8deac5272, 68a6afe50e0f3bd8deac5286, 68a6afe50e0f3bd8deac52a6, 68a6afe50e0f3bd8deac52c6, 68a6afe50e0f3bd8deac52e6, 68a6afe50e0f3bd8deac5306, 68a6afe50e0f3bd8deac5326, 68a6afe50e0f3bd8deac5346, 68a6afe50e0f3bd8deac5366, 68a6afe50e0f3bd8deac5386, 68a6afe50e0f3bd8deac53ac, 68a6afe50e0f3bd8deac53c9, 68a6afe50e0f3bd8deac53ec, 68a6afe50e0f3bd8deac540b, 68a6afe50e0f3bd8deac542c, 68a6afe50e0f3bd8deac5446, 68a6afe50e0f3bd8deac546c, 68a6afe50e0f3bd8deac548c, 68a6afe50e0f3bd8deac54ac, 68a6afe50e0f3bd8deac54cc, 68a6afe50e0f3bd8deac54ec, 68a6afe50e0f3bd8deac550c, 68a6afe50e0f3bd8deac552c, 68a6afe50e0f3bd8deac554c, 68a6afe50e0f3bd8deac5576, 68a6afe50e0f3bd8deac5596, 68a6afe50e0f3bd8deac55b6, 68a6afe50e0f3bd8deac55d6, 68a6afe50e0f3bd8deac55f6, 68a6afe50e0f3bd8deac5616, 68a6afe50e0f3bd8deac5636, 68a6afe50e0f3bd8deac5666, 68a6afe50e0f3bd8deac5686, 68a6afe50e0f3bd8deac5694, 68a6afe50e0f3bd8deac56b4, 68a6afe50e0f3bd8deac56d4, 68a6afe50e0f3bd8deac56ec, 68a6afe50e0f3bd8deac5714, 68a6afe50e0f3bd8deac572e, 68a6afe50e0f3bd8deac5754, 68a6afe50e0f3bd8deac575d, 68a6afe50e0f3bd8deac579c, 68a6afe50e0f3bd8deac57a8, 68a6afe50e0f3bd8deac57dd, 68a6afe50e0f3bd8deac57e8, 68a6afe50e0f3bd8deac581c, 68a6afe50e0f3bd8deac5835, 68a6afe50e0f3bd8deac585e, 68a6afe50e0f3bd8deac5866, 68a6afe50e0f3bd8deac589c, 68a6afe50e0f3bd8deac58af, 68a6afe50e0f3bd8deac58de, 68a6afe50e0f3bd8deac58e8, 68a6afe50e0f3bd8deac5918, 68a6afe50e0f3bd8deac592f, 68a6afe50e0f3bd8deac595e, 68a6afe50e0f3bd8deac597e, 68a6afe50e0f3bd8deac5995, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\libssl-1_1-x64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:47Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [d65e539989913a7b14a884d1ba70fc58] [fcfb133f637410f11ee45c8e881843a36438d363] [f048e011a639d160c093b09b24a11e5458f5cba4297edb4c41c11fb1ed302b1e59c0e86f579d3c6c545cd512263af402] [c3cf018c4446bc106f2b66078a4ae48f87eeeaefe9c739eaf7b3d8b749dd32a88a892ad9d04dda273516022e8c7c74ddfab0dd8bef26a6609f83af77aae2d2a7] [172.17.30.60] [172.17.30.60] 1 Success libssl-1_1-x64.dll C:\Program Files\Fujifilm\NaxisWS6\ OpenSSL library 685056 d65e539989913a7b14a884d1ba70fc58 The OpenSSL Toolkit 1.1.1d Not Signed 2023-11-03 20:25:46 +0000 UTC 2023-03-07 00:33:42 +0000 UTC fcfb133f637410f11ee45c8e881843a36438d363 f048e011a639d160c093b09b24a11e5458f5cba4297edb4c41c11fb1ed302b1e59c0e86f579d3c6c545cd512263af402 c3cf018c4446bc106f2b66078a4ae48f87eeeaefe9c739eaf7b3d8b749dd32a88a892ad9d04dda273516022e8c7c74ddfab0dd8bef26a6609f83af77aae2d2a7 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
4ee74b8165e39d490e8c0becd7eaf99a725211af6a972ae8652268e41c9b91e6 [68a178be850d7bbc2e6ff246] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cn0wtlxx.tc3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:37:39Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_cn0wtlxx.tc3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:37:39 +0000 UTC 2025-08-17 06:37:39 +0000 UTC 2025-08-17 06:37:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
4ee3b6db9e68711663695d7c7c9fbef7ff2d8f524523e78c11e8ba51082ac2d2 [68a16cdf801a1582a9ec932b] [2] [SYSTEM] [i-hBMCCure] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ycrk34bx.lm0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:47:03Z] [] [] [] [] [172.17.252.100] [172.17.252.100] 1 Success __PSScriptPolicyTest_ycrk34bx.lm0.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:47:03 +0000 UTC 2025-08-17 05:47:03 +0000 UTC 2025-08-17 05:47:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5592943ead1aff645f47491b2d6ffc8ef4321ac3057298636b873231e9892588 [68a5c7e76397242bf73fa413] [2] [CA_Jnt_Talis1] [VM-TalisWave] [WVUHS] [C:\Users\ca_Jnt_Talis1\Desktop\MDI_Install_DeployAgent_NEW.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T13:04:30Z] [4528d629d40aac35051da0522f52607b] [4cd808677a3e168b90608c51a9306e76db5213b4] [31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135] [d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54] [172.17.252.194] [172.17.252.194] 1 Success MDI_Install_DeployAgent_NEW.ps1 C:\Users\ca_Jnt_Talis1\Desktop\ 6587 4528d629d40aac35051da0522f52607b Not Signed 2025-08-20 13:01:53 +0000 UTC 2025-08-20 13:03:03 +0000 UTC 4cd808677a3e168b90608c51a9306e76db5213b4 31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135 d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54 2025-08-20 13:04:39 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
5590daef95c358df33daea533ac2d818d6da44abc4e20cf97985c177d9807934 [68a3146b5f0c41860c8c850e, 68a3146b5f0c41860c8c8561] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\http\__pycache__\client.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [548e8b8a392268a48e6aeb8779be88db] [648361765ba0a4093c5dcfb5aa2c8d556e224203] [e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef] [ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204] [172.17.252.131] [172.17.252.131] 1 Success client.cpython-313.pyc C:\Program Files\Python\Lib\http\__pycache__\ 58011 548e8b8a392268a48e6aeb8779be88db Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC 648361765ba0a4093c5dcfb5aa2c8d556e224203 e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
550a66f3624ef25c40cbff924e56b0b269b0ac5d28da318e3e433cefd79761db [68a1e1f3d67e8d114640fa37] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jfvzuzyk.al2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:06:38Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_jfvzuzyk.al2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:06:38 +0000 UTC 2025-08-17 14:06:38 +0000 UTC 2025-08-17 14:06:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
55096d9d5b8d2540a0fe037e6704e0234d11b5a1f0a574cfdd576a6b0352dc57 [68a532147b5869d075ea1a64] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aijcft55.e2m.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T02:25:14Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_aijcft55.e2m.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 02:25:14 +0000 UTC 2025-08-20 02:25:14 +0000 UTC 2025-08-20 02:25:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
53fb85b73c86e90e48c14c8f5163b1459465f0b15fb03e3eb2e62f05dbd2f1ec [68a17d282a5df80b055ee0ee] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrbm4rto.beq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:56:37Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_xrbm4rto.beq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:56:37 +0000 UTC 2025-08-17 06:56:37 +0000 UTC 2025-08-17 06:56:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
53d05f355b9570288a1107872f00b3159ebaf4a39cb844a07eb17855ad4285f1 [68a3536f4c961e0e97663798] [2] [SYSTEM] [UH-MYLA-01] [NT AUTHORITY] [C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\shutdown_pointer.cmd] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\gpscript.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T16:23:04Z] [5d8e141e0db6caceb5cd8b4ca1970ab0] [8b7779bbead93a6cb490c37182ae0af405e88595] [92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9] [47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9] [10.101.100.201] [10.101.100.201] 1 Success shutdown_pointer.cmd C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\ 60 5d8e141e0db6caceb5cd8b4ca1970ab0 Not Signed 2019-10-29 12:58:12 +0000 UTC 2019-10-28 19:17:11 +0000 UTC 8b7779bbead93a6cb490c37182ae0af405e88595 92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9 47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9 2025-08-18 16:23:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
539dae55d02bd0e7939fe5ca3ca52297b8925b555acabc714583dc7c80a94b0a [68a3146b5f0c41860c8c84f0, 68a3146b5f0c41860c8c8528] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\types.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [c61242d8c34df5630927662930df1721] [c178f5b9a7f198f2422663096de0f578bf4bee02] [e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68] [f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7] [172.17.252.131] [172.17.252.131] 1 Success types.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 15551 c61242d8c34df5630927662930df1721 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC c178f5b9a7f198f2422663096de0f578bf4bee02 e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68 f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
538aaac7ab964e222a42e6f216ffa10fba939d6c13e4d1921e947f8d5c6c42c7 [68a472b1b022648922e2358b] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxws-rt-2.3.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [44f8bf34fd897657d6b35540c6dfafa9] [1bb06944d0d9927c3eb4a1890766e55ff61e12de] [7b2a3800cc558ec8ca1e7b8dc35e3904b150e90c9a1b8e00b0be38d187c4e7fbb9ae5ed22291266d111f9be2c956f00b] [7746e52bfe94810e8ec33052420a1f0e5275ac189cc25231d6df29545749abcb2107408413121629eca8bc05d283d9b6c0bbd156d147b5a96a17d17010311f44] [172.17.23.146] [172.17.23.146] 1 Success jaxws-rt-2.3.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxws-rt-2.3.0.jar-6bc05a4c8fd1b9b6\ 2613698 44f8bf34fd897657d6b35540c6dfafa9 Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC 1bb06944d0d9927c3eb4a1890766e55ff61e12de 7b2a3800cc558ec8ca1e7b8dc35e3904b150e90c9a1b8e00b0be38d187c4e7fbb9ae5ed22291266d111f9be2c956f00b 7746e52bfe94810e8ec33052420a1f0e5275ac189cc25231d6df29545749abcb2107408413121629eca8bc05d283d9b6c0bbd156d147b5a96a17d17010311f44 2025-03-28 16:06:36 +0000 UTC None None 2021-04-25 10:35:19 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
532f364361b515f31c6fd2fcfd4bc56bce053839b3cd82583d1e1065c42952ce [68a474562c8d6a03c3aa568b] [2] [SYSTEM] [i-nctx-pvs2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etihzaoc.pjw.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T12:55:46Z] [] [] [] [] [172.17.246.5] [172.17.246.5] 1 Success __PSScriptPolicyTest_etihzaoc.pjw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 12:55:46 +0000 UTC 2025-08-19 12:55:46 +0000 UTC 2025-08-19 12:55:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
52e40b2ea19d7d3459d718528d448f408f7597e4f53ab6475e81a78f4f07d7a5 [68a311cdc2d0d6e3eb77f209] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\Check-O365-Licenses-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [b71ecdb3e3640257f8fba06e498dd845] [a9ee5167e3a5da2f78e3c0c617d8920302d65991] [a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400] [50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8] [172.25.17.86] [172.25.17.86] 1 Success Check-O365-Licenses-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 12437 b71ecdb3e3640257f8fba06e498dd845 Not Signed 2025-06-11 18:05:12 +0000 UTC 2025-06-11 18:45:00 +0000 UTC a9ee5167e3a5da2f78e3c0c617d8920302d65991 a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400 50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
52cb9bab4938352f585b879a1fbdd975c84c563bf9852ba99171f4a75c31cb29 [68a3146b5f0c41860c8c8522, 68a3146b5f0c41860c8c856d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\quopri.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] [b1e988eb0ac59301e3a28829017cff3a] [5b2ece43d31e183cfcc3fdb11681eda045ff797e] [7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a] [c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33] [172.17.252.131] [172.17.252.131] 1 Success quopri.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 9568 b1e988eb0ac59301e3a28829017cff3a Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 5b2ece43d31e183cfcc3fdb11681eda045ff797e 7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
526cdad144861612c9204c2d07f008b0668e413d4be922b2c5893f8ce1c035d3 [68a34b98a6132bf659cce5b0, 68a34df0b71eea1289980a15] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\TelerikCommon.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z] [089098628bd484650d2fc8551c606c44] [b8b45370b643a7f6a81c270f3d81ca84bd0849de] [1a175527f0e3eed47731531c2b758f9b2956a8a2fc846adf749fcda44270689efa357c5cd0cec87513bda37b2b002e7e] [ae462a88ff5266f6d4000e131e3f83804e5ef9eee9bb69fc0ab2932135ac14994fc97e5b4a4d021fde190c649054f3c592223c884751da4f3b05a2923090e95d] [172.17.253.114] [172.17.253.114] 1 Success TelerikCommon.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.Common 913920 089098628bd484650d2fc8551c606c44 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:03 +0000 UTC 2023-07-25 16:12:03 +0000 UTC b8b45370b643a7f6a81c270f3d81ca84bd0849de 1a175527f0e3eed47731531c2b758f9b2956a8a2fc846adf749fcda44270689efa357c5cd0cec87513bda37b2b002e7e ae462a88ff5266f6d4000e131e3f83804e5ef9eee9bb69fc0ab2932135ac14994fc97e5b4a4d021fde190c649054f3c592223c884751da4f3b05a2923090e95d 2025-06-09 21:58:41 +0000 UTC None None 2025-03-08 07:49:43 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
5227d0069ee05e485e62e216897870d9d5e9e1ba9ef645d7736411fdbf648045 [68a470efd203a904885c685b] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\InstallerActions.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\software\Storage Manager Data Collector 20.1.2.14.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:41:13Z] [a3916319c269dd817403b77d46195618] [36029cc7e756d590e7c89d05ad9ef5365152cf15] [785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9] [df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27] [172.17.23.146] [172.17.23.146] 1 Success InstallerActions.dll E:\Program Files\Dell EMC\Storage Manager\msaservice\bin\ InstallerActions 79360 a3916319c269dd817403b77d46195618 InstallerActions 20.1.2.14 Not Signed 2021-12-22 05:20:44 +0000 UTC 2021-12-22 05:20:44 +0000 UTC 36029cc7e756d590e7c89d05ad9ef5365152cf15 785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9 df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27 2025-05-02 01:14:05 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5216ed10b9145fcc817400bb870a1097078168392f930c7b86d810268c80c642 [68a3146b5f0c41860c8c8541] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\lzma.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [048ad5d2b543b3a83d0ec6e1f3d9fa4b] [bd383b952354b3c24afc76cae8c79ff6ddecf4d3] [6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75] [f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f] [172.17.252.131] [172.17.252.131] 1 Success lzma.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 15726 048ad5d2b543b3a83d0ec6e1f3d9fa4b Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC bd383b952354b3c24afc76cae8c79ff6ddecf4d3 6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75 f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
51f865b57ed83f9f9a7098c0a8a52bf04a707bfc57fb627199a2c3f4872ed2a3 [68a59cc78e54cccae2680af6] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_2f02889eb87340149837d95c1c42807d.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-20T10:00:28Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_2f02889eb87340149837d95c1c42807d.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 10:00:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
51ed5f6e70b195d67ed614ea3f7f2298f65b369ee54d93d6ec2d3ea2471cf106 [68a6afe50e0f3bd8deac4ce2, 68a6afe50e0f3bd8deac4cf1, 68a6afe50e0f3bd8deac4d25, 68a6afe50e0f3bd8deac4d33, 68a6afe50e0f3bd8deac4d53, 68a6afe50e0f3bd8deac4d73, 68a6afe50e0f3bd8deac4d93, 68a6afe50e0f3bd8deac4db3, 68a6afe50e0f3bd8deac4dd3, 68a6afe50e0f3bd8deac4df3, 68a6afe50e0f3bd8deac4e13, 68a6afe50e0f3bd8deac4e33, 68a6afe50e0f3bd8deac4e53, 68a6afe50e0f3bd8deac4e73, 68a6afe50e0f3bd8deac4e93, 68a6afe50e0f3bd8deac4ec4, 68a6afe50e0f3bd8deac4ed3, 68a6afe50e0f3bd8deac4ef3, 68a6afe50e0f3bd8deac4f13, 68a6afe50e0f3bd8deac4f33, 68a6afe50e0f3bd8deac4f5d, 68a6afe50e0f3bd8deac4f7d, 68a6afe50e0f3bd8deac4f9d, 68a6afe50e0f3bd8deac4fbd, 68a6afe50e0f3bd8deac4fdd, 68a6afe50e0f3bd8deac4ffd, 68a6afe50e0f3bd8deac501d, 68a6afe50e0f3bd8deac503d, 68a6afe50e0f3bd8deac505d, 68a6afe50e0f3bd8deac507d, 68a6afe50e0f3bd8deac50a7, 68a6afe50e0f3bd8deac50c7, 68a6afe50e0f3bd8deac50e7, 68a6afe50e0f3bd8deac5111, 68a6afe50e0f3bd8deac5131, 68a6afe50e0f3bd8deac5151, 68a6afe50e0f3bd8deac517b, 68a6afe50e0f3bd8deac519b, 68a6afe50e0f3bd8deac51bb, 68a6afe50e0f3bd8deac51dc, 68a6afe50e0f3bd8deac520e, 68a6afe50e0f3bd8deac5225, 68a6afe50e0f3bd8deac523c, 68a6afe50e0f3bd8deac525c, 68a6afe50e0f3bd8deac5290, 68a6afe50e0f3bd8deac52b0, 68a6afe50e0f3bd8deac52d0, 68a6afe50e0f3bd8deac52f0, 68a6afe50e0f3bd8deac5310, 68a6afe50e0f3bd8deac5330, 68a6afe50e0f3bd8deac5350, 68a6afe50e0f3bd8deac5370, 68a6afe50e0f3bd8deac5396, 68a6afe50e0f3bd8deac53b1, 68a6afe50e0f3bd8deac53d5, 68a6afe50e0f3bd8deac53f5, 68a6afe50e0f3bd8deac5416, 68a6afe50e0f3bd8deac5430, 68a6afe50e0f3bd8deac5455, 68a6afe50e0f3bd8deac5476, 68a6afe50e0f3bd8deac5496, 68a6afe50e0f3bd8deac54b6, 68a6afe50e0f3bd8deac54d6, 68a6afe50e0f3bd8deac54f6, 68a6afe50e0f3bd8deac5516, 68a6afe50e0f3bd8deac5536, 68a6afe50e0f3bd8deac5560, 68a6afe50e0f3bd8deac5580, 68a6afe50e0f3bd8deac55a0, 68a6afe50e0f3bd8deac55c0, 68a6afe50e0f3bd8deac55e0, 68a6afe50e0f3bd8deac5600, 68a6afe50e0f3bd8deac5620, 68a6afe50e0f3bd8deac564f, 68a6afe50e0f3bd8deac5670, 68a6afe50e0f3bd8deac569e, 68a6afe50e0f3bd8deac56be, 68a6afe50e0f3bd8deac56f5, 68a6afe50e0f3bd8deac56fd, 68a6afe50e0f3bd8deac5718, 68a6afe50e0f3bd8deac573e, 68a6afe50e0f3bd8deac5771, 68a6afe50e0f3bd8deac5784, 68a6afe50e0f3bd8deac57b1, 68a6afe50e0f3bd8deac57c8, 68a6afe50e0f3bd8deac57f2, 68a6afe50e0f3bd8deac5806, 68a6afe50e0f3bd8deac583e, 68a6afe50e0f3bd8deac5848, 68a6afe50e0f3bd8deac5870, 68a6afe50e0f3bd8deac5885, 68a6afe50e0f3bd8deac58b7, 68a6afe50e0f3bd8deac58c8, 68a6afe50e0f3bd8deac58f7, 68a6afe50e0f3bd8deac5902, 68a6afe50e0f3bd8deac5938, 68a6afe50e0f3bd8deac5948, 68a6afe50e0f3bd8deac5968, 68a6afe50e0f3bd8deac599f, 68a6afe50e0f3bd8deac59a7, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeVolumeRenderer2.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [5acbb3147cf6c40585981c46bfd13750] [cc7f12d9377958b5f0b08fcf5fe117add972a0c0] [ae16394bafad430433798d3db252b544363f3d6dcaa61206749626f253a56bdd055f545bb586ad7942a6dc778a911f63] [6f8ad8e6bb3b82b70ae1965e8004485acc0e3241704c8b52dfd124ebf628f56ddc09a4b5d8e688f98718a6d062991704ed206df2c5f32b419a4c1be301de532a] [172.17.30.60] [172.17.30.60] 1 Success AmeVolumeRenderer2.dll C:\Program Files\Fujifilm\NaxisWS6\ 6577664 5acbb3147cf6c40585981c46bfd13750 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:04:12 +0000 UTC cc7f12d9377958b5f0b08fcf5fe117add972a0c0 ae16394bafad430433798d3db252b544363f3d6dcaa61206749626f253a56bdd055f545bb586ad7942a6dc778a911f63 6f8ad8e6bb3b82b70ae1965e8004485acc0e3241704c8b52dfd124ebf628f56ddc09a4b5d8e688f98718a6d062991704ed206df2c5f32b419a4c1be301de532a 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
57bfa899aa02376e3b3450f27683fc6ff601584d9d7d432312bfab377d96b35a [68a4eb5df910568724168d54] [2] [SYSTEM] [u-nWHL-CTX-02] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ypcgscah.ojh.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T21:23:38Z] [] [] [] [] [172.25.14.129] [172.25.14.129] 1 Success __PSScriptPolicyTest_ypcgscah.ojh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 21:23:38 +0000 UTC 2025-08-19 21:23:38 +0000 UTC 2025-08-19 21:23:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
57acbdadf9dad29661be02b96dc230f82033fd5e1bfb258784dfb08ade1146f6 [68a311cdc2d0d6e3eb77f217] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-wineventdata_Function.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [c5e63465e3e5ef417a8804e3fdd5929e] [2e014b8ec3ff07d43c5d73c42c9eb51def6b8c11] [0c3de8d1d8bab0b99d2dc946d15f69b44dfdb30bbc29e2725b2c5216512b078fa776c2c67cb0d65bdd21989aaa5d6961] [1e015cf2acf3bcf53202d8ddbffd830d4643e3dbe8513a9f5c3fcd3f79dfddce7cc832a55bddbf0089c863d51152fadd2881995303ac4a0b3efb17b969e39498] [172.25.17.86] [172.25.17.86] 1 Success get-wineventdata_Function.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 3139 c5e63465e3e5ef417a8804e3fdd5929e Not Signed 2023-03-13 13:29:11 +0000 UTC 2023-03-13 13:29:11 +0000 UTC 2e014b8ec3ff07d43c5d73c42c9eb51def6b8c11 0c3de8d1d8bab0b99d2dc946d15f69b44dfdb30bbc29e2725b2c5216512b078fa776c2c67cb0d65bdd21989aaa5d6961 1e015cf2acf3bcf53202d8ddbffd830d4643e3dbe8513a9f5c3fcd3f79dfddce7cc832a55bddbf0089c863d51152fadd2881995303ac4a0b3efb17b969e39498 2025-08-12 11:48:49 +0000 UTC None None 2020-10-20 07:05:07 +0000 UTC 50 0 KNOWN 0 Benign 0.00 2025-08-12 11:50:53.298 +0000 UTC
5793a03b357f93cc7563eddd8c1c3dce648597006e786b502613255bfc3bf3fa [68a712755b61675b68bb04aa] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmp_buhx13sy.v0f\tmp_buhx13sy.v0f.psm1] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:31:14Z] [c2f581c553300ff18e03314e4c76a311] [fb95e2655adfd25a45501567e78fbea8cab50206] [928346995e88399775ea0da9a0bf1e6002a123274b175facf613eefe5ade31e78e09ff1ccd6b1eced09c651a847b447c] [d17ddfb4cfc403350af6153e48b35f8dfea134deead9c7954a2f2f0b1f8d96a3b5d62194284532f37ad51b6a6fd273090dd5dabadd0300f0e6e446f6d0f90e0e] [172.17.252.110] [172.17.252.110] 1 Success tmp_buhx13sy.v0f.psm1 C:\Users\georgemag\AppData\Local\Temp\tmp_buhx13sy.v0f\ 4669944 c2f581c553300ff18e03314e4c76a311 Not Signed 2025-08-21 12:31:13 +0000 UTC 2025-08-21 12:31:14 +0000 UTC fb95e2655adfd25a45501567e78fbea8cab50206 928346995e88399775ea0da9a0bf1e6002a123274b175facf613eefe5ade31e78e09ff1ccd6b1eced09c651a847b447c d17ddfb4cfc403350af6153e48b35f8dfea134deead9c7954a2f2f0b1f8d96a3b5d62194284532f37ad51b6a6fd273090dd5dabadd0300f0e6e446f6d0f90e0e 2025-08-21 12:35:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
572e12789d1b3b49b172c9d284d902986647e527ae6c11904cc99079b42625ef [68a3209bdb4bb30ce9fad5ac] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\tmpEXO_xktvp1ff.kqf.psm1] [Servers] [Servers Audit] [v2251.850] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T12:46:13Z] [9dbf39fe1a5381187ab341506970b134] [f9a6304e4715a8409551f6752844ea809a561092] [710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485] [2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_xktvp1ff.kqf.psm1 C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\ 2316948 9dbf39fe1a5381187ab341506970b134 Not Signed 2025-08-18 12:46:12 +0000 UTC 2025-08-18 12:46:12 +0000 UTC f9a6304e4715a8409551f6752844ea809a561092 710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485 2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c 2025-08-18 12:46:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
572aba4a05c13be1d8b3e6086687424b92a310d7d60203a9a13dca05306ff291 [68a6afe50e0f3bd8deac4ce8, 68a6afe50e0f3bd8deac4cf7, 68a6afe50e0f3bd8deac4d0b, 68a6afe50e0f3bd8deac4d39, 68a6afe50e0f3bd8deac4d59, 68a6afe50e0f3bd8deac4d79, 68a6afe50e0f3bd8deac4d99, 68a6afe50e0f3bd8deac4db9, 68a6afe50e0f3bd8deac4dd9, 68a6afe50e0f3bd8deac4df9, 68a6afe50e0f3bd8deac4e19, 68a6afe50e0f3bd8deac4e39, 68a6afe50e0f3bd8deac4e59, 68a6afe50e0f3bd8deac4e79, 68a6afe50e0f3bd8deac4e99, 68a6afe50e0f3bd8deac4eca, 68a6afe50e0f3bd8deac4ed9, 68a6afe50e0f3bd8deac4ef9, 68a6afe50e0f3bd8deac4f19, 68a6afe50e0f3bd8deac4f39, 68a6afe50e0f3bd8deac4f63, 68a6afe50e0f3bd8deac4f83, 68a6afe50e0f3bd8deac4fa3, 68a6afe50e0f3bd8deac4fc3, 68a6afe50e0f3bd8deac4fe3, 68a6afe50e0f3bd8deac5003, 68a6afe50e0f3bd8deac5023, 68a6afe50e0f3bd8deac5043, 68a6afe50e0f3bd8deac5063, 68a6afe50e0f3bd8deac5083, 68a6afe50e0f3bd8deac50ad, 68a6afe50e0f3bd8deac50cd, 68a6afe50e0f3bd8deac50ed, 68a6afe50e0f3bd8deac5117, 68a6afe50e0f3bd8deac5137, 68a6afe50e0f3bd8deac5157, 68a6afe50e0f3bd8deac5181, 68a6afe50e0f3bd8deac51a1, 68a6afe50e0f3bd8deac51c1, 68a6afe50e0f3bd8deac51e2, 68a6afe50e0f3bd8deac51f4, 68a6afe50e0f3bd8deac522b, 68a6afe50e0f3bd8deac5242, 68a6afe50e0f3bd8deac5262, 68a6afe50e0f3bd8deac5276, 68a6afe50e0f3bd8deac5296, 68a6afe50e0f3bd8deac52b6, 68a6afe50e0f3bd8deac52d6, 68a6afe50e0f3bd8deac52f6, 68a6afe50e0f3bd8deac5316, 68a6afe50e0f3bd8deac5336, 68a6afe50e0f3bd8deac5356, 68a6afe50e0f3bd8deac5376, 68a6afe50e0f3bd8deac539c, 68a6afe50e0f3bd8deac53b8, 68a6afe50e0f3bd8deac53dc, 68a6afe50e0f3bd8deac53fb, 68a6afe50e0f3bd8deac541c, 68a6afe50e0f3bd8deac5436, 68a6afe50e0f3bd8deac545c, 68a6afe50e0f3bd8deac547c, 68a6afe50e0f3bd8deac549c, 68a6afe50e0f3bd8deac54bc, 68a6afe50e0f3bd8deac54dc, 68a6afe50e0f3bd8deac54fc, 68a6afe50e0f3bd8deac551c, 68a6afe50e0f3bd8deac553c, 68a6afe50e0f3bd8deac5566, 68a6afe50e0f3bd8deac5586, 68a6afe50e0f3bd8deac55a6, 68a6afe50e0f3bd8deac55c6, 68a6afe50e0f3bd8deac55e6, 68a6afe50e0f3bd8deac5606, 68a6afe50e0f3bd8deac5626, 68a6afe50e0f3bd8deac5655, 68a6afe50e0f3bd8deac5676, 68a6afe50e0f3bd8deac56a4, 68a6afe50e0f3bd8deac56c4, 68a6afe50e0f3bd8deac56dc, 68a6afe50e0f3bd8deac5704, 68a6afe50e0f3bd8deac571e, 68a6afe50e0f3bd8deac5744, 68a6afe50e0f3bd8deac5777, 68a6afe50e0f3bd8deac578a, 68a6afe50e0f3bd8deac57b8, 68a6afe50e0f3bd8deac57ce, 68a6afe50e0f3bd8deac57f8, 68a6afe50e0f3bd8deac580c, 68a6afe50e0f3bd8deac5825, 68a6afe50e0f3bd8deac584e, 68a6afe50e0f3bd8deac5876, 68a6afe50e0f3bd8deac588c, 68a6afe50e0f3bd8deac58be, 68a6afe50e0f3bd8deac58ce, 68a6afe50e0f3bd8deac58fd, 68a6afe50e0f3bd8deac5908, 68a6afe50e0f3bd8deac593f, 68a6afe50e0f3bd8deac594e, 68a6afe50e0f3bd8deac596e, 68a6afe50e0f3bd8deac5985, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeTransport.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [bfb01f84a232e0fe7a6556c57aa9e2a3] [611af44307011599a69f76d0e5f817e19685188d] [31e047889d1ed66eac5e8befd833d28fbed2a837d59c25e541a0f96fdd7a5f580bcefa823c96ef6274179330af6cf3a5] [69cf3847ffdf423a68bbc659db76fe967fcf7e2a5de28e6871e7512a73e6fb06a23523a2f814031225ce98ee0304de53964c85e08538e8ed6735c6f249c8efa1] [172.17.30.60] [172.17.30.60] 1 Success AmeTransport.dll C:\Program Files\Fujifilm\NaxisWS6\ 382464 bfb01f84a232e0fe7a6556c57aa9e2a3 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 02:58:22 +0000 UTC 611af44307011599a69f76d0e5f817e19685188d 31e047889d1ed66eac5e8befd833d28fbed2a837d59c25e541a0f96fdd7a5f580bcefa823c96ef6274179330af6cf3a5 69cf3847ffdf423a68bbc659db76fe967fcf7e2a5de28e6871e7512a73e6fb06a23523a2f814031225ce98ee0304de53964c85e08538e8ed6735c6f249c8efa1 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
56ed5281697b1b3f0d4a02c56da40a350c650de6070953109d23c821ebf6c438 [68a3146b5f0c41860c8c8518, 68a3146b5f0c41860c8c8536] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\struct.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:18Z] [f2392beeb6895c05392b617d9556162e] [ceabc4d9e357b4e80d13f612480cad73d04827ff] [8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e] [6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060] [172.17.252.131] [172.17.252.131] 1 Success struct.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 333 f2392beeb6895c05392b617d9556162e Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC ceabc4d9e357b4e80d13f612480cad73d04827ff 8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e 6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
56e5500ac59d874c2f28b3141c3e7b0dea5a5db01f7b86c167d905b29499aa67 [68a25efe3635347d5469494d] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_ybuwjehe.dy2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:03Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_ybuwjehe.dy2.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-17 23:00:03 +0000 UTC 2025-08-17 23:00:03 +0000 UTC 2025-08-17 23:00:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
56d1a755466328027aaea1d9a6e449868f1b7dc45b532b9627a3626f67ca91d9 [68a311cdc2d0d6e3eb77f21c] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\MailBoxFolderPermissionsO365-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:49Z] [44133f691b3ffa11118c549f31a652a9] [646cbcf0e29f58d55a2ea858476b30fbe73db5e3] [8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94] [0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330] [172.25.17.86] [172.25.17.86] 1 Success MailBoxFolderPermissionsO365-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 66064 44133f691b3ffa11118c549f31a652a9 Not Signed 2025-07-18 16:43:45 +0000 UTC 2025-07-18 20:48:14 +0000 UTC 646cbcf0e29f58d55a2ea858476b30fbe73db5e3 8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94 0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
56d0f79bbdbff4255d2d70d497607968271b3065b3f96765a6211a8ba1b8bcb5 [68a16bd60756fe54a9918fa5, 68a2149cb58debea69d7c750, 68a2bd5ff793a9057f329c0b, 68a3663261f8067c48423ebe, 68a40efceddb3a9f1a71a607, 68a4b7cd36bc5d38057e236c] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNet.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] [021ad60cb0c6b2defe570821010f08c8] [e2be2678bb68af4e0a5eb2ca709140e7e48261ad] [9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a] [b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b] [10.20.20.68] [10.20.20.68] 1 Success zNet.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 2385720 021ad60cb0c6b2defe570821010f08c8 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC e2be2678bb68af4e0a5eb2ca709140e7e48261ad 9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:02:48 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
5666833c44ff8d0b36e7f71e54af218b78a5ba053c7503d40bc32ec06670f74c [68a1620c21c43447a35c861d] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\tmp_owxdn3xb.e3x.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:54Z] [d4c8d2aa51d9c4ce7f5ac425a43d50fc] [533de221c9395696648b3311a61d6fef1fd6cdc6] [4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd] [e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14] [172.25.17.86] [172.25.17.86] 1 Success tmp_owxdn3xb.e3x.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\ 4669570 d4c8d2aa51d9c4ce7f5ac425a43d50fc Not Signed 2025-08-17 05:00:54 +0000 UTC 2025-08-17 05:00:54 +0000 UTC 533de221c9395696648b3311a61d6fef1fd6cdc6 4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14 2025-08-17 05:01:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5 [68a4e8a1ad898641af98fd96, 68a4f315247c4b5c9ccb9232, 68a4fcd0011d94a251a4ef32, 68a4fcd0011d94a251a4ef3c] [2] [CA_gs10109, ReevesJoe] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\UserInfo.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\UserInfo.dll] [Servers] [Servers Audit] [v2283, v2284.877, v2284] [] [Not Signed] [C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe] [C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp] [2025-08-19T21:11:56Z, 2025-08-19T21:53:42Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:43Z] [7579ade7ae1747a31960a228ce02e666] [8ec8571a296737e819dcf86353a43fcf8ec63351] [df1f0dcdffcfe1abc23ac518971852a29eda849f33c631ccba1f681f2bf1a036e679f1cbccf66561158a70bf797e5ab5] [a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b] [172.17.23.18] [172.17.23.18] 1 Success UserInfo.dll C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\ 4096 7579ade7ae1747a31960a228ce02e666 Not Signed 2025-07-01 11:53:38 +0000 UTC 2025-07-01 11:53:38 +0000 UTC 8ec8571a296737e819dcf86353a43fcf8ec63351 df1f0dcdffcfe1abc23ac518971852a29eda849f33c631ccba1f681f2bf1a036e679f1cbccf66561158a70bf797e5ab5 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b 2025-07-01 11:53:51 +0000 UTC None None 2025-06-30 02:10:26 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-01 11:55:24.484 +0000 UTC
56345098973877435c409c861dcd1c0a01d636c6eb4fb3aafba575aabcdddf7d [68a306a5ba5832f49fe9cf3f] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPRUNNR.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [a07ebac32cb6aa556f52a531953999a8] [2d9974a3a8a1a945858207b15feff349f66cc5fc] [72960b0023e0465ec069cb0375dcf6b180e9d1388570b47d5ffa9dc9b5906d4017829f443ac17f4c47e96065c6f4079e] [30e70408a3b1d9278796e946d64701c9ba0bd98b7da8ea4d30caf6d2faddec25d59b4edb37640e199bb45222f7fa25dc38ab783a800a502dcc3687d7f81361bf] [172.17.146.33] [172.17.146.33] 1 Success APPRUNNR.DLL C:\DICORP\DICORP_V5\SDL\APPS\ 21504 a07ebac32cb6aa556f52a531953999a8 Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC 2d9974a3a8a1a945858207b15feff349f66cc5fc 72960b0023e0465ec069cb0375dcf6b180e9d1388570b47d5ffa9dc9b5906d4017829f443ac17f4c47e96065c6f4079e 30e70408a3b1d9278796e946d64701c9ba0bd98b7da8ea4d30caf6d2faddec25d59b4edb37640e199bb45222f7fa25dc38ab783a800a502dcc3687d7f81361bf 2025-05-01 08:09:58 +0000 UTC None None 2025-03-21 05:02:19 +0000 UTC 72 1 KNOWN 0 Benign 0.20 2025-05-01 08:11:29.212 +0000 UTC
5633d05634543f25d6da937e89a8c8fa057b9213148d90451127ffc4301bb0db [68a1620c21c43447a35c861c] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\tmpEXO_fs3h0x0e.vmj.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:48Z] [c33129b61d70032a71a5b5dfb9053472] [789b7d25c519e94a20cdd9521a608e5d129a4a01] [9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9] [86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_fs3h0x0e.vmj.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\ 2290479 c33129b61d70032a71a5b5dfb9053472 Not Signed 2025-08-17 05:00:47 +0000 UTC 2025-08-17 05:00:47 +0000 UTC 789b7d25c519e94a20cdd9521a608e5d129a4a01 9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9 86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa 2025-08-17 05:01:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
55cd58c247e720424b4ca5499424a0a70bffbb96ce9c7063e4807f4c41a3569b [68a166949dc690ff0657c725] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0xiwecyf.da0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:20:13Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_0xiwecyf.da0.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:20:13 +0000 UTC 2025-08-17 05:20:13 +0000 UTC 2025-08-17 05:20:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
55bf09ca2ad1c7643f8b49514febf0c748f5027daaaddbbff35c433a2dcc1fb5 [68a3146b5f0c41860c8c850f, 68a3146b5f0c41860c8c8562] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\parser.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [2927d376429456be4172708564560b31] [fed7f1ad061029797867412a130d3c2873860dc7] [b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5] [d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77] [172.17.252.131] [172.17.252.131] 1 Success parser.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 6522 2927d376429456be4172708564560b31 Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC fed7f1ad061029797867412a130d3c2873860dc7 b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5 d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
559962435a5d919bc46d5a3da16ee74629a31e2a50d9431c1bbe64d54f42df52 [68a6ffe7c290e3c86ac5713f] [2] [SYSTEM] [i-vvtkmsccm] [NT AUTHORITY] [C:\Windows\Temp\is-N95IH.tmp\plateform-installer-vilink-control-panel-1.0.0.9-setup.tmp] [Servers] [Servers Audit] [v2314.902] ["C:\Windows\TEMP\is-N95IH.tmp\plateform-installer-vilink-control-panel-1.0.0.9-setup.tmp" /SL5="$1B4600D8,24872467,217088,D:\biomerieux\programs\VILINK\Agent\installer\VilinkControlPanel\plateform-installer-vilink-control-panel-1.0.0.9-setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART] [Not Signed] [D:\biomerieux\programs\VILINK\Agent\installer\VilinkControlPanel\plateform-installer-vilink-control-panel-1.0.0.9-setup.exe] [C:\Windows\SysWOW64\wscript.exe] [2025-08-21T11:15:46Z] [07c32cefbaccc6db96daf39775955c12] [88b3b6ade18e9d2590e8a69336e89575d4668dde] [56f24102c1a692fa91706f0685b1a9883556715c1b42d11e1dd6004e409346d0b0e48c88ba7092ffe197aa481a1ac8ae] [bdf70142099a6d7c97440f63d39d5ec26e4674880c468a536ac083dd1fbd42c6e99162314371485afb345e66f58268c42afa55aeb34cc2975a9cf1b1e7dd6b4b] [172.17.21.241] [172.17.21.241] 1 Success BciConnectUserScripting_2.3.14-1_setup.tmp C:\Users\bmx_admin.I-NCCMCMYLAHELP\AppData\Local\Temp\2\is-35876.tmp\ Setup/Uninstall 1271296 07c32cefbaccc6db96daf39775955c12 Not Signed 2025-05-19 19:38:05 +0000 UTC 2025-05-19 19:38:06 +0000 UTC 88b3b6ade18e9d2590e8a69336e89575d4668dde 56f24102c1a692fa91706f0685b1a9883556715c1b42d11e1dd6004e409346d0b0e48c88ba7092ffe197aa481a1ac8ae bdf70142099a6d7c97440f63d39d5ec26e4674880c468a536ac083dd1fbd42c6e99162314371485afb345e66f58268c42afa55aeb34cc2975a9cf1b1e7dd6b4b 2025-05-19 19:38:11 +0000 UTC None None 2023-09-26 12:49:26 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-05-19 19:42:31.037 +0000 UTC
5978ee4cce13c15c2093be18ee2e64a99dc4c05ba4d07165da3e15b7b4f1eb8b [68a35866879570e8d652377c] [2] [ellisonmea] [i-hvmigration3] [WVUHS] [C:\Scripts\title MS license.ps1] [Servers] [Servers Audit] [v2260.859] [] [Not Signed] [C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T16:44:13Z] [b55e3844f3b472627497819e0ebcf127] [ac0628a583d75844c56aee0e6aac159ad0e8a73e] [1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303] [b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d] [172.17.23.32] [172.17.23.32] 1 Success title MS license.ps1 C:\Scripts\ 749 b55e3844f3b472627497819e0ebcf127 Not Signed 2025-08-18 16:43:21 +0000 UTC 2025-08-18 16:43:21 +0000 UTC ac0628a583d75844c56aee0e6aac159ad0e8a73e 1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303 b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d 2025-08-18 16:44:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
59494928170e51ca4e76b4519106dcbe83fa1abd8afea4829f610d24d5d74318 [68a5239e621d09b2b1ed5e5e] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [caf160ccadc9a873ce2932cbd7153a2f] [c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e] [ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb] [3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.CommLayerBase.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.CommLayerBase 22016 caf160ccadc9a873ce2932cbd7153a2f Stanley.Infra.CommLayerBase 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb 3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5942868729a8ee08ff7cbf9bebadba8511ee0a857a428516603e503a966b4f91 [68a472b1b022648922e235aa] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\vsphere-sdk-5-5.1.0.em.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [b37c92ab1347be3678e9bbb17948251c] [7571bfbda5bb1df7af50a88648e676bfbfd0e95a] [61bcd73cebc60b3e9ea04601bf95c167d171afa1dd14c97b1e408510affd24e85410d67ad2a1f0ac6bd24c2fe93c69b1] [6ee6687b2e085b41b936e312fefa14d91c58080ff8a5f8c8b1a8120a69d7045dfbcd4076d0776e965a6881caf54aa48fdff7cc9c5d030d8e1c7bbfe02c016ce9] [172.17.23.146] [172.17.23.146] 1 Success vsphere-sdk-5-5.1.0.em.1.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 6946874 b37c92ab1347be3678e9bbb17948251c Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 7571bfbda5bb1df7af50a88648e676bfbfd0e95a 61bcd73cebc60b3e9ea04601bf95c167d171afa1dd14c97b1e408510affd24e85410d67ad2a1f0ac6bd24c2fe93c69b1 6ee6687b2e085b41b936e312fefa14d91c58080ff8a5f8c8b1a8120a69d7045dfbcd4076d0776e965a6881caf54aa48fdff7cc9c5d030d8e1c7bbfe02c016ce9 2025-03-28 16:04:36 +0000 UTC None None 2022-03-17 18:11:51 +0000 UTC 49 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
593552ffea3c5823c6602478b5002a7c525fd904a3c44f1abe4065c22edfac73 [68a472a799ad3734d804e2fd] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\dom4j-1.6.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [4d8f51d3fe3900efc6e395be48030d6d] [5d3ccc056b6f056dbf0dddfdf43894b9065a8f94] [45ce7646d803623e8c88f2d5d0ede16d8006a9fd8dedb01290eeee9376a77cce005073d490dda205766457fe73e22f10] [e3737ef4a1551e46410916fcda298a629b2681d7469ceaafffd668e6055d9c0e795bc9d12ea3300d218981d5aa5b2f38bb2e641211997c962e6086068f62ad67] [172.17.23.146] [172.17.23.146] 1 Success dom4j-1.6.1.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 313898 4d8f51d3fe3900efc6e395be48030d6d Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 5d3ccc056b6f056dbf0dddfdf43894b9065a8f94 45ce7646d803623e8c88f2d5d0ede16d8006a9fd8dedb01290eeee9376a77cce005073d490dda205766457fe73e22f10 e3737ef4a1551e46410916fcda298a629b2681d7469ceaafffd668e6055d9c0e795bc9d12ea3300d218981d5aa5b2f38bb2e641211997c962e6086068f62ad67 2025-03-28 16:04:26 +0000 UTC None None 2024-11-24 04:50:43 +0000 UTC 66 0 KNOWN 0 Microsoft attested file 2025-04-10 12:50:45.352 +0000 UTC
59043ff80f6a43b4041d20cac0cea712e7426eb429ff93ceb25bb906bf0421d7 [68a25c5f2155d94949889b12] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d354we2i.k1a.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:48:59Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_d354we2i.k1a.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:48:59 +0000 UTC 2025-08-17 22:48:59 +0000 UTC 2025-08-17 22:49:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
58dce40e6df00d144312adf4ce30825dbc55246ef28b7972d3e44e9024b1e875 [68a306a5ba5832f49fe9cf31] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\WINUI.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:35Z] [d6950c201ff3f4cd902557e947e844d0] [84ede93d15fb6aad17cf5b6e5b9ee2f66a07f5e7] [d5eeb6d990f7169bed7d2a2b33e3d91d26eb21405fddd4b731e0932053a1efe98d57aa3f29be4e3dce65701fd194cdb0] [d88e68a2efbb1421e217eca7f7785f5bb60c6657fd3bd608f2f87925a3757744a3299d30f1a0fac5b36a3d29e7d3d01fad8fc1e1c7f0a83819ec67f979eef700] [172.17.146.33] [172.17.146.33] 1 Success WINUI.DLL C:\DICORP\DICORP_V5\RW\APPS\ Win UI DLL 49152 d6950c201ff3f4cd902557e947e844d0 WinUI 1.8 Not Signed 2022-07-06 14:52:44 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 84ede93d15fb6aad17cf5b6e5b9ee2f66a07f5e7 d5eeb6d990f7169bed7d2a2b33e3d91d26eb21405fddd4b731e0932053a1efe98d57aa3f29be4e3dce65701fd194cdb0 d88e68a2efbb1421e217eca7f7785f5bb60c6657fd3bd608f2f87925a3757744a3299d30f1a0fac5b36a3d29e7d3d01fad8fc1e1c7f0a83819ec67f979eef700 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:08:07 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
58bd329a2f3e91c545a51d2496f9660013865b6e43a08bf00c716aad755c140d [68a1642f671392a6ca40e556, 68a2b3ef86404a813dc06ef6, 68a4059c5671ca7f23589560, 68a558aca07fa49408288e49, 68a6a8f326e2a7ae27aa5353] [2] [postgres] [vm-ASCNEO] [VM-ASCNEO] [C:\Users\postgres\AppData\Local\Temp\pgaE191.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga17CB.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga46D0.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga7EEE.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pgaAC0F.tmp\1_1.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Program Files (x86)\pgAgent\bin\pgagent.exe] [2025-08-17T05:00:05Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z, 2025-08-21T05:00:01Z] [3b96b328a2af3ad82dc1a2afa0d21ab9] [069383cc28c4fa363d2b34d2bc4475e618cf40ba] [68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b] [a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63] [172.17.20.9] [172.17.20.9] 1 Success 1_1.bat C:\Users\postgres\AppData\Local\Temp\pgaF3EB.tmp\ 48 3b96b328a2af3ad82dc1a2afa0d21ab9 Not Signed 2025-08-09 05:00:01 +0000 UTC 2025-08-09 05:00:01 +0000 UTC 069383cc28c4fa363d2b34d2bc4475e618cf40ba 68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63 2025-08-09 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
58a84e74187774df56fb3d1a63888b1ca4b677a6106dcef639d6c147d5fc4123 [68a4a57a7ce66434aa8e4a9d] [2] [ellisonmea] [i-hvmigration3] [WVUHS] [C:\Scripts\Export UPNfromADGroup.ps1] [Servers] [Servers Audit] [v2276.869] [] [Not Signed] [C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:25:27Z] [b39139c6d58f98b8c3bb0727a23239b0] [e4496e1ce928ef22c55c8d7ec42f207ca624febf] [f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245] [2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07] [172.17.23.32] [172.17.23.32] 1 Success Export UPNfromADGroup.ps1 C:\Scripts\ 169 b39139c6d58f98b8c3bb0727a23239b0 Not Signed 2024-08-01 14:45:37 +0000 UTC 2024-08-01 14:45:37 +0000 UTC e4496e1ce928ef22c55c8d7ec42f207ca624febf f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245 2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07 2025-08-19 16:25:30 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
589581756bd4704aab790e73d2b0e243ca68e8501bbb066b3da56904ab3d0090 [68a472d954bfa55540708aa4] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\SuperPutty\SuperPuttyLauncherUpdater.ps1] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-19T12:49:27Z] [f448f27c617c2b801a51a55fdae3fedf] [6138d8b99e5f09905ace2e145b7c494c29f85cc1] [77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76] [d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85] [172.17.23.146] [172.17.23.146] 1 Success SuperPuttyLauncherUpdater.ps1 C:\SuperPutty\ 417 f448f27c617c2b801a51a55fdae3fedf Not Signed 2025-08-19 11:27:27 +0000 UTC 2022-12-15 19:54:21 +0000 UTC 6138d8b99e5f09905ace2e145b7c494c29f85cc1 77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76 d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85 2025-08-19 12:49:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
586b77ca0fa977e7ca8acb449cb4a746425bd5d8b832f8d85afd67d16af47d21 [68a523949cec397f02de9f53] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:28Z] [03f29f88600b91e2c0850ef5ba848be7] [cacf863b314180019dcea5669f5a11593096d569] [b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476] [c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd] [172.17.22.40] [172.17.22.40] 1 Success DiagnosticsData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Data 39424 03f29f88600b91e2c0850ef5ba848be7 Data 1.0.0.0 Not Signed 2023-06-15 02:37:38 +0000 UTC 2023-06-15 02:37:38 +0000 UTC cacf863b314180019dcea5669f5a11593096d569 b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476 c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5839f7b693b43b0b85a9ed4ecb774b241a579d00377c6a1b14a8f6f67db70475 [68a3146b5f0c41860c8c84f2, 68a3146b5f0c41860c8c852f] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\keyword.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [cf1385559e7ba1972e692e1e48af85b8] [2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba] [1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae] [8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec] [172.17.252.131] [172.17.252.131] 1 Success keyword.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 1049 cf1385559e7ba1972e692e1e48af85b8 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba 1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae 8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
57f97af9aa938c09929719581541c0188b5e159ac9597204439c9d8ac677e8db [68a176d3006fc2fefdc26def] [2] [SYSTEM] [i-hvhprod01] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhlp02h0.wqr.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:29:30Z] [b13c3cadee294c4214cad7c499716e64] [85d4df31ced5762f398b8d8621816c19fa4a46b6] [8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574] [ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92] [172.17.22.182] [172.17.22.182] 1 Success __PSScriptPolicyTest_lhlp02h0.wqr.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 b13c3cadee294c4214cad7c499716e64 Not Signed 2025-08-17 06:29:30 +0000 UTC 2025-08-17 06:29:30 +0000 UTC 85d4df31ced5762f398b8d8621816c19fa4a46b6 8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574 ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92 2025-08-17 06:29:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
57f5fd43e2ee4ac8d1c9a89d8b1fc45d2996c3811b37d398d4e3b33324ce6160 [68a472b1b022648922e23571] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmServerAgentApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [e54eaf54569b3d273d893a6752bd6def] [d5a2b4a8128a50d35c7b396d06e49f84b66dcb70] [3c15f49836a2b1eb82f9462c0eaac16fd7d6281cdbf54fffaaa99cdeb86432ea41ef5128dc82bfe470ef320634ab6784] [7947290dcaa68de2cf331ae775c7e84fad80594ab0a4d41442b4d53aff6e825921fcfe6203a9ea0207e4926b17741941da7f319436ab9e64534dba3c39ecd122] [172.17.23.146] [172.17.23.146] 1 Success DsmServerAgentApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 509308 e54eaf54569b3d273d893a6752bd6def Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC d5a2b4a8128a50d35c7b396d06e49f84b66dcb70 3c15f49836a2b1eb82f9462c0eaac16fd7d6281cdbf54fffaaa99cdeb86432ea41ef5128dc82bfe470ef320634ab6784 7947290dcaa68de2cf331ae775c7e84fad80594ab0a4d41442b4d53aff6e825921fcfe6203a9ea0207e4926b17741941da7f319436ab9e64534dba3c39ecd122 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
57e4a7e4278f770db47071e08177a71056083a364ed18942e0f25de22027bb7d [68a5c7518a82efb8e85802e8] [2] [sk10219sa] [n-sktartarus] [WVUHS] [C:\Users\sk10219sa\AppData\Local\Temp\2\__PSScriptPolicyTest_hfonphxl.ba1.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Program Files\PowerShell\7\pwsh.exe] [C:\Windows\explorer.exe] [2025-08-20T13:01:59Z] [] [] [] [] [172.17.20.94] [172.17.20.94] 1 Success __PSScriptPolicyTest_hfonphxl.ba1.ps1 C:\Users\sk10219sa\AppData\Local\Temp\2\ 70 Not Signed 2025-08-20 13:01:59 +0000 UTC 2025-08-20 13:01:59 +0000 UTC 2025-08-20 13:02:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
57c4870f4f81b3d3af13d494c584e456a09e94bc3ccafc3bd8718a1401b5d1e8 [68a6afe50e0f3bd8deac4ceb, 68a6afe50e0f3bd8deac4d20, 68a6afe50e0f3bd8deac4d2d, 68a6afe50e0f3bd8deac4d4d, 68a6afe50e0f3bd8deac4d6e, 68a6afe50e0f3bd8deac4d8e, 68a6afe50e0f3bd8deac4dad, 68a6afe50e0f3bd8deac4dce, 68a6afe50e0f3bd8deac4dee, 68a6afe50e0f3bd8deac4e0d, 68a6afe50e0f3bd8deac4e2e, 68a6afe50e0f3bd8deac4e4f, 68a6afe50e0f3bd8deac4e6d, 68a6afe50e0f3bd8deac4e8d, 68a6afe50e0f3bd8deac4ebe, 68a6afe50e0f3bd8deac4ece, 68a6afe50e0f3bd8deac4eee, 68a6afe50e0f3bd8deac4f0d, 68a6afe50e0f3bd8deac4f2d, 68a6afe50e0f3bd8deac4f58, 68a6afe50e0f3bd8deac4f78, 68a6afe50e0f3bd8deac4f98, 68a6afe50e0f3bd8deac4fb7, 68a6afe50e0f3bd8deac4fd8, 68a6afe50e0f3bd8deac4ff7, 68a6afe50e0f3bd8deac5018, 68a6afe50e0f3bd8deac5038, 68a6afe50e0f3bd8deac5057, 68a6afe50e0f3bd8deac5079, 68a6afe50e0f3bd8deac50a2, 68a6afe50e0f3bd8deac50c3, 68a6afe50e0f3bd8deac50e2, 68a6afe50e0f3bd8deac510c, 68a6afe50e0f3bd8deac512b, 68a6afe50e0f3bd8deac514b, 68a6afe50e0f3bd8deac5176, 68a6afe50e0f3bd8deac5195, 68a6afe50e0f3bd8deac51b5, 68a6afe50e0f3bd8deac51d6, 68a6afe50e0f3bd8deac5208, 68a6afe50e0f3bd8deac521f, 68a6afe50e0f3bd8deac5236, 68a6afe50e0f3bd8deac5256, 68a6afe50e0f3bd8deac528a, 68a6afe50e0f3bd8deac52ac, 68a6afe50e0f3bd8deac52ca, 68a6afe50e0f3bd8deac52eb, 68a6afe50e0f3bd8deac530c, 68a6afe50e0f3bd8deac532a, 68a6afe50e0f3bd8deac534b, 68a6afe50e0f3bd8deac536a, 68a6afe50e0f3bd8deac538b, 68a6afe50e0f3bd8deac5390, 68a6afe50e0f3bd8deac53cc, 68a6afe50e0f3bd8deac53d0, 68a6afe50e0f3bd8deac53ef, 68a6afe50e0f3bd8deac5410, 68a6afe50e0f3bd8deac544b, 68a6afe50e0f3bd8deac5450, 68a6afe50e0f3bd8deac5470, 68a6afe50e0f3bd8deac5493, 68a6afe50e0f3bd8deac54b1, 68a6afe50e0f3bd8deac54d0, 68a6afe50e0f3bd8deac54f0, 68a6afe50e0f3bd8deac5511, 68a6afe50e0f3bd8deac5532, 68a6afe50e0f3bd8deac555b, 68a6afe50e0f3bd8deac557c, 68a6afe50e0f3bd8deac559b, 68a6afe50e0f3bd8deac55ba, 68a6afe50e0f3bd8deac55da, 68a6afe50e0f3bd8deac55fa, 68a6afe50e0f3bd8deac561a, 68a6afe50e0f3bd8deac5646, 68a6afe50e0f3bd8deac566a, 68a6afe50e0f3bd8deac5698, 68a6afe50e0f3bd8deac56b8, 68a6afe50e0f3bd8deac56f0, 68a6afe50e0f3bd8deac56f8, 68a6afe50e0f3bd8deac5732, 68a6afe50e0f3bd8deac5738, 68a6afe50e0f3bd8deac576b, 68a6afe50e0f3bd8deac5780, 68a6afe50e0f3bd8deac57ac, 68a6afe50e0f3bd8deac57c2, 68a6afe50e0f3bd8deac57ec, 68a6afe50e0f3bd8deac5800, 68a6afe50e0f3bd8deac583a, 68a6afe50e0f3bd8deac5842, 68a6afe50e0f3bd8deac586a, 68a6afe50e0f3bd8deac5880, 68a6afe50e0f3bd8deac58b2, 68a6afe50e0f3bd8deac58c2, 68a6afe50e0f3bd8deac58f2, 68a6afe50e0f3bd8deac591c, 68a6afe50e0f3bd8deac5934, 68a6afe50e0f3bd8deac5942, 68a6afe50e0f3bd8deac5963, 68a6afe50e0f3bd8deac5999, 68a6afe50e0f3bd8deac59a2, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeImage.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [8f3d6dd127542b9cd3a7082f7fedce25] [a77c8154f5880d7d65ac70b2986043d173c0a730] [19fa15aa2fafd1174c416592d00ff38d9da9d1ac63afd86da708533c1fd8e2f885b86a8059f051a8c72e896c8e38e7d4] [1d49b31e0f601258664c6ef8d1c051a6276e367b92bd8eb440e90b9b99862ec8fd3fdf3e947ed215ef486d3b675eaf8cfd8c3e7082f2605c28dd8b325d00b0eb] [172.17.30.60] [172.17.30.60] 1 Success AmeImage.dll C:\Program Files\Fujifilm\NaxisWS6\ 133120 8f3d6dd127542b9cd3a7082f7fedce25 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 02:59:41 +0000 UTC a77c8154f5880d7d65ac70b2986043d173c0a730 19fa15aa2fafd1174c416592d00ff38d9da9d1ac63afd86da708533c1fd8e2f885b86a8059f051a8c72e896c8e38e7d4 1d49b31e0f601258664c6ef8d1c051a6276e367b92bd8eb440e90b9b99862ec8fd3fdf3e947ed215ef486d3b675eaf8cfd8c3e7082f2605c28dd8b325d00b0eb 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
57c2ad231fad6089a113121215df9ce0552f0464144b761d79dd3e31e49d6f48 [68a311cdc2d0d6e3eb77f204] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\connect-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [2ed5355ca6098c511f5669abf5d613b6] [1a3d8c611c6e70e3207d5ca6f373a20cdd227b78] [37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c] [d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95] [172.25.17.86] [172.25.17.86] 1 Success connect-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 6375 2ed5355ca6098c511f5669abf5d613b6 Not Signed 2025-02-28 16:51:50 +0000 UTC 2025-04-02 12:02:50 +0000 UTC 1a3d8c611c6e70e3207d5ca6f373a20cdd227b78 37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5e72fdf4d0debe90136d17c636dea6bd5fa14c8e3ba3091f42ea62ef14f01b8d [68a6afe50e0f3bd8deac4cfc, 68a6afe50e0f3bd8deac4d0f, 68a6afe50e0f3bd8deac4d3e, 68a6afe50e0f3bd8deac4d5e, 68a6afe50e0f3bd8deac4d7d, 68a6afe50e0f3bd8deac4d9d, 68a6afe50e0f3bd8deac4dbd, 68a6afe50e0f3bd8deac4ddd, 68a6afe50e0f3bd8deac4dfd, 68a6afe50e0f3bd8deac4e1d, 68a6afe50e0f3bd8deac4e3d, 68a6afe50e0f3bd8deac4e5d, 68a6afe50e0f3bd8deac4e7d, 68a6afe50e0f3bd8deac4e9d, 68a6afe50e0f3bd8deac4eaf, 68a6afe50e0f3bd8deac4edd, 68a6afe50e0f3bd8deac4efd, 68a6afe50e0f3bd8deac4f1d, 68a6afe50e0f3bd8deac4f3d, 68a6afe50e0f3bd8deac4f67, 68a6afe50e0f3bd8deac4f87, 68a6afe50e0f3bd8deac4fa7, 68a6afe50e0f3bd8deac4fc7, 68a6afe50e0f3bd8deac4fe7, 68a6afe50e0f3bd8deac5007, 68a6afe50e0f3bd8deac5027, 68a6afe50e0f3bd8deac5047, 68a6afe50e0f3bd8deac5067, 68a6afe50e0f3bd8deac5087, 68a6afe50e0f3bd8deac50b2, 68a6afe50e0f3bd8deac50d3, 68a6afe50e0f3bd8deac50f1, 68a6afe50e0f3bd8deac511b, 68a6afe50e0f3bd8deac513b, 68a6afe50e0f3bd8deac515b, 68a6afe50e0f3bd8deac5185, 68a6afe50e0f3bd8deac51a5, 68a6afe50e0f3bd8deac51c5, 68a6afe50e0f3bd8deac51e6, 68a6afe50e0f3bd8deac51f8, 68a6afe50e0f3bd8deac5230, 68a6afe50e0f3bd8deac5246, 68a6afe50e0f3bd8deac5266, 68a6afe50e0f3bd8deac527b, 68a6afe50e0f3bd8deac529a, 68a6afe50e0f3bd8deac52ba, 68a6afe50e0f3bd8deac52db, 68a6afe50e0f3bd8deac52fa, 68a6afe50e0f3bd8deac531a, 68a6afe50e0f3bd8deac533a, 68a6afe50e0f3bd8deac535a, 68a6afe50e0f3bd8deac537a, 68a6afe50e0f3bd8deac53a1, 68a6afe50e0f3bd8deac53bc, 68a6afe50e0f3bd8deac53e1, 68a6afe50e0f3bd8deac53ff, 68a6afe50e0f3bd8deac5420, 68a6afe50e0f3bd8deac543b, 68a6afe50e0f3bd8deac5461, 68a6afe50e0f3bd8deac5480, 68a6afe50e0f3bd8deac54a0, 68a6afe50e0f3bd8deac54c0, 68a6afe50e0f3bd8deac54e0, 68a6afe50e0f3bd8deac5500, 68a6afe50e0f3bd8deac5520, 68a6afe50e0f3bd8deac5540, 68a6afe50e0f3bd8deac556a, 68a6afe50e0f3bd8deac558a, 68a6afe50e0f3bd8deac55aa, 68a6afe50e0f3bd8deac55cb, 68a6afe50e0f3bd8deac55ea, 68a6afe50e0f3bd8deac560b, 68a6afe50e0f3bd8deac562a, 68a6afe50e0f3bd8deac565a, 68a6afe50e0f3bd8deac567a, 68a6afe50e0f3bd8deac568b, 68a6afe50e0f3bd8deac56a8, 68a6afe50e0f3bd8deac56c8, 68a6afe50e0f3bd8deac56e1, 68a6afe50e0f3bd8deac5709, 68a6afe50e0f3bd8deac5723, 68a6afe50e0f3bd8deac5748, 68a6afe50e0f3bd8deac577c, 68a6afe50e0f3bd8deac5791, 68a6afe50e0f3bd8deac57bc, 68a6afe50e0f3bd8deac57d2, 68a6afe50e0f3bd8deac57fd, 68a6afe50e0f3bd8deac5811, 68a6afe50e0f3bd8deac582a, 68a6afe50e0f3bd8deac5857, 68a6afe50e0f3bd8deac587a, 68a6afe50e0f3bd8deac5891, 68a6afe50e0f3bd8deac58a2, 68a6afe50e0f3bd8deac58d2, 68a6afe50e0f3bd8deac58e2, 68a6afe50e0f3bd8deac590c, 68a6afe50e0f3bd8deac5926, 68a6afe50e0f3bd8deac5953, 68a6afe50e0f3bd8deac5973, 68a6afe50e0f3bd8deac5989, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-core-16-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [1a592e0ad9f647e3984e9c98f5daf88a] [5cbed0d3e4e068a6d1f51877cc9ac7b2f5f34f15] [ce6947f96ac3d9e9dc98dd4bae6b5a6d9f7dc5d7d8427b56b8d4fd2ad03252e228b9317e82fcd66c651dfa43ea4af4b8] [4130bcc8dc8f10ea35556ceb6f0e08dfe988e32105fd323f5a58866bae39c1b721cf7d459f1f953e9af148ae3aaf6822b9d44f7fba378d4256dc7b44f78644ab] [172.17.30.60] [172.17.30.60] 1 Success cip-core-16-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-core-16-vc140-64 ダイナミックリンクライブラリ 4436480 1a592e0ad9f647e3984e9c98f5daf88a CIP 1.6.5.2 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-13 05:53:38 +0000 UTC 5cbed0d3e4e068a6d1f51877cc9ac7b2f5f34f15 ce6947f96ac3d9e9dc98dd4bae6b5a6d9f7dc5d7d8427b56b8d4fd2ad03252e228b9317e82fcd66c651dfa43ea4af4b8 4130bcc8dc8f10ea35556ceb6f0e08dfe988e32105fd323f5a58866bae39c1b721cf7d459f1f953e9af148ae3aaf6822b9d44f7fba378d4256dc7b44f78644ab 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
5e455451e13e287c4d2bfb59325a352b61cdce7953692d39ff3fde8f521ae157 [68a1c9fe26ef4c5d33d741b6] [2] [SYSTEM] [CI1BEFS3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4ryswf2w.ra1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T12:24:23Z] [] [] [] [] [172.18.112.86] [172.18.112.86] 1 Success __PSScriptPolicyTest_4ryswf2w.ra1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 12:24:23 +0000 UTC 2025-08-17 12:24:23 +0000 UTC 2025-08-17 12:24:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5d387d2e15f03476d77944294631e3cc91a5fe0b476f2eba113954298e9d3411 [68a72d39787594c630b4edf1] [2] [sk10219sa] [n-sktartarus] [WVUHS] [E:\Notepad++Portable\Notepad++Portable.exe] [Servers] [Servers Audit] [v2324.910] ["E:\Notepad++Portable\Notepad++Portable.exe" ] [Rare Ideas LLC] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-21T14:23:05Z] [28093d7d974260d18def08f16063699c] [af4a95a5aff1595a9d4cb7367acb330479b60208] [63cc4facc189d1667491a2df7cfd86e73d9c101a56d0a39169b252a39b71a33173a5215df7e1e52745c3264c3512e4ea] [421d5f0ba036eba9ba4cb3ce1c0250383f770299b361ab059b5e98ef5bdd98efdc7d5ed5125d1c7e34eef6217709239efc218b29697c323c601e4ccdfb2b58d4] [172.17.20.94] [172.17.20.94] 1 Success Notepad++Portable.exe E:\Notepad++Portable\ Notepad++ Portable (PortableApps.com Launcher) 309744 28093d7d974260d18def08f16063699c Notepad++ Portable 2.2.2.0 Rare Ideas LLC 2021-12-23 14:16:25 +0000 UTC 2020-03-25 21:21:10 +0000 UTC af4a95a5aff1595a9d4cb7367acb330479b60208 63cc4facc189d1667491a2df7cfd86e73d9c101a56d0a39169b252a39b71a33173a5215df7e1e52745c3264c3512e4ea 421d5f0ba036eba9ba4cb3ce1c0250383f770299b361ab059b5e98ef5bdd98efdc7d5ed5125d1c7e34eef6217709239efc218b29697c323c601e4ccdfb2b58d4 2025-07-29 12:25:38 +0000 UTC None None 2025-03-05 05:15:59 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-29 12:30:21.968 +0000 UTC
5d01fc9d29c18726538eee8972df20e160e6a9e2beb0f05ecc50f823fdb330c7 [68a501fb7a753eb605659392] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_2jpi5rl5.43j.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-19T23:00:03Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_2jpi5rl5.43j.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-19 23:00:03 +0000 UTC 2025-08-19 23:00:03 +0000 UTC 2025-08-19 23:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5cd6bec8ee21373838f1a1072495ae8e3b328563e40bd645686b228630adc1b2 [68a1938ae03173a283ad7807] [2] [SYSTEM] [WHL-STOREFRONT1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2honujtp.dwp.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:32:01Z] [] [] [] [] [172.18.112.145] [172.18.112.145] 1 Success __PSScriptPolicyTest_2honujtp.dwp.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:32:01 +0000 UTC 2025-08-17 08:32:01 +0000 UTC 2025-08-17 08:32:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5cd31ea066ade2576e7c363f81054730ae80821624c80fff09ba94c411e97b72 [68a6afe50e0f3bd8deac4f53, 68a6afe50e0f3bd8deac509d, 68a6afe50e0f3bd8deac5107, 68a6afe50e0f3bd8deac5171, 68a6afe50e0f3bd8deac5556, 68a6afe50e0f3bd8deac564e, 68a6afe50e0f3bd8deac5767, 68a6afe50e0f3bd8deac5d31, 68a6afe50e0f3bd8deac5db2, 68a6afe50e0f3bd8deac5ef1] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\icudt53.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [e9d093372e0aa6d09225cf91b691a32f] [3f6181e15eb6108f31eea589bbb3c5fdb2901312] [5dc37f945218107912cb9b4f7ad3c07b02fe6b649305e3cd6122e826382defb558b27f086d3e2f8750c74f4a432d7b8c] [5f9a97a1b2dd60c5c217fdff237137f39405f98f292a86a69c88b39f3b9bd3cf31206252562ae369a0997f4a9ad849df8fe2f6534d209498bf6aa1506e7645a6] [172.17.30.60] [172.17.30.60] 1 Success icudt53.dll C:\Program Files\PostgreSQL\12\bin\ ICU Data DLL 21529088 e9d093372e0aa6d09225cf91b691a32f International Components for Unicode 53, 1, 0, 0 Not Signed 2023-10-19 17:59:22 +0000 UTC 2019-12-13 12:43:37 +0000 UTC 3f6181e15eb6108f31eea589bbb3c5fdb2901312 5dc37f945218107912cb9b4f7ad3c07b02fe6b649305e3cd6122e826382defb558b27f086d3e2f8750c74f4a432d7b8c 5f9a97a1b2dd60c5c217fdff237137f39405f98f292a86a69c88b39f3b9bd3cf31206252562ae369a0997f4a9ad849df8fe2f6534d209498bf6aa1506e7645a6 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2022-09-21 15:47:05 +0000 UTC 69 0 KNOWN 0 Benign 0.00 2025-04-30 06:40:28.291 +0000 UTC
5c742d86087c450491cc0f16495345ebb8370e5ee270c9cb9a41ff4d6a025a7f [68a311cdc2d0d6e3eb77f208] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\MSGraph-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [3d8ddd6c9c73fc785f2dc328bb9f2ebe] [b081f7516433c926509b9956d80b8bde72db7f74] [59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc] [4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089] [172.25.17.86] [172.25.17.86] 1 Success MSGraph-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 4650 3d8ddd6c9c73fc785f2dc328bb9f2ebe Not Signed 2025-03-04 16:00:03 +0000 UTC 2025-08-08 16:03:32 +0000 UTC b081f7516433c926509b9956d80b8bde72db7f74 59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc 4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5c623c30f0f4df4ae5f86ae7fcbdbb06dd130f24b338735f5a9976e4946ea25a [68a51e6e706e3d7436cc664e] [2] [SYSTEM] [i-ncapsule12] [NT AUTHORITY] [C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe] [Servers] [Servers Audit] [v2284] ["C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe"] [PHILIPS FRANCE COMMERCIAL SAS] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T01:01:27Z] [c856c6a75a00d53167951d3206715225] [f8c8f8250c03f193ca35ff3c600e067a0533d85f] [fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad] [798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6] [172.17.23.18] [172.17.23.18] 1 Success Capsule.Server.Cortex.Hosts.WindowsService.exe C:\Program Files (x86)\Capsule Technologie\Neuron Server\ Capsule.Server.Cortex.Hosts.WindowsService 21216 c856c6a75a00d53167951d3206715225 Capsule.Server.Cortex.Hosts.WindowsService 11.8.1.345 PHILIPS FRANCE COMMERCIAL SAS 2024-11-12 22:08:04 +0000 UTC 2025-08-20 01:01:22 +0000 UTC f8c8f8250c03f193ca35ff3c600e067a0533d85f fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad 798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6 2025-08-20 01:01:34 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5c4d2817d99c1de0b6f825cb3a0030bcfe697672c3b920dd4a85939c97a460bc [68a1a3e8ae65e4e5452ad826] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_igsbqipt.nzy.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:41:56Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_igsbqipt.nzy.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:41:56 +0000 UTC 2025-08-17 09:41:56 +0000 UTC 2025-08-17 09:42:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5bf9e5548e81c3ee09ecb53ead92a28a1d2094b11f3de1a72e78bb835d6e755a [68a5239e621d09b2b1ed5e48] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:33Z] [f2ac8256579118dfa592ae6c06393f67] [f293eeba2fbafe1e52e80a39365616ca358484d6] [d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9] [75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7] [172.17.22.40] [172.17.22.40] 1 Success MonitoringData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Data 27136 f2ac8256579118dfa592ae6c06393f67 Data 1.0.0.0 Not Signed 2023-06-15 02:38:20 +0000 UTC 2023-06-15 02:38:20 +0000 UTC f293eeba2fbafe1e52e80a39365616ca358484d6 d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9 75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5b939020b95632adfc62fe42ad783696ed198f085ab2f3e1c1de32faa07e7b89 [68a523949cec397f02de9f45] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Apache.NMS.ActiveMQ.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:25Z] [4cbe7eb55afd1512a22b5e4aa867ca46] [b58a69e1ca1aded3260a4de5f2e44d8fd4ff692d] [5081846ebab713dc85bdaf49797e34bb376a100d0a9a76e010d8fa11303770b6434d23918b0c3f5adfcfe8dfd430f36d] [123b325c044c001915614cc8911c073ecf146c3ee34c98f73c5bdd226fce627cd346a0bbf729c668eed5ac1f3e16d5d971e60a3ea373babfb2d36ef067d84d4c] [172.17.22.40] [172.17.22.40] 1 Success Apache.NMS.ActiveMQ.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Apache NMS for ActiveMQ Class Library 721920 4cbe7eb55afd1512a22b5e4aa867ca46 Apache NMS for ActiveMQ Class Library 1.6.2 Not Signed 2023-06-15 02:37:14 +0000 UTC 2023-06-15 02:37:14 +0000 UTC b58a69e1ca1aded3260a4de5f2e44d8fd4ff692d 5081846ebab713dc85bdaf49797e34bb376a100d0a9a76e010d8fa11303770b6434d23918b0c3f5adfcfe8dfd430f36d 123b325c044c001915614cc8911c073ecf146c3ee34c98f73c5bdd226fce627cd346a0bbf729c668eed5ac1f3e16d5d971e60a3ea373babfb2d36ef067d84d4c 2025-08-20 01:23:32 +0000 UTC None None 2016-11-02 11:57:52 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
5b8e3aeec520fb97107e50abdf1f33dba021e6385ace51b9aacbe3161e418125 [68a523949cec397f02de9f4a] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\caching.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:26Z] [4d40957c49945c3871b53bda5e7c22d3] [7b5821614de77201a478240c8c468031e458623d] [b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1] [a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9] [172.17.22.40] [172.17.22.40] 1 Success caching.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ caching 19456 4d40957c49945c3871b53bda5e7c22d3 caching 1.0.0.0 Not Signed 2023-06-15 02:37:54 +0000 UTC 2023-06-15 02:37:54 +0000 UTC 7b5821614de77201a478240c8c468031e458623d b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1 a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5b5749e19ca32ad429018e253c40621d84544eced490d75bf3ee7f84343e0c28 [68a2263198ac9267ed12be6d] [2] [SYSTEM] [DP-Fairmont] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2uejqjh1.2yt.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T18:57:44Z] [] [] [] [] [172.16.121.132] [172.16.121.132] 1 Success __PSScriptPolicyTest_2uejqjh1.2yt.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 18:57:44 +0000 UTC 2025-08-17 18:57:44 +0000 UTC 2025-08-17 18:57:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5a305cf3c8c6fee6d48f5fc09ba2f530d9e959b9bb1a6e485bbfb077021495a9 [68a4b0fb13fac5171eeef0da] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.Contracts.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:10Z] [ad5552d4c204409a6b6e24fbabee1bad] [d72232bb811610c471658c6d946bdf1c214f024e] [fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597] [eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.Pegasus.Contracts.dll C:\Program Files (x86)\Cyrun\ADS - 17978\ Cyrun.Pegasus.Contratcs 37888 ad5552d4c204409a6b6e24fbabee1bad Pegasus 7.0.4.4644 Not Signed 2019-09-13 08:50:12 +0000 UTC 2025-05-22 18:17:47 +0000 UTC d72232bb811610c471658c6d946bdf1c214f024e fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597 eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946 2025-05-22 18:47:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
59aae000bb01010f781af45b77817f924e75d97a1abf8d67454238536b84aca7 [68a311cdc2d0d6e3eb77f212] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Find AD group like.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [5f27bfc20834874273ef6c0b60856d71] [54dcc7f884056915280b76cfd26dd39e9bdf56cd] [a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa] [0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f] [172.25.17.86] [172.25.17.86] 1 Success Find AD group like.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 3343 5f27bfc20834874273ef6c0b60856d71 Not Signed 2022-06-22 13:27:40 +0000 UTC 2025-08-07 16:54:52 +0000 UTC 54dcc7f884056915280b76cfd26dd39e9bdf56cd a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa 0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
597f8e06a67d2f6f27dd04a2e98ccb2a6fe248fa2140229e33ff827fef62158f [68a472a799ad3734d804e2fe] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmApiConnectionApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [424f1f6e59635ac9b1bb9244519f4110] [acd3e574702ffd475a0d774ad10f46098166fe01] [2ee362d4c8f86196d2e2aaaaa3db8f0d94f8c02b074b59d4f3f2b68d31d3b28bb52030cb5b5330e1795bfa1ce6106664] [020c03474f4f231a90e388830ff52374f1625ff78b40aebb7f718055deceb40a4208733fdecd5e0a19f8bccad9f2afd936b51f25ec22143b45d364b04b263b9b] [172.17.23.146] [172.17.23.146] 1 Success DsmApiConnectionApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 30870 424f1f6e59635ac9b1bb9244519f4110 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC acd3e574702ffd475a0d774ad10f46098166fe01 2ee362d4c8f86196d2e2aaaaa3db8f0d94f8c02b074b59d4f3f2b68d31d3b28bb52030cb5b5330e1795bfa1ce6106664 020c03474f4f231a90e388830ff52374f1625ff78b40aebb7f718055deceb40a4208733fdecd5e0a19f8bccad9f2afd936b51f25ec22143b45d364b04b263b9b 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
63178e50147e68d87e5539903a8ff70649d8b48178c12c67b29204d48b493f64 [68a33942217b2edb9722dd82] [2] [CA_Jnt_SCCMSrvF1] [vm-cfgsms1] [WVUHS] [C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\TRA524D.tmp] [Servers] [Servers Audit] [v2258.855] [@"C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe" "C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\Deleted_dp-potomac.wvuhs.com_2025-08-18_10.20.25.log"] [Not Signed] [C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe] [C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe] [2025-08-18T14:31:20Z] [90d37bd9d4d05fae38e2513b99131a05] [79bee9f3cd48fa8566cf44cc61818309652e8a8a] [875bef6017239529422d10d803c5afb70da710ccec82cd9f8d4bbf0359862400057f7960c861a191186660eef4bbd0e6] [3f83ba5bd4aea11965e2879f7830b491e5dbbb1e9431575f0ffb75c7fd5e023c1152ae98ef2a0ceb8f616a8dd02e6a3ab335b5c631ea04d7fa55fc7b94eedb98] [172.25.18.240] [172.25.18.240] 1 Success TRA524D.tmp C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\ CMTrace_x86.exe 342528 90d37bd9d4d05fae38e2513b99131a05 Endpoint Configuration Manager 5.00.8913.1000 Not Signed 2025-08-18 14:31:20 +0000 UTC 2025-08-18 14:31:20 +0000 UTC 79bee9f3cd48fa8566cf44cc61818309652e8a8a 875bef6017239529422d10d803c5afb70da710ccec82cd9f8d4bbf0359862400057f7960c861a191186660eef4bbd0e6 3f83ba5bd4aea11965e2879f7830b491e5dbbb1e9431575f0ffb75c7fd5e023c1152ae98ef2a0ceb8f616a8dd02e6a3ab335b5c631ea04d7fa55fc7b94eedb98 2025-08-18 14:31:30 +0000 UTC None None 2025-06-04 15:49:38 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-08-18 14:36:03.769 +0000 UTC
627c742c10d1e559675ca18c49a9c75c6a54bb2f78fd59b024eba139907117d5 [68a711499561d65d16a01763] [2] [ca_tsk_peak] [i-npeak01] [WVUHS] [\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\343 - Par Non Par Contracts\EGScript1.vbs] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Windows\SysWOW64\cscript.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:30:00Z] [1bc244476356653ed1458b0e9e1dd89f] [924422bc3fa001cb145b6f0f05702b72c2b9e160] [0b26bc53b9ea42d401a9edead2312aab21ca3bb915c0d7ec3c4719f8a73537e0b6326b67d25708683daacc7e1dbd627e] [8b2cc9167be42bbb0ca3b6bd9c9bf6c275550b2de7f757385bea48c255c04ab90f1a00d1bca21e74150474f732746a2064449bd9f0b5936f5879c83b3c65cd75] [172.17.22.1] [172.17.22.1] 1 Success EGScript1.vbs \\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\343 - Par Non Par Contracts\ 2768 1bc244476356653ed1458b0e9e1dd89f Not Signed 2025-07-10 14:37:36 +0000 UTC 2025-07-10 14:37:36 +0000 UTC 924422bc3fa001cb145b6f0f05702b72c2b9e160 0b26bc53b9ea42d401a9edead2312aab21ca3bb915c0d7ec3c4719f8a73537e0b6326b67d25708683daacc7e1dbd627e 8b2cc9167be42bbb0ca3b6bd9c9bf6c275550b2de7f757385bea48c255c04ab90f1a00d1bca21e74150474f732746a2064449bd9f0b5936f5879c83b3c65cd75 2025-08-21 12:30:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
62024863eaffd84b599b90a47e2a9a4751a30ff0a683ad8fe6ee34a88d5ec438 [68a180e9582a53738bf6196b, 68a2d270bd2fe14956418886, 68a42433cb394578e09d7013, 68a575b4037e225cd9e58524, 68a6c515c0d894da1f16e0c6] [2] [IT.HelpDesk] [PCH-BGSwap] [PCH-DOMAIN] [C:\WS_FTP_Scripts\Movessi_837.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:00:32Z, 2025-08-18T07:00:27Z, 2025-08-19T07:00:27Z, 2025-08-20T07:00:27Z, 2025-08-21T07:00:27Z] [284c1cdb556927de4b3a316643ffc87d] [e410568d05b9af3418141d325b55cb697d99ac21] [65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85] [723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d] [10.20.22.79] [10.20.22.79] 1 Success Movessi_837.bat C:\WS_FTP_Scripts\ 134 284c1cdb556927de4b3a316643ffc87d Not Signed 2022-02-03 21:55:11 +0000 UTC 2022-02-03 22:01:36 +0000 UTC e410568d05b9af3418141d325b55cb697d99ac21 65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85 723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d 2025-08-09 07:04:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
61c454565af854e76d5943f53653ca500099259a820b93a35b185241f31ec214 [68a737ea9e9b12dd92373d91] [2] [jm10132] [i-nZiggy] [WVUHS] [C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe] [Servers] [Servers Audit] [v2324.910] ["C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe" ] [Takashi Sawanaka] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-21T15:13:02Z] [6a22378e4c43881c3fc7516d23e216e5] [a73393dacbbd991bf8ea719b9ed326c96ba800ae] [b94ace357f5248fc256cea762091f9b4c65b0edfc29af69b0eeaacd47013a6eddb528fb4ee9c671c654c222114a2e9b3] [2abadb04850ccf6ee19c2e30d053a76fd6c4c0461abe97735c05c3d7f242b69e2929242d95cbb2c6817a7261f2d54a07e0a79d32fe98227099fd21711319ba46] [172.17.20.2] [172.17.20.2] 1 Success WinMergeU.exe C:\Users\jm10132\Downloads\WinMerge\ WinMerge 6182728 6a22378e4c43881c3fc7516d23e216e5 WinMerge 2.16.50.0 Takashi Sawanaka 2025-07-28 02:50:58 +0000 UTC 2025-08-13 19:37:17 +0000 UTC a73393dacbbd991bf8ea719b9ed326c96ba800ae b94ace357f5248fc256cea762091f9b4c65b0edfc29af69b0eeaacd47013a6eddb528fb4ee9c671c654c222114a2e9b3 2abadb04850ccf6ee19c2e30d053a76fd6c4c0461abe97735c05c3d7f242b69e2929242d95cbb2c6817a7261f2d54a07e0a79d32fe98227099fd21711319ba46 2025-08-13 19:38:01 +0000 UTC None None 2025-07-30 17:52:30 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-12 21:05:55.355 +0000 UTC
618e006472ca01d731c88eef0c521bfa2eafe4fa529cb278522e94cd4a227601 [68a472a799ad3734d804e2e2] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-gui-util-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [e6a0ae656197c7d2042a823421721c0c] [26c84e7c1d05a43d83683ffaa842d6fafa24eba9] [baf82143523de9dbb4bfd1a568b5d358de605bf395a0b9dd230815a767d2e3b27e0499f683e20e86de893aca30f02b3e] [5746e06b5b7d988a66f1cd66b8d11a4c822b0b10608b8511fd92f0635a270826d598fb17dc6c3575999b085c44b87041aa9a8913fc8e98ae2a5ff91b7f06ee49] [172.17.23.146] [172.17.23.146] 1 Success batik-gui-util-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 172897 e6a0ae656197c7d2042a823421721c0c Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 26c84e7c1d05a43d83683ffaa842d6fafa24eba9 baf82143523de9dbb4bfd1a568b5d358de605bf395a0b9dd230815a767d2e3b27e0499f683e20e86de893aca30f02b3e 5746e06b5b7d988a66f1cd66b8d11a4c822b0b10608b8511fd92f0635a270826d598fb17dc6c3575999b085c44b87041aa9a8913fc8e98ae2a5ff91b7f06ee49 2025-08-19 11:29:20 +0000 UTC None None 2024-10-11 05:23:29 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
61343f806096e4fc91407dc38a85cf399bdcdd696d1d405476f1207533ded21a [68a4ccc785b914a60d739e4c] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
612d9fd82e677d16ceb970c0db3db940e645c7623f9972b3514165de961736ae [68a48674c4cb2500be692646, 68a48674c4cb2500be692653] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.SwaggerUI.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.SwaggerUI.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:54Z, 2025-08-19T14:08:13Z] [a5a7e03b78cfa550c2bb230847503da0] [345c6b6c08da999f7819345ddcb5ecbe9ac5cd99] [96a5ed695339154a791e72920d5b76e93239a6553959612ffe0dcb749f2636a662aab00d7a1158ce9730340707a53c3d] [bbd844477e3f7a69f66cf39d4f523038e1f9601387a297b534ad0dcb2d3bd6405f7007b25da474565ccc65b8546943cd76011334087c72f8a4de133683128890] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.SwaggerUI.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Swashbuckle.AspNetCore.SwaggerUI 3253248 a5a7e03b78cfa550c2bb230847503da0 Swashbuckle.AspNetCore.SwaggerUI 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Not Signed 2023-01-11 11:49:02 +0000 UTC 2023-01-11 11:49:02 +0000 UTC 345c6b6c08da999f7819345ddcb5ecbe9ac5cd99 96a5ed695339154a791e72920d5b76e93239a6553959612ffe0dcb749f2636a662aab00d7a1158ce9730340707a53c3d bbd844477e3f7a69f66cf39d4f523038e1f9601387a297b534ad0dcb2d3bd6405f7007b25da474565ccc65b8546943cd76011334087c72f8a4de133683128890 2025-07-15 14:08:03 +0000 UTC None None 2024-05-15 22:16:12 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-15 14:11:01.183 +0000 UTC
60f0e85181d3b53d78e9e6ecebe0ab722314b06b9c192ee5f7cd901c436979d1 [68a3146b5f0c41860c8c8507, 68a3146b5f0c41860c8c852d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\functools.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [74324067d7541c3433020bf331282bae] [36705cffb70e444b9521d2e7d5b3e1d6a65770f8] [231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740] [3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406] [172.17.252.131] [172.17.252.131] 1 Success functools.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 42627 74324067d7541c3433020bf331282bae Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 36705cffb70e444b9521d2e7d5b3e1d6a65770f8 231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740 3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
60e451f72cdbb8e0e9ea32540baf67cd8fd5d6cedbd7a85ac28ac61581589702 [68a235831d100d9bbeccc36f] [2] [SYSTEM] [i-hPRNRemisol] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iuw52xms.vda.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:03:04Z] [] [] [] [] [172.17.23.88] [172.17.23.88] 1 Success __PSScriptPolicyTest_iuw52xms.vda.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:03:04 +0000 UTC 2025-08-17 20:03:04 +0000 UTC 2025-08-17 20:03:15 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6075b77d8dc01b2c8b4d17ba6e0d36189e63f6af58ebebbe688034a0f03649ba [68a50205736560052fcd1832] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\vfluk3hv.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-19T23:00:14Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success vfluk3hv.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 23:00:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
601e017b57a87b714d691bb19b0d53984f1d1a66f227ceb8bbc2e8a8d63617c7 [68a3274a2bbf81532b7d73f6] [2] [SYSTEM] [i-nCTX-CC-PRD2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ksxmyi50.q5r.ps1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T13:14:47Z] [] [] [] [] [172.17.146.3] [172.17.146.3] 1 Success __PSScriptPolicyTest_ksxmyi50.q5r.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 13:14:47 +0000 UTC 2025-08-18 13:14:47 +0000 UTC 2025-08-18 13:14:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5ff7a1185865259b9baf0f0104fc3ed86f434c0b3543d6503a21ea4f10f3a204 [68a472a799ad3734d804e2f4] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CmlUiLibrary-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [419e7e870299e91eb47af36c89899910] [b7b4fbfd2c5528a6c4086109c8d3694b5e885e63] [5169233f20fc3d2d79b27a369cbe0221ecc8a9ce74b4e431475a09b94b1bddbbfc4c77f59278e70618e06e520c4c0ffb] [54a829e37109a32370fd9bfeb4447aacf5ca9a6f6f16a5c8004167dacd77c7615d33fe9d875a6570177a9d324f7d9830466c722d6cb5944f12864ffb901a097f] [172.17.23.146] [172.17.23.146] 1 Success CmlUiLibrary-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\temp\temp370e6ec670be35ca\content-f6ee56d340fd144d\WEB-INF\lib\ 12995294 419e7e870299e91eb47af36c89899910 Not Signed 2025-03-28 16:06:09 +0000 UTC 2021-12-22 05:40:22 +0000 UTC b7b4fbfd2c5528a6c4086109c8d3694b5e885e63 5169233f20fc3d2d79b27a369cbe0221ecc8a9ce74b4e431475a09b94b1bddbbfc4c77f59278e70618e06e520c4c0ffb 54a829e37109a32370fd9bfeb4447aacf5ca9a6f6f16a5c8004167dacd77c7615d33fe9d875a6570177a9d324f7d9830466c722d6cb5944f12864ffb901a097f 2025-03-28 16:06:36 +0000 UTC None None 2022-03-17 18:11:50 +0000 UTC 52 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
5f569870e905db236ba305ca0da4cfd820ef82f59ef451505ab6c93239f84eb0 [68a1a492a55ce8c2d93b813d] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae1fymez.nje.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:44:46Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_ae1fymez.nje.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:44:46 +0000 UTC 2025-08-17 09:44:46 +0000 UTC 2025-08-17 09:44:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5f4e6697d29e9da65f102eb5281347669f297da17c779c3d98c498fec0d902ed [68a3146b5f0c41860c8c8500, 68a3146b5f0c41860c8c8559] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [0961f322c725036a4b676715ca3df2ea] [0503b6748380bbc9aabe03713ace8ac2e7225770] [5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422] [0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 1895 0961f322c725036a4b676715ca3df2ea Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 0503b6748380bbc9aabe03713ace8ac2e7225770 5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422 0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5eb4e339d92213bf88a05a9ae0fbfa5c9be2cba35b15033f9750537527ebbbb7 [68a1dc8ef7acbde1f06aea97] [2] [SYSTEM] [WH1EMGSQL1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nqjmeb4k.jw4.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:43:33Z] [] [] [] [] [172.18.99.115] [172.18.99.115] 1 Success __PSScriptPolicyTest_nqjmeb4k.jw4.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:43:33 +0000 UTC 2025-08-17 13:43:33 +0000 UTC 2025-08-17 13:43:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
5e7633f5e5b6b6041b509141acde2aa6ad4f374355e20abcf89530fb344d21f6 [68a48674c4cb2500be692644, 68a48674c4cb2500be692652] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Polly.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Polly.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:52Z, 2025-08-19T14:08:11Z] [d76a3e8624e92779aeb0117980afa4fe] [ecc065d3f48010e19c5e80164efc8e0966fc9e46] [5375644cd6a15e66b74f4eb7ca1584ca1f966259accc4268596c681e8d387f1904d78027f8403ac1ff1bf6b3d20d3cde] [c83160de543d74ba0e6e97d8a69a877e923867595b9cd32a934d2e19879a5426e73d494583c4ed9a7ade92ab987b2b0917978186f7b1bf259d922418f29400c4] [172.17.252.226] [172.17.252.226] 1 Success Polly.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Polly 275456 d76a3e8624e92779aeb0117980afa4fe Polly 7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d Not Signed 2022-01-17 18:25:08 +0000 UTC 2022-01-17 18:25:08 +0000 UTC ecc065d3f48010e19c5e80164efc8e0966fc9e46 5375644cd6a15e66b74f4eb7ca1584ca1f966259accc4268596c681e8d387f1904d78027f8403ac1ff1bf6b3d20d3cde c83160de543d74ba0e6e97d8a69a877e923867595b9cd32a934d2e19879a5426e73d494583c4ed9a7ade92ab987b2b0917978186f7b1bf259d922418f29400c4 2025-07-15 14:08:03 +0000 UTC None None 2025-03-12 13:14:32 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-15 04:08:59.643 +0000 UTC
65e36fe2679c2a738bce1f11bc44f5ecaccc0b2aa794481e9a3da95fee273829 [68a193ce4e3c049885d2ea95, 68a2e554dc234255d3b8e587, 68a436fbf3463c41a9aea0b7, 68a588945ea9afa580b255da, 68a6da3eb10fd4be868c71e7] [2] [SYSTEM] [GRMC-ECW-EBO] [NT AUTHORITY] [D:\eClinicalWorks\eBO\eBO_start.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T08:30:01Z, 2025-08-18T08:30:01Z, 2025-08-19T08:30:01Z, 2025-08-20T08:30:01Z, 2025-08-21T08:30:01Z] [c08203060d93393af38d1b3c2740552f] [1b371466fbd5c6f1ea33373992b920991adbecc9] [544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c] [2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d] [192.168.3.241] [192.168.3.241] 1 Success eBO_start.bat D:\eClinicalWorks\eBO\ 13 c08203060d93393af38d1b3c2740552f Not Signed 2021-07-04 20:04:47 +0000 UTC 2021-07-04 20:04:47 +0000 UTC 1b371466fbd5c6f1ea33373992b920991adbecc9 544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c 2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d 2025-08-09 08:30:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
65c33dc9b24a5e5f6cacae62680641582894749c7bf16c951032ef92f3e12a60 [68a472b1b022648922e23591] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-core-2.17.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [da06f4ab7faebc965ae04d0ba92be715] [fe6e7a32c1228884b9691a744f953a55d0dd8ead] [f001c7d6e4443b7876a151b4e706591c1db7ceec982d24507d239f6658c70bd736897b4fbdde1014af1f4dc12c220c76] [e28fa0f1cbac0d925055b4c89de3c1f7293a001574b8479b7ae912dff051ed35477847509d70586a3b7637f0f529f701235766abdfc755f261a2aaf6dc2a70b8] [172.17.23.146] [172.17.23.146] 1 Success log4j-core-2.17.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 1789339 da06f4ab7faebc965ae04d0ba92be715 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC fe6e7a32c1228884b9691a744f953a55d0dd8ead f001c7d6e4443b7876a151b4e706591c1db7ceec982d24507d239f6658c70bd736897b4fbdde1014af1f4dc12c220c76 e28fa0f1cbac0d925055b4c89de3c1f7293a001574b8479b7ae912dff051ed35477847509d70586a3b7637f0f529f701235766abdfc755f261a2aaf6dc2a70b8 2025-03-28 16:04:26 +0000 UTC None None 2025-03-15 21:56:36 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
65aae2d587ee1ea71d61262951090e49fe23de56242c8a9a51976e6be146f58f [68a5239e621d09b2b1ed5e57] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Reporter.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:37Z] [2f985088066c429f7ded59c429f9e3b1] [568bfe5a3fbd545ef448b1853b52848299c8e64b] [e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644] [f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490] [172.17.22.40] [172.17.22.40] 1 Success Reporter.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Reporter 12288 2f985088066c429f7ded59c429f9e3b1 Reporter 1.0.0.0 Not Signed 2023-06-15 02:38:18 +0000 UTC 2023-06-15 02:38:18 +0000 UTC 568bfe5a3fbd545ef448b1853b52848299c8e64b e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644 f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
65a2347c4995585d251164ecd8671674e75bc0d429b15e08feb49912b0389663 [68a306a5ba5832f49fe9cf61] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\responseloader.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:47:34Z] [3960a43ddaa5d76217cee3edfd8cb9cb] [2f6b0ecda88a62c631b875a15ca36d926419aca3] [650baf192b45e9971ae47df8651a4b85241d4e840aef1a09f2d42d1f60affaed4445f03c62e1661161a1e16b3427815a] [ea5105592501c4aec6a6e73d22e69b8366e25907fb66fe91bbfcbf5558abb390fc93b820179b2831e9bfe8cc2a6138de9af338fb590af10615f8383fbde20560] [172.17.146.33] [172.17.146.33] 1 Success responseloader.dll C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\ 185856 3960a43ddaa5d76217cee3edfd8cb9cb Not Signed 2022-07-06 14:44:37 +0000 UTC 2024-10-23 17:06:51 +0000 UTC 2f6b0ecda88a62c631b875a15ca36d926419aca3 650baf192b45e9971ae47df8651a4b85241d4e840aef1a09f2d42d1f60affaed4445f03c62e1661161a1e16b3427815a ea5105592501c4aec6a6e73d22e69b8366e25907fb66fe91bbfcbf5558abb390fc93b820179b2831e9bfe8cc2a6138de9af338fb590af10615f8383fbde20560 2025-05-01 10:47:23 +0000 UTC None None 2025-03-04 22:40:51 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-01 10:52:15.581 +0000 UTC
654db9b5673ac13103fd728375f4f07b150f1ad7581db231c4852464dde28d7e [68a1c1a2a2fc50ac4b0f3d54] [2] [SYSTEM] [i-nosccapp2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_za4tfwmo.5uv.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T11:48:48Z] [] [] [] [] [172.17.250.140] [172.17.250.140] 1 Success __PSScriptPolicyTest_za4tfwmo.5uv.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 11:48:48 +0000 UTC 2025-08-17 11:48:48 +0000 UTC 2025-08-17 11:48:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6536f5e98cbead09f04f349e790d5138cd064acc602f927805d373d7a02cd4ec [68a4b0fb13fac5171eeef0d4] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [Servers] [Servers Audit] [v2280.872] ["C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe" ] [Not Signed] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [C:\Windows\explorer.exe] [2025-08-19T17:08:06Z] [13d3058a8838596abc2f8a562eb926a0] [55a6af07ae596cc5aca567ed04c8f723fe4efaaf] [067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a] [6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.AlliancePD.UI.exe C:\Program Files (x86)\Cyrun\Alliance 7 Client\ Cyrun.AlliancePD.UI 46097920 13d3058a8838596abc2f8a562eb926a0 Pegasus 7.0.4.4644 Not Signed 2019-09-13 20:45:36 +0000 UTC 2025-05-22 18:18:00 +0000 UTC 55a6af07ae596cc5aca567ed04c8f723fe4efaaf 067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a 6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520 2025-05-22 18:54:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6519fa21fd6c2089d9cd74a1c19e586b97cafa58b95e7f32cc8843106a52297f [68a3146b5f0c41860c8c8554, 68a3146b5f0c41860c8c8579] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\token.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [7bfdfbbb892249eaf8c980f98d7c019e] [192a5bf782608ebb77060023442b3dfaefec7dba] [6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a] [269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9] [172.17.252.131] [172.17.252.131] 1 Success token.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 3572 7bfdfbbb892249eaf8c980f98d7c019e Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 192a5bf782608ebb77060023442b3dfaefec7dba 6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a 269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
64dba8b2abfb2c9a3cadbc9da524592ca7d348251d7992a2b293d424333ddb11 [68a4ccc785b914a60d739e46, 68a4ce1fc826337212f53be6, 68a4d07753a851daf11e6930, 68a4d07753a851daf11e6943, 68a4d07753a851daf11e6949, 68a4d2d1ff2b441b84428128, 68a4d2d1ff2b441b8442813b, 68a4d2d1ff2b441b84428142] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl522.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] [ece6e23c61bd350b773b221dd7117a0b] [b82dd61eca567e878559410ec92fe5c1f4942827] [12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae] [95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669] [10.36.132.49] [10.36.132.49] 1 Success perl522.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ 1513472 ece6e23c61bd350b773b221dd7117a0b Not Signed 2021-10-20 13:41:15 +0000 UTC 2021-10-20 13:42:29 +0000 UTC b82dd61eca567e878559410ec92fe5c1f4942827 12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae 95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
647983ebde53e0501ff1af8ef6190dfeea5ccc64caf7dce808f1e3d98fb66a3c [68a70bdc2a90344d346daef1, 68a70e2b4a120b2e9d00b325] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp, C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\is-CMQT5.tmp\SetupYabe_v2.1.0.tmp] [Servers] [Servers Audit] [v2314.900] ["C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp" /SL5="$2401DC,1853735,721408,C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" , "C:\Users\SVC_SL~1\AppData\Local\Temp\is-CMQT5.tmp\SetupYabe_v2.1.0.tmp" /SL5="$302FE,1853735,721408,C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" /SPAWNWND=$20300 /NOTIFYWND=$2401DC ] [Not Signed] [C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:06:44Z, 2025-08-21T12:06:47Z] [84db4b4205f705da71471dc6ecc061f5] [b90bac8c13a1553d58feef95a2c41c64118b29cf] [44d2129f7239fbe6c437a504ae3718a96fb9deb9b85374a5d46f096cdacb50af89cba21c0efdd76a24784a5c91d663eb] [c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a] [172.17.20.75] [172.17.20.75] 1 Success SetupYabe_v2.1.0.tmp C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\13\is-00LB0.tmp\ Setup/Uninstall 2535424 84db4b4205f705da71471dc6ecc061f5 Not Signed 2025-08-21 12:06:43 +0000 UTC 2025-08-21 12:06:43 +0000 UTC b90bac8c13a1553d58feef95a2c41c64118b29cf 44d2129f7239fbe6c437a504ae3718a96fb9deb9b85374a5d46f096cdacb50af89cba21c0efdd76a24784a5c91d663eb c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a 2025-08-21 12:06:52 +0000 UTC None None 2025-08-18 03:07:05 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
64777527feb80342cffb4fa4eb4c083aeef79259506dd17882b418e63a6cfe9a [68a523949cec397f02de9f4d] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CellsDiagPlugIn.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:27Z] [3247209b37912925bc215dfdd852765d] [f0f111857ad27804276dd06ebea2124265752b99] [fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b] [639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79] [172.17.22.40] [172.17.22.40] 1 Success CellsDiagPlugIn.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ CellsDiagPlugIn 16896 3247209b37912925bc215dfdd852765d CellsDiagPlugIn 1.0.0.0 Not Signed 2023-06-15 02:38:00 +0000 UTC 2023-06-15 02:38:00 +0000 UTC f0f111857ad27804276dd06ebea2124265752b99 fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b 639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
645bee92ba4e9f32ddfdd9f8519dc1b9f9ff0b0a8e87e342f08d39da77e499a9 [68a4e8a1ad898641af98fd95, 68a4fcd0011d94a251a4ef31] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe] [Servers] [Servers Audit] [v2283, v2284] ["C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe" /S /SELECT_UTILITIES=1] [OpenVPN Technologies, Inc.] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z] [47fa5f0670cf191d066e5dfbf4f4ee70] [db9d441c209fb28b7c07286a74fe000738304dac] [d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf] [514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713] [172.17.23.18] [172.17.23.18] 1 Success tap-windows.exe C:\Users\CA_gs10109\AppData\Local\Temp\ 256240 47fa5f0670cf191d066e5dfbf4f4ee70 OpenVPN Technologies, Inc. 2016-04-21 13:41:08 +0000 UTC 2016-04-21 13:41:08 +0000 UTC db9d441c209fb28b7c07286a74fe000738304dac d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf 514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713 2025-08-19 21:12:01 +0000 UTC None None 2025-08-18 13:19:27 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
641cf25502584cfd76bde4c4df4b299e84826bd93ef0a6ba031e6c05e4eca12e [68a472a799ad3734d804e2ea] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-transcoder-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [9a0436daac0071db0ce4e7d4c39f5119] [6836769a03abf9cec50f4ed668c57753a962771d] [862b4d6a52863f26ef6ac2cf618caf3efa4a2598cc00387325c41ae0ff73b584591c59298875fec313c54ae37507d6f7] [bdd5a4010858d7cf509d014262577364de5e8da96f76d75bad101608779b5586f439d44ac9e8c435ed13fd947d2333710a4ace543ac32225f6e52211063f2b83] [172.17.23.146] [172.17.23.146] 1 Success batik-transcoder-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 128581 9a0436daac0071db0ce4e7d4c39f5119 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 6836769a03abf9cec50f4ed668c57753a962771d 862b4d6a52863f26ef6ac2cf618caf3efa4a2598cc00387325c41ae0ff73b584591c59298875fec313c54ae37507d6f7 bdd5a4010858d7cf509d014262577364de5e8da96f76d75bad101608779b5586f439d44ac9e8c435ed13fd947d2333710a4ace543ac32225f6e52211063f2b83 2025-08-19 11:29:20 +0000 UTC None None 2021-05-10 22:57:54 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
64108cd7e8f9191dd24c6cd52bf90bb7c6d83435b247310d7b235f4e6e4462d0 [68a3146b5f0c41860c8c84e6, 68a3146b5f0c41860c8c8519] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\encodings\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] [c2cdf437a74a8110e8c8e31d70476eac] [6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d] [b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5] [61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\encodings\__pycache__\ 6025 c2cdf437a74a8110e8c8e31d70476eac Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5 61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
635dda72c3c6e62d4ca2ad23babcab4ebc80d20f98bc19f81a80f2c519820e2d [68a18e5a59acceacbe55b00f, 68a2ddd9e2924f584cca6bdc, 68a4315a5c922431d0b72ae7, 68a580dc948b28af3ee1a272, 68a6d26c64b8e723a68e47ca] [2] [ca_tsk_idbadge] [i-nVM-IDBadge] [WVUHS] [C:\New DBCleaner\DatabaseCleaner.bat] [Servers] [Servers Audit] [v2248, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T08:00:01Z, 2025-08-18T08:00:02Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T08:00:02Z] [34fef7d2fff558162f7cf87d74aa8e03] [35cd5aa7a5316f7e59b9f0481592a65ba3c32548] [11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6] [8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55] [172.17.251.92] [172.17.251.92] 1 Success DatabaseCleaner.bat C:\New DBCleaner\ 4103 34fef7d2fff558162f7cf87d74aa8e03 Not Signed 2023-12-13 19:59:10 +0000 UTC 2023-04-03 20:05:46 +0000 UTC 35cd5aa7a5316f7e59b9f0481592a65ba3c32548 11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6 8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55 2025-08-09 08:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6339ff3a3b98f030ee18cb09698e5e48159211697d8c5d4849d1d022e1cece46 [68a5e5e6f3ba24788e4c61e7] [2] [SYSTEM] [UH-APPS] [NT AUTHORITY] [C:\Windows\System32\drivers\VirtFile.sys] [Servers] [Servers Audit] [v2298.891] [] [Symantec Corporation (Invalid Certificate Chain)] [Non-existent] [Non-existent] [2025-08-20T15:02:32Z] [b6385c9cba13a1beaa7f38625bc0d803] [ef0eeab606e4324fe12951421e21660416a99ea4] [cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3] [d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a] [172.17.253.46] [172.17.253.46] 1 Success VirtFile.sys C:\Windows\System32\drivers\ Allows granular display of back ups. 114848 b6385c9cba13a1beaa7f38625bc0d803 Symantec Backup Exec(TM) for Windows Servers 2.0.95 Symantec Corporation (Invalid Certificate Chain) 2013-06-11 19:10:48 +0000 UTC 2012-10-16 15:51:04 +0000 UTC ef0eeab606e4324fe12951421e21660416a99ea4 cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3 d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a 2025-07-21 22:05:35 +0000 UTC None None 2022-01-23 16:45:00 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-21 22:11:52.243 +0000 UTC
631c20f213e711cef26bbb9333315083fc002c886a177fc7a58baf239246b0fb [68a3146b5f0c41860c8c854f, 68a3146b5f0c41860c8c8575] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\linecache.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [27d8b6c682f952b431b6828ff2909e5c] [603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a] [d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c] [b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb] [172.17.252.131] [172.17.252.131] 1 Success linecache.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 7150 27d8b6c682f952b431b6828ff2909e5c Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0fb8614c9264487aeb4520463d5be45b3de0f311e175fb7615ad95127046479c [68a3146b5f0c41860c8c84f6, 68a3146b5f0c41860c8c8537] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\socket.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [faed5b0bdd655e08c6850bcf855f6058] [d5a4515c70fa7338e895a47d73b6538dddb21cc9] [54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b] [cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c] [172.17.252.131] [172.17.252.131] 1 Success socket.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 42178 faed5b0bdd655e08c6850bcf855f6058 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC d5a4515c70fa7338e895a47d73b6538dddb21cc9 54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0f3cafd07fecd666babef35d2e27c9be36744d46ccbadeffb332ac1c63fc20d4 [68a241462d53af320f145902] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tbmkjawl.w3u.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:53:14Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_tbmkjawl.w3u.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:53:14 +0000 UTC 2025-08-17 20:53:14 +0000 UTC 2025-08-17 20:53:26 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0f32a3469b8f540d07d0105e336eac117dcff5fb273826eb4893d4981ee5b3cb [68a48674c4cb2500be692639, 68a48674c4cb2500be69264b] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.AspNetCore.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.AspNetCore.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z] [ae053b68b1c19eac4cbae026a9ad84cc] [ea1ca08de3f100bf2b3d3781091d61284fda048a] [30aa7083962df2e165fd16666677fbfb95bbd7f91c957e51c938f20386b21562ff34326ef1537c044c4f0c0678063f24] [97d8f790cea8de9e3055890a12e87a9e91914100df76846d8a59e36bb18e3c6afca557b091639ef8120c90dce1db356d3b43b71c57c18b3a91c9e89d5cd4b071] [172.17.252.226] [172.17.252.226] 1 Success Serilog.AspNetCore.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Serilog.AspNetCore 15872 ae053b68b1c19eac4cbae026a9ad84cc Serilog.AspNetCore 5.0.0 Not Signed 2022-02-16 03:02:56 +0000 UTC 2022-02-16 03:02:56 +0000 UTC ea1ca08de3f100bf2b3d3781091d61284fda048a 30aa7083962df2e165fd16666677fbfb95bbd7f91c957e51c938f20386b21562ff34326ef1537c044c4f0c0678063f24 97d8f790cea8de9e3055890a12e87a9e91914100df76846d8a59e36bb18e3c6afca557b091639ef8120c90dce1db356d3b43b71c57c18b3a91c9e89d5cd4b071 2025-07-15 14:07:53 +0000 UTC None None 2025-05-12 11:51:18 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-15 14:11:01.183 +0000 UTC
0f27d7cb7d073f90f2d5cbe8a7b5f84792b15eb9bd60301da2fdd7ac5a7a564a [68a7177f3667c32a076fb94b] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\mbahost.dll] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\Installs\SSMS-Setup-ENU.exe] [C:\Installs\SSMS-Setup-ENU.exe] [2025-08-21T12:56:21Z] [72aad48433f2fadff1369750cba0bf89] [0bf372d38c34b2ae77e5769d89daaed033271932] [268f26ff0ac963035bce15a46398134609d90f9aff897ac33265ffa8832e4590ec5ac26a64a035e812220bd07c660839] [6a14a33a18380c79ceb6b5dcbd50f2d2ac595e2bf9269b45920ec2b7ca8d076a5732debbc3260e88931b4e588d3bcd25b832fd40588c60821f6092760e2167d3] [172.17.37.230] [172.17.36.114] 1 Success mbahost.dll C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\ Managed Bootstrapper Application Host 79360 72aad48433f2fadff1369750cba0bf89 Windows Installer XML Toolset 3.8.1128.0 Not Signed 2013-11-28 10:14:38 +0000 UTC 2013-11-28 10:14:38 +0000 UTC 0bf372d38c34b2ae77e5769d89daaed033271932 268f26ff0ac963035bce15a46398134609d90f9aff897ac33265ffa8832e4590ec5ac26a64a035e812220bd07c660839 6a14a33a18380c79ceb6b5dcbd50f2d2ac595e2bf9269b45920ec2b7ca8d076a5732debbc3260e88931b4e588d3bcd25b832fd40588c60821f6092760e2167d3 2025-08-21 12:56:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
679460da57016661bc7c99e017ac15af4d81c637657f23601d3bf8ac8fcab80f [68a6afe50e0f3bd8deac4f4b, 68a6afe50e0f3bd8deac5095, 68a6afe50e0f3bd8deac50ff, 68a6afe50e0f3bd8deac5169, 68a6afe50e0f3bd8deac554e, 68a6afe50e0f3bd8deac5640, 68a6afe50e0f3bd8deac575f, 68a6afe50e0f3bd8deac5d28, 68a6afe50e0f3bd8deac5daa, 68a6afe50e0f3bd8deac5ee8] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [Servers] [Servers Audit] [v1617] ["C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5812", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5148", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "6060", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5216", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5680", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5408", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5256", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5360", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5680"] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\pg_ctl.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [92773de46e214bca7b2b53ffee34fee0] [2cc732693d819e2fedeb1c3538cb8caf98dd4dbb] [91e8cd14a5f77a79d194763038eb83e81c3556a2de1d574bb7ea2452f32d55ff7778d3eda8de633ec6ab0b451948bbed] [02b0adf0ec0492cc432ed62f817b116564e4cac1f87e971632ba357d0e73cc9da7831348536e40ffaa7fc84d15ff411b8fd5022e7652f6a6757b017dccbd7ea7] [172.17.30.60] [172.17.30.60] 1 Success postgres.exe C:\Program Files\PostgreSQL\12\bin\ PostgreSQL Server 7420416 92773de46e214bca7b2b53ffee34fee0 PostgreSQL 12.1 Not Signed 2023-10-19 17:59:21 +0000 UTC 2019-12-13 12:43:37 +0000 UTC 2cc732693d819e2fedeb1c3538cb8caf98dd4dbb 91e8cd14a5f77a79d194763038eb83e81c3556a2de1d574bb7ea2452f32d55ff7778d3eda8de633ec6ab0b451948bbed 02b0adf0ec0492cc432ed62f817b116564e4cac1f87e971632ba357d0e73cc9da7831348536e40ffaa7fc84d15ff411b8fd5022e7652f6a6757b017dccbd7ea7 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2024-04-02 18:16:03 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-04-30 20:01:04.066 +0000 UTC
676696e9a002aa8048328f5a90f5701bb020206c47ed28490493c341fb4a9362 [68a5239e621d09b2b1ed5e58] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ServiceUtils.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:37Z] [75e9bc83737e8ac074c23a4855102d3e] [efb997511f127d246a4abe1bcb83dd177283cef3] [47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621] [4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420] [172.17.22.40] [172.17.22.40] 1 Success ServiceUtils.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ ServiceUtils 5632 75e9bc83737e8ac074c23a4855102d3e ServiceUtils 1.0.0.0 Not Signed 2023-06-15 02:38:16 +0000 UTC 2023-06-15 02:38:16 +0000 UTC efb997511f127d246a4abe1bcb83dd177283cef3 47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621 4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
675413a3d571393b0c220c2b15036a8bef01c048df4c30302082951b74043963 [68a3146b5f0c41860c8c8516, 68a3146b5f0c41860c8c8569] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\base64mime.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] [2b2542f960659edfdc9c44ec8f938ecf] [2450e46ca73940aa558b6dd4c2658db3c6e9d229] [9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c] [3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821] [172.17.252.131] [172.17.252.131] 1 Success base64mime.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 3982 2b2542f960659edfdc9c44ec8f938ecf Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 2450e46ca73940aa558b6dd4c2658db3c6e9d229 9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c 3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6745c612329bcbcf5d60ea434bbbed729fbfb3044b85ea1daf63168cd72a8378 [68a4ccc785b914a60d739e54, 68a4ce1fc826337212f53bf0, 68a4d07753a851daf11e693b, 68a4d07753a851daf11e6953, 68a4d2d1ff2b441b84428133, 68a4d2d1ff2b441b8442814a] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\OLE.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [c25582d0ba9781b4cfaee35c30265a89] [c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6] [756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03] [960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f] [10.36.132.49] [10.36.132.49] 1 Success OLE.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\ 95232 c25582d0ba9781b4cfaee35c30265a89 Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:12:45 +0000 UTC c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6 756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03 960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
66fc3944b3051ff3f1d18dbe8db62d3f4dfedc8e026fe31384fbbca9c46b3565 [68a472a799ad3734d804e2e7] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-svg-dom-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [96e47bc8e217d178950c8d1aea036659] [ccc87493a4074348b2e090b2ce7a3eccd4e8af44] [1faf695a58c925fee9cf084c8f6f42570aaabd88fcc07c92e71c1076b5455628a276e46a6daa1ed1d2b7d0286cd888bf] [8ea662f93d292ab4d3012b515ec5b003db34fbd8ac8744c18f0fe7fe3faa8230dee26b38c02716d6dc53846de14e6a785b428539c2834ccc66e8792268ef179d] [172.17.23.146] [172.17.23.146] 1 Success batik-svg-dom-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 231948 96e47bc8e217d178950c8d1aea036659 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC ccc87493a4074348b2e090b2ce7a3eccd4e8af44 1faf695a58c925fee9cf084c8f6f42570aaabd88fcc07c92e71c1076b5455628a276e46a6daa1ed1d2b7d0286cd888bf 8ea662f93d292ab4d3012b515ec5b003db34fbd8ac8744c18f0fe7fe3faa8230dee26b38c02716d6dc53846de14e6a785b428539c2834ccc66e8792268ef179d 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:38:07 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
66ca0acbcb6ad02b31c5d704cc07f5927e3c38e9b9c7187e1cc9d6e3902e7ba0 [68a523a99ba7c92b34976f9b] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:43Z] [e320f4994ce53c449d5a9121c61d7e48] [ef0c8fc252698f38fd60036b728d7f67bf7074d0] [6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe] [d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83] [172.17.22.40] [172.17.22.40] 1 Success UnderlyingData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ UnderlyingData 212992 e320f4994ce53c449d5a9121c61d7e48 UnderlyingData 1.0.0.0 Not Signed 2023-06-15 02:37:20 +0000 UTC 2023-06-15 02:37:20 +0000 UTC ef0c8fc252698f38fd60036b728d7f67bf7074d0 6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
66a8b44e63c47a088ba1953875ea5b2b0eb0769a23906405789b3bb01c9cf8dd [68a472b1b022648922e235a6] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax-ex-1.7.8.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [bf9963c5574fdd6f69a927710ec1faf6] [377077e4441cc46be5efde9de63efdf790a59cd7] [c8e0708966c438ba981be813425e6b43bbbb032cdbbbf310d10159b9ef1087e03b5f50887fc7ccf9d0adc78759e8738d] [90018af27d31c1ebb6cc2b0a9bbe7a5d6756e72feb94165c5ad2d00179a5e4fb7fd1b1f38f6838b55bb4d2e9332cae5cb14bcb21376dc21f79cfd45d190ef367] [172.17.23.146] [172.17.23.146] 1 Success stax-ex-1.7.8.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\stax-ex-1.7.8.jar-af4ed41b26a9c9c3\ 33721 bf9963c5574fdd6f69a927710ec1faf6 Not Signed 2025-03-28 16:06:09 +0000 UTC 2025-03-28 16:06:09 +0000 UTC 377077e4441cc46be5efde9de63efdf790a59cd7 c8e0708966c438ba981be813425e6b43bbbb032cdbbbf310d10159b9ef1087e03b5f50887fc7ccf9d0adc78759e8738d 90018af27d31c1ebb6cc2b0a9bbe7a5d6756e72feb94165c5ad2d00179a5e4fb7fd1b1f38f6838b55bb4d2e9332cae5cb14bcb21376dc21f79cfd45d190ef367 2025-03-28 16:06:26 +0000 UTC None None 2024-10-26 16:53:40 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:03:16.254 +0000 UTC
66a7c58a048946967c97c8069fcee758ef27df1332efdd25bc395f970aa047ce [68a4a66a77aec68de12158a1] [2] [be10045eu] [i-nsdprodmon1] [WVUHS] [\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:29:28Z] [81770ef45b8d159737e044b339977f15] [3a12a57b41dfe8c522205a10420cba0e3c5f3147] [beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea] [c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6] [172.17.252.208] [172.17.252.208] 1 Success PC Info.ps1 \\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ 2052 81770ef45b8d159737e044b339977f15 Not Signed 2025-04-22 13:59:56 +0000 UTC 2025-08-19 16:29:27 +0000 UTC 3a12a57b41dfe8c522205a10420cba0e3c5f3147 beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6 2025-08-19 16:29:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
66a1912b4df1c32f92d326398253aaf513a587c9b820ebeadf0ba5e2b3bc0703 [68a1e4af1459697ae7b8a1fc] [2] [SYSTEM] [i-nSwisslog] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5vmqoyzz.0lc.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:18:14Z] [] [] [] [] [172.17.253.93] [172.17.253.93] 1 Success __PSScriptPolicyTest_5vmqoyzz.0lc.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:18:14 +0000 UTC 2025-08-17 14:18:14 +0000 UTC 2025-08-17 14:18:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
66871d215d9b658f655d342e7fb104a541e57792b012584470f33832195fd5f9 [68a572d0a4efe9f49e2cb5ec] [2] [SYSTEM] [u-hvhprod12] [NT AUTHORITY] [C:\Windows\Cluster\CauScript.cmd] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T07:00:00Z] [cfaaf3aa63b88b2338b432dd4cde45ad] [face75e7dc3b0cdf63652698d51e93b325872c4b] [5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a] [ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4] [172.25.19.217] [172.25.19.217] 1 Success CauScript.cmd C:\Windows\Cluster\ 798 cfaaf3aa63b88b2338b432dd4cde45ad Not Signed 2024-07-24 17:11:13 +0000 UTC 2025-03-27 13:16:50 +0000 UTC face75e7dc3b0cdf63652698d51e93b325872c4b 5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4 2025-08-13 07:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
665c0db974060c2dd20238cc5dfa62525214c41afdd9af5323ff71d73888c0ab [68a231ae7d77b9bdafa93994] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0lu13bn4.pix.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:43:19Z] [] [] [] [] [172.29.132.47] [172.29.132.47] 1 Success __PSScriptPolicyTest_0lu13bn4.pix.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:43:19 +0000 UTC 2025-08-17 19:43:19 +0000 UTC 2025-08-17 19:46:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
664078f030aa3df98066673e611d90a158661c5b965a4e46de8de0953da177fb [68a5c8eceb9e7b7716dce206, 68a5ccf2ddfdba423e488648] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1, C:\_work_devops_mdi\_temp\fceedb9f-ba6b-41c0-9ef2-a7e4bd4a6240.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:08:56Z, 2025-08-20T13:22:29Z] [e1cedcd3667c280811e42f433dad71f9] [748c14065c2144416d5ed03f50f5220e302fccc9] [2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96] [fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3] [172.17.252.194] [172.17.252.194] 1 Success 7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1 C:\_work_devops_mdi\_temp\ 963 e1cedcd3667c280811e42f433dad71f9 Not Signed 2025-08-20 13:08:56 +0000 UTC 2025-08-20 13:08:56 +0000 UTC 748c14065c2144416d5ed03f50f5220e302fccc9 2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96 fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
690174fca51407afca08a38fc1a3127d3bbae65c869f3fb85c7234191b1fe8be [68a34b98a6132bf659cce5b4, 68a34df0b71eea1289980a19] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Scheduler.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:14Z, 2025-08-18T15:58:05Z] [38aa5e272191a742bfdd5b7f2f266b74] [5bab004a3f0605f3ff88006f58975edae48cf028] [35bb16c6611f615b058c815f483b8e5b08fc62e43a999d7c74f36f1f217d54d864e6d219c5133dbf6951008b3b925770] [98319ac9ffbc679b636d67dccccfaac3dd0629b16c124ba12f0b03883223e7f095b38831f14ab2763a34d2273a86c443c368c5d5918f5a89ec5fc2a7d009cc89] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Scheduler.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Scheduler 986624 38aa5e272191a742bfdd5b7f2f266b74 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 5bab004a3f0605f3ff88006f58975edae48cf028 35bb16c6611f615b058c815f483b8e5b08fc62e43a999d7c74f36f1f217d54d864e6d219c5133dbf6951008b3b925770 98319ac9ffbc679b636d67dccccfaac3dd0629b16c124ba12f0b03883223e7f095b38831f14ab2763a34d2273a86c443c368c5d5918f5a89ec5fc2a7d009cc89 2025-06-09 21:58:51 +0000 UTC None None 2022-04-23 05:15:40 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
686df88dac104103d9df30377e187bfef2774b327f2725bd46546ccfa8f1c47d [68a4cc59fc641401b4957020] [2] [my10040sa] [i-ncapsule12] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\3vrnzq1i.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:11:10Z] [] [] [] [] [172.17.23.18] [172.17.23.18] 1 Success 3vrnzq1i.dll C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:11:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6863fe2234ffda46d9ca1fd9f15003f42b2191acdd10175e3f295523c0b35045 [68a15d35e038b834e144693e, 68a2ac48f8706bf2d8f3933a, 68a400602dba59b513ad7bed, 68a54f94d489f4294ecfa570, 68a6a0e16995404c84cfc656] [2] [cbord_support] [I-HOdyssey] [I-HODYSSEY] [D:\CBORD Odyssey\PCS\EndOfDay\EndOfDay.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [D:\CBORD Odyssey\Shared\pTaskService.exe] [2025-08-17T04:30:21Z, 2025-08-18T04:30:00Z, 2025-08-19T04:30:28Z, 2025-08-20T04:30:25Z, 2025-08-21T04:30:24Z] [e60dc73b04d6e2accd1eeed6e2178d78] [44b03d03b40ede397aa93727bb5464cf60e9d3fc] [13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca] [3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51] [172.17.20.134] [172.17.20.134] 1 Success EndOfDay.bat D:\CBORD Odyssey\PCS\EndOfDay\ 1565 e60dc73b04d6e2accd1eeed6e2178d78 Not Signed 2019-04-26 20:58:04 +0000 UTC 2019-04-26 20:58:04 +0000 UTC 44b03d03b40ede397aa93727bb5464cf60e9d3fc 13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca 3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51 2025-08-09 04:30:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
67aa57138fb2461c734d2cb7424da10bf4ac7fa888cc6fe6d58cd22f2f4c7a4b [68a306a5ba5832f49fe9cf52] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXCOMND4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [6affa08092f4119767fd135b25631186] [991baf5f4b2b1db8262007ccd4446fafb3f41b48] [404a8cc0255eb1ce1db2fe0668708484ce499b1cf1b0ab27d8941f47473d6c9929801eacc030fb24159e24491aef9195] [723e4d98ffea65d4cd029e5678c4a64232719fc953225f04b138ba0b2e588ab7dca4b61f8e5377731e7fcae60a8c8d19fbd47430f49aed476be5912587ca015e] [172.17.146.33] [172.17.146.33] 1 Success DXCOMND4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express Common Library 32768 6affa08092f4119767fd135b25631186 ExpressCommon 1.2 Not Signed 2022-07-06 14:52:10 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 991baf5f4b2b1db8262007ccd4446fafb3f41b48 404a8cc0255eb1ce1db2fe0668708484ce499b1cf1b0ab27d8941f47473d6c9929801eacc030fb24159e24491aef9195 723e4d98ffea65d4cd029e5678c4a64232719fc953225f04b138ba0b2e588ab7dca4b61f8e5377731e7fcae60a8c8d19fbd47430f49aed476be5912587ca015e 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:04:04 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
10f86ca48d4a4bbb975aa700c731c3fbe72dd351a60c5f9c660cc27b3165175a [68a202fd73f6d2c0d39cd925] [2] [SYSTEM] [HV-Datsun] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w1kmz4zz.e0v.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T16:27:38Z] [] [] [] [] [172.17.23.222] [172.17.23.222] 1 Success __PSScriptPolicyTest_w1kmz4zz.e0v.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 16:27:38 +0000 UTC 2025-08-17 16:27:38 +0000 UTC 2025-08-17 16:27:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
10ebe6a0312b109a25ec7ee49e67259c3a978954ef2c3f17d9a22bc5ced39037 [68a7177f3667c32a076fb94d] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\Microsoft.Deployment.WindowsInstaller.dll] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\Installs\SSMS-Setup-ENU.exe] [C:\Installs\SSMS-Setup-ENU.exe] [2025-08-21T12:56:22Z] [67d94c27e58f90670d807a9b5c54a3c6] [84748405943ac408b70fe2ba3f5e945073d1c25f] [d793a36091ca2e23067ad41caaf64e7a6ea054b93fb59cf3394acf2761f097131a2937bf76ea289950a109c151be687c] [ffa43a10a24d637318d3d1c6ebb365d7d07f5f984314246a36526af6aa3a53343aa37651316b73df074bed4a38d1d9907059867f0607269bc6bc8228ff5652b2] [172.17.37.230] [172.17.36.114] 1 Success Microsoft.Deployment.WindowsInstaller.dll C:\Program Files (x86)\Varian\KeystoneServer\Services\ 184320 67d94c27e58f90670d807a9b5c54a3c6 Windows Installer XML Toolset 3.8.1128.0 Not Signed 2023-07-27 15:37:02 +0000 UTC 2023-07-27 15:37:02 +0000 UTC 84748405943ac408b70fe2ba3f5e945073d1c25f d793a36091ca2e23067ad41caaf64e7a6ea054b93fb59cf3394acf2761f097131a2937bf76ea289950a109c151be687c ffa43a10a24d637318d3d1c6ebb365d7d07f5f984314246a36526af6aa3a53343aa37651316b73df074bed4a38d1d9907059867f0607269bc6bc8228ff5652b2 2025-03-25 05:01:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
10e5f469650750c7474b3b69bb70e0bf7e1ba02d7992bf570921d0c38a357b7b [68a48674c4cb2500be69263a, 68a48674c4cb2500be69264c] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Extensions.Hosting.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Extensions.Hosting.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:09Z] [cb6f9a8bf1c98f6ab024081679d1d7dc] [d7db34cf5d1cc66f246dc58ed82fdbc80e1d07c3] [7b08635bfdc2a30c9904b932f1fc620f703c1afaa9a7f35ea3dd5eeb3387f588f15247cc4f384e3d81a6d0009ed8a24c] [83583bcb40c37b555e7188a209aa5c8906ba05ed98f0c2df68f25e60f5565b78d81c482091825f76763eb8eac91cc55a8ad140e537ce82b568a3b8110c2c50d8] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Extensions.Hosting.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Serilog.Extensions.Hosting 28160 cb6f9a8bf1c98f6ab024081679d1d7dc Serilog.Extensions.Hosting 4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd Not Signed 2021-11-09 03:00:30 +0000 UTC 2021-11-09 03:00:30 +0000 UTC d7db34cf5d1cc66f246dc58ed82fdbc80e1d07c3 7b08635bfdc2a30c9904b932f1fc620f703c1afaa9a7f35ea3dd5eeb3387f588f15247cc4f384e3d81a6d0009ed8a24c 83583bcb40c37b555e7188a209aa5c8906ba05ed98f0c2df68f25e60f5565b78d81c482091825f76763eb8eac91cc55a8ad140e537ce82b568a3b8110c2c50d8 2025-07-15 14:08:03 +0000 UTC None None 2025-05-12 11:57:16 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-15 14:11:01.183 +0000 UTC
10d3b4be55b51cd7d75db7a6179ea005060ad250fc67f908a2515511e97f6283 [68a18f8e881670216ff01e17] [2] [SYSTEM] [u-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n4vkfj3n.1xw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:15:02Z] [] [] [] [] [172.25.10.9] [172.25.10.9] 1 Success __PSScriptPolicyTest_n4vkfj3n.1xw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:15:02 +0000 UTC 2025-08-17 08:15:02 +0000 UTC 2025-08-17 08:15:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
10b8dc8870d330bca8e2f7ab2a3f366dc0e951964fdaa02fb79a0de8526201b3 [68a3146b5f0c41860c8c84fd, 68a3146b5f0c41860c8c8548] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\weakref.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [672f5710a5c0e63a57e702f409ba87b5] [2c39e50335cb8cfb27988e48cf545ab17dbd2599] [97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342] [40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a] [172.17.252.131] [172.17.252.131] 1 Success weakref.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 31805 672f5710a5c0e63a57e702f409ba87b5 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 2c39e50335cb8cfb27988e48cf545ab17dbd2599 97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342 40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
10a3a0d4b6d46ed74c59a7536a6da062d226d4e1f28392ce89c30f80ffc9f5c8 [68a71d98771132224a617f80] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.CommonUtilities.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [ac896ef2b30378f9cb5b6ff678c262df] [1f6da3f074110b7af3b640f987e8040f2c38c12c] [17250bb6cd75fbada14f5b923c642abf4d87ea4e7e8921268d12cfdf61c03c07d10f003b23e16fb3e22b5f65e5b89d89] [d697b25e23e0b99d5788ea525c6bd1f375b514ae7bca84157cd3a1127bb752684255f088fc2adf14af6407db6cf480630ef92ed45a8101dfe5b13cdca760c23c] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.CommonUtilities.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.CommonUtilities 18944 ac896ef2b30378f9cb5b6ff678c262df VideoOS.Mobile.CommonUtilities 20.2.2516.1 Not Signed 2020-05-11 15:02:06 +0000 UTC 2020-05-11 15:02:06 +0000 UTC 1f6da3f074110b7af3b640f987e8040f2c38c12c 17250bb6cd75fbada14f5b923c642abf4d87ea4e7e8921268d12cfdf61c03c07d10f003b23e16fb3e22b5f65e5b89d89 d697b25e23e0b99d5788ea525c6bd1f375b514ae7bca84157cd3a1127bb752684255f088fc2adf14af6407db6cf480630ef92ed45a8101dfe5b13cdca760c23c 2025-07-16 19:27:14 +0000 UTC None None 2022-05-09 06:51:05 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
102efb3c86bcd94bf10deca9e787ba3c1bb2075279317413a85b785fb519c789 [68a306b93212f6d9ddadcb6e] [2] [SYSTEM] [u-nUHCPaging] [NT AUTHORITY] [C:\Program Files\Npcap\CheckStatus.bat] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T10:55:39Z] [ca8a429838083c351839c258679bc264] [40e20b9cdde036e5078abc2467e8783dfffec199] [3187b73f9f7073d23da97763f887a15d5b101fbbd9fabf04d5ac65e6a65bfda0d07c2eb0ce9a8e715789d78674285146] [b8f50791440832d7d469749213c303c9115144112c0631273ec095d2844d01cb62057f406119460069041a6138341d42a7caa0c34a44185dd75e51e2449445f3] [172.25.22.57] [172.25.22.57] 1 Success CheckStatus.bat C:\Program Files\Npcap\ 815 ca8a429838083c351839c258679bc264 Not Signed 2022-08-18 17:49:28 +0000 UTC 2022-08-18 17:49:28 +0000 UTC 40e20b9cdde036e5078abc2467e8783dfffec199 3187b73f9f7073d23da97763f887a15d5b101fbbd9fabf04d5ac65e6a65bfda0d07c2eb0ce9a8e715789d78674285146 b8f50791440832d7d469749213c303c9115144112c0631273ec095d2844d01cb62057f406119460069041a6138341d42a7caa0c34a44185dd75e51e2449445f3 2025-03-27 15:30:18 +0000 UTC None None 2025-04-07 22:09:02 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-04-10 12:45:51.652 +0000 UTC
100ba8a777f29c39bd511d182240d5779f2ec78d48b344c0b32c4af550ab6242 [68a3b085a65533c1207e5252] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_trmfp0jd.et3.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-18T23:00:14Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_trmfp0jd.et3.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-18 23:00:14 +0000 UTC 2025-08-18 23:00:14 +0000 UTC 2025-08-18 23:00:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0ffa8ca52df3c1c314eff6938435b63edee719cf8d49e070754f828bf4d9152a [68a4864ff17c458cfe4c9f0c] [2] [SYSTEM] [i-niBedV_Prod] [NT AUTHORITY] [C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe] [Servers] [Servers Audit] [v2273] ["C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-19T14:02:43Z] [080059864bbff2e06e9634408e045e62] [34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c] [1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544] [ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0] [172.17.252.225] [172.17.252.225] 1 Success Stryker.Vision.Watchdog.exe C:\Stryker\Stryker Vision\Watchdog\ Stryker.Vision.Watchdog 138752 080059864bbff2e06e9634408e045e62 Stryker.Vision.Watchdog 1.0.0 Not Signed 2024-10-25 19:13:22 +0000 UTC 2024-10-25 19:13:22 +0000 UTC 34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c 1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544 ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0 2025-05-20 14:57:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0fc9daa55d2cc3e8f0c62e8d1d0dd9ea8058c1c1607d056e662217dfdc025b3a [68a6afe50e0f3bd8deac4cec, 68a6afe50e0f3bd8deac4d21, 68a6afe50e0f3bd8deac4d30, 68a6afe50e0f3bd8deac4d4f, 68a6afe50e0f3bd8deac4d6f, 68a6afe50e0f3bd8deac4d8d, 68a6afe50e0f3bd8deac4daf, 68a6afe50e0f3bd8deac4dcf, 68a6afe50e0f3bd8deac4def, 68a6afe50e0f3bd8deac4e0f, 68a6afe50e0f3bd8deac4e2f, 68a6afe50e0f3bd8deac4e4d, 68a6afe50e0f3bd8deac4e6f, 68a6afe50e0f3bd8deac4e8f, 68a6afe50e0f3bd8deac4ec0, 68a6afe50e0f3bd8deac4ecf, 68a6afe50e0f3bd8deac4eef, 68a6afe50e0f3bd8deac4f0f, 68a6afe50e0f3bd8deac4f2f, 68a6afe50e0f3bd8deac4f59, 68a6afe50e0f3bd8deac4f79, 68a6afe50e0f3bd8deac4f99, 68a6afe50e0f3bd8deac4fb9, 68a6afe50e0f3bd8deac4fd9, 68a6afe50e0f3bd8deac4ff9, 68a6afe50e0f3bd8deac5019, 68a6afe50e0f3bd8deac5039, 68a6afe50e0f3bd8deac5059, 68a6afe50e0f3bd8deac5078, 68a6afe50e0f3bd8deac50a4, 68a6afe50e0f3bd8deac50c1, 68a6afe50e0f3bd8deac50e3, 68a6afe50e0f3bd8deac510d, 68a6afe50e0f3bd8deac512d, 68a6afe50e0f3bd8deac514d, 68a6afe50e0f3bd8deac5177, 68a6afe50e0f3bd8deac5197, 68a6afe50e0f3bd8deac51b7, 68a6afe50e0f3bd8deac51d8, 68a6afe50e0f3bd8deac520a, 68a6afe50e0f3bd8deac5220, 68a6afe50e0f3bd8deac5237, 68a6afe50e0f3bd8deac5258, 68a6afe50e0f3bd8deac528c, 68a6afe50e0f3bd8deac52ab, 68a6afe50e0f3bd8deac52cc, 68a6afe50e0f3bd8deac52ec, 68a6afe50e0f3bd8deac530a, 68a6afe50e0f3bd8deac532c, 68a6afe50e0f3bd8deac534c, 68a6afe50e0f3bd8deac536c, 68a6afe50e0f3bd8deac538c, 68a6afe50e0f3bd8deac5392, 68a6afe50e0f3bd8deac53cd, 68a6afe50e0f3bd8deac53d1, 68a6afe50e0f3bd8deac53f2, 68a6afe50e0f3bd8deac5412, 68a6afe50e0f3bd8deac544c, 68a6afe50e0f3bd8deac5454, 68a6afe50e0f3bd8deac5472, 68a6afe50e0f3bd8deac5491, 68a6afe50e0f3bd8deac54b2, 68a6afe50e0f3bd8deac54d2, 68a6afe50e0f3bd8deac54f1, 68a6afe50e0f3bd8deac5512, 68a6afe50e0f3bd8deac5531, 68a6afe50e0f3bd8deac555c, 68a6afe50e0f3bd8deac557b, 68a6afe50e0f3bd8deac559c, 68a6afe50e0f3bd8deac55bc, 68a6afe50e0f3bd8deac55dc, 68a6afe50e0f3bd8deac55fc, 68a6afe50e0f3bd8deac561c, 68a6afe50e0f3bd8deac5647, 68a6afe50e0f3bd8deac566d, 68a6afe50e0f3bd8deac569a, 68a6afe50e0f3bd8deac56ba, 68a6afe50e0f3bd8deac56f2, 68a6afe50e0f3bd8deac56f9, 68a6afe50e0f3bd8deac5733, 68a6afe50e0f3bd8deac573a, 68a6afe50e0f3bd8deac576d, 68a6afe50e0f3bd8deac578c, 68a6afe50e0f3bd8deac57b3, 68a6afe50e0f3bd8deac57c3, 68a6afe50e0f3bd8deac57ee, 68a6afe50e0f3bd8deac5801, 68a6afe50e0f3bd8deac583b, 68a6afe50e0f3bd8deac5844, 68a6afe50e0f3bd8deac586c, 68a6afe50e0f3bd8deac5881, 68a6afe50e0f3bd8deac58b3, 68a6afe50e0f3bd8deac58c4, 68a6afe50e0f3bd8deac58f3, 68a6afe50e0f3bd8deac591f, 68a6afe50e0f3bd8deac5939, 68a6afe50e0f3bd8deac5944, 68a6afe50e0f3bd8deac5964, 68a6afe50e0f3bd8deac599b, 68a6afe50e0f3bd8deac59a3, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeExtractor.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [980a652ea7f8b6002b4f91b97f34af18] [4163c04ec897641768a4a942a5485c511ca124d9] [a118a969a8481df847bb9970182abf1a99a66466338cf52662a2dab7aeccd78bf38d64986d5069fbf6d426e38f69eae7] [525f3ce02f05066c9370961c32f98bd70222a0701e022556262e4ed9a0dd0799246f2dacbb0da3e7623bd5fcce1ab74c9f4c521ab3758696367fdf76c8e927d5] [172.17.30.60] [172.17.30.60] 1 Success AmeExtractor.dll C:\Program Files\Fujifilm\NaxisWS6\ 15641600 980a652ea7f8b6002b4f91b97f34af18 Not Signed 2023-11-03 20:25:42 +0000 UTC 2023-06-16 03:00:51 +0000 UTC 4163c04ec897641768a4a942a5485c511ca124d9 a118a969a8481df847bb9970182abf1a99a66466338cf52662a2dab7aeccd78bf38d64986d5069fbf6d426e38f69eae7 525f3ce02f05066c9370961c32f98bd70222a0701e022556262e4ed9a0dd0799246f2dacbb0da3e7623bd5fcce1ab74c9f4c521ab3758696367fdf76c8e927d5 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
0fc35d2d6afaf1ed0ab607443617599e4b74b79171d41700d5e06c9ad5f9704b [68a5239e621d09b2b1ed5e46] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfiguration.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:32Z] [760728e545154c92a8f96402d642c1d5] [f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac] [226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de] [e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01] [172.17.22.40] [172.17.22.40] 1 Success MonitoringConfiguration.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Data 34816 760728e545154c92a8f96402d642c1d5 Data 1.0.0.0 Not Signed 2023-06-15 02:38:14 +0000 UTC 2023-06-15 02:38:14 +0000 UTC f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac 226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0fc2a2df59b98cdead92680cfa9e0e56d54ae7ac3a0aa35470cf25c46702c7c7 [68a48674c4cb2500be692618, 68a48674c4cb2500be69262e] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.RuleLogic.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [30a991d876163681c6baac37e99f0591] [bb6e8c432d7c814f1164708197af529f0f4e2dc6] [afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71] [68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249] [172.17.252.226] [172.17.252.226] 1 Success StrykerIOTAPI.RuleLogic.dll C:\Stryker\iBed Server Application\Stryker.IOT\ StrykerIOTAPI.RuleLogic 39680 30a991d876163681c6baac37e99f0591 StrykerIOTAPI.RuleLogic 1.0.0 Stryker Corporation 2023-03-16 10:22:38 +0000 UTC 2024-02-15 18:02:06 +0000 UTC bb6e8c432d7c814f1164708197af529f0f4e2dc6 afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71 68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6e2234d3a4ea5751ca873146767f568843a90928bc28eebca49bc165de79973c [68a5c9dc84f2b6dc03121e9a] [2] [SYSTEM] [i-nQS1mgtn] [NT AUTHORITY] [D:\QS1\191\NRX\191006004NRxH.exe] [Servers] [Servers Audit] [v2287.880] [D:\QS1\191\NRX\191006004NRxH.exe D:\QS1\191\NRX -OVERWRITE] [Not Signed] [D:\QS1\QIA\Qia.exe] [D:\QS1\QIA\Qia.exe] [2025-08-20T13:12:53Z] [9c9155b29475b84dbbc5098f01246f2f] [bf3a0754517f9135341015a03bad08b95131f4ea] [263d503e0726f412b0af9d52322b1b7452fc754c17acf8900ca94f08af0025562240ef7e31c7997e382fe2cca499a387] [4d1de78003444e5fab136b6dbd421b7f605be29fa811347ecbb9ad769b70b307922533d3bcfd4fe4185f65b74dd52d66c663738c59cdea2714192ac8db950cf0] [172.17.20.104] [172.17.20.104] 1 Success 191006004NRxH.exe C:\QS1\191\NRX\ PKSFX® Command Line for Windows 43800997 9c9155b29475b84dbbc5098f01246f2f PKSFX® Command Line for Windows 5, 0, 1, 0 Not Signed 2025-07-17 16:15:54 +0000 UTC 2010-10-07 17:14:31 +0000 UTC bf3a0754517f9135341015a03bad08b95131f4ea 263d503e0726f412b0af9d52322b1b7452fc754c17acf8900ca94f08af0025562240ef7e31c7997e382fe2cca499a387 4d1de78003444e5fab136b6dbd421b7f605be29fa811347ecbb9ad769b70b307922533d3bcfd4fe4185f65b74dd52d66c663738c59cdea2714192ac8db950cf0 2025-07-17 16:16:02 +0000 UTC None None 2021-05-10 17:30:39 +0000 UTC 68 3 KNOWN 0 Benign 0.10 2025-07-17 16:17:46.576 +0000 UTC
6e19b707b0a5789b05e3db108b8aabf5c71f57923dc5713740c29f5684db6a74 [68a472a799ad3734d804e2f3] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CmlUiCatalog-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [c46fd5bd0fbfd6d3fd9a4822cd3c5cad] [36f6b268c7f15a1cc1c8e8f7560e12acf277d2ec] [b1bd05eb9b47fe7766c911a6cb5da077677c150a7855a30c0dedc77857a71c7fc55e085879eb96e909841c58adcb844c] [1ab2767e240df8fb19c613a20dae0453589fc052a1282c96221064fbde265257961ce8688a5e4b7b6ffcce30e3b443cabae7218746cc969bfcb4118cf4e63c3d] [172.17.23.146] [172.17.23.146] 1 Success CmlUiCatalog-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\temp\temp370e6ec670be35ca\content-f6ee56d340fd144d\WEB-INF\lib\ 5997 c46fd5bd0fbfd6d3fd9a4822cd3c5cad Not Signed 2025-03-28 16:06:09 +0000 UTC 2021-12-22 05:39:24 +0000 UTC 36f6b268c7f15a1cc1c8e8f7560e12acf277d2ec b1bd05eb9b47fe7766c911a6cb5da077677c150a7855a30c0dedc77857a71c7fc55e085879eb96e909841c58adcb844c 1ab2767e240df8fb19c613a20dae0453589fc052a1282c96221064fbde265257961ce8688a5e4b7b6ffcce30e3b443cabae7218746cc969bfcb4118cf4e63c3d 2025-03-28 16:06:26 +0000 UTC None None 2022-03-17 18:11:49 +0000 UTC 52 0 KNOWN 0 Benign 0.00 2025-04-11 02:03:16.254 +0000 UTC
6ded799728a24a6abd426120e7192d1ce5af4ecb86f36f605d703a0aead15a61 [68a48674c4cb2500be692616, 68a48674c4cb2500be69262c] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.ServiceClient.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [0e468c88955fd864f98ac6f9e1bf50e6] [13cc23e673a7d51e2124ba64e5f9f7727687f0d7] [795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53] [6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73] [172.17.252.226] [172.17.252.226] 1 Success StrykerIOTAPI.ServiceClient.dll C:\Stryker\iBed Server Application\Stryker.IOT\ StrykerIOTAPI.ServiceClient 23816 0e468c88955fd864f98ac6f9e1bf50e6 StrykerIOTAPI.ServiceClient 1.0.0 Stryker Corporation 2023-03-16 10:22:36 +0000 UTC 2024-02-15 18:02:06 +0000 UTC 13cc23e673a7d51e2124ba64e5f9f7727687f0d7 795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53 6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6db5449ee568c1504716f5fa7c1b074a12100b0a5caca2a5f8a02d090f64a14c [68a25fb2e970d941642e7ee3, 68a25fb2e970d941642e7ef0, 68a3b2cf09045b56b2a707bb, 68a3b2cf09045b56b2a707c8, 68a502e12ae1a61fbf4caf19, 68a502e12ae1a61fbf4caf26, 68a65489c4cae84feadc5719, 68a65489c4cae84feadc5726] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\dbatools-maintenance.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z] [e37e067b3a2afc2e41cd2a1f124f4862] [d0f3b393783fe48b1c0d005c2df769a61b68bd28] [bd9aa2eed04604544a3f68904dd5dd21c7558b13db16dff726b5da6a81bd6e728455c12ff6891a023bbbfd6677c5bb3d] [371899b108dde51205255434ec56a5d8af8a0a8c04410e1e692356c7372da97e69b72a10aab1453df3b9ceb500758a6a5d47833f435cd917e915f39375b3230c] [172.17.252.12] [172.17.252.12] 1 Success dbatools-maintenance.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\ 1802 e37e067b3a2afc2e41cd2a1f124f4862 Not Signed 2024-03-28 19:42:26 +0000 UTC 2023-04-10 15:39:06 +0000 UTC d0f3b393783fe48b1c0d005c2df769a61b68bd28 bd9aa2eed04604544a3f68904dd5dd21c7558b13db16dff726b5da6a81bd6e728455c12ff6891a023bbbfd6677c5bb3d 371899b108dde51205255434ec56a5d8af8a0a8c04410e1e692356c7372da97e69b72a10aab1453df3b9ceb500758a6a5d47833f435cd917e915f39375b3230c 2025-08-08 23:00:16 +0000 UTC None None 2024-04-10 17:28:43 +0000 UTC 60 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
6d8ddab3bbac620056a40b6be82e5efedfb813709b61851da809e2ccc5fb30b5 [68a18baf8d4efec2d0bb92e3] [2] [SYSTEM] [i-nIC-HIC-PRD4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bxygly1j.3u1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:58:38Z] [] [] [] [] [172.17.46.252] [172.17.46.252] 1 Success __PSScriptPolicyTest_bxygly1j.3u1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:58:38 +0000 UTC 2025-08-17 07:58:38 +0000 UTC 2025-08-17 07:58:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6d8d84c9c14201674d9a309f51e952cf148ad33cdb66507d9677ebf1b1e4432b [68a5c661c3778510bbc82847] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\DataExportService\updater\Serilog.Sinks.File.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [2025-08-20T12:58:06Z] [4c2b0737d9a73da09172d3c210b0265d] [a35a98ec72154cc1d112f46bd177a7f043dbcd46] [b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0] [c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8] [172.17.20.104] [172.17.20.104] 1 Success Serilog.Sinks.File.dll C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\ Serilog.Sinks.File 28160 4c2b0737d9a73da09172d3c210b0265d Serilog.Sinks.File 4.1.0-master-272085f+272085f4c9440e62448b65829ad35cc3dea15ab1 EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 2023-10-20 19:06:01 +0000 UTC 2023-10-20 19:06:17 +0000 UTC a35a98ec72154cc1d112f46bd177a7f043dbcd46 b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0 c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8 2025-03-24 14:02:17 +0000 UTC None None 2025-03-28 01:13:07 +0000 UTC 73 0 KNOWN 0 Microsoft attested file 2025-04-10 02:18:37.703 +0000 UTC
6d5608ed1ffe605381b7fdaaa1845f721f1c31c27c74b69df9af47d0294b2894 [68a1b61f71b0825b526a1d75] [2] [SYSTEM] [u-nLanSweep1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oq5zqidg.eti.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:59:29Z] [] [] [] [] [172.25.17.127] [172.25.17.127] 1 Success __PSScriptPolicyTest_oq5zqidg.eti.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:59:29 +0000 UTC 2025-08-17 10:59:29 +0000 UTC 2025-08-17 10:59:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6d17c45fe4e843926f5d2728244f860ec044de86259fef8758dd6b2a69a83cbe [68a164af314711b37247c0a2, 68a2b633bc43c5800255e661, 68a408552c9c833f6d66b3fa, 68a559867a66111383e972e5, 68a6ab388907e10b3b3c7b08] [2] [SYSTEM] [i-vpg1a] [NT AUTHORITY] [C:\icm\pcce\cg1A\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [16212c7d9ea08699f15a1a4746990cdd] [5ed1792245fbf6b311b2484bc6a6be49ea35e3d8] [5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c] [821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999] [172.17.196.43] [172.17.196.43] 1 Success purgeold.bat C:\icm\pcce\cg1A\bin\ 410 16212c7d9ea08699f15a1a4746990cdd Not Signed 2021-10-07 20:05:32 +0000 UTC 2021-10-07 20:05:32 +0000 UTC 5ed1792245fbf6b311b2484bc6a6be49ea35e3d8 5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c 821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6c08bc17521b4e491191131a59f6670cea4cfde1602c1e4d68b7d48ade7c0df1 [68a232f86a75868d4aaa6d01] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zxalxqpu.45h.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:52:21Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_zxalxqpu.45h.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:52:21 +0000 UTC 2025-08-17 19:52:21 +0000 UTC 2025-08-17 19:52:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6b423a4e8f11dc5357d1cfa38ee2a42bae87a83126fe3363b4464e5120d33f8c [68a472b1b022648922e235a4] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\sqljdbc-4.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [a99205071acbe2709103b971662992e0] [ecc4bc5c567954cdd1acd3c5985555c8d0355bb0] [c9dd220b83c6838543044a599206f2f9761e3ad9fc177263d2eca7b7274f14f111de6398b3d2886a3baee7f79ec998bb] [96b77340e7bb8abfc5c5fc2e61cd3c9b9242f8b75926191b0f1011f7e065e60cb88554e2b3ad58bb8bb2895a39b7524927d6d16121c747f4992368720425c66a] [172.17.23.146] [172.17.23.146] 1 Success sqljdbc-4.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 584207 a99205071acbe2709103b971662992e0 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC ecc4bc5c567954cdd1acd3c5985555c8d0355bb0 c9dd220b83c6838543044a599206f2f9761e3ad9fc177263d2eca7b7274f14f111de6398b3d2886a3baee7f79ec998bb 96b77340e7bb8abfc5c5fc2e61cd3c9b9242f8b75926191b0f1011f7e065e60cb88554e2b3ad58bb8bb2895a39b7524927d6d16121c747f4992368720425c66a 2025-03-28 16:04:36 +0000 UTC None None 2024-09-18 03:00:14 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
6af5f698601eccacf6393599b96c9f79eccde18f8449701d812f695e369cda55 [68a472a799ad3734d804e2e8] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-svggen-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [edc7e4436781ddfae7a7ac39aef7761f] [53364380c4fb33ba49ddf25a56852bf405f698df] [73ec670565498516b46d93f45abc06014005efc905cd9d5e2dc07f666722aa399b7ed7079dc74762105c4e559bd7cd75] [c2519ddbaab53123a5cbfaa04aa388de71996e1af97d51ccf9bb527ca320d7fe3f0d6d0badff4e8138b3b1b0ec3c150a894c9c06c3845318afbc7466395d5565] [172.17.23.146] [172.17.23.146] 1 Success batik-svggen-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 224908 edc7e4436781ddfae7a7ac39aef7761f Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 53364380c4fb33ba49ddf25a56852bf405f698df 73ec670565498516b46d93f45abc06014005efc905cd9d5e2dc07f666722aa399b7ed7079dc74762105c4e559bd7cd75 c2519ddbaab53123a5cbfaa04aa388de71996e1af97d51ccf9bb527ca320d7fe3f0d6d0badff4e8138b3b1b0ec3c150a894c9c06c3845318afbc7466395d5565 2025-08-19 11:29:20 +0000 UTC None None 2021-05-10 22:57:55 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
6aef072490cee258c32dff646f5e5318c5c7f222116119bcddba3d24ca99c288 [68a4ac67cfad262556985010] [2] [CA_Jnt_DAWS3] [i-hMSFT-ODA] [WVUHS] [C:\Assessments\ADAssessment\run.cmd] [Servers] [Servers Audit] [v2278.870] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T16:51:08Z] [c07996c3ee2580340e0ef67b322a7cab] [0ecd81be989fcff13486833ffe5642dcb8f95d35] [b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f] [246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93] [172.17.23.172] [172.17.23.172] 1 Success run.cmd C:\Assessments\ADAssessment\ 237 c07996c3ee2580340e0ef67b322a7cab Not Signed 2024-08-08 15:51:08 +0000 UTC 2024-08-08 15:51:08 +0000 UTC 0ecd81be989fcff13486833ffe5642dcb8f95d35 b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f 246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93 2025-08-12 16:51:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6a84610ee0fcaa82f8fc0b8c6799775fae29224adcc09328521c70d36559bb38 [68a1a6f6ab9b82ca8e55699b, 68a2f7b2b08830f3e9b0f829, 68a4496619bdd82aa6777765, 68a59b0fee561f972b16e39b, 68a6ecd65406f7e7d86b350f] [2] [SYSTEM] [VM-MICROS] [NT AUTHORITY] [C:\MICROS\Res\Pos\Scripts\Filemain.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\MICROS\Common\Bin\AutoSeqServ.exe] [2025-08-17T09:45:02Z, 2025-08-18T09:45:01Z, 2025-08-19T09:45:02Z, 2025-08-20T09:45:04Z, 2025-08-21T09:45:02Z] [d7c8f1b516611d9ca035742a0f006f04] [ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe] [8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc] [78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a] [172.17.20.133] [172.17.20.133] 1 Success Filemain.bat C:\MICROS\Res\Pos\Scripts\ 11724 d7c8f1b516611d9ca035742a0f006f04 Not Signed 2021-05-27 13:50:45 +0000 UTC 2015-01-16 19:03:22 +0000 UTC ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe 8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc 78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a 2025-08-09 09:45:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6a246071bce4f1e018078a46114367a68ac47c87a95ccc8d8f67825af57fe2c4 [68a1d28de9af155194d2aec4] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\tmpEXO_fw3fz0us.dhn.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T13:00:51Z] [82e97abd23c8de7a9b490694482f33dc] [20a7a80fc89ad6ca536270ef77e7995348376274] [133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405] [e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_fw3fz0us.dhn.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\ 2290479 82e97abd23c8de7a9b490694482f33dc Not Signed 2025-08-17 13:00:49 +0000 UTC 2025-08-17 13:00:49 +0000 UTC 20a7a80fc89ad6ca536270ef77e7995348376274 133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405 e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087 2025-08-17 13:01:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
69c42d8bdb9d71c6edc7232ef03f0414f57586ec996fe3f892b29bbaa698871f [68a306a5ba5832f49fe9cf4b] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\HTMLVPRO.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [2c78a90f451f6c1830050fcda129db9e] [8bdbc299064d759e22c575b8e339c82b41a4d44a] [7e01c558bf73e2bd7b15315ebd03a13fd2d873e1eccda24bd218e8b378092b9eb137cf2acb6bb8a37ebc450b592de70a] [7a585e3e3e2ead2585c3cf1ef23ae8f5369a93a4bcfb9bd33708d447254b4c93d4164470f3be027f742769857fb2f6a90cf38325e95b8090208fcdf67b37626f] [172.17.146.33] [172.17.146.33] 1 Success HTMLVPRO.BPL C:\DICORP\DICORP_V5\RW\APPS\ FrameViewer 753664 2c78a90f451f6c1830050fcda129db9e 1.0.0.0 Not Signed 2022-07-06 14:52:16 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 8bdbc299064d759e22c575b8e339c82b41a4d44a 7e01c558bf73e2bd7b15315ebd03a13fd2d873e1eccda24bd218e8b378092b9eb137cf2acb6bb8a37ebc450b592de70a 7a585e3e3e2ead2585c3cf1ef23ae8f5369a93a4bcfb9bd33708d447254b4c93d4164470f3be027f742769857fb2f6a90cf38325e95b8090208fcdf67b37626f 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:47:04 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
691a1c5b70ebf0b85877f67faa0e3d8ffca23df66e5b70fbc597785a8cc68004 [68a37d0917e07e4b1ee5b6ea] [2] [SYSTEM] [I-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c0pz0nqf.kwc.ps1] [Servers] [Servers Audit] [v2266.863] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T19:20:32Z] [] [] [] [] [172.17.146.25] [172.17.146.25] 1 Success __PSScriptPolicyTest_c0pz0nqf.kwc.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 19:20:32 +0000 UTC 2025-08-18 19:20:32 +0000 UTC 2025-08-18 19:20:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7180b610c1b42f95fcc13a2e684b7abefca30b30f8920a27ccc5546e91696361 [68a3146b5f0c41860c8c853e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\contextlib.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [c7c8787dc599c99b0745a0e0b8518991] [31a5f241f37f656cc0bcd1f7e46ecc135a978a6c] [8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d] [c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea] [172.17.252.131] [172.17.252.131] 1 Success contextlib.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 30502 c7c8787dc599c99b0745a0e0b8518991 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 31a5f241f37f656cc0bcd1f7e46ecc135a978a6c 8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7180409b727c790197b600295cbeb2a6e0ad6c3847727c639eb7f2cdb0d8498b [68a55dba9b5d03e81a1e7635] [2] [SYSTEM] [i-nctx-pvs1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bgtryg2w.3id.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:31:32Z] [] [] [] [] [172.17.146.5] [172.17.146.5] 1 Success __PSScriptPolicyTest_bgtryg2w.3id.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:31:32 +0000 UTC 2025-08-20 05:31:32 +0000 UTC 2025-08-20 05:31:38 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
71770e0be96a94f3c36a7f68b4f629cba2a498ad66e8b55508596b9f250fcfff [68a48674c4cb2500be69263b, 68a48674c4cb2500be69264d] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Extensions.Logging.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Extensions.Logging.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:09Z] [680cea3f3f888a046d8ad7a524259ef1] [98851d705ebfe840b979c4390d1e7a369c4aaea9] [04d44c4874e0f0fe7716747bd3b1445c99f21621b073804d5ea6eab314e566c1981683435777b7e5e46a2b12546a7d16] [ef8526b611c9ad6288549c859acf7f7ec77fc87f3eb2b5d320f0593d035e84fc23e1369c8868844543afa02bc76e59958027ceca29643db6905021efc364d20f] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Extensions.Logging.dll C:\ProgramData\Laurel Bridge Software\Compass\www\ Serilog.Extensions.Logging 17408 680cea3f3f888a046d8ad7a524259ef1 Serilog.Extensions.Logging 3.1.0 Not Signed 2024-08-30 13:04:08 +0000 UTC 2024-08-30 13:04:08 +0000 UTC 98851d705ebfe840b979c4390d1e7a369c4aaea9 04d44c4874e0f0fe7716747bd3b1445c99f21621b073804d5ea6eab314e566c1981683435777b7e5e46a2b12546a7d16 ef8526b611c9ad6288549c859acf7f7ec77fc87f3eb2b5d320f0593d035e84fc23e1369c8868844543afa02bc76e59958027ceca29643db6905021efc364d20f 2025-04-29 13:21:39 +0000 UTC None None 2025-03-28 02:19:23 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-28 23:31:35.896 +0000 UTC
7172f9bd46851da2b13c2a4453b256fd0c20124b9ad8e41a0173a7dbe902061f [68a3408550f756d180107210] [2] [SYSTEM] [DP-Garrett] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vp0ubrbu.dgh.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T15:02:25Z] [] [] [] [] [172.30.48.2] [172.30.48.2] 1 Success __PSScriptPolicyTest_vp0ubrbu.dgh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 15:02:25 +0000 UTC 2025-08-18 15:02:25 +0000 UTC 2025-08-18 15:02:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7141651941e1b1d78a349f0d54ceb767b3846890318b467b8f44fb3d2b5995fe [68a1804bf8ae7dd3df476f07] [2] [postgres] [vm-ASCNEO] [VM-ASCNEO] [C:\Users\postgres\AppData\Local\Temp\pgaABA6.tmp\2_2.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Program Files (x86)\pgAgent\bin\pgagent.exe] [2025-08-17T07:00:01Z] [849739b26d76f1e35ce128f843b7d476] [3ba486d6253348b31f0a4eb255c38bc4a311e2ae] [52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279] [5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7] [172.17.20.9] [172.17.20.9] 1 Success 2_2.bat C:\Users\postgres\AppData\Local\Temp\pgaA9AB.tmp\ 53 849739b26d76f1e35ce128f843b7d476 Not Signed 2025-08-10 07:00:04 +0000 UTC 2025-08-10 07:00:04 +0000 UTC 3ba486d6253348b31f0a4eb255c38bc4a311e2ae 52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279 5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7 2025-08-10 07:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
712eb761bd555f0084bd8bd9050466ea7f8ffe721b77f8391d413576ed6b7062 [68a523a99ba7c92b34976fa1] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.DataGrid.v7.0.XmlSerializers.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:45Z] [2527beb82b6d9eac9edb2af8343cb087] [f09d5a356a790f551d28d93d202f8c6cda9068b3] [4eff932839dae6153a3e616e3c51d55e13f180a9090a9f346a21ec0c07b8853370abc71f14d596f1035040f35861d762] [2b0d8601181e786af04c8719a78494e8cf26a1f6edc37763a44ec01e0e532499269a28945e80dda35946a480e3c180f80599e12c60b229342bf9c6c2ba1a8da6] [172.17.22.40] [172.17.22.40] 1 Success Xceed.Wpf.DataGrid.v7.0.XmlSerializers.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 359424 2527beb82b6d9eac9edb2af8343cb087 7.0.20452.13100 Not Signed 2023-06-15 02:37:34 +0000 UTC 2023-06-15 02:37:34 +0000 UTC f09d5a356a790f551d28d93d202f8c6cda9068b3 4eff932839dae6153a3e616e3c51d55e13f180a9090a9f346a21ec0c07b8853370abc71f14d596f1035040f35861d762 2b0d8601181e786af04c8719a78494e8cf26a1f6edc37763a44ec01e0e532499269a28945e80dda35946a480e3c180f80599e12c60b229342bf9c6c2ba1a8da6 2025-08-20 01:23:53 +0000 UTC None None 2023-12-28 16:34:10 +0000 UTC 69 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
70fa7f0aa2feb397597b2785a4bfdb2c9cd36e0edb51f4f0dfe6ac086290ac86 [68a5c64d54e5003d1abde4c1, 68a5c77e05aa879ada66b41d, 68a5c77e05aa879ada66b423, 68a5c77e05aa879ada66b428, 68a5c77e05aa879ada66b42d, 68a5c77e05aa879ada66b431] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\isrt.dll] [Servers] [Servers Audit] [v2287.880] [] [Macrovision Corporation (Invalid Certificate Chain)] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z] [b35dde51d14f9400e73196693148734e] [9410c5268f5558e57d044780d0d5dcc7aa181299] [373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde] [6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d] [172.17.20.104] [172.17.20.104] 1 Success isrt.dll C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\ InstallShield (R) RunTime DLL 208304 b35dde51d14f9400e73196693148734e InstallShield 12.0 Macrovision Corporation (Invalid Certificate Chain) 2025-07-17 15:57:15 +0000 UTC 2006-05-17 14:21:20 +0000 UTC 9410c5268f5558e57d044780d0d5dcc7aa181299 373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde 6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d 2025-07-17 15:57:20 +0000 UTC None None 2025-04-28 10:02:02 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-17 15:57:43.354 +0000 UTC
7090012578e497459ba0272f5f77ea05b908814dd597eb04ecf09d2c66d08c56 [68a3e79bb5e28efad9fbee2a] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_188db70f606541b88ee2c950bdac4d70.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T02:55:19Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_188db70f606541b88ee2c950bdac4d70.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 02:55:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
702e1f3fedd238eb309fa93c899b2ef80102fa2cda74761f3ee41d67d71f0096 [68a162f2cceea19f4902f63e] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lwo31b0u.sz1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:04:47Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_lwo31b0u.sz1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:04:47 +0000 UTC 2025-08-17 05:04:47 +0000 UTC 2025-08-17 05:04:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
702d6dfdfaf2bb946405b69f52fb90141a13c247618695af4eb7b4b3e1d4ffe0 [68a231c276615c5f335cfe2a] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fdl5e5o.cmj.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:47:10Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_3fdl5e5o.cmj.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:47:10 +0000 UTC 2025-08-17 19:47:10 +0000 UTC 2025-08-17 19:47:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6ff536c7f6ed2e96f08f189984ec0ef5969ec88730b604a463c6cec22e20a9cd [68a16bd60756fe54a9918f8c, 68a2149cb58debea69d7c737, 68a2bd5ff793a9057f329bf3, 68a3663261f8067c48423ea5, 68a40efceddb3a9f1a71a5ee, 68a4b7cd36bc5d38057e2353] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\UIBase.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [9eedaf27cc28bd73c5ff41c49961872d] [6b1abcc8e82fe290522c3bbc48ae7e525aecd356] [d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e] [318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8] [10.20.20.68] [10.20.20.68] 1 Success UIBase.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 2006840 9eedaf27cc28bd73c5ff41c49961872d Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 6b1abcc8e82fe290522c3bbc48ae7e525aecd356 d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e 318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:01:00 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
6fa36b743c48152e494d0ab2d1883621817ce58257ffbbc73994241e079bb356 [68a412e7ad89f01a7d4f2c8f] [2] [SQLSERVERAGENT] [SUNR1MSD] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_qswudxhc.vas.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] [D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] [2025-08-19T06:00:01Z] [956c45ce00aedbd67f024fcd9158dab5] [742e83c7348f268bad8519de65010e007851121d] [1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3] [d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3] [172.24.20.7] [172.24.20.7] 1 Success __PSScriptPolicyTest_qswudxhc.vas.ps1 C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ 80 956c45ce00aedbd67f024fcd9158dab5 Not Signed 2025-08-19 06:00:00 +0000 UTC 2025-08-19 06:00:00 +0000 UTC 742e83c7348f268bad8519de65010e007851121d 1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3 d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3 2025-08-19 06:00:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
6f05081186843f5328ff157cee06745cd568afada812e17939297cb100b649ef [68a306a5ba5832f49fe9cf4a] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STSSCRN.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [f3a991692d902c02f7da0c91d24214b3] [7d24236b7815000c3d1a7df5d10ad1969a6bf537] [b79fe49b5a77196d9f9f5f43669e1ba3e687f3c885f72ab2a064af21a61760c7b3264eb1a14307c18ec1e8df6f0ecf88] [16a84ba52cf9c7cef3579783d6a35ad08551afff82d7f324d8734419c28b2a5e3de9f9c0e1c7bff2d4c31a1e3c346d165cb2ba3fce811ec6fe7bef5ca2049ac9] [172.17.146.33] [172.17.146.33] 1 Success STSSCRN.BPL C:\DICORP\DICORP_V5\SDL\APPS\ 22528 f3a991692d902c02f7da0c91d24214b3 1.0.0.0 Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC 7d24236b7815000c3d1a7df5d10ad1969a6bf537 b79fe49b5a77196d9f9f5f43669e1ba3e687f3c885f72ab2a064af21a61760c7b3264eb1a14307c18ec1e8df6f0ecf88 16a84ba52cf9c7cef3579783d6a35ad08551afff82d7f324d8734419c28b2a5e3de9f9c0e1c7bff2d4c31a1e3c346d165cb2ba3fce811ec6fe7bef5ca2049ac9 2025-05-01 08:09:58 +0000 UTC None None 2015-09-11 03:44:36 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
6ea1a88d5fbe3ac232cf791a85dea3d320507a0ad574f14d8e7f8c38243873a8 [68a1daa4f108115b20f5b273] [2] [jessie.pennington] [PCHBUDGET] [PCH-DOMAIN] [C:\Reboot.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T13:20:37Z] [139e7b4e1efe37732f8e7e18c54f6979] [80b52606828326f14a72dc07ed56794b859d3b1d] [01fdcd22b0edcff6d62f1c8b96dbca5a0562fd18f44a53d354dd5c61352e4bf2350f721bd1384b6459049aca948be9ad] [d311001bb9671a0222579ff4f2e7adf7bc563de3e89c8c886164420fa904b04b16f668f89f82956a0285e3bf7370c36c2553b55cfd8910754cb31c6cc5523431] [10.20.20.116] [10.20.20.116] 1 Success Reboot.bat C:\ 11 139e7b4e1efe37732f8e7e18c54f6979 Not Signed 2018-08-13 13:23:09 +0000 UTC 2018-05-18 13:28:11 +0000 UTC 80b52606828326f14a72dc07ed56794b859d3b1d 01fdcd22b0edcff6d62f1c8b96dbca5a0562fd18f44a53d354dd5c61352e4bf2350f721bd1384b6459049aca948be9ad d311001bb9671a0222579ff4f2e7adf7bc563de3e89c8c886164420fa904b04b16f668f89f82956a0285e3bf7370c36c2553b55cfd8910754cb31c6cc5523431 2025-08-10 13:24:11 +0000 UTC None None 2025-05-21 09:45:58 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-10 13:27:54.314 +0000 UTC
6e9bf94501d732a882f9f6017f1e628d9eec703c87cda857b695201fad5feb4a [68a5cc349d52e7a8b7af63d7] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\Talis\Atlas\temp\SetupDatabase.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:50Z] [f45826be75a820fca461e3877f40f93a] [a039f338905c85ada621455b1333be17f0bafe4a] [7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f] [330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062] [172.17.252.194] [172.17.252.194] 1 Success SetupDatabase.ps1 C:\Talis\Atlas\temp\ 1701 f45826be75a820fca461e3877f40f93a Not Signed 2025-08-20 13:08:55 +0000 UTC 2025-08-20 13:22:28 +0000 UTC a039f338905c85ada621455b1333be17f0bafe4a 7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f 330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062 2025-08-20 13:23:00 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
6e99f8aea61200a8607767bebef8dd852f969d2a1801e29360bdca29220d4bf9 [68a1a186341538f20e730a04] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p4dua1rf.kfd.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:31:41Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_p4dua1rf.kfd.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:31:41 +0000 UTC 2025-08-17 09:31:41 +0000 UTC 2025-08-17 09:31:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7479b24d6a1ad5562f4525b27ae6d7236a46c9933806fb283119ba49a9bcf9f7 [68a5c8eceb9e7b7716dce1fb, 68a5ca39b5df6e9c598d9a0d, 68a5ca39b5df6e9c598d9a1a, 68a5ccf2ddfdba423e488630, 68a5ccf2ddfdba423e48863e, 68a5ccf2ddfdba423e48864c, 68a5ccf2ddfdba423e488659, 68a5ccf2ddfdba423e488666, 68a5ccf2ddfdba423e488673, 68a5ccf2ddfdba423e488680, 68a5ccf2ddfdba423e48868d] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LegacyFindFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [6cb293f0e74ba4f19582fe8086276969] [a5c5cde053bc6283e02ec7837c442eebf7bba8d4] [479d5cc855840f17715d9a131b1edc573e4f4daa52d2bd172f1d70052c1ae6121c45df1f6ae6c4efe88c77ce27a0d2a5] [8881e108e1e82d02c86792edf7ee26d279211daefb1180ba9b31bc610ee65d5c5bf999b23a35770c7e63101c458db35d020a22615a1827dc0156077378ae9ecc] [172.17.252.194] [172.17.252.194] 1 Success LegacyFindFunctions.ps1 C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\ 11279 6cb293f0e74ba4f19582fe8086276969 Not Signed 2024-07-08 16:27:52 +0000 UTC 2024-06-18 17:58:02 +0000 UTC a5c5cde053bc6283e02ec7837c442eebf7bba8d4 479d5cc855840f17715d9a131b1edc573e4f4daa52d2bd172f1d70052c1ae6121c45df1f6ae6c4efe88c77ce27a0d2a5 8881e108e1e82d02c86792edf7ee26d279211daefb1180ba9b31bc610ee65d5c5bf999b23a35770c7e63101c458db35d020a22615a1827dc0156077378ae9ecc 2025-04-16 18:42:30 +0000 UTC None None 2024-08-08 19:43:03 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-16 18:46:05.968 +0000 UTC
74793ee7d4de7bcad44804c194370595b3b0d548bfc828c57576582be19bf54b [68a1aa799d53099ced8133dc] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\highcharts-export-server.cmd] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-17T10:00:00Z] [3ac81a5a7a9c633b48029c9dc507bd9f] [3e480f1ee8bff400c708645833df38ce4fa472fe] [90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213] [cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4] [172.17.252.28] [172.17.252.28] 1 Success highcharts-export-server.cmd C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\ 305 3ac81a5a7a9c633b48029c9dc507bd9f Not Signed 2023-05-16 22:42:52 +0000 UTC 2023-05-16 22:42:52 +0000 UTC 3e480f1ee8bff400c708645833df38ce4fa472fe 90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213 cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4 2025-08-10 10:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
746001b9638c9979966e0b886bcd72105825eabc5c56d9e94521e8afe83fce98 [68a16bd60756fe54a9918faa, 68a2149cb58debea69d7c755, 68a2bd5ff793a9057f329c10, 68a3663261f8067c48423ec3, 68a40efceddb3a9f1a71a60c, 68a4b7cd36bc5d38057e2371] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetDiagnostic.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] [0333571cd1fe94145d29e4f8ee0412b9] [0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663] [b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958] [a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27] [10.20.20.68] [10.20.20.68] 1 Success zNetDiagnostic.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 240440 0333571cd1fe94145d29e4f8ee0412b9 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663 b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958 a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:07:17 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
7424614171a04b6aa96afde3f4cd33390212c11fbbbdbd41498fad6d10439c42 [68a469467f8184e5222e6a4b] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_3ea4d31ef5e647b2b195425324bab514.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:08:34Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_3ea4d31ef5e647b2b195425324bab514.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:08:38 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
738d28284e023240ef65382c74ec40bf9a734d836835c7ef9cb91f97d1fbc3c8 [68a254df0dd861261676462f] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_norjrfd4.bib.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:16:54Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_norjrfd4.bib.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:16:54 +0000 UTC 2025-08-17 22:16:54 +0000 UTC 2025-08-17 22:17:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7344321f0385a0189d641d7a11371524b91327930bb8ebbef2dabd94bdac0ba8 [68a5c661c3778510bbc82848] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\DataExportService\updater\Serilog.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [2025-08-20T12:58:06Z] [5ad091f31cfe9d0e1eb325c09a6440cc] [8655ac00f4eb82dd0c9dc632b02642a3240633b9] [a242a723070ae019854682215ebe1df8c180de33c75b9f076a9140c1e390f047b9ef481b01c079bd5c84c1904d78428f] [0030f47ca6cfc53a0c2038792839e969a7e80a80669b9498b86ce27a34d49b67f530c09e6a20c79ad2e1b5073135edc46cc0665acbb1c9e2327c5d18da0dc1e6] [172.17.20.104] [172.17.20.104] 1 Success Serilog.dll C:\Program Files (x86)\STERIS\SPM Client\ Serilog 126464 5ad091f31cfe9d0e1eb325c09a6440cc Serilog 2.9.0-master-655778f+655778f74384f682d2c8705ab4883c39ef17e44d Not Signed 2023-04-21 21:49:23 +0000 UTC 2023-04-21 21:49:23 +0000 UTC 8655ac00f4eb82dd0c9dc632b02642a3240633b9 a242a723070ae019854682215ebe1df8c180de33c75b9f076a9140c1e390f047b9ef481b01c079bd5c84c1904d78428f 0030f47ca6cfc53a0c2038792839e969a7e80a80669b9498b86ce27a34d49b67f530c09e6a20c79ad2e1b5073135edc46cc0665acbb1c9e2327c5d18da0dc1e6 2025-04-25 13:03:02 +0000 UTC None None 2025-03-28 01:12:55 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-25 04:12:10.57 +0000 UTC
733cd3305f02b6c0121a3e6f3cc04025a974834863f297619ac3721ba9e8745f [68a5c64d54e5003d1abde4c3] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_Isuser.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z] [c4d66e0d850df2f771743721b5b323cb] [f6e1bd2e05df0f6b3601853367db493380ae9630] [0537497989908ece1133221738c7cc2e55056962bbe7b55908fa9c87650394b9fc2ca52e9a6106cfab2b0193b45d1cf8] [ce374d5cfcdd8dc2ec2375e3a457bf36ee899693662662fc7f0572ef54445ca8456c35725f4c0eae0d95f909610d119f6360533da4dcc42a339d2e73b74a551f] [172.17.20.104] [172.17.20.104] 1 Success _Isuser.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\ 32768 c4d66e0d850df2f771743721b5b323cb Not Signed 2025-08-20 12:57:41 +0000 UTC 2001-10-30 15:53:24 +0000 UTC f6e1bd2e05df0f6b3601853367db493380ae9630 0537497989908ece1133221738c7cc2e55056962bbe7b55908fa9c87650394b9fc2ca52e9a6106cfab2b0193b45d1cf8 ce374d5cfcdd8dc2ec2375e3a457bf36ee899693662662fc7f0572ef54445ca8456c35725f4c0eae0d95f909610d119f6360533da4dcc42a339d2e73b74a551f 2025-08-20 12:57:49 +0000 UTC None None 2024-06-05 23:33:49 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-08-20 13:00:50.983 +0000 UTC
72c74ec16b239cedb3a7a5f49ab164080d8b8d6594d6e7674d47f097fc7b81c3 [68a2415acd5be3d52d63a10e] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_msorr1ae.sew.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:53:35Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_msorr1ae.sew.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:53:35 +0000 UTC 2025-08-17 20:53:35 +0000 UTC 2025-08-17 20:53:46 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
728f798cb1a5db0a13cf564ccbd4e4c1ff949fc578a23588a73b2e7a40a91f7f [68a3146b5f0c41860c8c853d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\fnmatch.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [9fac8a18afd37269810c0599d6381114] [c56472c5a615d096fc51a0c8db32ae5c62108803] [69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a] [7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a] [172.17.252.131] [172.17.252.131] 1 Success fnmatch.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 6810 9fac8a18afd37269810c0599d6381114 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC c56472c5a615d096fc51a0c8db32ae5c62108803 69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a 7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7254988b1fc02f7d6881635ab44526a14464e28f16285193d837a2fb007739f8 [68a5c7657732fa5006a7acf1] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\ISSetup.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe] [D:\QS1\QAU\Updates\QAUInst.exe] [2025-08-20T13:02:23Z] [d77b581d7efc817c18fef21d19a2e5f5] [e24e70ce8aa23bb04abbf37ad02411777f6ea6e6] [6fa4e922cd998820e0ee1d51bcc3d687e13674432b26303451711e2eb4c859b88bec5812c2b6c83d07a882dee1f15391] [e394ce9f9d36ae00d6b6725f9743a5f7fc17a47489dfead1a7bc9ed15011a59429aef1b91dbebd784ba19e502946903610e3618e4ff9beb3bd3dca9aacf138a7] [172.17.20.104] [172.17.20.104] 1 Success ISSetup.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\ InstallShield (R) Setup Engine 1547776 d77b581d7efc817c18fef21d19a2e5f5 InstallShield 29.0 Not Signed 2025-08-20 13:02:23 +0000 UTC 2025-08-20 13:02:23 +0000 UTC e24e70ce8aa23bb04abbf37ad02411777f6ea6e6 6fa4e922cd998820e0ee1d51bcc3d687e13674432b26303451711e2eb4c859b88bec5812c2b6c83d07a882dee1f15391 e394ce9f9d36ae00d6b6725f9743a5f7fc17a47489dfead1a7bc9ed15011a59429aef1b91dbebd784ba19e502946903610e3618e4ff9beb3bd3dca9aacf138a7 2025-08-20 13:02:29 +0000 UTC None None 2025-08-07 13:39:23 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 13:05:52.276 +0000 UTC
72529d2bf03fe70ef1a26d7095716aa925bbf5f1f8c3c21fc222ec06eb64dc80 [68a523949cec397f02de9f5a] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GeneralMatrix.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [f3ce9038d536f20980ca83185bd3288e] [20c9e7b48fb5bc776066e5dc8f99f9ca128b006d] [39b600ffc8832eeb79736f5c4811c0961c96c7dbdc1db0a2515fda3a1cd46d14abd4b4c191aef76406512ada6de6e93c] [654a9773276a5ed217d30994214164a22c1a9e2b96d6b57a2998026356840d58159df86a6ae2dc8d98dd5b63278052e34fabb0386d59cf79a593931856a0a980] [172.17.22.40] [172.17.22.40] 1 Success GeneralMatrix.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 45056 f3ce9038d536f20980ca83185bd3288e 1.0.4254.23916 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC 20c9e7b48fb5bc776066e5dc8f99f9ca128b006d 39b600ffc8832eeb79736f5c4811c0961c96c7dbdc1db0a2515fda3a1cd46d14abd4b4c191aef76406512ada6de6e93c 654a9773276a5ed217d30994214164a22c1a9e2b96d6b57a2998026356840d58159df86a6ae2dc8d98dd5b63278052e34fabb0386d59cf79a593931856a0a980 2025-08-20 01:23:32 +0000 UTC None None 2019-06-27 08:06:37 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
7235dc5de7aef8308483b63e2c5c078a90d095ccd5f3156c2ed9ae89b322c9df [68a17c189d49ad1bd9c4b8c8, 68a2cfae9ae51e4be825c7e3, 68a41f348cf879e8d23db673, 68a572add36d57a95b891e67, 68a6c42dc23cc368090acfb2] [2] [WVUHPAN] [U-NPANHS] [HS] [C:\Program Files\Quest Software\Management Shell for AD\userlist.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T06:51:00Z, 2025-08-18T06:51:00Z, 2025-08-19T06:51:01Z, 2025-08-20T06:51:01Z, 2025-08-21T06:51:01Z] [0a26ce7cf2e4c02915e778721ce44a21] [143b0c534fd3539d647dcfaf6a2d108e43af8314] [8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f] [c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d] [172.25.17.205] [172.25.17.205] 1 Success userlist.bat C:\Program Files\Quest Software\Management Shell for AD\ 236 0a26ce7cf2e4c02915e778721ce44a21 Not Signed 2022-05-17 13:21:40 +0000 UTC 2022-05-17 13:21:40 +0000 UTC 143b0c534fd3539d647dcfaf6a2d108e43af8314 8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d 2025-08-09 06:51:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
720267c540897db10c2b6a99b7967f86fcf6d1c0f6fb8a4b39422e38f85e9c69 [68a5239e621d09b2b1ed5e65] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Native.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:40Z] [5136ca4e3d39d8f9ee3870d6cd8e7db3] [f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55] [44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf] [c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490] [172.17.22.40] [172.17.22.40] 1 Success Stanley.PeCommServices.Native.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.PeCommServices.Native 34816 5136ca4e3d39d8f9ee3870d6cd8e7db3 Stanley.PeCommServices.Native 1.0.0.0 Not Signed 2023-06-15 02:36:26 +0000 UTC 2023-06-15 02:36:26 +0000 UTC f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55 44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
71afc8b3a19c1a3353abcff459034fe52f2c0160cd3f895966e196e237039ebd [68a3146b5f0c41860c8c853f] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\bz2.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [05c36e3f33744bd410b3b60ff06437b3] [3bb9bf5aadd0e412054170f05be2eee25e7dcd09] [765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e] [657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53] [172.17.252.131] [172.17.252.131] 1 Success bz2.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 15173 05c36e3f33744bd410b3b60ff06437b3 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 3bb9bf5aadd0e412054170f05be2eee25e7dcd09 765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e 657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
71aa6db07375df25bd85f56968c13ae408973e021ef00026f759544a629c149c [68a164141ed3a862f3f246f5, 68a2b5a2f6e54082fd90f248, 68a40742ca9c58cb5ddb32a1, 68a55680cbba54c28d7a3734, 68a6a823463142474b3bde42] [2] [bunker2] [vm-OSVstats] [WVUH] [C:\Users\bunker2\Desktop\BackUpZbase.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:23Z, 2025-08-18T05:00:23Z, 2025-08-19T05:00:23Z, 2025-08-20T05:00:23Z, 2025-08-21T05:00:23Z] [ff5ef3ef0519c188c726abaf1c67cbfd] [0d51e0760c23673c5aa81be4dca18e7ba8f45e22] [d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba] [5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba] [172.17.251.140] [172.17.251.140] 1 Success BackUpZbase.bat C:\Users\bunker2\Desktop\ 842 ff5ef3ef0519c188c726abaf1c67cbfd Not Signed 2019-11-19 16:02:09 +0000 UTC 2019-12-02 16:07:03 +0000 UTC 0d51e0760c23673c5aa81be4dca18e7ba8f45e22 d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba 5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba 2025-08-09 05:00:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
71899528418198443452afbed990e9e5d84f4e2f9b4711e89293c9ca2bc12ca5 [68a2c20aaafba12a4e8cc590] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mxicw2rz.bqc.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T06:02:43Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_mxicw2rz.bqc.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 06:02:43 +0000 UTC 2025-08-18 06:02:43 +0000 UTC 2025-08-18 06:02:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
784d1aa46b8e65a94b7e1aa0313334ae3050be72c0ddad08686af6ddf4687c79 [68a311cdc2d0d6e3eb77f207] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\ManagedFolderAssistant-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [d70cd1d2313f5bacb6a51a2c0ef09b70] [45164857af19d47125730a74732f7630326beac4] [be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f] [0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff] [172.25.17.86] [172.25.17.86] 1 Success ManagedFolderAssistant-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 10816 d70cd1d2313f5bacb6a51a2c0ef09b70 Not Signed 2025-02-28 16:57:12 +0000 UTC 2025-04-02 20:49:07 +0000 UTC 45164857af19d47125730a74732f7630326beac4 be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f 0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7830b20e1f8ae9e230de3156d17e98207f63cd6c63999ef912d40d4e99fb27a3 [68a311cdc2d0d6e3eb77f216] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-badpasswordsADUserBadPasswords.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [3b8629dc59dc96ce82adf91d1ab03739] [7c3f23fa0bcac45de8bb40e38232e839f03eb158] [e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2] [14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917] [172.25.17.86] [172.25.17.86] 1 Success get-badpasswordsADUserBadPasswords.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 2702 3b8629dc59dc96ce82adf91d1ab03739 Not Signed 2023-03-13 13:11:22 +0000 UTC 2025-06-09 20:40:05 +0000 UTC 7c3f23fa0bcac45de8bb40e38232e839f03eb158 e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2 14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7828bc8e30426a75ceff982346b5fe7b1c717029b0896c4cc7c394a40ec314c0 [68a3146b5f0c41860c8c84ed, 68a3146b5f0c41860c8c854c] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\threading.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [40e4a5f923e5816ab2963846fb674c1e] [c0d26d50e3483ae5651124f6918939ae692f3a7d] [741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732] [23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03] [172.17.252.131] [172.17.252.131] 1 Success threading.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 63210 40e4a5f923e5816ab2963846fb674c1e Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC c0d26d50e3483ae5651124f6918939ae692f3a7d 741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732 23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
77c0199279811333465d5e6a415262894f0b9094771a0107686bddc496a9110a [68a514775cfd115be4b8dbd7] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:18:59Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:19:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
77222e81cb7004e8c3e077aada02b555a3d38fb05b50c64afd36ca230a8fd5b9 [68a2a2b145e54eb8011b598f, 68a3f3b82b0ad9191f472697, 68a545ad1588ee149e3e4b0a, 68a6a04ba1132f2e5ae457de] [2] [jskwv] [I-nMoveItXfer] [WVUHS] [E:\MOVEitTransfer\Util\7z.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [E:\MOVEitTransfer\Util\7z.exe] [E:\MOVEitTransfer\Scheduler\DMZBackup.exe] [2025-08-18T03:39:13Z, 2025-08-19T03:39:19Z, 2025-08-20T03:39:18Z, 2025-08-21T04:20:28Z] [4e35a902ca8ed1c3d4551b1a470c4655] [ad9a9b5dbe810a6d7ea2c8430c32417d87c5930c] [dd80c08d8cb22e3d2592d03c738cf7adb065981e132bdbdd5d6fc60c0d147e7ab213d6eeb8d6eb2a57d5958383cc2ffb] [c7966f892c1f81fbe6a2197bd229904d398a299c53c24586ca77f7f657529323e5a7260ed32da9701fce9989b0b9a2463cd45c5a5d77e56a1ea670e02e575a30] [172.17.253.253] [172.17.253.253] 1 Success 7z.dll C:\Program Files\7-Zip\ 7z Plugin 1841664 4e35a902ca8ed1c3d4551b1a470c4655 7-Zip 23.01 Not Signed 2023-10-30 18:50:02 +0000 UTC 2023-06-20 08:00:00 +0000 UTC ad9a9b5dbe810a6d7ea2c8430c32417d87c5930c dd80c08d8cb22e3d2592d03c738cf7adb065981e132bdbdd5d6fc60c0d147e7ab213d6eeb8d6eb2a57d5958383cc2ffb c7966f892c1f81fbe6a2197bd229904d398a299c53c24586ca77f7f657529323e5a7260ed32da9701fce9989b0b9a2463cd45c5a5d77e56a1ea670e02e575a30 2025-04-11 17:08:54 +0000 UTC None None 2025-04-02 12:10:48 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-11 17:11:21.212 +0000 UTC
7705512d28fbbbbd6d047b1c60856bd3bc9f14ce39412ebd16be6b72d8bf5f7e [68a3439c162cd6949b8bf655] [2] [SYSTEM] [u-nsdprodconn1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cncncost.gsu.ps1] [Servers] [Servers Audit] [v2258.856] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T15:15:34Z] [] [] [] [] [172.25.23.179] [172.25.23.179] 1 Success __PSScriptPolicyTest_cncncost.gsu.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 15:15:34 +0000 UTC 2025-08-18 15:15:34 +0000 UTC 2025-08-18 15:15:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
766f9eeacde29ca3ebe85d8d233775dc8acba7a244dd24bc13896ec23d8c2c84 [68a48674c4cb2500be69260d, 68a48674c4cb2500be692623] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Logging.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [1b4f4c9db2726c138f5ab17aaecd4d45] [a35c56b96b73ff7667988001ac1b4a57ac024b9e] [f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999] [0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Extensions.Logging.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Extensions.Logging 29448 1b4f4c9db2726c138f5ab17aaecd4d45 Serilog.Extensions.Logging 3.1.0 Stryker Corporation 2021-11-02 02:38:50 +0000 UTC 2024-02-15 18:02:03 +0000 UTC a35c56b96b73ff7667988001ac1b4a57ac024b9e f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999 0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
76283fd44fdfd57f2619c0500a5c01ea6d5d7e14f96aa204a9734e25a78f4231 [68a472b1b022648922e23596] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mdnsjava-spi-2.2.0-b4.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [f8795e2b648b09970facf334b5196ddb] [d4c0212e3adb724b53838dcfbe508c68b791e454] [6984e0b8142de518754a9a45dafed6aed31f0253209ac9c7e1503d7ff30a3912a36d09c21340ff9da9a929d35957eecf] [286b3bcce3ed11839fb63172c0f8a416607fd8fc8e5335eef92533c62bdc7ab85d8767b612b04fb62c1993908c4c946018d1ea42172b283647090c483a91f10e] [172.17.23.146] [172.17.23.146] 1 Success mdnsjava-spi-2.2.0-b4.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\posick\mDNS\main\ 10412 f8795e2b648b09970facf334b5196ddb Not Signed 2024-04-05 21:55:13 +0000 UTC 1980-02-01 05:00:00 +0000 UTC d4c0212e3adb724b53838dcfbe508c68b791e454 6984e0b8142de518754a9a45dafed6aed31f0253209ac9c7e1503d7ff30a3912a36d09c21340ff9da9a929d35957eecf 286b3bcce3ed11839fb63172c0f8a416607fd8fc8e5335eef92533c62bdc7ab85d8767b612b04fb62c1993908c4c946018d1ea42172b283647090c483a91f10e 2025-03-28 16:07:06 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 02:28:34.137 +0000 UTC
755edeaf25a424b1e2540116cb002ded313b73da1f426ac79c380a0f5a47d692 [68a3146b5f0c41860c8c8534, 68a3146b5f0c41860c8c8570] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\iterators.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] [94d122a5aa89600a9822e6eecac2470a] [b47d3670867d1edf3170e1871f654699ccdd6558] [b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1] [9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d] [172.17.252.131] [172.17.252.131] 1 Success iterators.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 2824 94d122a5aa89600a9822e6eecac2470a Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC b47d3670867d1edf3170e1871f654699ccdd6558 b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1 9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
74fe5996cba2af0f0d12f3dcb6c8a80a977bd795b4f37f0c62631dd542d77dcb [68a4b0fb13fac5171eeef0d5] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.CustomControls.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:07Z] [6f4525a325cda08abf1b18a472526ee3] [9171e03c1c96b37f539557128a1c32d0d71c9dcf] [b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2] [1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.AlliancePD.UI.CustomControls.dll C:\Program Files (x86)\Cyrun\Alliance 7 Client\ Cyrun.AlliancePD.UI.CustomControls 214528 6f4525a325cda08abf1b18a472526ee3 Pegasus 7.0.4.4644 Not Signed 2019-09-13 20:45:35 +0000 UTC 2025-05-22 18:17:58 +0000 UTC 9171e03c1c96b37f539557128a1c32d0d71c9dcf b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2 1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2 2025-05-22 18:54:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
74f63a755ad1b7cc7ffdbd4d457a311b5fc3c773dc37766c345f749219f527b2 [68a25fb2e970d941642e7ee4, 68a25fb2e970d941642e7ef1, 68a3b2cf09045b56b2a707bc, 68a3b2cf09045b56b2a707c9, 68a502e12ae1a61fbf4caf1a, 68a502e12ae1a61fbf4caf27, 68a65489c4cae84feadc571a, 68a65489c4cae84feadc5727] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\type-extensions.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:12Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z] [838211c05894e640796e49104f1b37a4] [fbcc36198fa33af6404259160ffc57cf8a604f22] [b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810] [6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08] [172.17.252.12] [172.17.252.12] 1 Success type-extensions.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\ 13106 838211c05894e640796e49104f1b37a4 dbatools 2024-03-28 19:42:23 +0000 UTC 2024-03-16 13:33:46 +0000 UTC fbcc36198fa33af6404259160ffc57cf8a604f22 b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810 6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08 2025-08-08 23:00:16 +0000 UTC None None 2024-09-24 17:17:27 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
74e7f5f7c92b26fd056281c791dafc0adc825c46f2be2bb409bc724a5d999be6 [68a2736e6af8de2f97a7ad5a] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_acpxurdw.4re.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T00:27:16Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_acpxurdw.4re.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 00:27:16 +0000 UTC 2025-08-18 00:27:16 +0000 UTC 2025-08-18 00:27:26 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2 [68a472b1b022648922e23581] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-mapper-asl-1.9.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [1750f9c339352fc4b728d61b57171613] [1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7] [d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c] [81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873] [172.17.23.146] [172.17.23.146] 1 Success jackson-mapper-asl-1.9.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 780664 1750f9c339352fc4b728d61b57171613 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7 d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c 81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873 2025-03-28 16:04:26 +0000 UTC None None 2024-08-18 09:17:01 +0000 UTC 66 0 KNOWN 0 Microsoft attested file 2025-04-10 12:40:40.528 +0000 UTC
74b304758f2740e15c3cb9527df68a81ff9e28e90445ec205bf348877535259f [68a523949cec397f02de9f54] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsGUI.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:29Z] [f3bffbe05c98add2b7078000a29f5e76] [8fa6ea825802a4c5104ab136854f7134874d2a56] [0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19] [537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1] [172.17.22.40] [172.17.22.40] 1 Success DiagnosticsGUI.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ GUI 120320 f3bffbe05c98add2b7078000a29f5e76 GUI 1.0.0.0 Not Signed 2023-06-15 02:38:08 +0000 UTC 2023-06-15 02:38:08 +0000 UTC 8fa6ea825802a4c5104ab136854f7134874d2a56 0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19 537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
749002e7e2d66cbc153077e70ef99bab1f03c4286b5e508ae413f4c53fbcb560 [68a2a5a1b819e527e88aea78] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zaxf5awj.to1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T04:01:34Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_zaxf5awj.to1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 04:01:34 +0000 UTC 2025-08-18 04:01:34 +0000 UTC 2025-08-18 04:01:37 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
747a834bd4231d3cf7fa52e9313d5c65887b64533d4b8f563ab5f72357aae059 [68a2410ae6d83d3b939c50d9] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tftt2g0n.emh.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:52:12Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_tftt2g0n.emh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:52:12 +0000 UTC 2025-08-17 20:52:12 +0000 UTC 2025-08-17 20:52:26 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7cf57e422ac38f42c9017cfab4d88db4ae05235fce256c7644a8a98995f37bd9 [68a306a5ba5832f49fe9cf4d] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\POPUPCMP.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [4a6982ceaddf680df01c15c77e8eb3d9] [b56a9d6e11c88e98c291efcac69b22c66985f050] [bfa2345c4c9e7a6f0d65b33ef8e4fdefb8c43c7b5f627320094e8a78ced3d0da1ac20bd329de8a7456043f3caac08e8e] [ac9764932de79a099562304da7ca017ef47b56ba2ff3fc50434d7b1d1c7622c1c26d5144c1de7ed055978998632f5e26bd8727ca00dc16ba551eabc1b81d259e] [172.17.146.33] [172.17.146.33] 1 Success POPUPCMP.BPL C:\DICORP\DICORP_V5\RW\APPS\ 125440 4a6982ceaddf680df01c15c77e8eb3d9 1.12.0.0 Not Signed 2022-07-06 14:52:24 +0000 UTC 2024-09-14 04:02:52 +0000 UTC b56a9d6e11c88e98c291efcac69b22c66985f050 bfa2345c4c9e7a6f0d65b33ef8e4fdefb8c43c7b5f627320094e8a78ced3d0da1ac20bd329de8a7456043f3caac08e8e ac9764932de79a099562304da7ca017ef47b56ba2ff3fc50434d7b1d1c7622c1c26d5144c1de7ed055978998632f5e26bd8727ca00dc16ba551eabc1b81d259e 2025-04-30 20:02:53 +0000 UTC None None 2025-03-21 05:02:20 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
7cc7c1291b2e252bcb756546657d8c00c4f79ca981f28ce37f5c8078a65132d8 [68a3146b5f0c41860c8c8509, 68a3146b5f0c41860c8c855c] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\urllib\__pycache__\parse.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [a500c0a77b51df437e5212a3ccbbca4a] [d8ed3a2e9e061f636a16798d3b66602754a5208d] [369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0] [8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1] [172.17.252.131] [172.17.252.131] 1 Success parse.cpython-313.pyc C:\Program Files\Python\Lib\urllib\__pycache__\ 50297 a500c0a77b51df437e5212a3ccbbca4a Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC d8ed3a2e9e061f636a16798d3b66602754a5208d 369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0 8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7c44f6e2dd5bec1edbd6982fb1e01986327ed9ad9e1ab078d43137cf5358e261 [68a3505955becb8a0ff1a792] [2] [SYSTEM] [i-nCGChaSdb] [NT AUTHORITY] [C:\Affymetrix\dbcleanup\del30d.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T16:00:01Z] [2abe380b66aaa9644c02efe64b7ec488] [d4f82f9d40f820fb58a6fd075507ec36fcb8a897] [4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff] [2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa] [172.17.250.114] [172.17.250.114] 1 Success del30d.ps1 C:\Affymetrix\dbcleanup\ 153 2abe380b66aaa9644c02efe64b7ec488 Not Signed 2024-10-02 19:44:08 +0000 UTC 2024-10-02 19:50:57 +0000 UTC d4f82f9d40f820fb58a6fd075507ec36fcb8a897 4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff 2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa 2025-08-11 16:00:12 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
7b997c3cc74d393501497378b3f9012e85446d45990a040bee7862fa2d512520 [68a311cdc2d0d6e3eb77f21d] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\Set-MSOLUser-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:49Z] [64c78cb84a34c1aac1f9040f9b3fa98c] [5412398356155b4fa91298e55f818b7817fac6b1] [843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb] [b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca] [172.25.17.86] [172.25.17.86] 1 Success Set-MSOLUser-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 5935 64c78cb84a34c1aac1f9040f9b3fa98c Not Signed 2025-08-08 16:20:08 +0000 UTC 2025-08-08 16:20:13 +0000 UTC 5412398356155b4fa91298e55f818b7817fac6b1 843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7b91d127ab813bedce31cf44c9d0bb338d1e5dbb7c4d88a4a5f9596cb927c7f6 [68a5cc2ad273577648d7017b] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:44Z] [8afad2ba62831ccf1afb549e35a2b1bf] [2446f2b1eb95bb93555f1a32943d542757ac10ae] [7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1] [50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2] [172.17.252.194] [172.17.252.194] 1 Success c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1 C:\_work_devops_mdi\_temp\ 854 8afad2ba62831ccf1afb549e35a2b1bf Not Signed 2025-08-20 13:22:44 +0000 UTC 2025-08-20 13:22:44 +0000 UTC 2446f2b1eb95bb93555f1a32943d542757ac10ae 7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1 50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2 2025-08-20 13:22:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7b2434ec93f042d8373bd3cf763874ab9c43420543ed120001278db17adf9da6 [68a37f25e0879ae8dffd5e04] [2] [SYSTEM] [i-nctxddc-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2ivls3f0.sja.ps1] [Servers] [Servers Audit] [v2267.864] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T19:29:37Z] [] [] [] [] [172.17.146.23] [172.17.146.23] 1 Success __PSScriptPolicyTest_2ivls3f0.sja.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 19:29:36 +0000 UTC 2025-08-18 19:29:36 +0000 UTC 2025-08-18 19:29:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7b161486f98073b5ca3ae0e3e7f27c8f566ab06f8ad799373d2e403cc733db20 [68a4ccc785b914a60d739e4e, 68a4ce1fc826337212f53beb, 68a4d07753a851daf11e6936, 68a4d07753a851daf11e694b, 68a4d2d1ff2b441b8442812e, 68a4d2d1ff2b441b84428143] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\NamedCapture.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [13d4e8065c076cc03ca0b66f2f009cb2] [08256197d2405a47f7154f36728228bb13613f5e] [57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c] [019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c] [10.36.132.49] [10.36.132.49] 1 Success NamedCapture.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\ 12288 13d4e8065c076cc03ca0b66f2f009cb2 Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:46 +0000 UTC 08256197d2405a47f7154f36728228bb13613f5e 57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c 019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7a24379c01420760711ad0a08f28f46d6a397601f0b51a4e48b96cffa037dd01 [68a34b98a6132bf659cce5c5, 68a34df0b71eea1289980a2a] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataExchange.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:46Z, 2025-08-18T15:58:46Z] [50ea916f234c0715695ee3289f2ed436] [6a0449cf6f27497d7e3e65c86b275f6b5775f3cc] [3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf] [a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.DataExchange.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Data Exchange Packages 1126912 50ea916f234c0715695ee3289f2ed436 Access It! 10.1.0.7 Not Signed 2023-04-26 15:03:08 +0000 UTC 2023-04-26 15:03:08 +0000 UTC 6a0449cf6f27497d7e3e65c86b275f6b5775f3cc 3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a 2025-05-13 05:13:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7a036e3a324a555202141726993e8c9be46eae5d5025047d59729b1179f3e30a [68a1590fe3d1de03981d3cb9] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1yfzzf3t.n2s.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:22:31Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_1yfzzf3t.n2s.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:22:31 +0000 UTC 2025-08-17 04:22:31 +0000 UTC 2025-08-17 04:22:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
79ee9c9c5f8d352a018fdbfcf7a6b43bd929f0d2fb548332fb4b3eb59bc5a180 [68a166cbe2103169f36aaa4c, 68a2b85683c75b2a7728df23, 68a409fc2e5c970cd67b61bc, 68a55b98a62710d4188bf96a, 68a6adaea7a15af4366099af] [2] [SYSTEM] [vm-UHCcbord] [NT AUTHORITY] [C:\cbordwin\CBORDEOD.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:15:01Z, 2025-08-18T05:15:01Z, 2025-08-19T05:15:01Z, 2025-08-20T05:15:01Z, 2025-08-21T05:15:01Z] [d1f95b9724125a1c5f984fb1d1bc62d8] [be6d615c8334ff3e05fd27e3343f643770bf2e1f] [543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b] [121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700] [172.17.252.44] [172.17.252.44] 1 Success CBORDEOD.bat C:\cbordwin\ 1923 d1f95b9724125a1c5f984fb1d1bc62d8 Not Signed 2018-08-07 19:56:21 +0000 UTC 2018-08-07 19:57:34 +0000 UTC be6d615c8334ff3e05fd27e3343f643770bf2e1f 543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b 121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700 2025-08-09 05:15:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
79464f4def37e5ba9e14652ce241f8f4ec97e70a54e49a0b13962298d861da62 [68a1f536f0fc96497865c3dc] [2] [NETWORK SERVICE] [i-nnvrpms] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_u4u2h52q.o3j.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T15:28:42Z] [] [] [] [] [172.17.251.112] [172.17.251.112] 1 Success __PSScriptPolicyTest_u4u2h52q.o3j.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 15:28:42 +0000 UTC 2025-08-17 15:28:42 +0000 UTC 2025-08-17 15:28:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7914a284be2811ffbc318ac97a2f6c21a503fadfcb460e81828ca0551dac35c0 [68a311cdc2d0d6e3eb77f20a] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\PasswordExpirationDate.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [714d7d166b1ea948977b99df67d8c1b3] [aa5398703aefacd2b30922cfda05af62e8343765] [d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b] [343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c] [172.25.17.86] [172.25.17.86] 1 Success PasswordExpirationDate.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 1386 714d7d166b1ea948977b99df67d8c1b3 Not Signed 2021-11-18 18:17:21 +0000 UTC 2025-04-29 12:08:30 +0000 UTC aa5398703aefacd2b30922cfda05af62e8343765 d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b 343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
790685b721f1c02822e2c39c904ab990c088e6bf2934eacf9869129b18b201a7 [68a4d180b5900ae066920596] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:33:10Z] [56c6d95ae5e68a0aa0da6568a48cd047] [dcbd5930f6e52a715078f6ae99900819b3d5d1c3] [ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72] [0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 2786 56c6d95ae5e68a0aa0da6568a48cd047 Not Signed 2025-08-19 19:33:06 +0000 UTC 2025-08-19 19:33:10 +0000 UTC dcbd5930f6e52a715078f6ae99900819b3d5d1c3 ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72 0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f 2025-08-19 19:33:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
78ff80c56cd05df151c06670f6d96dcd5c6ee72ca66bcc647a12f9d7814c3408 [68a1a83ff1b55f2ff337408c] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-17T10:00:28Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-17 10:00:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
78ea84d1d8dce7c6aa98d780ca6d76471088ad619f5f2af500c937960d19dd2d [68a523949cec397f02de9f4c] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Caliburn.Micro.Platform.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:27Z] [100db51fbb7d610e6d04f9a0f4ed277f] [70961916a18a282844edf0140d0ae353fbd8f111] [c929634b793eb4d8fbf319037bbdee03d2a1ff937a11895888c1ec43e2d1f63fcce4b50f533a69078b9985103d119528] [919c6b4858ae8fd889fca7eaac317e88a42ea657f122254d2abc5ed706496cdf8f04b191cd621b7830127fe520978446751feb3a2de95497b5bff755efdf2a5d] [172.17.22.40] [172.17.22.40] 1 Success Caliburn.Micro.Platform.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Caliburn Micro Platform 83968 100db51fbb7d610e6d04f9a0f4ed277f Caliburn.Micro 2.0.1.0 Not Signed 2023-06-15 02:37:26 +0000 UTC 2023-06-15 02:37:26 +0000 UTC 70961916a18a282844edf0140d0ae353fbd8f111 c929634b793eb4d8fbf319037bbdee03d2a1ff937a11895888c1ec43e2d1f63fcce4b50f533a69078b9985103d119528 919c6b4858ae8fd889fca7eaac317e88a42ea657f122254d2abc5ed706496cdf8f04b191cd621b7830127fe520978446751feb3a2de95497b5bff755efdf2a5d 2025-08-20 01:23:32 +0000 UTC None None 2024-02-15 14:03:11 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af [68a72d39787594c630b4edf2] [2] [sk10219sa] [n-sktartarus] [WVUHS] [C:\Users\sk10219sa\AppData\Local\Temp\2\nss2F7A.tmp\System.dll] [Servers] [Servers Audit] [v2324.910] [] [Not Signed] [E:\Notepad++Portable\Notepad++Portable.exe] [C:\Windows\explorer.exe] [2025-08-21T14:23:05Z] [bf712f32249029466fa86756f5546950] [75ac4dc4808ac148ddd78f6b89a51afbd4091c2e] [d72ed7f5cc1073dde684e416e2edc388d61996455a930b2c909e6baa3e9bde67bb87fc81e47090349629a68668b30208] [13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4] [172.17.20.94] [172.17.20.94] 1 Success System.dll C:\Users\SVC_SL_Heartbase\AppData\Local\Temp\14\nsiB7FC.tmp\ 11264 bf712f32249029466fa86756f5546950 Not Signed 2025-05-16 13:12:27 +0000 UTC 2025-05-16 13:12:27 +0000 UTC 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e d72ed7f5cc1073dde684e416e2edc388d61996455a930b2c909e6baa3e9bde67bb87fc81e47090349629a68668b30208 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4 2025-05-16 13:12:31 +0000 UTC None None 2025-05-13 00:19:16 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-16 03:11:30.728 +0000 UTC
7f1c7a6dd39bd07d8bb63423b0a1a20c1a21ad1049160828ab2d4526e49937ec [68a3209bdb4bb30ce9fad5ab] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\aigevikz\aigevikz.dll] [Servers] [Servers Audit] [v2251.850] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T12:46:12Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success aigevikz.dll C:\Users\georgemag\AppData\Local\Temp\aigevikz\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 12:46:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7ee90d2d178643fa86a91c933bb12080aad0ea0b7399ef08f6045a4841c54372 [68a3146b5f0c41860c8c8521] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\getopt.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z] [36b1336ce751d7a3a4f98ed3688bd5b8] [4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc] [864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc] [1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52] [172.17.252.131] [172.17.252.131] 1 Success getopt.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 8470 36b1336ce751d7a3a4f98ed3688bd5b8 Not Signed 2024-11-22 22:08:49 +0000 UTC 2024-11-22 22:08:49 +0000 UTC 4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc 864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc 1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7ea93b4fc21f3d05ed224b168a025f864db75ddfddc2343e1ec29a386d7501e0 [68a472b1b022648922e23592] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\logkit-1.0.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [32240100a5c15d53f00392fae4b0aab7] [aaf5649b523c5ffc925e746074979150bb74bfdc] [4b9d12b3f64a98e7a67d13f267be802868451a3fd37078f55b00a3e9a98649483af908061ba960a1864abbd73273bcb2] [0983fdb8875495d5f5e6c18ed78140134b9987d2a1c73ead1a973a97556cbe0993448c91f4656525a035b50aeb113d3e47eac9518472b92fcb9183299024535d] [172.17.23.146] [172.17.23.146] 1 Success logkit-1.0.1.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 72150 32240100a5c15d53f00392fae4b0aab7 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC aaf5649b523c5ffc925e746074979150bb74bfdc 4b9d12b3f64a98e7a67d13f267be802868451a3fd37078f55b00a3e9a98649483af908061ba960a1864abbd73273bcb2 0983fdb8875495d5f5e6c18ed78140134b9987d2a1c73ead1a973a97556cbe0993448c91f4656525a035b50aeb113d3e47eac9518472b92fcb9183299024535d 2025-08-19 11:29:31 +0000 UTC None None 2024-07-16 03:42:19 +0000 UTC 67 0 KNOWN 0 Microsoft attested file 2025-08-19 11:30:19.65 +0000 UTC
7e88c063db7d11cc81424ad3a0b79439a708466a41d2515d39f435460a90ac6f [68a311cdc2d0d6e3eb77f214] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [04134a765a6766b8ccc33ab7b76c6484] [a05c6df7ded795af80ad78b3109bf6c2456c4cf4] [e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19] [6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384] [172.25.17.86] [172.25.17.86] 1 Success GP-Result.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 549 04134a765a6766b8ccc33ab7b76c6484 Not Signed 2021-11-18 18:17:21 +0000 UTC 2021-07-15 21:19:57 +0000 UTC a05c6df7ded795af80ad78b3109bf6c2456c4cf4 e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19 6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7e758ba1138fda4c2f6fe3d1dbf13865768509733a2b21297cb1854cdb41c3eb [68a1e01c3977fb58c6e176eb] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mksrzrw0.jcw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:58:47Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_mksrzrw0.jcw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:58:47 +0000 UTC 2025-08-17 13:58:47 +0000 UTC 2025-08-17 13:58:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7e5ec9321797b7625a95073957004b3dbf6bb68dbe150739d70c989bd0fc30d4 [68a2055f52291ed98e81a02b] [2] [SYSTEM] [HV-Datsun] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ywzhivlf.tki.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T16:37:42Z] [] [] [] [] [172.17.23.222] [172.17.23.222] 1 Success __PSScriptPolicyTest_ywzhivlf.tki.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 16:37:42 +0000 UTC 2025-08-17 16:37:42 +0000 UTC 2025-08-17 16:37:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7e17cb2b9e2e5ac4b1f09011ecbbaf0650c23af74a9e04bc8e97cab19aa4e77c [68a33f3383e5334c1360eeb1] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_4ixogztp.vvu.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\RuntimeBroker.exe] [2025-08-18T14:56:41Z] [] [] [] [] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_4ixogztp.vvu.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\ 81 Not Signed 2025-08-18 14:56:41 +0000 UTC 2025-08-18 14:56:41 +0000 UTC 2025-08-18 14:56:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7e0882a76f59ed7dfc50b00936cc59d70148553daededad2c7f5423314e503a8 [68a472b1b022648922e23594] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mariadb-java-client-2.6.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [eed38aea7aa8cdda688482f0fccb9654] [7ada3fc7b30ae8fa4616f47ef6d505bdda933605] [c58e0134c6a0233ff5adeb0f802b62c1a167129249b60632f7534b3c634204ddb1c165009fb6b1fe8b4bf86abd60656f] [de7d72879ea70bdb35ff3f48f52d0634c304560c81fd59a3a0260b781a0029c84bc3195dc7d06c355b55c11729abc2ec4995a555cf09b282c61947a8fde230e9] [172.17.23.146] [172.17.23.146] 1 Success mariadb-java-client-2.6.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 619873 eed38aea7aa8cdda688482f0fccb9654 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 7ada3fc7b30ae8fa4616f47ef6d505bdda933605 c58e0134c6a0233ff5adeb0f802b62c1a167129249b60632f7534b3c634204ddb1c165009fb6b1fe8b4bf86abd60656f de7d72879ea70bdb35ff3f48f52d0634c304560c81fd59a3a0260b781a0029c84bc3195dc7d06c355b55c11729abc2ec4995a555cf09b282c61947a8fde230e9 2025-03-28 16:04:26 +0000 UTC None None 2024-11-26 10:10:29 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
7dc13844e4547fa30201c20b6d74c6793d5b991668bded176f8162b00a211d55 [68a472b1b022648922e235a9] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\streambuffer-1.5.4.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [7950b1c391083448c8db4e5d574953c2] [fa88707c78bb5f1e5dff5149622625acaa9c6682] [5335b13c467658fbf5abe24147b17babbad914367fe30610f5102648b81dbd0ba5776d6afa47c6d1bf8aa43837441639] [3db8ba0e67cf09bb1904fbfb9cc0be55df203295d194d6d5a5617357f51ee7adf374d6103e5a238cb7cf6211fd0142bce0855bec6d862f691f5ee1ff3caf6e1a] [172.17.23.146] [172.17.23.146] 1 Success streambuffer-1.5.4.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\streambuffer-1.5.4.jar-54116a8f49fa6e4d\ 68619 7950b1c391083448c8db4e5d574953c2 Not Signed 2025-03-28 16:06:15 +0000 UTC 2025-03-28 16:06:15 +0000 UTC fa88707c78bb5f1e5dff5149622625acaa9c6682 5335b13c467658fbf5abe24147b17babbad914367fe30610f5102648b81dbd0ba5776d6afa47c6d1bf8aa43837441639 3db8ba0e67cf09bb1904fbfb9cc0be55df203295d194d6d5a5617357f51ee7adf374d6103e5a238cb7cf6211fd0142bce0855bec6d862f691f5ee1ff3caf6e1a 2025-03-28 16:06:36 +0000 UTC None None 2025-02-05 22:12:51 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
7d974abbff9ea70a534d75c24d021d96fc2d36fbef86539a7c32df8e99f11e9f [68a3146b5f0c41860c8c8543] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\tempfile.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [7ab5aff3fa2b1f285db5557e42243465] [ddfb6e39237347e33458183d7540eeef606d7ef9] [e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2] [477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3] [172.17.252.131] [172.17.252.131] 1 Success tempfile.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 40711 7ab5aff3fa2b1f285db5557e42243465 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC ddfb6e39237347e33458183d7540eeef606d7ef9 e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2 477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7d5e9a20509b1f9b8652b028a40c115f293d2cdc1f6e76bacf3ce5b19e82de32 [68a472a799ad3734d804e2d9] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-anim-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:35Z] [26d4eb525ef2e0f0c16998346dd92112] [639288c6a28f0efcfea84ebb17e50f189a22e3e8] [c6dc293d08a59ba26cca12f076bc5167b3d5c67a1f7b3bc1651fe7e15b7c68be836327be2b7909c349586926bd637fcb] [57e2dfecfbd214e57e5f4edfe86e2b856092fa3e3fbcfbce41033f8d206899700270791e469578f6a10041f0122564036912dad3c4beee04dfdb91a0029c6889] [172.17.23.146] [172.17.23.146] 1 Success batik-anim-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 479193 26d4eb525ef2e0f0c16998346dd92112 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 639288c6a28f0efcfea84ebb17e50f189a22e3e8 c6dc293d08a59ba26cca12f076bc5167b3d5c67a1f7b3bc1651fe7e15b7c68be836327be2b7909c349586926bd637fcb 57e2dfecfbd214e57e5f4edfe86e2b856092fa3e3fbcfbce41033f8d206899700270791e469578f6a10041f0122564036912dad3c4beee04dfdb91a0029c6889 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:00:06 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
7d5cb2ca9517d0abb090d033d3861aef472e348e6e0887bb8c33a9646074056b [68a3146b5f0c41860c8c8506, 68a3146b5f0c41860c8c852c] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\re\__pycache__\_casefix.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [d0128e493756c7a62e9dd29cfac89d8c] [cad9e3b8221f00371ba6e19dd31a01bab2f2ddda] [74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee] [40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee] [172.17.252.131] [172.17.252.131] 1 Success _casefix.cpython-313.pyc C:\Program Files\Python\Lib\re\__pycache__\ 1824 d0128e493756c7a62e9dd29cfac89d8c Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC cad9e3b8221f00371ba6e19dd31a01bab2f2ddda 74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee 40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7d55249e54c24ac0fec23c3cee31809ddac6b79c9b79941fbbb566d93c3348a6 [68a42c746d8e3c910ac20520] [2] [SYSTEM] [uvOSCCN2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jnw042yi.z53.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T07:49:00Z] [] [] [] [] [172.25.18.157] [172.25.18.157] 1 Success __PSScriptPolicyTest_jnw042yi.z53.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 07:49:00 +0000 UTC 2025-08-19 07:49:00 +0000 UTC 2025-08-19 07:49:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7d22c23100d268ff338fc8cec1489d8f9f199d15ab50fcb8dfac74133eeaeabc [68a4e94b8258ccd0ca80c68b, 68a4ec0d73c037b116f16923, 68a4f0bd96d8259b6fb14197, 68a4fcd0011d94a251a4ef39, 68a4fcd0011d94a251a4ef44, 68a4fcd0011d94a251a4ef46] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\DeployOpenVpn.bat] [Servers] [Servers Audit] [v2283, v2284.877, v2284] [] [Not Signed] [C:\Users\CA_gs10109\AppData\Local\Temp\2\{6D2A95DD-7878-4173-A054-2C5C8E3A05BA}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{F27E6C83-3351-4D92-A677-9892A6651C41}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\SysWOW64\cmd.exe, C:\Windows\Temp\{D464CC00-C9E1-418A-9BDB-FEE337D77CB0}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe] [C:\Windows\System32\svchost.exe, C:\Windows\Temp\{0AF13D10-A131-4644-8F46-345A8CF1F7F1}\.cr\Capsule_MDIP_software_Setup_11.8.0.328 (1).exe, C:\Windows\Temp\{2D0EBECB-0573-490E-BE9B-5F2DF93F480D}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{D7DDC242-26E7-40BC-AA59-F0A084047FD5}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe, C:\Windows\Temp\{4E1205BB-A26B-4AD2-B6F7-7F2CCF9E40F7}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{3DC0FF38-2812-41C0-94A3-517D5D56E856}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe] [2025-08-19T21:14:48Z, 2025-08-19T21:19:32Z, 2025-08-19T21:41:39Z, 2025-08-19T22:11:25Z, 2025-08-19T22:18:26Z, 2025-08-19T22:27:20Z] [89d5d6522ae6f716bdc080b6b9b05004] [c6e0eb411752855eab2334c14bc998465cc9b1b9] [3e52c7ed45a5e449a58387f36187ef681b8e988c1ae9718e737693abfef77dd42072bff1bf53785c6011eaf8b10cacd7] [f9eee002e42e399039606a177bc42b4bc75a367c9a48461f7faad9633f53affd65ac212a7c6df8da81d305e322847498082ef438ab972fbe5336250fcb370fe7] [172.17.23.18] [172.17.23.18] 1 Success DeployOpenVpn.bat C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\ 165 89d5d6522ae6f716bdc080b6b9b05004 Not Signed 2024-11-12 21:43:14 +0000 UTC 2024-11-12 21:43:14 +0000 UTC c6e0eb411752855eab2334c14bc998465cc9b1b9 3e52c7ed45a5e449a58387f36187ef681b8e988c1ae9718e737693abfef77dd42072bff1bf53785c6011eaf8b10cacd7 f9eee002e42e399039606a177bc42b4bc75a367c9a48461f7faad9633f53affd65ac212a7c6df8da81d305e322847498082ef438ab972fbe5336250fcb370fe7 2025-08-19 21:14:51 +0000 UTC None None 2024-12-05 13:26:47 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
7d031d09ec40cf9cfeb3455f9199da3e3f8b827cc4053d65f0a9ed878513cfe1 [68a3151a330e1d8c3da80971] [2] [SYSTEM] [i-vmBKRIM] [NT AUTHORITY] [E:\Instrument Manager\Drivers\diietldlservice.exe] [Servers] [Servers Audit] [v2248.849] ["E:\Instrument Manager\Drivers\diietldlservice.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-18T11:51:23Z] [fa5ed12d9b5b2d41eed634a630122413] [4afc7da9ab03e35ccdeb5a627579699df806659c] [01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794] [66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2] [172.17.20.8] [172.17.20.8] 1 Success diietldlservice.exe E:\Instrument Manager\Drivers\ Data Innovations LLC Lab GPS 78336 fa5ed12d9b5b2d41eed634a630122413 Instrument Manager 8.15.0008 Not Signed 2024-10-03 15:35:11 +0000 UTC 2024-09-18 13:42:01 +0000 UTC 4afc7da9ab03e35ccdeb5a627579699df806659c 01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794 66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2 2025-07-17 13:02:34 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7cf7f652203cae7698ca99e9703b5496440c0dab2a04f5376c702809ebced958 [68a5c81947601aee5f76e911, 68a5c9d7599432010e418bcb] [2] [SYSTEM, SVC_SL_RedSailTech] [i-nQS1mgtn] [NT AUTHORITY, WVUHS] [D:\QS1\ltkrn14N.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe] [C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe] [2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z] [7c12b813c50ac921c0f64da920267066] [273df296aa8874f73aa1d64c36d9f1878b43da0c] [97a907d4c5c8c5356e82ff4dc4f636324944ca41de730b329213f6d461f9d2257b885f51e89f7994111ffadc3b7bd1ba] [0fd40ed7037dd10f3859986c302438495a7da4c84b121f96cdaf1aa244d2c4b29c962be0facf0f8c2cad2a6ef5e0bd58e9e0c992998242977294bfb1e44d3fbf] [172.17.20.104] [172.17.20.104] 1 Success ltkrn14N.dll C:\QS1\ LEADTOOLS(r) DLL for Win32 434176 7c12b813c50ac921c0f64da920267066 LEADTOOLS(r) DLL for Win32 14.5.0.013 Not Signed 2025-07-17 16:13:27 +0000 UTC 2006-06-03 01:21:02 +0000 UTC 273df296aa8874f73aa1d64c36d9f1878b43da0c 97a907d4c5c8c5356e82ff4dc4f636324944ca41de730b329213f6d461f9d2257b885f51e89f7994111ffadc3b7bd1ba 0fd40ed7037dd10f3859986c302438495a7da4c84b121f96cdaf1aa244d2c4b29c962be0facf0f8c2cad2a6ef5e0bd58e9e0c992998242977294bfb1e44d3fbf 2025-07-17 16:15:22 +0000 UTC None None 2024-05-09 09:17:14 +0000 UTC 71 1 KNOWN 0 Benign 0.20 2025-07-17 16:17:46.576 +0000 UTC
8440cba619a5284877ee26a04c0fdda396a4b26dcab455b97cf6c12be5daa77d [68a472b1b022648922e2359c] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\policy-2.7.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [7ea0968c0619c6e5c467da202c36c07d] [fd229ae6c09af1a72105f8d43c6911b0ddccbc79] [3d0ba3475d94fcdc46392a132b3fcbc90ca5974124278a955261b54a048358550079e1711f3d95af7bc3ade1460da63c] [689901832b9d614852191d0376a6517380b45e05fb9844fb03222a208edb755d81ed7ed1a0428efaa3ceca84c687e06cb8e9363f3b1a002d670daf4fc7ae95fe] [172.17.23.146] [172.17.23.146] 1 Success policy-2.7.2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\policy-2.7.2.jar-201137f895e59857\ 179038 7ea0968c0619c6e5c467da202c36c07d Not Signed 2025-03-28 16:06:10 +0000 UTC 2025-03-28 16:06:10 +0000 UTC fd229ae6c09af1a72105f8d43c6911b0ddccbc79 3d0ba3475d94fcdc46392a132b3fcbc90ca5974124278a955261b54a048358550079e1711f3d95af7bc3ade1460da63c 689901832b9d614852191d0376a6517380b45e05fb9844fb03222a208edb755d81ed7ed1a0428efaa3ceca84c687e06cb8e9363f3b1a002d670daf4fc7ae95fe 2025-03-28 16:06:36 +0000 UTC None None 2022-07-06 00:22:58 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
83ec5200161f53cef32e50c03973d7121e92f4926f6a2f7640dd1a79502670b4 [68a472b1b022648922e2359b] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\poi-3.2-FINAL.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [2fec24222aa7c353bff1960b8ac3e548] [93690bb00b7511034f290077aac838d2946f2b36] [882cc7991b294c4d79da2f1a66b404bde1194916e82da480422a248c7c4ea5b9f4876b9e0836e3f09edd17a466d24bfa] [4b3f04470d2391fe27ed8663ad5b2276b278a65f3c706a5cd8d082cc2c34caa8d023f3e9e45a6d10fdab529cdedfe2286f2a432160cbbb9f85eab5691bc892c9] [172.17.23.146] [172.17.23.146] 1 Success poi-3.2-FINAL.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 1428690 2fec24222aa7c353bff1960b8ac3e548 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 93690bb00b7511034f290077aac838d2946f2b36 882cc7991b294c4d79da2f1a66b404bde1194916e82da480422a248c7c4ea5b9f4876b9e0836e3f09edd17a466d24bfa 4b3f04470d2391fe27ed8663ad5b2276b278a65f3c706a5cd8d082cc2c34caa8d023f3e9e45a6d10fdab529cdedfe2286f2a432160cbbb9f85eab5691bc892c9 2025-03-28 16:04:26 +0000 UTC None None 2024-01-24 21:18:19 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
83a979fb882f2a864bd8541ffb78d55fb88e15750faae26788a8a8d63c465dee [68a194fcbd314bfebd3efbbe] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kzqzcg4d.co3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:38:09Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_kzqzcg4d.co3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:38:09 +0000 UTC 2025-08-17 08:38:09 +0000 UTC 2025-08-17 08:38:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
828e4feaa7f12dcf43874a32bc8a352c6179840111d514ea71acd32dbd924944 [68a311cdc2d0d6e3eb77f218] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\findemailfromfreiendlyname.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [fda42888811197b147f60b25940b6167] [d244e5619d64dc92414029ae026b62703fe7a133] [19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f] [b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204] [172.25.17.86] [172.25.17.86] 1 Success findemailfromfreiendlyname.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 641 fda42888811197b147f60b25940b6167 Not Signed 2023-03-15 13:32:59 +0000 UTC 2024-11-27 21:47:05 +0000 UTC d244e5619d64dc92414029ae026b62703fe7a133 19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
81aade262678c871634ca5dce06cef3f6e724c1d5957f40782636a97b000d4c0 [68a6afe50e0f3bd8deac4d02, 68a6afe50e0f3bd8deac4d17, 68a6afe50e0f3bd8deac4d44, 68a6afe50e0f3bd8deac4d65, 68a6afe50e0f3bd8deac4d84, 68a6afe50e0f3bd8deac4da4, 68a6afe50e0f3bd8deac4dc4, 68a6afe50e0f3bd8deac4de5, 68a6afe50e0f3bd8deac4e05, 68a6afe50e0f3bd8deac4e25, 68a6afe50e0f3bd8deac4e45, 68a6afe50e0f3bd8deac4e65, 68a6afe50e0f3bd8deac4e85, 68a6afe50e0f3bd8deac4ea5, 68a6afe50e0f3bd8deac4eb7, 68a6afe50e0f3bd8deac4ee6, 68a6afe50e0f3bd8deac4f05, 68a6afe50e0f3bd8deac4f25, 68a6afe50e0f3bd8deac4f46, 68a6afe50e0f3bd8deac4f6e, 68a6afe50e0f3bd8deac4f8f, 68a6afe50e0f3bd8deac4faf, 68a6afe50e0f3bd8deac4fcf, 68a6afe50e0f3bd8deac4fef, 68a6afe50e0f3bd8deac500f, 68a6afe50e0f3bd8deac502f, 68a6afe50e0f3bd8deac504e, 68a6afe50e0f3bd8deac506f, 68a6afe50e0f3bd8deac508f, 68a6afe50e0f3bd8deac50b9, 68a6afe50e0f3bd8deac50d8, 68a6afe50e0f3bd8deac50f9, 68a6afe50e0f3bd8deac5123, 68a6afe50e0f3bd8deac5145, 68a6afe50e0f3bd8deac5163, 68a6afe50e0f3bd8deac518d, 68a6afe50e0f3bd8deac51ad, 68a6afe50e0f3bd8deac51cc, 68a6afe50e0f3bd8deac51ed, 68a6afe50e0f3bd8deac5200, 68a6afe50e0f3bd8deac5217, 68a6afe50e0f3bd8deac524e, 68a6afe50e0f3bd8deac526e, 68a6afe50e0f3bd8deac5281, 68a6afe50e0f3bd8deac52a2, 68a6afe50e0f3bd8deac52c2, 68a6afe50e0f3bd8deac52e2, 68a6afe50e0f3bd8deac5302, 68a6afe50e0f3bd8deac5321, 68a6afe50e0f3bd8deac5342, 68a6afe50e0f3bd8deac5362, 68a6afe50e0f3bd8deac5382, 68a6afe50e0f3bd8deac53a8, 68a6afe50e0f3bd8deac53c3, 68a6afe50e0f3bd8deac53e7, 68a6afe50e0f3bd8deac5407, 68a6afe50e0f3bd8deac5428, 68a6afe50e0f3bd8deac5443, 68a6afe50e0f3bd8deac5469, 68a6afe50e0f3bd8deac5488, 68a6afe50e0f3bd8deac54a7, 68a6afe50e0f3bd8deac54c8, 68a6afe50e0f3bd8deac54e8, 68a6afe50e0f3bd8deac5509, 68a6afe50e0f3bd8deac5528, 68a6afe50e0f3bd8deac5548, 68a6afe50e0f3bd8deac5572, 68a6afe50e0f3bd8deac5592, 68a6afe50e0f3bd8deac55b2, 68a6afe50e0f3bd8deac55d2, 68a6afe50e0f3bd8deac55f2, 68a6afe50e0f3bd8deac5613, 68a6afe50e0f3bd8deac5632, 68a6afe50e0f3bd8deac563b, 68a6afe50e0f3bd8deac5661, 68a6afe50e0f3bd8deac5681, 68a6afe50e0f3bd8deac5690, 68a6afe50e0f3bd8deac56b0, 68a6afe50e0f3bd8deac56d0, 68a6afe50e0f3bd8deac56e8, 68a6afe50e0f3bd8deac5710, 68a6afe50e0f3bd8deac5729, 68a6afe50e0f3bd8deac5750, 68a6afe50e0f3bd8deac5759, 68a6afe50e0f3bd8deac5798, 68a6afe50e0f3bd8deac57a4, 68a6afe50e0f3bd8deac57d9, 68a6afe50e0f3bd8deac57e4, 68a6afe50e0f3bd8deac5818, 68a6afe50e0f3bd8deac5831, 68a6afe50e0f3bd8deac585a, 68a6afe50e0f3bd8deac5862, 68a6afe50e0f3bd8deac5899, 68a6afe50e0f3bd8deac58a9, 68a6afe50e0f3bd8deac58d9, 68a6afe50e0f3bd8deac58eb, 68a6afe50e0f3bd8deac5913, 68a6afe50e0f3bd8deac592a, 68a6afe50e0f3bd8deac595a, 68a6afe50e0f3bd8deac597a, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-pngwrapper-16-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...] [3dd30dd1006e09c925864c89312bacca] [5c0b26c55eb3afc6df7cb959907f04a28968a8eb] [42928b5d32bd448b83e295150e6e0dabcca008a24e6ac081d7ef7aeccf73473a21d0b958be69af4ce47df30dfbe3ac73] [e850a625805d1501ca03cbfd767ffb822212240ec0375a2dfa6cbfd3f0af41c7ebeaee24227932305a822c424d071f4afd943d4b02ad35862542b5df6f992783] [172.17.30.60] [172.17.30.60] 1 Success cip-pngwrapper-16-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-pngwrapper-16-vc140-64 ダイナミックリンクライブラリ 194048 3dd30dd1006e09c925864c89312bacca CIP 1.6.5.2 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-13 05:41:04 +0000 UTC 5c0b26c55eb3afc6df7cb959907f04a28968a8eb 42928b5d32bd448b83e295150e6e0dabcca008a24e6ac081d7ef7aeccf73473a21d0b958be69af4ce47df30dfbe3ac73 e850a625805d1501ca03cbfd767ffb822212240ec0375a2dfa6cbfd3f0af41c7ebeaee24227932305a822c424d071f4afd943d4b02ad35862542b5df6f992783 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
812b0f4b717665265bc5a0620fa8be3386853418328e5a28e7ff891462f9de6b [68a5239e621d09b2b1ed5e4f] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackControl.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:34Z] [7913110d2edd6e0303dd5cc770044109] [47838c3517f0204ec04496a5da987943b905016f] [5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf] [3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e] [172.17.22.40] [172.17.22.40] 1 Success PlaybackControl.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Control 5632 7913110d2edd6e0303dd5cc770044109 Control 1.0.0.0 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC 47838c3517f0204ec04496a5da987943b905016f 5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf 3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
80eed1550c017565807bf8be35688e6845c564df5aaf1a006959e4714cfd990b [68a31e4459685fc083f0f272] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:36:17Z] [63f04652c1ffce069b2aade76da5bc56] [253c1f10b1facd8919193a01d57d4ce26440467e] [00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e] [277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2198 63f04652c1ffce069b2aade76da5bc56 Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 12:36:16 +0000 UTC 253c1f10b1facd8919193a01d57d4ce26440467e 00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e 277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d 2025-08-18 12:36:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
80ed85556abb978978c3afeabdae83a61e828e13823ad8081b5656a15ac32295 [68a3146b5f0c41860c8c8513, 68a3146b5f0c41860c8c8566] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\header.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [5e51285c9cc412511aae0381df5af605] [c34c9e21766749325670c8fb373441fa260ac2d4] [3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1] [6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099] [172.17.252.131] [172.17.252.131] 1 Success header.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 24610 5e51285c9cc412511aae0381df5af605 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC c34c9e21766749325670c8fb373441fa260ac2d4 3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1 6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
80e46f9dd140f27a177e2a9b0df309a141ecb0ac32252ad5dd689d52acdfc3ae [68a70bf158372bc3075d1d48] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Plugins\CheckReliability.dll] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Program Files\Yabe\Yabe.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:07:05Z] [1669b9c16b46591c45c4d2d763be89a7] [86e7398f4339b816c9185e889990394f3fe26b6a] [05f1bf466e1ec22d4e6c63afaf68ea781591d3b901a97f1d5afd6175ccddbe38e07c49a832f054329678543b8548df0c] [3558f07944eb90eefc97883f0347dac512cde66b4fec9ef898c7d8b311a9b23fd4ee8d2ae3de9400203061e291effe87cc5f24b38b9fae56194f08aac3522087] [172.17.20.75] [172.17.20.75] 1 Success CheckReliability.dll C:\Program Files\Yabe\Plugins\ CheckReliability Yabe Plugin 9216 1669b9c16b46591c45c4d2d763be89a7 CheckReliability 1.0.0.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-01-17 11:17:44 +0000 UTC 86e7398f4339b816c9185e889990394f3fe26b6a 05f1bf466e1ec22d4e6c63afaf68ea781591d3b901a97f1d5afd6175ccddbe38e07c49a832f054329678543b8548df0c 3558f07944eb90eefc97883f0347dac512cde66b4fec9ef898c7d8b311a9b23fd4ee8d2ae3de9400203061e291effe87cc5f24b38b9fae56194f08aac3522087 2025-08-21 12:07:13 +0000 UTC None None 2025-02-25 18:29:05 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
80ac258e0852de329618df81b11d6beb684dd2d207b215a5559657ffefa44475 [68a25efe3635347d5469494e] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\waxkiu4t.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:04Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success waxkiu4t.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-17 23:00:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
80962aa98ccf32b6398709a133a9d678a4277d666bf0f68be6881a727b94cdc2 [68a161e4df6c771867d5823e] [2] [SYSTEM] [u-v3MIntGTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbe1cxlh.z1x.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:00:08Z] [] [] [] [] [172.25.19.86] [172.25.19.86] 1 Success __PSScriptPolicyTest_jbe1cxlh.z1x.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:00:08 +0000 UTC 2025-08-17 05:00:08 +0000 UTC 2025-08-17 05:00:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7f7196ee2c55c57bd6a32a85fdb5d9d6cbb0c143db529d30f65021be1f6794da [68a16e26eef56db6411d81ce, 68a2bfb24201bf09ec6e1d53, 68a4115cc76143c265ae8f29, 68a562fc095f408404dbb6a7, 68a6b2541e0b1b536c26b932] [2] [IT.HelpDesk] [PCH-BGSwap] [PCH-DOMAIN] [C:\WS_FTP_Scripts\Renamessi3.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:40:45Z, 2025-08-18T05:40:45Z, 2025-08-19T05:40:45Z, 2025-08-20T05:40:45Z, 2025-08-21T05:40:45Z] [d9985deb5b260de564bcf74ddafcf4f6] [6c6ddd5954aa3514b5100674c74a727ecdef2a81] [24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c] [fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78] [10.20.22.79] [10.20.22.79] 1 Success Renamessi3.bat C:\WS_FTP_Scripts\ 905 d9985deb5b260de564bcf74ddafcf4f6 Not Signed 2020-10-29 14:30:30 +0000 UTC 2020-10-29 14:31:13 +0000 UTC 6c6ddd5954aa3514b5100674c74a727ecdef2a81 24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78 2025-08-09 05:44:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7f5f8fcfd84132579f07e395e65b44e1b031fe01a299bce0e3dd590131c5cb93 [68a46ee7124301f03a725ddc, 68a4728c1dfbce27769ea0ba, 68a4728c1dfbce27769ea0bd, 68a4728c1dfbce27769ea0be] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\.ba1\wixstdba.dll] [Servers] [Servers Audit] [v2272.867, v2272] [] [Not Signed] [C:\Users\my10040sa\AppData\Local\Temp\{FB6C058B-4ADA-4A07-89D6-55AFB1AEAC8A}\{BF2F04CD-3D1F-444e-8960-D08EBD285C3F}\vcredist_x86.exe, C:\ProgramData\Package Cache\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\vcredist_x86.exe, C:\Users\my10040sa\AppData\Local\Temp\{01D338CB-8F9F-4F30-BB60-6F2685D921F1}\{3A3AF437-A9CD-472f-9BC9-8EEDD7505A02}\vcredist_x64.exe, C:\ProgramData\Package Cache\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\vcredist_x64.exe] [C:\Users\MY1004~1\AppData\Local\Temp\{FB6C058B-4ADA-4A07-89D6-55AFB1AEAC8A}\{BF2F04CD-3D1F-444e-8960-D08EBD285C3F}\vcredist_x86.exe, C:\ProgramData\Package Cache\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\vcredist_x86.exe, C:\Users\MY1004~1\AppData\Local\Temp\{01D338CB-8F9F-4F30-BB60-6F2685D921F1}\{3A3AF437-A9CD-472f-9BC9-8EEDD7505A02}\vcredist_x64.exe, C:\ProgramData\Package Cache\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\vcredist_x64.exe] [2025-08-19T12:32:38Z, 2025-08-19T12:32:47Z, 2025-08-19T12:36:56Z, 2025-08-19T12:37:06Z] [d7bf29763354eda154aad637017b5483] [dfa7d296bfeecde738ef4708aaabfebec6bc1e48] [c0ff4aa7d0e6f1965f43e823f2f225320f6f01f6c31a490102a0e2fce461b529ebcd2f4a316cd3ba3d194d7ec0d85692] [1c76175732fe68b9b12cb46077daa21e086041adbd65401717a9a1b5f3c516e03c35a90897c22c7281647d6af4a1a5ffb3fbd5706ea376d8f6e574d27396019c] [172.17.23.146] [172.17.23.146] 1 Success wixstdba.dll C:\Users\varianinstaller\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\ WiX Standard Bootstrapper Application 129536 d7bf29763354eda154aad637017b5483 Windows Installer XML - SOC 3.6.3408.0 Not Signed 2012-10-09 11:52:32 +0000 UTC 2012-10-09 11:52:32 +0000 UTC dfa7d296bfeecde738ef4708aaabfebec6bc1e48 c0ff4aa7d0e6f1965f43e823f2f225320f6f01f6c31a490102a0e2fce461b529ebcd2f4a316cd3ba3d194d7ec0d85692 1c76175732fe68b9b12cb46077daa21e086041adbd65401717a9a1b5f3c516e03c35a90897c22c7281647d6af4a1a5ffb3fbd5706ea376d8f6e574d27396019c 2025-06-20 04:07:05 +0000 UTC None None 2025-05-20 15:17:32 +0000 UTC 73 0 KNOWN 0 Microsoft attested file 2025-06-20 04:10:19.067 +0000 UTC
7f3f1b3c3698f724b932cb15eb898fd4049fee06fb71c10dbde9e86b9c46e387 [68a17bfc1ee81336fa54a933] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrgtzqe5.l50.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:51:29Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_xrgtzqe5.l50.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:51:29 +0000 UTC 2025-08-17 06:51:29 +0000 UTC 2025-08-17 06:51:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7f3ab2ae868507dd7a50a8a32ca35df13c57044a206339041bea2b8656324c6d [68a3189a985e97167cef8607] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tftoj4kh.1uo.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:12:01Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_tftoj4kh.1uo.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:12:01 +0000 UTC 2025-08-18 12:12:01 +0000 UTC 2025-08-18 12:12:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
7f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848 [68a306a5ba5832f49fe9cf41] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LIBEAY32.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [a724f5da0a0184b5668ef2d85a7346e0] [7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399] [9429216664488e243eff612f25f9d1757505154dd7d5e119ed3199adada3ee230016f8c6b9548629892f73b1646ef677] [d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2] [172.17.146.33] [172.17.146.33] 1 Success LIBEAY32.DLL C:\DICORP\DICORP_V5\SDL\APPS\ OpenSSL Shared Library 1370624 a724f5da0a0184b5668ef2d85a7346e0 The OpenSSL Toolkit 1.0.2o Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC 7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399 9429216664488e243eff612f25f9d1757505154dd7d5e119ed3199adada3ee230016f8c6b9548629892f73b1646ef677 d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2 2025-05-01 08:09:58 +0000 UTC None None 2025-03-19 09:41:49 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
8744ccc32c42cd0328342d972f6cb76533a8b36c148aa7bcf7be161e19b70d0b [68a306a5ba5832f49fe9cf44] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STDS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [678daeab617ec66aaedd0849527f0a19] [d1d1cf0b433a0824a4db93975a89734eebdbe4ac] [17c4a5910fa49d8368727cfe5b225bccdcfc7304fd1185bec58c192dbd635641f9898ae5970053223457650536cbcc38] [475eab42c67460c222fee44476463ef63d2ac0b751ce361bed7f55a410ba2450c834be926743469c798171842dac0b086f4461aff41f5b641a5d0894d95eb1b0] [172.17.146.33] [172.17.146.33] 1 Success STDS.BPL C:\DICORP\DICORP_V5\RW\APPS\ 34816 678daeab617ec66aaedd0849527f0a19 1.0.0.0 Not Signed 2022-07-06 14:52:37 +0000 UTC 2024-09-14 04:02:56 +0000 UTC d1d1cf0b433a0824a4db93975a89734eebdbe4ac 17c4a5910fa49d8368727cfe5b225bccdcfc7304fd1185bec58c192dbd635641f9898ae5970053223457650536cbcc38 475eab42c67460c222fee44476463ef63d2ac0b751ce361bed7f55a410ba2450c834be926743469c798171842dac0b086f4461aff41f5b641a5d0894d95eb1b0 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:36:26 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
872f4d2c0d8ef4ab77b5963e41450e69fd9561ff10cc9e426390e8e60a7ab8c2 [68a4ccc785b914a60d739e45, 68a4ce1fc826337212f53be5, 68a4d07753a851daf11e692f, 68a4d07753a851daf11e6942, 68a4d07753a851daf11e6948, 68a4d2d1ff2b441b84428127, 68a4d2d1ff2b441b8442813a, 68a4d2d1ff2b441b84428141] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [Servers] [Servers Audit] [v2283] [c:\gehc-it\ccg\quovadx\cis6.2/integrator/bin/perl -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5 -I. c:\gehc-it\ccg\quovadx\cis6.2/integrator/sbin/hcisetenv.pl -root nt , c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl c:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisetenv.pl -site _wmc_test, c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl.exe -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator/lib/perl5 c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/hcienginerun.pl -p qdxprocess] [Not Signed] [C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] [4caadd4e182d3699d9be956724a5b1b4] [ba5ee1dc096bbc29f58afba973d21dca1c37dee7] [f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1] [77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef] [10.36.132.49] [10.36.132.49] 1 Success perl.exe C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\ 11264 4caadd4e182d3699d9be956724a5b1b4 Not Signed 2021-10-20 13:41:15 +0000 UTC 2021-10-20 13:42:29 +0000 UTC ba5ee1dc096bbc29f58afba973d21dca1c37dee7 f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1 77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
86e8b1e1ca221cda910b70f1a6d1897907e2c9ca96eccb7d5127bec87aa6869d [68a1ab05c9c3c78a4a9c60c7] [2] [SYSTEM] [i-nctx-pvs4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y1xem3si.bim.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:12:15Z] [] [] [] [] [172.17.246.6] [172.17.246.6] 1 Success __PSScriptPolicyTest_y1xem3si.bim.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:12:15 +0000 UTC 2025-08-17 10:12:15 +0000 UTC 2025-08-17 10:12:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
86da2f4c83c0da4f1de628febb8696b29aec95d06d8b5284f668b135042940c5 [68a3146b5f0c41860c8c853c] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\glob.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [270f681fa912e46a35c53cbd22e62dd5] [f0b5eec09e7c91aaee55e0048029b8b2cc0e8196] [49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585] [a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693] [172.17.252.131] [172.17.252.131] 1 Success glob.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 23672 270f681fa912e46a35c53cbd22e62dd5 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC f0b5eec09e7c91aaee55e0048029b8b2cc0e8196 49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585 a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e [68a472b1b022648922e235a7] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax2-api-3.1.4.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [c08e89de601b0a78f941b2c29db565c3] [ac19014b1e6a7c08aad07fe114af792676b685b7] [83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f] [911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7] [172.17.23.146] [172.17.23.146] 1 Success stax2-api-3.1.4.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\codehaus\woodstox\main\ 161867 c08e89de601b0a78f941b2c29db565c3 Not Signed 2024-04-05 21:55:23 +0000 UTC 1980-02-01 05:00:00 +0000 UTC ac19014b1e6a7c08aad07fe114af792676b685b7 83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f 911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7 2025-03-28 16:04:56 +0000 UTC None None 2025-03-25 04:34:18 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-11 01:43:01.229 +0000 UTC
86c806c09a7803a770f23b20b51108d5f0d29c4d1a698bb0545c63f393abadc0 [68a3b572a3df3f11549b8bf8] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_5b425657313647968a206bfc77c3d0ce.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T23:21:20Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_5b425657313647968a206bfc77c3d0ce.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 23:21:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
866164cb56991315fd38941ed74b5f8245a6469c0257f717ea063397bfb9cf0c [68a611738671451adb8f5998] [2] [DEVSCCMADM] [DP-Warehouse] [DEV-WVUHS] [C:\Windows\TempInst\is-SQO0N.tmp\driversetup.tmp] [Servers] [Servers Audit] [v2307.897] ["C:\WINDOWS\TempInst\is-SQO0N.tmp\driversetup.tmp" /SL5="$80C2C,180455,180224,C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\driversetup.exe" /verysilent] [Not Signed] [C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\DriverSetup.exe] [C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe] [2025-08-20T18:17:00Z] [8bf52dfd2770c37e8f26fbca3e773e8f] [bbee69e2e92738aee823293871ad827fcf6e90a5] [489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d] [83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5] [172.16.200.2] [172.16.200.2] 1 Success driversetup.tmp C:\Windows\TempInst\is-CVOEI.tmp\ Setup/Uninstall 2907136 8bf52dfd2770c37e8f26fbca3e773e8f Not Signed 2025-03-20 20:41:55 +0000 UTC 2025-03-20 20:41:55 +0000 UTC bbee69e2e92738aee823293871ad827fcf6e90a5 489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d 83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5 2025-03-20 20:42:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
862923dddfc3e6f7a560567ef7ad9a8d12ba03fef8d6206164127bd69412b1cb [68a60640d91a6169403521ce] [2] [CA_Jnt_FormFast4] [u-NFP2] [WVUHS] [C:\Scripts\Compare printers on I-nfp1 to u-nfp2.ps1] [Servers] [Servers Audit] [v2307.897] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-20T17:30:34Z] [fa7d347cd25e73c0b857d25867f6bcff] [23fce09fe1c70011677b75fdc13d2b2d831bb22f] [11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1] [99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887] [172.25.17.195] [172.25.17.195] 1 Success Compare printers on I-nfp1 to u-nfp2.ps1 C:\Scripts\ 917 fa7d347cd25e73c0b857d25867f6bcff Not Signed 2025-08-20 17:30:23 +0000 UTC 2025-06-30 12:13:17 +0000 UTC 23fce09fe1c70011677b75fdc13d2b2d831bb22f 11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1 99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887 2025-08-20 17:30:40 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
861af6ae28998ad90daf332e6ce3f52e32cb6af6490029ccdf01861030529fe0 [68a5cc2ad273577648d7017a] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:42Z] [0ec39449979000ec0584ab01673080c2] [fdaf52401fc4eaebb0252552d432b836277078a8] [3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4] [7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0] [172.17.252.194] [172.17.252.194] 1 Success c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1 C:\_work_devops_mdi\_temp\ 991 0ec39449979000ec0584ab01673080c2 Not Signed 2025-08-20 13:22:41 +0000 UTC 2025-08-20 13:22:41 +0000 UTC fdaf52401fc4eaebb0252552d432b836277078a8 3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4 7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0 2025-08-20 13:22:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
85e9971db788a2fbcb79a597f116557fdaefc0a2164cec5c139beb7a33776ae0 [68a48674c4cb2500be692608, 68a48674c4cb2500be69261e] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Settings.Configuration.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] [3730789496ff9f88accaf6bec1cbf7ba] [4371262d52547a51dda48e130f70806dbe766284] [23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd] [80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Settings.Configuration.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Settings.Configuration 76560 3730789496ff9f88accaf6bec1cbf7ba Serilog.Settings.Configuration 3.3.0+651449dd4277217838b9224ba13acf66f5f95351 Stryker Corporation 2021-10-07 13:46:44 +0000 UTC 2024-02-15 18:02:03 +0000 UTC 4371262d52547a51dda48e130f70806dbe766284 23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd 80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
85c5e4aa4822be87bb86397b3bce69ce0ee2cb6b89d295e2a0e98cd3ba20a72c [68a34b98a6132bf659cce5b9, 68a34df0b71eea1289980a1e] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Desert.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [751d5269225355b4ef0f4e7356d821ef] [d99637a8675ab23bdba70a597bf90328ab5cae9f] [63de6e6e9c730d0fef1fc6562048033b714237e87c81ae1da7a629ac9a637905c1065c00b52549a098cf9ffba069e543] [a5d7bd517b45ddd7308893ae028eeef59e656df97a99a833b0cf0ce3497fa15f490f7dbf13c357b73cce8561c557372930254a78d369c32e8f393c0361c8788c] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Desert.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Desert 685568 751d5269225355b4ef0f4e7356d821ef Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC d99637a8675ab23bdba70a597bf90328ab5cae9f 63de6e6e9c730d0fef1fc6562048033b714237e87c81ae1da7a629ac9a637905c1065c00b52549a098cf9ffba069e543 a5d7bd517b45ddd7308893ae028eeef59e656df97a99a833b0cf0ce3497fa15f490f7dbf13c357b73cce8561c557372930254a78d369c32e8f393c0361c8788c 2025-06-09 21:58:51 +0000 UTC None None 2022-04-22 07:51:19 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
85326460bd3f08e5658ae173143694d725b390ee91cdfee712d33f5b6f5c7fc4 [68a327366b9e5d3847e6ff2e] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jolominu.tok.ps1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T13:14:20Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_jolominu.tok.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 13:14:20 +0000 UTC 2025-08-18 13:14:20 +0000 UTC 2025-08-18 13:14:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
84e95c6300aa357f75245f2c4da9e422ebe8bbe4db67283870cee53b02231ad7 [68a5239e621d09b2b1ed5e4c] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServices.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:34Z] [0d46a7d13dd192a9bc24c976aabe9eef] [acd9024e775f0381eda5fb39210490e8804f32f8] [965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348] [af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a] [172.17.22.40] [172.17.22.40] 1 Success PeCommServices.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ PeCommServices 141824 0d46a7d13dd192a9bc24c976aabe9eef PeCommServices 1.0.0.0 Not Signed 2023-06-15 02:37:18 +0000 UTC 2023-06-15 02:37:18 +0000 UTC acd9024e775f0381eda5fb39210490e8804f32f8 965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348 af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
84a92f1878d1db1c398f021aa01d0a12ec303ef540927b562e71134855b23f48 [68a16bd60756fe54a9918fa1, 68a2149cb58debea69d7c74c, 68a2bd5ff793a9057f329c07, 68a3663261f8067c48423eba, 68a40efceddb3a9f1a71a603, 68a4b7cd36bc5d38057e2368] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWebService.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [c1f4a307abccb3ff203409f4e41e68b9] [4c9a363eec7a97f06a1db1b6d80b38c5e85e342d] [079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460] [8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e] [10.20.20.68] [10.20.20.68] 1 Success zWebService.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 7973176 c1f4a307abccb3ff203409f4e41e68b9 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:38 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 4c9a363eec7a97f06a1db1b6d80b38c5e85e342d 079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460 8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e 2025-07-15 17:40:29 +0000 UTC None None 2025-06-12 09:15:04 +0000 UTC 71 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
8478b902d0815ed066db860fb14cc5d404548d4b6348ab930b46270fcddeba68 [68a472b1b022648922e235a1] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\servlet-api-2.3.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [c097f777c6fd453277c6891b3bb4dc09] [0137a24e9f62973f01f16dd23fc1b5a9964fd9ef] [835f37b6a29eb1abdf9e4a73b97fae35d06956804d6c50de155d9619d6220b259cd68b2db00d42a4484ac5cdb606c977] [e07c598d468a9e268dc803bfd2fdfa7cafb35d271407b85297b35fc17017b85bafb0b1652434dcffb6777b4e39979d0cd9204bb150efa5e489146b51722af1fe] [172.17.23.146] [172.17.23.146] 1 Success servlet-api-2.3.jar C:\Program Files\DeploymentService\Tomcat\webapps\jhptweb\WEB-INF\lib\ 77977 c097f777c6fd453277c6891b3bb4dc09 Not Signed 2020-09-23 21:35:37 +0000 UTC 2020-09-23 21:35:37 +0000 UTC 0137a24e9f62973f01f16dd23fc1b5a9964fd9ef 835f37b6a29eb1abdf9e4a73b97fae35d06956804d6c50de155d9619d6220b259cd68b2db00d42a4484ac5cdb606c977 e07c598d468a9e268dc803bfd2fdfa7cafb35d271407b85297b35fc17017b85bafb0b1652434dcffb6777b4e39979d0cd9204bb150efa5e489146b51722af1fe 2025-08-14 05:11:42 +0000 UTC None None 2024-06-06 08:57:10 +0000 UTC 66 0 KNOWN 0 Microsoft attested file 2025-08-13 16:12:47.104 +0000 UTC
84656aa54a0cb01d9269991ebd2a95d785e26a521297c8531b4ca03f6175cc63 [68a1e42dda86b7950e20922a] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ihgyu0b3.oaq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T14:16:08Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_ihgyu0b3.oaq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 14:16:08 +0000 UTC 2025-08-17 14:16:08 +0000 UTC 2025-08-17 14:16:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0c13c35bf20b1a1396f441950fc850abdb4789e4c33a49b1e674cca2f73425df [68a45d72612cd15680b4837a] [2] [SYSTEM] [TMH-CTX-APP4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_24pv0bd4.rpe.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T11:17:58Z] [] [] [] [] [172.17.246.19] [172.17.246.19] 1 Success __PSScriptPolicyTest_24pv0bd4.rpe.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 11:17:58 +0000 UTC 2025-08-19 11:17:58 +0000 UTC 2025-08-19 11:18:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8a0a42e2c7ff5574ad97ad6dc26cfb596e29ce60fe78606d781b2adf7a87fb30 [68a34b98a6132bf659cce5bd, 68a34df0b71eea1289980a22] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2013Dark.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [e646e61635920e2fa928ebdbaa5d4f85] [2bfb054c55fe6539dd6fc0ebb76801f2c45e88b3] [4798aa85d893ecf566c6558cb737ee4c932edb42238b87bd6fbc2368e16df477bffb73dbf036a7cdff66f771f0b301d3] [83a762b9dfcfa2db85f5e90b5b7b954c752305d101bc93d87536264dab9c6e0ad0c7b70d259a0ff7918f4ac3ad6ee6f6f963ad83f20f848b885cdf88a392f0cb] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Office2013Dark.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Office2013Dark 237568 e646e61635920e2fa928ebdbaa5d4f85 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 2bfb054c55fe6539dd6fc0ebb76801f2c45e88b3 4798aa85d893ecf566c6558cb737ee4c932edb42238b87bd6fbc2368e16df477bffb73dbf036a7cdff66f771f0b301d3 83a762b9dfcfa2db85f5e90b5b7b954c752305d101bc93d87536264dab9c6e0ad0c7b70d259a0ff7918f4ac3ad6ee6f6f963ad83f20f848b885cdf88a392f0cb 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:17 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
89ed47dd7a86c0556557c69fc7d6b6fc94c05116f55431bc6cb4e3731df5c1b0 [68a26fdfc0e2189e95b436e5] [2] [SYSTEM] [UH-APPS] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gqwsgxba.yiw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T00:12:05Z] [] [] [] [] [172.17.253.46] [172.17.253.46] 1 Success __PSScriptPolicyTest_gqwsgxba.yiw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 00:12:05 +0000 UTC 2025-08-18 00:12:05 +0000 UTC 2025-08-18 00:12:15 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0 [68a4e8b52033a4a8e5a0e977, 68a4fcd0011d94a251a4ef36, 68a4fcd0011d94a251a4ef43] [2] [SYSTEM] [i-ncapsule12] [NT AUTHORITY] [C:\Windows\System32\drivers\tap0901.sys] [Servers] [Servers Audit] [v2283, v2284] [] [OpenVPN Technologies, Inc.] [Non-existent] [Non-existent] [2025-08-19T21:12:19Z, 2025-08-19T22:09:45Z, 2025-08-19T22:18:18Z] [d765f43cbea72d14c04af3d2b9c8e54b] [daebe266073616e5fc931c319470fcf42a06867a] [f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33] [ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2] [172.17.23.18] [172.17.23.18] 1 Success tap0901.sys C:\Windows\System32\drivers\ TAP-Windows Virtual Network Driver (NDIS 6.0) 27136 d765f43cbea72d14c04af3d2b9c8e54b TAP-Windows Virtual Network Driver (NDIS 6.0) 9.21.2 9/21 OpenVPN Technologies, Inc. 2016-04-21 09:10:04 +0000 UTC 2016-04-21 09:10:04 +0000 UTC daebe266073616e5fc931c319470fcf42a06867a f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33 ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2 2025-08-19 21:12:21 +0000 UTC None None 2025-08-18 13:01:34 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
89c5baa3f3a41900e2d66d77c1e63a9dab11d2d6d5e556a169b8fa2097b8441b [68a4ccc785b914a60d739e47, 68a4ce1fc826337212f53be7, 68a4d07753a851daf11e6931, 68a4d07753a851daf11e6944, 68a4d07753a851daf11e6951, 68a4d2d1ff2b441b84428129, 68a4d2d1ff2b441b8442813c, 68a4d2d1ff2b441b84428149] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\Cwd.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] [06bfbbd1e8fc346fa3358461f084d535] [b979274e71278d1689608fbe3b5c639a3c334a55] [39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737] [d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1] [10.36.132.49] [10.36.132.49] 1 Success Cwd.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\ 15360 06bfbbd1e8fc346fa3358461f084d535 Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:01 +0000 UTC b979274e71278d1689608fbe3b5c639a3c334a55 39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737 d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8985e9e94144b1fd71aa39a7df8f1857ef43cdfc56eb1974c97181b55345a895 [68a4631d55f0b006fedad271] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\u05q5u1z.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T11:42:16Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success u05q5u1z.dll C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 11:42:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
896ab9cac41e3977792ba2034ea8730610c2779fa51bab6bed426094ea8d3ecd [68a523949cec397f02de9f62] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\log4net.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:31Z] [27fe8d18682fd9901e589e65ef429b23] [6426e96243911beab547f2bc98a252a26692f11f] [9b26b5b65c90baddb954c7b1704fbbcdd6c46d9226c6a47b24c4284f65b9ff65d702a227b362f8fc82e77fabbd52bc6a] [9d6bc8c77c72cbad15e808281818c2768f1b44aa6ea1d54a979c91218b8fbf2a02fee49fa97db6cfa6087ddc363d6cdd6407e4494934b4568c514437030a2615] [172.17.22.40] [172.17.22.40] 1 Success log4net.dll C:\Program Files (x86)\MModal\MModal Fluency Direct\ Apache log4net for .NET Framework 4.5 270336 27fe8d18682fd9901e589e65ef429b23 log4net 2.0.12.0-.NET 4.5 Not Signed 2020-10-19 06:40:10 +0000 UTC 2020-10-19 06:40:10 +0000 UTC 6426e96243911beab547f2bc98a252a26692f11f 9b26b5b65c90baddb954c7b1704fbbcdd6c46d9226c6a47b24c4284f65b9ff65d702a227b362f8fc82e77fabbd52bc6a 9d6bc8c77c72cbad15e808281818c2768f1b44aa6ea1d54a979c91218b8fbf2a02fee49fa97db6cfa6087ddc363d6cdd6407e4494934b4568c514437030a2615 2025-03-24 14:02:17 +0000 UTC None None 2025-03-23 14:37:23 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-04-10 18:53:20.839 +0000 UTC
885e56d813268fca1e04e3c8d7292dc138ac4e188f7e61ea277d544a5c080f12 [68a31fecb457e7ec963d10ed] [2] [GreyBeard] [I-CAJump] [WVUHS] [C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:42:24Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1 C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-14 17:50:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
883007989d373d19f352ba9792b25dec21dc7d0e205a710a93a3815101bb3d03 [68a472b1b022648922e23587] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-api-2.3.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [ffa4ea6fada02493779bcd7f04f11ea3] [99f802e0cb3e953ba3d6e698795c4aeb98d37c48] [9c1ac98f02cd0e1fe91d1742004b6e87520a84a0de18d51ba1a6f615cb92fb7d9d0640157547f18d5b2e2c81b4b1c4d0] [0c5bfc2c9f655bf5e6d596e0c196dcb9344d6dc78bf774207c8f8b6be59f69addf2b3121e81491983eff648dfbd55002b9878132de190825dad3ef3a1265b367] [172.17.23.146] [172.17.23.146] 1 Success jaxb-api-2.3.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 125632 ffa4ea6fada02493779bcd7f04f11ea3 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 99f802e0cb3e953ba3d6e698795c4aeb98d37c48 9c1ac98f02cd0e1fe91d1742004b6e87520a84a0de18d51ba1a6f615cb92fb7d9d0640157547f18d5b2e2c81b4b1c4d0 0c5bfc2c9f655bf5e6d596e0c196dcb9344d6dc78bf774207c8f8b6be59f69addf2b3121e81491983eff648dfbd55002b9878132de190825dad3ef3a1265b367 2025-03-28 16:04:26 +0000 UTC None None 2024-10-26 16:55:02 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-04-10 12:45:43.084 +0000 UTC
8816ced466c6030ba2624ebacbae119f2d4acdba7debf14a74c73a97605385a5 [68a5239e621d09b2b1ed5e53] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackTest.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:36Z] [bc77c1c66df02372edd7ac4456a17bcf] [15712c630fd5da7ad894f532b3ace2694eb388c6] [1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c] [f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984] [172.17.22.40] [172.17.22.40] 1 Success PlaybackTest.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Test 16896 bc77c1c66df02372edd7ac4456a17bcf Test 1.0.0.0 Not Signed 2023-06-15 02:38:06 +0000 UTC 2023-06-15 02:38:06 +0000 UTC 15712c630fd5da7ad894f532b3ace2694eb388c6 1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696 [68a5c64d54e5003d1abde4c0, 68a5c77e05aa879ada66b41c, 68a5c77e05aa879ada66b422, 68a5c77e05aa879ada66b427, 68a5c77e05aa879ada66b42c, 68a5c77e05aa879ada66b430] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\_Setup.dll] [Servers] [Servers Audit] [v2287.880] [] [Macrovision Corporation (Invalid Certificate Chain)] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z, 2025-08-20T13:01:48Z] [30ebd4e80b1dda05eac709a1dc5965b4] [2418232370026574baabc84b105f6dd9e458ad86] [fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774] [5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557] [172.17.20.104] [172.17.20.104] 1 Success _Setup.dll C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\ FLEXnet (R) InstallShield (R) Setup Launcher Resources 164784 30ebd4e80b1dda05eac709a1dc5965b4 InstallShield 12.0 Macrovision Corporation (Invalid Certificate Chain) 2025-07-17 15:57:14 +0000 UTC 2025-04-14 15:20:00 +0000 UTC 2418232370026574baabc84b105f6dd9e458ad86 fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774 5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557 2025-07-17 15:57:20 +0000 UTC None None 2025-05-15 06:19:28 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-16 22:12:52.389 +0000 UTC
87fa12deba87e8480e2f908b117c04f544a29ad84bfad78b06ff20e5e9457a90 [68a234114e9e68c09ff3b3ce] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_gdgv0db5.spm.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:56:58Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_gdgv0db5.spm.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:56:58 +0000 UTC 2025-08-17 19:56:58 +0000 UTC 2025-08-17 19:57:05 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
87eced5a13c1c768b4afba0c29a797300d938b5c42cd9b9b8f1009381036335c [68a2841dea878ec155eeabc0] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-071EF405-2DA4-4BF6-B3E2-9EEE181CBAE8\CitrixReceiverUpdater.exe] [C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] [2025-08-18T01:35:00Z] [531d104b020b9f98268ff78dd349c950] [b163a90df0687f4e273d7df02eddf0f06f9089b4] [f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1] [e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4] [10.20.20.68] [10.20.20.68] 1 Success rm.bat C:\Users\teknicor\AppData\Local\Temp\4\ 7357 531d104b020b9f98268ff78dd349c950 Not Signed 2025-08-18 01:35:00 +0000 UTC 2025-08-18 01:35:00 +0000 UTC b163a90df0687f4e273d7df02eddf0f06f9089b4 f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1 e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4 2025-08-18 01:38:37 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
87e9dadb6f2dafe4516df3207431d866f6523092fea13c70bb87a04ac2ca874a [68a46900de52a0eb07bb2cac] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_2c7bdf88483841c991f97ab70ee180cb.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:07:26Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_2c7bdf88483841c991f97ab70ee180cb.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:07:28 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
87dbd3847659ba45b3a70603a5ad16c5dba1a20e1560ae6f33c3855a28ccc8ab [68a5c8eceb9e7b7716dce1ff, 68a5ca39b5df6e9c598d9a11, 68a5ca39b5df6e9c598d9a1e, 68a5ccf2ddfdba423e488634, 68a5ccf2ddfdba423e488642, 68a5ccf2ddfdba423e488650, 68a5ccf2ddfdba423e48865d, 68a5ccf2ddfdba423e48866a, 68a5ccf2ddfdba423e488677, 68a5ccf2ddfdba423e488684, 68a5ccf2ddfdba423e488691] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ServerOMFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [c066359dd5247e181f64aed348841df7] [c948c467da379e48f015a39a89b14abd9e318641] [4d3f5a8cb65cb060dcd44531a67bdd3ee550487455624a5c15162e521397694acb2fb89f6b5a777fb0b2fe351c1b14be] [3538def626ac7f7182b24fa8023cbd951d01166b32c24063cb7101cf56609d1ed774aae80ea506e3264f08fccadadcea54add5f174ce768ffa92421fb6516682] [172.17.252.194] [172.17.252.194] 1 Success ServerOMFunctions.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 30673 c066359dd5247e181f64aed348841df7 Not Signed 2025-08-20 13:08:41 +0000 UTC 2024-01-20 18:07:08 +0000 UTC c948c467da379e48f015a39a89b14abd9e318641 4d3f5a8cb65cb060dcd44531a67bdd3ee550487455624a5c15162e521397694acb2fb89f6b5a777fb0b2fe351c1b14be 3538def626ac7f7182b24fa8023cbd951d01166b32c24063cb7101cf56609d1ed774aae80ea506e3264f08fccadadcea54add5f174ce768ffa92421fb6516682 2025-08-20 13:09:00 +0000 UTC None None 2024-08-08 19:43:02 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
875bd9b26bac5ac888c47873184798b7e7c154a8ff5c8307e884ca895f158080 [68a246379a94894376e8c601] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mg01z4ld.0i1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:14:31Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_mg01z4ld.0i1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:14:30 +0000 UTC 2025-08-17 21:14:30 +0000 UTC 2025-08-17 21:14:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8b238948f852008a05ed3de256fe08c00bd98db5643b0edd083017ec744424d1 [68a2b38b161afab772184bd5] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\tmp_2kca3ybv.gtw.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T05:00:54Z] [ae19d72b75e92e2a670f857ba9860ce3] [e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a] [e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377] [2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715] [172.25.17.86] [172.25.17.86] 1 Success tmp_2kca3ybv.gtw.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\ 4669570 ae19d72b75e92e2a670f857ba9860ce3 Not Signed 2025-08-18 05:00:54 +0000 UTC 2025-08-18 05:00:54 +0000 UTC e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377 2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715 2025-08-18 05:00:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8aa7a83d12cd1daa9a802e686463263e91cb813627557b01861a89e27fde4b09 [68a2532c678a2fdf8182be04] [2] [sunrisebackup] [CI1BEFS3] [WHI] [D:\archivescript\archive.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T22:00:01Z] [ddf4199c681ada910f8e2a61d9af3fe8] [e2e6b93f0619b5ab8141ee4886f87eca40482d09] [5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a] [3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31] [172.18.112.86] [172.18.112.86] 1 Success archive.ps1 D:\archivescript\ 5996 ddf4199c681ada910f8e2a61d9af3fe8 Not Signed 2019-09-16 18:21:57 +0000 UTC 2015-04-22 19:31:33 +0000 UTC e2e6b93f0619b5ab8141ee4886f87eca40482d09 5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a 3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31 2025-08-08 22:00:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8a1ced8a3f76ad3ff0b53b43010d53302e4b10d7affa3ffb69ba20a0ca24c1fb [68a189ed0b483022e242e958] [2] [SYSTEM] [i-nIC-HIC-PRD4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ax3ju4vv.gx3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:51:02Z] [] [] [] [] [172.17.46.252] [172.17.46.252] 1 Success __PSScriptPolicyTest_ax3ju4vv.gx3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:51:02 +0000 UTC 2025-08-17 07:51:02 +0000 UTC 2025-08-17 07:51:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0f1c26396d25e75da96d668173f3844426c38a9f41e23e3b17ef38c6711c5001 [68a1a97fd1ad1d02ded12163, 68a2fb0a27a9a45c7a219507, 68a44cbb02b8ceb81ab6baf5, 68a59e6101f0277939a73181, 68a6f01aab614fc6e2411cd4] [2] [meditechbg] [PCH-PRINTER003] [PCH-DOMAIN] [C:\Printer_HP_Script\SSNP.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T10:00:27Z, 2025-08-18T10:00:27Z, 2025-08-19T10:00:27Z, 2025-08-20T10:00:27Z, 2025-08-21T10:00:26Z] [7a39f19ce6c8fb1d161c443d1dc7f86f] [6f028aff74eec5d0db149890d22a8fed50c536cb] [67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2] [5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67] [10.20.22.81] [10.20.22.81] 1 Success SSNP.bat C:\Printer_HP_Script\ 5014 7a39f19ce6c8fb1d161c443d1dc7f86f Not Signed 2019-03-21 12:35:45 +0000 UTC 2014-07-09 19:42:40 +0000 UTC 6f028aff74eec5d0db149890d22a8fed50c536cb 67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2 5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67 2025-08-09 10:04:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0f144dc59a8cf91c8457c46a563833c9fd3d1f7766c9c6b99f6e85a93e942ab1 [68a3146b5f0c41860c8c8523] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\gettext.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z] [2b01d716b248affc1d5c61df52586f70] [01231cf7bb85f5151d9846df82dafc6b9bffb225] [930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38] [9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2] [172.17.252.131] [172.17.252.131] 1 Success gettext.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 22565 2b01d716b248affc1d5c61df52586f70 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 01231cf7bb85f5151d9846df82dafc6b9bffb225 930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38 9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0eeae75aee6c2b8cfef58497f07cc728a2f169217e316453c9dc577daf51c831 [68a1b895b65e1946e3666f15, 68a6fe933cf7ea98b79d9d5e] [2] [hyperwebsvc] [I-NCTXEHH-001] [WVUHS] [C:\HomeHealth\EpicHHEnvSUP_SmartUpdateFull.bat] [Servers] [Servers Audit] [v2248.849, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T11:00:09Z, 2025-08-21T11:00:10Z] [f4a871c36ce1398c5c89063c394fb796] [ff814062a8182c82de32de600bbabd8b08551fb9] [ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb] [7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15] [172.17.146.25] [172.17.146.25] 1 Success EpicHHEnvSUP_SmartUpdateFull.bat C:\HomeHealth\ 98 f4a871c36ce1398c5c89063c394fb796 Not Signed 2023-04-26 14:42:09 +0000 UTC 2025-04-17 14:47:08 +0000 UTC ff814062a8182c82de32de600bbabd8b08551fb9 ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb 7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15 2025-08-11 11:00:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0ea212b296688a2fcb2dee591d081469da7cc09780e3eaf5ea0c98e34eddff46 [68a1af8e6937b3bfeec24717] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y3wqc145.xln.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:31:33Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_y3wqc145.xln.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:31:33 +0000 UTC 2025-08-17 10:31:33 +0000 UTC 2025-08-17 10:31:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0e4fe0097d8234b17fbeae1326f4b4b2447540534ba3ee94a3aa1a5fdc13f22b [68a2467384622a54886c0e75] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kqy4i4tr.qqz.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:15:31Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_kqy4i4tr.qqz.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:15:31 +0000 UTC 2025-08-17 21:15:31 +0000 UTC 2025-08-17 21:15:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0dc510c703e27423555cb0865302c504c258d0e84be9c30820e99edf20ff3401 [68a1c1205b1ee295fb12a3fd] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_el5mtldf.3sb.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T11:46:35Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_el5mtldf.3sb.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 11:46:35 +0000 UTC 2025-08-17 11:46:35 +0000 UTC 2025-08-17 11:46:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0d4d362ed5b662a4975f8e67030e069e9e60d82137f6970653fbf89e1cf30ea6 [68a156aa2d859ec7c26395e4, 68a15db20a227e1e294e1d6c, 68a1642f671392a6ca40e558, 68a1a40655e9b687a677b976, 68a2cb621ea3fd6932f5b13a, 68a416054e2b3b19a2fbbd64, 68a42b1df903729d40303a39, 68a5528ca68312b2437669bf, 68a567a3b30563f7a27fa9b4] [2] [ASCSvc] [vm-ASCNEO] [WVUH] [E:\WAVXMLBulkMapper\email.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T04:09:46Z, 2025-08-17T04:39:46Z, 2025-08-17T05:09:46Z, 2025-08-17T09:39:46Z, 2025-08-18T06:39:46Z, 2025-08-19T06:09:46Z, 2025-08-19T07:39:46Z, 2025-08-20T04:39:46Z, 2025-08-20T06:09:46Z] [48709ee3e41ad538c3d93892b04c4b5b] [61e2058c06bf9e3f8246aca4fcc61b5d15f7029e] [335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f] [f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c] [172.17.20.9] [172.17.20.9] 1 Success email.bat E:\WAVXMLBulkMapper\ 676 48709ee3e41ad538c3d93892b04c4b5b Not Signed 2020-04-23 14:39:50 +0000 UTC 2020-07-09 11:40:59 +0000 UTC 61e2058c06bf9e3f8246aca4fcc61b5d15f7029e 335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c 2025-08-09 05:09:59 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
0d1ee835c881e5f8a90127d71176b19a5f527136f4b33d877cebe729c11efe09 [68a5c8eceb9e7b7716dce204, 68a5ca39b5df6e9c598d9a16, 68a5ca39b5df6e9c598d9a23, 68a5ccf2ddfdba423e488639, 68a5ccf2ddfdba423e488647, 68a5ccf2ddfdba423e488655, 68a5ccf2ddfdba423e488662, 68a5ccf2ddfdba423e48866f, 68a5ccf2ddfdba423e48867c, 68a5ccf2ddfdba423e488689, 68a5ccf2ddfdba423e488696] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\helpers.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:53Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:50Z, 2025-08-20T13:22:52Z] [55a6027dd1e0a5e48063566b84073d33] [b64ef951eba0b844f0a7155cca53f91eda45f185] [614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88] [d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16] [172.17.252.194] [172.17.252.194] 1 Success helpers.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ 8350 55a6027dd1e0a5e48063566b84073d33 Not Signed 2025-08-20 13:08:38 +0000 UTC 2024-01-20 18:07:08 +0000 UTC b64ef951eba0b844f0a7155cca53f91eda45f185 614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88 d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0cef77375419ad8202ff4e7155a1455435de15f2d60b15ede6bc211911fde757 [68a5239e621d09b2b1ed5e68] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManager.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:40Z] [ca0b0d10eb53b26c35284118371cec1c] [ba2ffd3912e3b01d09e74f5d0b929108f5493d5a] [9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df] [3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea] [172.17.22.40] [172.17.22.40] 1 Success SystemManager.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ SystemManagerGui 67584 ca0b0d10eb53b26c35284118371cec1c SystemManagerGui 1.0.0.0 Not Signed 2023-06-15 02:38:30 +0000 UTC 2023-06-15 02:38:30 +0000 UTC ba2ffd3912e3b01d09e74f5d0b929108f5493d5a 9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df 3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0ce6997fa6eafbce91ac022bb3118f6a8653a53c0863a4e9c6b6323576adb12b [68a4d176f9567d58ffcb80f2] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:33:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:33:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0ccd449b623f55b26f3976be2274e35b140cf5272362574dbbe9d88d8b102ea9 [68a44b460463afe0b03c0304] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_8c97621ff3534cd19b9e38158d7134a1.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-19T10:00:29Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_8c97621ff3534cd19b9e38158d7134a1.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 10:00:38 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0cb604e6bbbbee0c68cb7635364fb1e1703d268e9a7a3faa10919fd489b9536b [68a4d674e6120d5dc3b3884b] [2] [SYSTEM] [i-v3MRpt] [NT AUTHORITY] [D:\3M_360\3M_Reports\3M_Reports\_Plugins\Hub.dll] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T19:49:27Z] [0a0741dc6c1d3868f207a363995a7b55] [27795d1e6f8c15e4ec3d8e18b8cde5b6384237f1] [bbe1e6dbf799eeccd4ae27f3a4aae7a9fcc6c51f659790d7c9d9a03c568e391699bd931ca652e1e5bac73d92acd18614] [b3e31c46b64669d6965b8aacdd68f844e427ab3b8291d5723a097d1b723bd3e285ff420061050aba1773718ec959e3a6f782bdf93a119ab282f818ff2061760f] [172.17.23.44] [172.17.23.44] 1 Success Hub.dll D:\3M_360\3M_Reports\3M_Reports\_Plugins\ Hub 12288 0a0741dc6c1d3868f207a363995a7b55 Hub 1.1.0.0 Not Signed 2020-10-09 16:47:08 +0000 UTC 2020-10-09 16:46:25 +0000 UTC 27795d1e6f8c15e4ec3d8e18b8cde5b6384237f1 bbe1e6dbf799eeccd4ae27f3a4aae7a9fcc6c51f659790d7c9d9a03c568e391699bd931ca652e1e5bac73d92acd18614 b3e31c46b64669d6965b8aacdd68f844e427ab3b8291d5723a097d1b723bd3e285ff420061050aba1773718ec959e3a6f782bdf93a119ab282f818ff2061760f 2025-04-30 20:58:12 +0000 UTC None None 2017-08-03 01:01:41 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-04-30 21:01:36.155 +0000 UTC
0c3b300653b21f6ea6ceb344e45f352f388ac0f3124b9ef92e84d6da8edb9e6a [68a4e92df1821b1c8f96ba7e, 68a4e9b3061a87dd106e4740, 68a4ec0d73c037b116f16921, 68a4ec0d73c037b116f16922, 68a4f0bd96d8259b6fb14195, 68a4f0bd96d8259b6fb14196, 68a4fcd0011d94a251a4ef37, 68a4fcd0011d94a251a4ef38, 68a4fcd0011d94a251a4ef41, 68a4fcd0011d94a251a4ef42] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe] [Servers] [Servers Audit] [v2283, v2284.877, v2284] ["C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -ma set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -aa {7806169F-4404-49FF-AFB7-B36CBD48DCCF} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -al {A54B5DCB-5EF1-4081-9E16-56C5E76B4A59} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r,ll,la,rl,ra, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -aa {EF0D9B6D-D774-459e-A5E4-59BA9AB43E3C} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:14:14Z, 2025-08-19T21:14:15Z, 2025-08-19T21:18:50Z, 2025-08-19T21:18:51Z, 2025-08-19T21:41:07Z, 2025-08-19T21:41:08Z, 2025-08-19T22:10:52Z, 2025-08-19T22:10:53Z, 2025-08-19T22:17:59Z, 2025-08-19T22:18:00Z] [fdcaceaa3c0903c7ca0379595b32cd79] [7e460ca7ab643b96bd942b8b3573b19ff298e57f] [1232162f2d3a86169525a8ef82d12945c4bf1abaa7763a08e8221c8000b279ca0f88aba72ac8d2d7d57afe32e738b8de] [3556597b354dc05b0e8be36c8c732d5a0a85d03ceec4137ca48a2373da2cddfab647055fcf385f6cec416b9c56647af7d839441a12a47abe0361b6c4d75483a2] [172.17.23.18] [172.17.23.18] 1 Success DComPerm.exe C:\Program Files (x86)\Capsule Technologie\InstallerTemp\ 87040 fdcaceaa3c0903c7ca0379595b32cd79 Not Signed 2011-11-21 16:56:38 +0000 UTC 2011-11-21 16:56:38 +0000 UTC 7e460ca7ab643b96bd942b8b3573b19ff298e57f 1232162f2d3a86169525a8ef82d12945c4bf1abaa7763a08e8221c8000b279ca0f88aba72ac8d2d7d57afe32e738b8de 3556597b354dc05b0e8be36c8c732d5a0a85d03ceec4137ca48a2373da2cddfab647055fcf385f6cec416b9c56647af7d839441a12a47abe0361b6c4d75483a2 2025-08-19 21:14:21 +0000 UTC None None 2017-02-22 10:17:04 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
8cebb25e240db3b6986fcaed6bc0b900fa09dad763a56fb71273529266c5c525 [68a2a2b145e54eb8011b598e, 68a3f3b82b0ad9191f472696, 68a545ad1588ee149e3e4b09, 68a6a04ba1132f2e5ae457dd] [2] [jskwv] [I-nMoveItXfer] [WVUHS] [E:\MOVEitTransfer\Util\7z.exe] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] ["e:\MOVEitTransfer\Util\7z" a -r -mx=1 "e:\MOVEittransfer\files\Backup\MOVEitDMZ_Backup.7z" *] [Not Signed] [E:\MOVEitTransfer\Scheduler\DMZBackup.exe] [C:\Windows\System32\cmd.exe] [2025-08-18T03:39:13Z, 2025-08-19T03:39:19Z, 2025-08-20T03:39:18Z, 2025-08-21T04:20:27Z] [9a1dd1d96481d61934dcc2d568971d06] [f136ef9bf8bd2fc753292fb5b7cf173a22675fb3] [0b04e8917edb442c5578f5a5348b206dbb6eb3262ca94a5bbc42228f1be5163e51dda1908e2b8b329a7abdccda8c6760] [7ac1581f8a29e778ba1a1220670796c47fa5b838417f8f635e2cb1998a01515cff3ee57045dacb78a8ec70d43754b970743aba600379fe6d9481958d32d8a5aa] [172.17.253.253] [172.17.253.253] 1 Success 7z.exe E:\MOVEitTransfer\Util\ 7-Zip Console 557056 9a1dd1d96481d61934dcc2d568971d06 7-Zip 23.01 Not Signed 2024-06-26 17:10:48 +0000 UTC 2024-06-08 01:59:02 +0000 UTC f136ef9bf8bd2fc753292fb5b7cf173a22675fb3 0b04e8917edb442c5578f5a5348b206dbb6eb3262ca94a5bbc42228f1be5163e51dda1908e2b8b329a7abdccda8c6760 7ac1581f8a29e778ba1a1220670796c47fa5b838417f8f635e2cb1998a01515cff3ee57045dacb78a8ec70d43754b970743aba600379fe6d9481958d32d8a5aa 2025-05-01 04:19:29 +0000 UTC None None 2025-04-29 07:31:52 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-01 04:20:30.057 +0000 UTC
8ce6d52b069c4c0b1f23db60276343d7e56612d5d7514eddbd8cbb6dd5855cbf [68a646093f8d701fd091c655] [2] [CA_JNT_BMCTrauma1] [i-nbmctrauma] [WVUHS] [C:\Dicorp_V5\TR_V5\RW\APPS\RW.EXE] [Servers] [Servers Audit] [v2314.900] ["C:\Dicorp_V5\TR_V5\RW\APPS\RW.EXE" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-20T21:57:38Z] [8e4f49b05335fdcdeb2531f0bfa1358e] [f7a81cdfad90376d7454c912106fd3ac119316ba] [988cdbd254369668d3db4a65a81597cb2a30bc42c1de6f542b1f874376ea8b1ca22e9ba2d3eaef16992b18a5d40cee41] [3856610914039f8fce61a4a3de05afea8bb8ea01efc385104c3bbce5bae8104d3d509ebf31769970d88cfd9f7d36a66f1c034f82a75d37fd846331e84f5004ad] [172.17.250.104] [172.17.250.104] 1 Success RW.EXE C:\DICORP\DICORP_V5\RW\APPS\ RW App Launcher 34304 8e4f49b05335fdcdeb2531f0bfa1358e Not Signed 2022-07-06 14:52:29 +0000 UTC 2024-09-14 04:02:52 +0000 UTC f7a81cdfad90376d7454c912106fd3ac119316ba 988cdbd254369668d3db4a65a81597cb2a30bc42c1de6f542b1f874376ea8b1ca22e9ba2d3eaef16992b18a5d40cee41 3856610914039f8fce61a4a3de05afea8bb8ea01efc385104c3bbce5bae8104d3d509ebf31769970d88cfd9f7d36a66f1c034f82a75d37fd846331e84f5004ad 2025-04-30 20:02:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8ccb8e7fc8941394c60374d45ba4a1539b1bd3b1d798142e8705eb4dcd391265 [68a22721aa3b1f3dd3941512] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\tmp_4dvp2nbj.c5a.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T19:01:51Z] [9c8e384aff95c5d7fe6b82325ac590ee] [a8d27f4a6211fb079c6f04717fe31e0fac54fc3c] [82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b] [e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007] [172.25.17.86] [172.25.17.86] 1 Success tmp_4dvp2nbj.c5a.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\ 4669542 9c8e384aff95c5d7fe6b82325ac590ee Not Signed 2025-08-17 19:01:49 +0000 UTC 2025-08-17 19:01:49 +0000 UTC a8d27f4a6211fb079c6f04717fe31e0fac54fc3c 82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007 2025-08-17 19:01:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8cc960e5be9a58295564d0d0debf17a6f72214b8b929bdbe52731ddc5107eb1a [68a46f7d9ee334140767070c] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\{DD24F271-6094-4573-838E-8D8118B24393}\ISSetup.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\software\Storage Manager Client 20.1.2.14.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:35:03Z] [2ac024a7bc89cbe84dfbb61ff1281bdf] [178e18ceeacbe7d7db1649743116948e2d1c27f2] [cdbbb56d11daf49c4d143140915431599d7880c37e4678ee8eaefbce8934f8b13885b93ba24e46d677c678a9d2af95b2] [19da691d2f56fe0d185444b7277f0a216f57b1a7753787c946a3a5042f46f91b9481c987bc52fe3f099fad0612cb56cc2bf294f827d5ae8a9b4b1042deeafe9f] [172.17.23.146] [172.17.23.146] 1 Success ISSetup.dll C:\Users\my10040sa\AppData\Local\Temp\{DD24F271-6094-4573-838E-8D8118B24393}\ InstallShield (R) Setup Engine 3429383 2ac024a7bc89cbe84dfbb61ff1281bdf InstallShield 22.0 Not Signed 2025-08-19 12:35:03 +0000 UTC 2025-08-19 12:35:03 +0000 UTC 178e18ceeacbe7d7db1649743116948e2d1c27f2 cdbbb56d11daf49c4d143140915431599d7880c37e4678ee8eaefbce8934f8b13885b93ba24e46d677c678a9d2af95b2 19da691d2f56fe0d185444b7277f0a216f57b1a7753787c946a3a5042f46f91b9481c987bc52fe3f099fad0612cb56cc2bf294f827d5ae8a9b4b1042deeafe9f 2025-08-19 12:35:09 +0000 UTC None None 2022-04-21 18:14:40 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-19 12:35:24.475 +0000 UTC
8cb7e004d91df55955d29932d6578e0c045c059763678afd3bedd01b7239c9ff [68a4ccc785b914a60d739e51, 68a4ce1fc826337212f53bee, 68a4d07753a851daf11e6939, 68a4d07753a851daf11e694f, 68a4d2d1ff2b441b84428131, 68a4d2d1ff2b441b84428147] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\Util.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [63f02e1f06bcce8dfbafcf35d21a4fdf] [81c04431647158995a1e96a1d4cb422363e86f2d] [8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00] [fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8] [10.36.132.49] [10.36.132.49] 1 Success Util.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\ 38400 63f02e1f06bcce8dfbafcf35d21a4fdf Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:35 +0000 UTC 81c04431647158995a1e96a1d4cb422363e86f2d 8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00 fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c9c462d5ce63854cb4ab58308f8210a5e659263270c98b847c1d02ba9284d33 [68a1a4c40fc81084514a3a33] [2] [SYSTEM] [u-devsqltest1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ehq3f2rs.q1x.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:45:34Z] [] [] [] [] [172.25.17.220] [172.25.17.220] 1 Success __PSScriptPolicyTest_ehq3f2rs.q1x.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:45:34 +0000 UTC 2025-08-17 09:45:34 +0000 UTC 2025-08-17 09:45:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c8346458e64bfef0e6a125d92a93f8c3af8db4aa7fbd3e49fa0b32b2a9f3ca7 [68a6afe50e0f3bd8deac4ce9, 68a6afe50e0f3bd8deac4cf8, 68a6afe50e0f3bd8deac4d0c, 68a6afe50e0f3bd8deac4d3a, 68a6afe50e0f3bd8deac4d5a, 68a6afe50e0f3bd8deac4d7a, 68a6afe50e0f3bd8deac4d9a, 68a6afe50e0f3bd8deac4dba, 68a6afe50e0f3bd8deac4dda, 68a6afe50e0f3bd8deac4dfa, 68a6afe50e0f3bd8deac4e1a, 68a6afe50e0f3bd8deac4e3a, 68a6afe50e0f3bd8deac4e5a, 68a6afe50e0f3bd8deac4e7a, 68a6afe50e0f3bd8deac4e9a, 68a6afe50e0f3bd8deac4eab, 68a6afe50e0f3bd8deac4eda, 68a6afe50e0f3bd8deac4efa, 68a6afe50e0f3bd8deac4f1a, 68a6afe50e0f3bd8deac4f3a, 68a6afe50e0f3bd8deac4f64, 68a6afe50e0f3bd8deac4f84, 68a6afe50e0f3bd8deac4fa4, 68a6afe50e0f3bd8deac4fc4, 68a6afe50e0f3bd8deac4fe4, 68a6afe50e0f3bd8deac5004, 68a6afe50e0f3bd8deac5024, 68a6afe50e0f3bd8deac5044, 68a6afe50e0f3bd8deac5064, 68a6afe50e0f3bd8deac5084, 68a6afe50e0f3bd8deac50ae, 68a6afe50e0f3bd8deac50ce, 68a6afe50e0f3bd8deac50ee, 68a6afe50e0f3bd8deac5118, 68a6afe50e0f3bd8deac5138, 68a6afe50e0f3bd8deac5158, 68a6afe50e0f3bd8deac5182, 68a6afe50e0f3bd8deac51a2, 68a6afe50e0f3bd8deac51c2, 68a6afe50e0f3bd8deac51e3, 68a6afe50e0f3bd8deac51f5, 68a6afe50e0f3bd8deac522c, 68a6afe50e0f3bd8deac5243, 68a6afe50e0f3bd8deac5263, 68a6afe50e0f3bd8deac5277, 68a6afe50e0f3bd8deac5297, 68a6afe50e0f3bd8deac52b7, 68a6afe50e0f3bd8deac52d7, 68a6afe50e0f3bd8deac52f7, 68a6afe50e0f3bd8deac5317, 68a6afe50e0f3bd8deac5337, 68a6afe50e0f3bd8deac5357, 68a6afe50e0f3bd8deac5377, 68a6afe50e0f3bd8deac539d, 68a6afe50e0f3bd8deac53b9, 68a6afe50e0f3bd8deac53dd, 68a6afe50e0f3bd8deac53fc, 68a6afe50e0f3bd8deac541d, 68a6afe50e0f3bd8deac5437, 68a6afe50e0f3bd8deac545d, 68a6afe50e0f3bd8deac547d, 68a6afe50e0f3bd8deac549d, 68a6afe50e0f3bd8deac54bd, 68a6afe50e0f3bd8deac54dd, 68a6afe50e0f3bd8deac54fd, 68a6afe50e0f3bd8deac551d, 68a6afe50e0f3bd8deac553d, 68a6afe50e0f3bd8deac5567, 68a6afe50e0f3bd8deac5587, 68a6afe50e0f3bd8deac55a7, 68a6afe50e0f3bd8deac55c7, 68a6afe50e0f3bd8deac55e7, 68a6afe50e0f3bd8deac5607, 68a6afe50e0f3bd8deac5627, 68a6afe50e0f3bd8deac5656, 68a6afe50e0f3bd8deac5677, 68a6afe50e0f3bd8deac5688, 68a6afe50e0f3bd8deac56a5, 68a6afe50e0f3bd8deac56c5, 68a6afe50e0f3bd8deac56dd, 68a6afe50e0f3bd8deac5705, 68a6afe50e0f3bd8deac571f, 68a6afe50e0f3bd8deac5745, 68a6afe50e0f3bd8deac5778, 68a6afe50e0f3bd8deac578d, 68a6afe50e0f3bd8deac57b9, 68a6afe50e0f3bd8deac57cf, 68a6afe50e0f3bd8deac57f9, 68a6afe50e0f3bd8deac580d, 68a6afe50e0f3bd8deac5826, 68a6afe50e0f3bd8deac584f, 68a6afe50e0f3bd8deac5877, 68a6afe50e0f3bd8deac588d, 68a6afe50e0f3bd8deac58bf, 68a6afe50e0f3bd8deac58cf, 68a6afe50e0f3bd8deac58fe, 68a6afe50e0f3bd8deac5909, 68a6afe50e0f3bd8deac5920, 68a6afe50e0f3bd8deac594f, 68a6afe50e0f3bd8deac596f, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeCoreNonUI.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...] [98d4172644bbcfcc3710f21af82bd7f4] [38253fb2d3807f495665ae9f0250e0e6e48c728e] [a23a4202f84dccdfd5281aa681d7ec85ebdfad97cfa0484a4f8dfce53b830dd60a995e8083a9da614061f7e695df9005] [99660be02db2ef666d940225255750cf30ab70adc37c42561000dfefc837659afa9b9801fd263de07acaac006149da4c4bf9a834896e53afb3e654e7822069f4] [172.17.30.60] [172.17.30.60] 1 Success AmeCoreNonUI.dll C:\Program Files\Fujifilm\NaxisWS6\ 4453888 98d4172644bbcfcc3710f21af82bd7f4 Not Signed 2023-11-03 20:25:42 +0000 UTC 2023-06-16 03:05:36 +0000 UTC 38253fb2d3807f495665ae9f0250e0e6e48c728e a23a4202f84dccdfd5281aa681d7ec85ebdfad97cfa0484a4f8dfce53b830dd60a995e8083a9da614061f7e695df9005 99660be02db2ef666d940225255750cf30ab70adc37c42561000dfefc837659afa9b9801fd263de07acaac006149da4c4bf9a834896e53afb3e654e7822069f4 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
8c720b6172950507ce095cf5a651cf3cb8e8a2aa959c0144c3f29c540aaef910 [68a3146b5f0c41860c8c8512, 68a3146b5f0c41860c8c8565] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\_policybase.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [eebd4f03df5dd13bbf7b36b967e78312] [65ddc336de7d067cd0a6459879a7c9554ba794dd] [2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2] [0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f] [172.17.252.131] [172.17.252.131] 1 Success _policybase.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 17969 eebd4f03df5dd13bbf7b36b967e78312 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 65ddc336de7d067cd0a6459879a7c9554ba794dd 2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2 0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c679263a27fbd607ce7190c8ea323b7ae362030e79a1ebba95720cdcdaa6e55 [68a289dc0e6a21d30c5fa31d] [2] [SYSTEM] [U-NKRONOSWEB2] [NT AUTHORITY] [C:\Kronos\openfire\ns\bin\stop.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Kronos\openfire\ns\bin\openfireService.exe] [2025-08-18T02:00:00Z] [6531a0177f81fedbb09ed25c3416e3d7] [01743b37aa19e8ceae417626bf209d4c7a5c06f9] [39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e] [dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615] [172.25.16.7] [172.25.16.7] 1 Success stop.bat E:\kronos\openfire\ns\bin\ 932 6531a0177f81fedbb09ed25c3416e3d7 Not Signed 2021-10-18 22:31:05 +0000 UTC 2021-07-02 12:32:35 +0000 UTC 01743b37aa19e8ceae417626bf209d4c7a5c06f9 39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615 2025-07-22 23:34:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c1db5e7aa9c9ad5d76b4f1f7d522b7b17092332d4995fc2392518f78174d13e [68a523949cec397f02de9f5f] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Interfaces.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [973212aa3cb7ab0a2a17074bc5ba69d9] [6d85906a470dd27d48a2db0c4c948479b85be40b] [6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc] [cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e] [172.17.22.40] [172.17.22.40] 1 Success Interfaces.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 4608 973212aa3cb7ab0a2a17074bc5ba69d9 1.0.8565.40718 Not Signed 2023-06-15 02:37:18 +0000 UTC 2023-06-15 02:37:18 +0000 UTC 6d85906a470dd27d48a2db0c4c948479b85be40b 6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c1ae98ab13bcbc9125b8c981a49c1d6d8b99ad4762922177b96e68c27654c08 [68a27b48e4b19da253904f3e] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\tmpEXO_wjcpfw15.dhs.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T01:00:50Z] [f85e53c7484a4249bc2823f1a02afcdb] [7f875190fcfa319ef524f04ca2b59d97c4d659d7] [fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf] [fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_wjcpfw15.dhs.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\ 2290479 f85e53c7484a4249bc2823f1a02afcdb Not Signed 2025-08-18 01:00:48 +0000 UTC 2025-08-18 01:00:48 +0000 UTC 7f875190fcfa319ef524f04ca2b59d97c4d659d7 fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600 2025-08-18 01:00:56 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8c0a3bc76b8521e565b1d96c05d755af47486ef405901baf2ece6c76299201df [68a6afe50e0f3bd8deac4cfb, 68a6afe50e0f3bd8deac4d0e, 68a6afe50e0f3bd8deac4d3d, 68a6afe50e0f3bd8deac4d5d, 68a6afe50e0f3bd8deac4d7c, 68a6afe50e0f3bd8deac4d9c, 68a6afe50e0f3bd8deac4dbc, 68a6afe50e0f3bd8deac4ddc, 68a6afe50e0f3bd8deac4dfc, 68a6afe50e0f3bd8deac4e1c, 68a6afe50e0f3bd8deac4e3c, 68a6afe50e0f3bd8deac4e5c, 68a6afe50e0f3bd8deac4e7c, 68a6afe50e0f3bd8deac4e9c, 68a6afe50e0f3bd8deac4eae, 68a6afe50e0f3bd8deac4edc, 68a6afe50e0f3bd8deac4efc, 68a6afe50e0f3bd8deac4f1c, 68a6afe50e0f3bd8deac4f3c, 68a6afe50e0f3bd8deac4f66, 68a6afe50e0f3bd8deac4f86, 68a6afe50e0f3bd8deac4fa6, 68a6afe50e0f3bd8deac4fc6, 68a6afe50e0f3bd8deac4fe6, 68a6afe50e0f3bd8deac5006, 68a6afe50e0f3bd8deac5026, 68a6afe50e0f3bd8deac5046, 68a6afe50e0f3bd8deac5066, 68a6afe50e0f3bd8deac5086, 68a6afe50e0f3bd8deac50b1, 68a6afe50e0f3bd8deac50d0, 68a6afe50e0f3bd8deac50f0, 68a6afe50e0f3bd8deac511a, 68a6afe50e0f3bd8deac513a, 68a6afe50e0f3bd8deac515a, 68a6afe50e0f3bd8deac5184, 68a6afe50e0f3bd8deac51a4, 68a6afe50e0f3bd8deac51c4, 68a6afe50e0f3bd8deac51e5, 68a6afe50e0f3bd8deac51f7, 68a6afe50e0f3bd8deac522f, 68a6afe50e0f3bd8deac5245, 68a6afe50e0f3bd8deac5265, 68a6afe50e0f3bd8deac527a, 68a6afe50e0f3bd8deac5299, 68a6afe50e0f3bd8deac52b9, 68a6afe50e0f3bd8deac52da, 68a6afe50e0f3bd8deac52f9, 68a6afe50e0f3bd8deac5319, 68a6afe50e0f3bd8deac5339, 68a6afe50e0f3bd8deac5359, 68a6afe50e0f3bd8deac5379, 68a6afe50e0f3bd8deac53a0, 68a6afe50e0f3bd8deac53bb, 68a6afe50e0f3bd8deac53e0, 68a6afe50e0f3bd8deac53fe, 68a6afe50e0f3bd8deac541f, 68a6afe50e0f3bd8deac543a, 68a6afe50e0f3bd8deac5460, 68a6afe50e0f3bd8deac547f, 68a6afe50e0f3bd8deac549f, 68a6afe50e0f3bd8deac54bf, 68a6afe50e0f3bd8deac54df, 68a6afe50e0f3bd8deac54ff, 68a6afe50e0f3bd8deac551f, 68a6afe50e0f3bd8deac553f, 68a6afe50e0f3bd8deac5569, 68a6afe50e0f3bd8deac5589, 68a6afe50e0f3bd8deac55a9, 68a6afe50e0f3bd8deac55ca, 68a6afe50e0f3bd8deac55e9, 68a6afe50e0f3bd8deac560a, 68a6afe50e0f3bd8deac5629, 68a6afe50e0f3bd8deac5659, 68a6afe50e0f3bd8deac5678, 68a6afe50e0f3bd8deac568a, 68a6afe50e0f3bd8deac56a7, 68a6afe50e0f3bd8deac56c7, 68a6afe50e0f3bd8deac56e0, 68a6afe50e0f3bd8deac5708, 68a6afe50e0f3bd8deac5722, 68a6afe50e0f3bd8deac5747, 68a6afe50e0f3bd8deac577b, 68a6afe50e0f3bd8deac5790, 68a6afe50e0f3bd8deac57bb, 68a6afe50e0f3bd8deac57d1, 68a6afe50e0f3bd8deac57fb, 68a6afe50e0f3bd8deac5810, 68a6afe50e0f3bd8deac5829, 68a6afe50e0f3bd8deac5852, 68a6afe50e0f3bd8deac5879, 68a6afe50e0f3bd8deac5890, 68a6afe50e0f3bd8deac58a1, 68a6afe50e0f3bd8deac58d1, 68a6afe50e0f3bd8deac58e1, 68a6afe50e0f3bd8deac590b, 68a6afe50e0f3bd8deac5923, 68a6afe50e0f3bd8deac5952, 68a6afe50e0f3bd8deac5972, 68a6afe50e0f3bd8deac5988, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-framework-16-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [a79286b457502b5059b361968203440f] [f19884755dd188e1078716d5790d6b2be016d2d5] [b25ffbf433d8a2398299cfc63b34ca2b90bec049e414a80a8c428814e136d8b6a4577553e63bd1f4ceaa11d8eacb79e5] [529dba85c0fb9aabed95e5ecc60447c81086df84732aa329cf3c278375927cc7c8ea959ddcc5ddd24858ed1566412444fe6cebf9d7ffd38a1a16000f5a62b81b] [172.17.30.60] [172.17.30.60] 1 Success cip-framework-16-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-framework-16-vc140-64 ダイナミックリンクライブラリ 547328 a79286b457502b5059b361968203440f CIP 1.6.5.2 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-13 05:40:42 +0000 UTC f19884755dd188e1078716d5790d6b2be016d2d5 b25ffbf433d8a2398299cfc63b34ca2b90bec049e414a80a8c428814e136d8b6a4577553e63bd1f4ceaa11d8eacb79e5 529dba85c0fb9aabed95e5ecc60447c81086df84732aa329cf3c278375927cc7c8ea959ddcc5ddd24858ed1566412444fe6cebf9d7ffd38a1a16000f5a62b81b 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
8b6279297001a9f437b91303e1df24a03523664479215afb83a74924917f22c5 [68a31fe2fad6bdf6009b0cd2] [2] [GreyBeard] [I-CAJump] [WVUHS] [C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:42:24Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1 C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 12:43:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8b45479a64cb441633ab079f95f98ba61da93a5097f63e46aaefe525087beaef [68a6afe50e0f3bd8deac4f4e, 68a6afe50e0f3bd8deac5097, 68a6afe50e0f3bd8deac5101, 68a6afe50e0f3bd8deac516c, 68a6afe50e0f3bd8deac5551, 68a6afe50e0f3bd8deac5643, 68a6afe50e0f3bd8deac5761, 68a6afe50e0f3bd8deac5d2a, 68a6afe50e0f3bd8deac5dac, 68a6afe50e0f3bd8deac5eea] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\libintl-8.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [67474b5a975ae484fa29659a4ed6855c] [f04828c6274c3f053b1fa23c4dd8f385b566f62d] [0b8e1af6ba6d10397bb49432b3e37a0f32d0df73bacb8f13daa2389fe2b3f7028a59de79160cf1ba45efa7aa596602cd] [3cda4baffca92195b97541c6b2d8d38f8ea011fd2ca9608a753a988cb4ff1db826da55481035e58d5e276e4767cd98b3a5fd2be767832f60f77546c65cda7a31] [172.17.30.60] [172.17.30.60] 1 Success libintl-8.dll D:\biomerieux\programs\postgresql\12.5\bin\ LGPLed libintl for Windows 829175 67474b5a975ae484fa29659a4ed6855c GNU libintl: accessing NLS message catalogs 0.20.1 Not Signed 2023-12-04 17:20:10 +0000 UTC 2020-11-11 04:09:42 +0000 UTC f04828c6274c3f053b1fa23c4dd8f385b566f62d 0b8e1af6ba6d10397bb49432b3e37a0f32d0df73bacb8f13daa2389fe2b3f7028a59de79160cf1ba45efa7aa596602cd 3cda4baffca92195b97541c6b2d8d38f8ea011fd2ca9608a753a988cb4ff1db826da55481035e58d5e276e4767cd98b3a5fd2be767832f60f77546c65cda7a31 2025-04-23 19:05:50 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-20 23:51:59 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-04-23 19:10:35.739 +0000 UTC
8b2c4068b2411da1c364ab97163a8b222ba8452c911c51c6799afb17c5b66d6a [68a46fd7a5344f430966555f, 68a4728c1dfbce27769ea0bf] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\software\Storage Manager Data Collector 20.1.2.14.exe] [Servers] [Servers Audit] [v2272] ["C:\software\Storage Manager Data Collector 20.1.2.14.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-19T12:36:02Z, 2025-08-19T12:39:10Z] [61a2de8ddb935edca1d78ad7774a2c7b] [6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e] [97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9] [6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b] [172.17.23.146] [172.17.23.146] 1 Success Storage Manager Data Collector 20.1.2.14.exe C:\software\ Dell SupportAssist Services 2042852084 61a2de8ddb935edca1d78ad7774a2c7b Dell Storage Manager Data Collector 20.1.2.14 Not Signed 2025-08-19 12:31:10 +0000 UTC 2022-08-17 14:32:05 +0000 UTC 6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e 97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9 6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b 2025-08-19 12:36:39 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
8b2bded6ab6979a63c277f41c62e15937dc5403fc74f17f14fa371316759700c [68a166b2de4e1d2a0ca2c54c] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_buqznmts.ghk.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:20:40Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_buqznmts.ghk.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:20:40 +0000 UTC 2025-08-17 05:20:40 +0000 UTC 2025-08-17 05:20:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
90754df3acb484269d866b7f4c660b2e0b71b57c8bf8f4fa97c0a113f2cac4ac [68a472b1b022648922e23584] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.mail-1.5.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [7568b973bb2e3cc6f150ad908ddf349f] [9724dd44f1abbba99c9858aa05fc91d53f59e7a5] [089bf0b45f4d8dd5c334a9852433b4e1b1c75c9b383d73adab6e72bcbebcab169c0cfc92e8ab7655935953460dfbaf5d] [0fb9ea10e95a7f67901ccf85884173834a5a3552865b50abc7e6cfd0265515476bb7d0a64a014ea0dcdcee672e9c31364aa588c63dbcf18145a771b78524c3e8] [172.17.23.146] [172.17.23.146] 1 Success javax.mail-1.5.1.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 545362 7568b973bb2e3cc6f150ad908ddf349f Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 9724dd44f1abbba99c9858aa05fc91d53f59e7a5 089bf0b45f4d8dd5c334a9852433b4e1b1c75c9b383d73adab6e72bcbebcab169c0cfc92e8ab7655935953460dfbaf5d 0fb9ea10e95a7f67901ccf85884173834a5a3552865b50abc7e6cfd0265515476bb7d0a64a014ea0dcdcee672e9c31364aa588c63dbcf18145a771b78524c3e8 2025-08-19 11:29:31 +0000 UTC None None 2022-11-27 02:42:33 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
8f8b7214d2120fb1d73129fba6d1bd628b2ca29df4907461730b5e0a7edab93f [68a4ccc785b914a60d739e4b, 68a4ce1fc826337212f53bea, 68a4d07753a851daf11e6934, 68a4d07753a851daf11e6947, 68a4d2d1ff2b441b8442812c, 68a4d2d1ff2b441b8442813f] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setsite.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z] [36475116d7add7e74ac00af1dd9878d5] [240dc97909a4dd7ecd8f512611ca18c25fead0b3] [a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe] [85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3] [10.36.132.49] [10.36.132.49] 1 Success setsite.cmd C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\ 892 36475116d7add7e74ac00af1dd9878d5 Not Signed 2021-10-20 13:41:06 +0000 UTC 2016-12-02 07:17:44 +0000 UTC 240dc97909a4dd7ecd8f512611ca18c25fead0b3 a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe 85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8f37ca61813533be820b0c6f27c1a9de68bbf3da928e6d7f2d4eeba4c98e7e33 [68a4a6605961c54c81f645c9] [2] [be10045eu] [i-nsdprodmon1] [WVUHS] [\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:29:16Z] [0f76b414d248a467589b20404835e659] [79a088b56468ea7d8b28e19e914063eaa948d267] [1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304] [9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09] [172.17.252.208] [172.17.252.208] 1 Success PC Info.ps1 \\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\ 2058 0f76b414d248a467589b20404835e659 Not Signed 2025-04-22 13:59:56 +0000 UTC 2025-07-17 18:17:19 +0000 UTC 79a088b56468ea7d8b28e19e914063eaa948d267 1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304 9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09 2025-08-19 16:29:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8f0151b909447385ff1d147edb39dbcf485b0950c3a987002149e05f7297575c [68a523949cec397f02de9f52] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsControl.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:28Z] [0c03cf54e4169918390fc3695ced37ad] [015ca7f33d308f2e835115ae9aaf496acc3f6869] [0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2] [49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459] [172.17.22.40] [172.17.22.40] 1 Success DiagnosticsControl.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Control 5632 0c03cf54e4169918390fc3695ced37ad Control 1.0.0.0 Not Signed 2023-06-15 02:38:08 +0000 UTC 2023-06-15 02:38:08 +0000 UTC 015ca7f33d308f2e835115ae9aaf496acc3f6869 0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2 49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8ededf34004b1134d8651881868330e84c0fb4773fc78e51abf172493cc8f936 [68a6537cecc6b6878d6687f6] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_swjrd4bs.epm.ps1] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-20T23:00:03Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_swjrd4bs.epm.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-20 23:00:03 +0000 UTC 2025-08-20 23:00:03 +0000 UTC 2025-08-20 23:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8ed706d5ea69cb373505d2daa3f582641f725f565983408eb2c8dbacc6d06c1a [68a1de82fe6f5faa447d1ddd] [2] [SYSTEM] [I-NCTXSA-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qm1pal05.wis.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:51:56Z] [] [] [] [] [172.17.188.22] [172.17.188.22] 1 Success __PSScriptPolicyTest_qm1pal05.wis.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:51:56 +0000 UTC 2025-08-17 13:51:56 +0000 UTC 2025-08-17 13:52:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8ec0f3a5ed337c7cef9440f6ab170b140a44a3671f9c409ada11974538bdc872 [68a4ccc785b914a60d739e56, 68a4ce1fc826337212f53bf3, 68a4d07753a851daf11e693e, 68a4d07753a851daf11e6955, 68a4d2d1ff2b441b84428136, 68a4d2d1ff2b441b8442814d] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\arybase.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [99b820a26387f39d63e59b64748df4ec] [bd55986771d861f6ab5bcac33eec5c539e7164db] [17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f] [8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa] [10.36.132.49] [10.36.132.49] 1 Success arybase.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\ 17408 99b820a26387f39d63e59b64748df4ec Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:57 +0000 UTC bd55986771d861f6ab5bcac33eec5c539e7164db 17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f 8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8ebf9e1d8faaf0bf7970fb3b858f6e69b0250021d5c1d4094f85f6f607ff1a98 [68a6afe50e0f3bd8deac4ce1, 68a6afe50e0f3bd8deac4cf0, 68a6afe50e0f3bd8deac4d24, 68a6afe50e0f3bd8deac4d32, 68a6afe50e0f3bd8deac4d52, 68a6afe50e0f3bd8deac4d72, 68a6afe50e0f3bd8deac4d92, 68a6afe50e0f3bd8deac4db2, 68a6afe50e0f3bd8deac4dd2, 68a6afe50e0f3bd8deac4df2, 68a6afe50e0f3bd8deac4e12, 68a6afe50e0f3bd8deac4e32, 68a6afe50e0f3bd8deac4e52, 68a6afe50e0f3bd8deac4e72, 68a6afe50e0f3bd8deac4e92, 68a6afe50e0f3bd8deac4ec3, 68a6afe50e0f3bd8deac4ed2, 68a6afe50e0f3bd8deac4ef2, 68a6afe50e0f3bd8deac4f12, 68a6afe50e0f3bd8deac4f32, 68a6afe50e0f3bd8deac4f5c, 68a6afe50e0f3bd8deac4f7c, 68a6afe50e0f3bd8deac4f9c, 68a6afe50e0f3bd8deac4fbc, 68a6afe50e0f3bd8deac4fdc, 68a6afe50e0f3bd8deac4ffc, 68a6afe50e0f3bd8deac501c, 68a6afe50e0f3bd8deac503c, 68a6afe50e0f3bd8deac505c, 68a6afe50e0f3bd8deac507c, 68a6afe50e0f3bd8deac50a6, 68a6afe50e0f3bd8deac50c6, 68a6afe50e0f3bd8deac50e6, 68a6afe50e0f3bd8deac5110, 68a6afe50e0f3bd8deac5130, 68a6afe50e0f3bd8deac5150, 68a6afe50e0f3bd8deac517a, 68a6afe50e0f3bd8deac519a, 68a6afe50e0f3bd8deac51ba, 68a6afe50e0f3bd8deac51db, 68a6afe50e0f3bd8deac520d, 68a6afe50e0f3bd8deac5224, 68a6afe50e0f3bd8deac523b, 68a6afe50e0f3bd8deac525b, 68a6afe50e0f3bd8deac528f, 68a6afe50e0f3bd8deac52af, 68a6afe50e0f3bd8deac52cf, 68a6afe50e0f3bd8deac52ef, 68a6afe50e0f3bd8deac530f, 68a6afe50e0f3bd8deac532f, 68a6afe50e0f3bd8deac534f, 68a6afe50e0f3bd8deac536f, 68a6afe50e0f3bd8deac5395, 68a6afe50e0f3bd8deac53b0, 68a6afe50e0f3bd8deac53d8, 68a6afe50e0f3bd8deac53f4, 68a6afe50e0f3bd8deac5415, 68a6afe50e0f3bd8deac542f, 68a6afe50e0f3bd8deac5458, 68a6afe50e0f3bd8deac5475, 68a6afe50e0f3bd8deac5495, 68a6afe50e0f3bd8deac54b5, 68a6afe50e0f3bd8deac54d5, 68a6afe50e0f3bd8deac54f5, 68a6afe50e0f3bd8deac5515, 68a6afe50e0f3bd8deac5535, 68a6afe50e0f3bd8deac555f, 68a6afe50e0f3bd8deac557f, 68a6afe50e0f3bd8deac559f, 68a6afe50e0f3bd8deac55bf, 68a6afe50e0f3bd8deac55df, 68a6afe50e0f3bd8deac55ff, 68a6afe50e0f3bd8deac561f, 68a6afe50e0f3bd8deac564c, 68a6afe50e0f3bd8deac566f, 68a6afe50e0f3bd8deac569d, 68a6afe50e0f3bd8deac56bd, 68a6afe50e0f3bd8deac56f4, 68a6afe50e0f3bd8deac56fc, 68a6afe50e0f3bd8deac5717, 68a6afe50e0f3bd8deac573d, 68a6afe50e0f3bd8deac5770, 68a6afe50e0f3bd8deac5783, 68a6afe50e0f3bd8deac57b0, 68a6afe50e0f3bd8deac57c7, 68a6afe50e0f3bd8deac57f1, 68a6afe50e0f3bd8deac5804, 68a6afe50e0f3bd8deac583d, 68a6afe50e0f3bd8deac5847, 68a6afe50e0f3bd8deac586f, 68a6afe50e0f3bd8deac5884, 68a6afe50e0f3bd8deac58b6, 68a6afe50e0f3bd8deac58c7, 68a6afe50e0f3bd8deac58f6, 68a6afe50e0f3bd8deac5901, 68a6afe50e0f3bd8deac5937, 68a6afe50e0f3bd8deac5947, 68a6afe50e0f3bd8deac5967, 68a6afe50e0f3bd8deac599e, 68a6afe50e0f3bd8deac59a6, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeVolumeRendererBase.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [4b0e0b7fcbd9e07e9b1f5387e708a044] [8537eae1fb1a771a28fc0571775711bac868b3df] [a41f18bc1bdf5c89c8268ba64a32206da9f6abe4aef6c31b079f6551313498c8c73044d00a341a20dabef5dc7e2b4560] [b41122fd11f141267ee0c9bf8d437ee5c35585f0ab7a1e544c2a704779ed1133af9cf058709df163065a07e23f5b30572aad23362cc272c76817f25de4230b85] [172.17.30.60] [172.17.30.60] 1 Success AmeVolumeRendererBase.dll C:\Program Files\Fujifilm\NaxisWS6\ 345600 4b0e0b7fcbd9e07e9b1f5387e708a044 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:01:11 +0000 UTC 8537eae1fb1a771a28fc0571775711bac868b3df a41f18bc1bdf5c89c8268ba64a32206da9f6abe4aef6c31b079f6551313498c8c73044d00a341a20dabef5dc7e2b4560 b41122fd11f141267ee0c9bf8d437ee5c35585f0ab7a1e544c2a704779ed1133af9cf058709df163065a07e23f5b30572aad23362cc272c76817f25de4230b85 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
8e1e1cc17ababa2e966888d3f24f6433f1ed6321d262827bd46c1d761d6d6955 [68a16bd60756fe54a9918f9f, 68a2149cb58debea69d7c749, 68a2bd5ff793a9057f329c05, 68a3663261f8067c48423eb6, 68a40efceddb3a9f1a71a5ff, 68a4b7cd36bc5d38057e2364] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zEventTracker.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [74bc3a324486e7932736ad47214c0260] [075fca7b2ec409d0fc70c07c24e2df41fd84890a] [05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd] [fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c] [10.20.20.68] [10.20.20.68] 1 Success zEventTracker.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 226104 74bc3a324486e7932736ad47214c0260 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 075fca7b2ec409d0fc70c07c24e2df41fd84890a 05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:42 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
8dfede6865d3c8ed1311b3e5b9a74b622ed0a2c7f9b9ce42a7f2425938d55624 [68a472b1b022648922e235b0] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xmlgraphics-commons-2.4.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [0e8876cf2cee31d25507f7f122ad4137] [8d261df049a23d40a053d2700399ea76080fe0a8] [4f83cfa4b38a9471d745145a97bf7209cb88d30e7c84b2ad7b557f6bf9c12e3b12e4048475286c0ffebc092076158896] [f36086590f6cd2ced829ea7fa24f99a374544bff7bbe771190ca447e811ab4830fd6b46c06d6f2983a112b0b7e2f3727765559f47441950aaa3b8ed94b5954bc] [172.17.23.146] [172.17.23.146] 1 Success xmlgraphics-commons-2.4.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 674446 0e8876cf2cee31d25507f7f122ad4137 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 8d261df049a23d40a053d2700399ea76080fe0a8 4f83cfa4b38a9471d745145a97bf7209cb88d30e7c84b2ad7b557f6bf9c12e3b12e4048475286c0ffebc092076158896 f36086590f6cd2ced829ea7fa24f99a374544bff7bbe771190ca447e811ab4830fd6b46c06d6f2983a112b0b7e2f3727765559f47441950aaa3b8ed94b5954bc 2025-08-19 11:29:31 +0000 UTC None None 2023-09-16 14:53:13 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 11:23:34.502 +0000 UTC
8df0f98abff9c236fe721fb72e8aeebd922e8066668caa17a4dd205b0b7c0943 [68a16bd60756fe54a9918f98, 68a2149cb58debea69d7c743, 68a2bd5ff793a9057f329bfc, 68a3663261f8067c48423eb0, 68a40efceddb3a9f1a71a5f9, 68a4b7cd36bc5d38057e235e] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZMDB.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [0df7de126b6940fc83fe88611d07038b] [0c05bb0be9131cbd3773e063e501f8be8f417fdb] [71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe] [e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c] [10.20.20.68] [10.20.20.68] 1 Success ZMDB.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 1188152 0df7de126b6940fc83fe88611d07038b Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 0c05bb0be9131cbd3773e063e501f8be8f417fdb 71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:01:56 +0000 UTC 67 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
8dcc9eb968c2c9db5ba7f8ceed8ba69324b28b276c40c0df325ac6a22b5314f5 [68a523949cec397f02de9f51] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DataModel.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:28Z] [87329721b4c0dfe9032c6801df4da2dd] [2b3ebb3cbb2c964cb1dd4c6a953115785530cca2] [4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23] [c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f] [172.17.22.40] [172.17.22.40] 1 Success DataModel.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ DataModel 28672 87329721b4c0dfe9032c6801df4da2dd DataModel 1.0.0.0 Not Signed 2023-06-15 02:37:10 +0000 UTC 2023-06-15 02:37:10 +0000 UTC 2b3ebb3cbb2c964cb1dd4c6a953115785530cca2 4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23 c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8dcb19fd968ce3a14de4d2ed31fd5e6bb6b9e14e3d67b0cce3a341612a967a81 [68a48674c4cb2500be692642] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.SwaggerGen.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z] [72329e480b920a13e31934e2f529050b] [b995a2f1cab419e3fe6b8f172a2f319af2c858d4] [ecaa1562208ca5792bb7bcbfa74da9f536da17269bf5e2f86275c9e1f62384b59909af24bb6eba0e71469b269448821a] [95e12e429bf40f90e5f3a05b99fcacabc1cdbf3e7feee5ab3fe0cf323a93d4e46fc344374f875e9570a43fa266e454519b6f68c0413a9359b064c5a82c99ffc1] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.SwaggerGen.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Swashbuckle.AspNetCore.SwaggerGen 96768 72329e480b920a13e31934e2f529050b Swashbuckle.AspNetCore.SwaggerGen 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Not Signed 2023-01-11 11:48:24 +0000 UTC 2023-01-11 11:48:24 +0000 UTC b995a2f1cab419e3fe6b8f172a2f319af2c858d4 ecaa1562208ca5792bb7bcbfa74da9f536da17269bf5e2f86275c9e1f62384b59909af24bb6eba0e71469b269448821a 95e12e429bf40f90e5f3a05b99fcacabc1cdbf3e7feee5ab3fe0cf323a93d4e46fc344374f875e9570a43fa266e454519b6f68c0413a9359b064c5a82c99ffc1 2025-07-15 14:08:03 +0000 UTC None None 2024-05-15 22:09:54 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-15 14:11:01.183 +0000 UTC
8d6314b0b132e4f90c614e0da514145f33cd612c61de6625846d0e3a851a8526 [68a1948400572dc6e953eac7] [2] [SYSTEM] [nt-compass5] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_v0hjxpqk.y0v.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:36:09Z] [] [] [] [] [172.29.172.3] [172.29.172.3] 1 Success __PSScriptPolicyTest_v0hjxpqk.y0v.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:36:09 +0000 UTC 2025-08-17 08:36:09 +0000 UTC 2025-08-17 08:36:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8d423d38d1d19e45323c114230bc1dbb9cf712c19a3b91b1d4cc7f034e4212de [68a230dc4f444eddb4af5547] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w3bfksit.znv.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:43:21Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_w3bfksit.znv.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:43:21 +0000 UTC 2025-08-17 19:43:21 +0000 UTC 2025-08-17 19:43:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
8cfdf2a28b4b2141ed76efdb646aff13e98839e0899c6adb3251d869435c7f62 [68a31b06388be01815425c5c] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:28Z] [5101faab8397e7d7a6a747b7b23e1120] [a3b33248c78cd3c905ae66c5435c2eb59feaac5d] [bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8] [379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2199 5101faab8397e7d7a6a747b7b23e1120 Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 12:22:27 +0000 UTC a3b33248c78cd3c905ae66c5435c2eb59feaac5d bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8 379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334 2025-08-18 12:22:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
93f7bf68b241e38bde286fa997117fe3c109c9480386348f4b63a940773cb204 [68a71d98771132224a617f88] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\Newtonsoft.Json.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:41Z] [6c43aba0181079ad4ec3833d9a455afb] [35b952e87086daf66cc069b8e429d158e0684cab] [5693ce6170e3fc0405f46dcb8b63525e922e8bd213cb70a67dea0a216f0d52bd2a1ac4541096ad2e548aed2af05541c7] [8209686f740a115d255c0424546ef7594abeeb59bf37c8cff0d54a1e6beaff8603df75ece18515ed8fd588ef08c56b38eacffa57985b5cdaf236d1a82f626d50] [172.25.19.12] [172.25.19.12] 1 Success Newtonsoft.Json.dll C:\Program Files\Milestone\XProtect Mobile Server\ Json.NET Portable 449024 6c43aba0181079ad4ec3833d9a455afb Json.NET 6.0.6.17820 Not Signed 2014-10-21 00:22:08 +0000 UTC 2014-10-21 00:22:08 +0000 UTC 35b952e87086daf66cc069b8e429d158e0684cab 5693ce6170e3fc0405f46dcb8b63525e922e8bd213cb70a67dea0a216f0d52bd2a1ac4541096ad2e548aed2af05541c7 8209686f740a115d255c0424546ef7594abeeb59bf37c8cff0d54a1e6beaff8603df75ece18515ed8fd588ef08c56b38eacffa57985b5cdaf236d1a82f626d50 2025-07-16 19:27:14 +0000 UTC None None 2024-03-24 06:39:54 +0000 UTC 71 0 KNOWN 0 Microsoft attested file 2025-07-16 19:30:32.656 +0000 UTC
93e1c58a8b37a06fd12513dac10c56cb4f8142f59bf22ade44711fc3fa700549 [68a16bd60756fe54a9918f97, 68a2149cb58debea69d7c742, 68a2bd5ff793a9057f329bfb, 68a3663261f8067c48423eaf, 68a40efceddb3a9f1a71a5f7, 68a4b7cd36bc5d38057e235d] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zLooper.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [09bccc0138705459b9770a748b63b844] [63ea04e8e1d4267982eafc40cd7f408dcb17f0d1] [ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a] [bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331] [10.20.20.68] [10.20.20.68] 1 Success zLooper.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 69432 09bccc0138705459b9770a748b63b844 Zoom 1,0,0,0 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 63ea04e8e1d4267982eafc40cd7f408dcb17f0d1 ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:04:30 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
93dd4bed6eaeb61ac692bad889927b385bccaaab087061310c1e3af53f9057dd [68a6afe50e0f3bd8deac4cef, 68a6afe50e0f3bd8deac4d1f, 68a6afe50e0f3bd8deac4d2f, 68a6afe50e0f3bd8deac4d4e, 68a6afe50e0f3bd8deac4d6d, 68a6afe50e0f3bd8deac4d8f, 68a6afe50e0f3bd8deac4db0, 68a6afe50e0f3bd8deac4dcd, 68a6afe50e0f3bd8deac4ded, 68a6afe50e0f3bd8deac4e0e, 68a6afe50e0f3bd8deac4e2d, 68a6afe50e0f3bd8deac4e4e, 68a6afe50e0f3bd8deac4e6e, 68a6afe50e0f3bd8deac4e8e, 68a6afe50e0f3bd8deac4ebf, 68a6afe50e0f3bd8deac4ecd, 68a6afe50e0f3bd8deac4eed, 68a6afe50e0f3bd8deac4f0e, 68a6afe50e0f3bd8deac4f2e, 68a6afe50e0f3bd8deac4f57, 68a6afe50e0f3bd8deac4f77, 68a6afe50e0f3bd8deac4f97, 68a6afe50e0f3bd8deac4fb8, 68a6afe50e0f3bd8deac4fd7, 68a6afe50e0f3bd8deac4ff8, 68a6afe50e0f3bd8deac5017, 68a6afe50e0f3bd8deac5037, 68a6afe50e0f3bd8deac5058, 68a6afe50e0f3bd8deac5077, 68a6afe50e0f3bd8deac50a1, 68a6afe50e0f3bd8deac50c2, 68a6afe50e0f3bd8deac50e1, 68a6afe50e0f3bd8deac510b, 68a6afe50e0f3bd8deac512c, 68a6afe50e0f3bd8deac514c, 68a6afe50e0f3bd8deac5175, 68a6afe50e0f3bd8deac5196, 68a6afe50e0f3bd8deac51b6, 68a6afe50e0f3bd8deac51d7, 68a6afe50e0f3bd8deac5209, 68a6afe50e0f3bd8deac5222, 68a6afe50e0f3bd8deac5238, 68a6afe50e0f3bd8deac5257, 68a6afe50e0f3bd8deac528b, 68a6afe50e0f3bd8deac52aa, 68a6afe50e0f3bd8deac52cb, 68a6afe50e0f3bd8deac52ea, 68a6afe50e0f3bd8deac530b, 68a6afe50e0f3bd8deac532b, 68a6afe50e0f3bd8deac534a, 68a6afe50e0f3bd8deac536b, 68a6afe50e0f3bd8deac538a, 68a6afe50e0f3bd8deac5391, 68a6afe50e0f3bd8deac53b3, 68a6afe50e0f3bd8deac53d2, 68a6afe50e0f3bd8deac53f0, 68a6afe50e0f3bd8deac5411, 68a6afe50e0f3bd8deac542e, 68a6afe50e0f3bd8deac5451, 68a6afe50e0f3bd8deac5471, 68a6afe50e0f3bd8deac5490, 68a6afe50e0f3bd8deac54b0, 68a6afe50e0f3bd8deac54d1, 68a6afe50e0f3bd8deac54f2, 68a6afe50e0f3bd8deac5510, 68a6afe50e0f3bd8deac5530, 68a6afe50e0f3bd8deac555a, 68a6afe50e0f3bd8deac557a, 68a6afe50e0f3bd8deac559a, 68a6afe50e0f3bd8deac55bb, 68a6afe50e0f3bd8deac55db, 68a6afe50e0f3bd8deac55fb, 68a6afe50e0f3bd8deac561b, 68a6afe50e0f3bd8deac5645, 68a6afe50e0f3bd8deac566b, 68a6afe50e0f3bd8deac5699, 68a6afe50e0f3bd8deac56b9, 68a6afe50e0f3bd8deac56f1, 68a6afe50e0f3bd8deac5701, 68a6afe50e0f3bd8deac5734, 68a6afe50e0f3bd8deac5739, 68a6afe50e0f3bd8deac576c, 68a6afe50e0f3bd8deac5781, 68a6afe50e0f3bd8deac57ad, 68a6afe50e0f3bd8deac57c4, 68a6afe50e0f3bd8deac57ed, 68a6afe50e0f3bd8deac5803, 68a6afe50e0f3bd8deac5839, 68a6afe50e0f3bd8deac5843, 68a6afe50e0f3bd8deac586b, 68a6afe50e0f3bd8deac5883, 68a6afe50e0f3bd8deac58ba, 68a6afe50e0f3bd8deac58c3, 68a6afe50e0f3bd8deac58f1, 68a6afe50e0f3bd8deac591d, 68a6afe50e0f3bd8deac5933, 68a6afe50e0f3bd8deac5943, 68a6afe50e0f3bd8deac5962, 68a6afe50e0f3bd8deac599a, 68a6afe50e0f3bd8deac59a5, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\PrometheusClt.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [4a6b079b92bf0c55a04eece082bdb51d] [5d6aa4d8a198e6412ba425620eb64bcc96a6be8a] [f227411cf3b329b2c48c053e32fb36ea61297c488879050572f68ec697c8b1a4425b5393509358fe3bdaa9bdccbfb736] [66c778613af1402d28835477c39ea56ca727a3fe0a091718780fd3c4fe1acbfdb269b22517052dce9bd9f54814b027f3a5d04f63193693732a34c9ae541150f7] [172.17.30.60] [172.17.30.60] 1 Success PrometheusClt.dll C:\Program Files\Fujifilm\NaxisWS6\ 764928 4a6b079b92bf0c55a04eece082bdb51d Not Signed 2023-11-03 20:25:56 +0000 UTC 2023-06-16 03:04:33 +0000 UTC 5d6aa4d8a198e6412ba425620eb64bcc96a6be8a f227411cf3b329b2c48c053e32fb36ea61297c488879050572f68ec697c8b1a4425b5393509358fe3bdaa9bdccbfb736 66c778613af1402d28835477c39ea56ca727a3fe0a091718780fd3c4fe1acbfdb269b22517052dce9bd9f54814b027f3a5d04f63193693732a34c9ae541150f7 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
93c513e66a8974831a79fa4f1e81c7851fd38536fbaeb814fdaa200fa36e1ad3 [68a712752561fbf503357df5] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\4vm1tmr5\4vm1tmr5.dll] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:30:56Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success 4vm1tmr5.dll C:\Users\georgemag\AppData\Local\Temp\4vm1tmr5\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-21 12:35:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
934ef5c14e218db7b86847cb7e8e5a2b985ccfa55c27805c72d8c3fb5103cfb4 [68a2369b3b43e7f02650554c] [2] [SYSTEM] [u-hvhprod12] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nz35alhg.5g5.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:07:42Z] [] [] [] [] [172.25.19.217] [172.25.19.217] 1 Success __PSScriptPolicyTest_nz35alhg.5g5.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:07:42 +0000 UTC 2025-08-17 20:07:42 +0000 UTC 2025-08-17 20:07:55 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
930b1b9c71a3c5e16852cb23eaa4b624d9cfd50f4730ace88b34f3a2e0cc80f4 [68a38868065f0a2246a5fd5e] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dxct1uzy.sdn.ps1] [Servers] [Servers Audit] [v2269.866] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T20:09:06Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_dxct1uzy.sdn.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 20:09:06 +0000 UTC 2025-08-18 20:09:06 +0000 UTC 2025-08-18 20:09:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
93012784c597277ba019572d4a60fc2b45f437fe68c39635b35ffdfb87b1bb13 [68a5cc2091727380a40e2b0d] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\233afcee-6ced-4993-9401-b562fb70f217.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:31Z] [b88f41bbc1e02900c47403eea28a10ea] [9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552] [c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334] [904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e] [172.17.252.194] [172.17.252.194] 1 Success 233afcee-6ced-4993-9401-b562fb70f217.ps1 C:\_work_devops_mdi\_temp\ 790 b88f41bbc1e02900c47403eea28a10ea Not Signed 2025-08-20 13:22:30 +0000 UTC 2025-08-20 13:22:30 +0000 UTC 9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552 c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334 904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e 2025-08-20 13:22:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
923528caae4b397941a4cc7d31559130c34e624b777748c1711b22c6b1075878 [68a311cdc2d0d6e3eb77f21a] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AD_Direct_reports.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [09cd0b51ba652e8b8f7a8f4156940364] [6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57] [a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b] [62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515] [172.25.17.86] [172.25.17.86] 1 Success AD_Direct_reports.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 3119 09cd0b51ba652e8b8f7a8f4156940364 Not Signed 2023-08-21 12:44:06 +0000 UTC 2025-06-13 14:43:10 +0000 UTC 6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57 a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b 62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
91ff3783187c447417b1e043d6548c6afd0bb6d23f08d61fd02459bae9712a45 [68a32e4676197e42f5a2fbd5, 68a45c02fdc422fb7bc1af75] [2] [SYSTEM] [i-vCUACPub] [NT AUTHORITY] [C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\AACM.dll] [Servers] [Servers Audit] [v2253.852, v2272.867] [] [Not Signed] [C:\Windows\SysWOW64\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T13:38:25Z, 2025-08-19T11:02:01Z] [65acd3aadd460333cdf00b7aa3496083] [409f060afc9596b65a39165598013d9f3c666d1c] [2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0] [b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6] [172.17.196.36] [172.17.196.36] 1 Success AACM.dll C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\ Cisco Unified Attendant Console 6745088 65acd3aadd460333cdf00b7aa3496083 Cisco Unified Attendant Console Advanced WEB 12.0.5.1823 Not Signed 2019-07-19 18:20:02 +0000 UTC 2019-07-19 18:20:02 +0000 UTC 409f060afc9596b65a39165598013d9f3c666d1c 2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0 b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6 2025-05-15 16:47:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
918cae3b9be1ee964521f29f95df80ca661f04fbfd790717c2bf044354d93d05 [68a19bf9f9fa0cbc93a3e18c] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xkmgggns.rsj.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:08:04Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_xkmgggns.rsj.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:08:04 +0000 UTC 2025-08-17 09:08:04 +0000 UTC 2025-08-17 09:08:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
917ab3848c77e9593866c25b4b135e29b394f91214d295074a9dcbb07592d16b [68a524b7d65490728dc99895] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wsefqq2c.g5h.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T01:28:13Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_wsefqq2c.g5h.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 01:28:13 +0000 UTC 2025-08-20 01:28:13 +0000 UTC 2025-08-20 01:28:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9112c932f1ebb8bb91402140bcb506afc616bc2f94c27daebed1975ab396c6ea [68a5d0d993ef7c7d1206147e] [2] [CA_Jnt_FormFast2] [i-NTFFWEB1] [WVUHS] [C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_rojnfgz1.5of.ps1] [Servers] [Servers Audit] [v2291.881] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe] [2025-08-20T13:42:41Z] [82750d3658af09bec0468e8d3ce2aeb1] [85d51df1579e58a1cb11665ee95e4858850d8401] [b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e] [9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23] [172.17.253.163] [172.17.253.163] 1 Success __PSScriptPolicyTest_rojnfgz1.5of.ps1 C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\ 80 82750d3658af09bec0468e8d3ce2aeb1 Not Signed 2025-08-20 13:42:41 +0000 UTC 2025-08-20 13:42:41 +0000 UTC 85d51df1579e58a1cb11665ee95e4858850d8401 b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e 9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23 2025-08-20 13:42:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
91120b1794849724fc9ad653ec6607ac3f1c69a20e5b813ed9691b465f3deb06 [68a1de00310078f5309be0d1] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0qhxxeok.d1t.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:49:44Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_0qhxxeok.d1t.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:49:44 +0000 UTC 2025-08-17 13:49:44 +0000 UTC 2025-08-17 13:49:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
90d4051cf517ac7bbe8c79ad0c4ec7f4649ce5ab42959aad199aa9cd94b1b87b [68a34b98a6132bf659cce5c2, 68a34df0b71eea1289980a27] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Medeco.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:20Z, 2025-08-18T15:58:10Z] [732c49ecabd8c6c5a5c7681a37b0fc1b] [cc60b5a4ed985f4a278f5a9d213069668e158fb6] [428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1] [35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.Medeco.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Medeco Integration 163328 732c49ecabd8c6c5a5c7681a37b0fc1b Access It! 10.1.0.7 Not Signed 2023-04-26 15:02:34 +0000 UTC 2023-04-26 15:02:34 +0000 UTC cc60b5a4ed985f4a278f5a9d213069668e158fb6 428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1 35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef 2025-05-13 05:13:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
90a5f9ceaed977edfe8f514dcb15ddf5001cf9111a8fcd87b7cd8b0bb6231acc [68a472b1b022648922e2358c] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jcommon-1.0.17.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [d123cd511e2ebc4542e8b424cd20bbde] [7bcb68fde08258e59fe7bcc758c08af830fb2c1d] [0932599e79151670367c006eae1dda81952b37d3aea65fdacab09e0ddd834647eb180bdce7704a5d86016482bcb8bdd8] [2e49d42617502eed52dff5f3fbf620612b5da8f6f1c37f327c6a246f5717860944358d6d508ad8596892217494545d39b28fdfc845b61677dfd9ff99f122f9f8] [172.17.23.146] [172.17.23.146] 1 Success jcommon-1.0.17.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 506386 d123cd511e2ebc4542e8b424cd20bbde Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 7bcb68fde08258e59fe7bcc758c08af830fb2c1d 0932599e79151670367c006eae1dda81952b37d3aea65fdacab09e0ddd834647eb180bdce7704a5d86016482bcb8bdd8 2e49d42617502eed52dff5f3fbf620612b5da8f6f1c37f327c6a246f5717860944358d6d508ad8596892217494545d39b28fdfc845b61677dfd9ff99f122f9f8 2025-08-19 11:29:31 +0000 UTC None None 2024-12-10 23:11:45 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
90812f7b5c7f20d66571d9443f189b21105bcb1623cc4f53e465e092c616b667 [68a18597b6a5f761a88cfa32, 68a2d8ecf31eeab05c2823c5, 68a428c2b79a1ebc024dfc24, 68a57a5ae65234fd31d524a1, 68a6cbfb2a5793a672827170] [2] [hppc] [uvOSCCN2] [UVOSCCN2] [C:\bin\OsccBackup.cmd] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:30:25Z, 2025-08-18T07:30:24Z, 2025-08-19T07:30:24Z, 2025-08-20T07:30:25Z, 2025-08-21T07:30:25Z] [c799558e2a940cce61ff908c235a04ef] [e991cadd79ff635a53623530e85eeb7b958ee0cc] [7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e] [46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228] [172.25.18.157] [172.25.18.157] 1 Success OsccBackup.cmd C:\bin\ 2975 c799558e2a940cce61ff908c235a04ef Not Signed 2022-05-08 10:28:02 +0000 UTC 2022-05-08 10:28:59 +0000 UTC e991cadd79ff635a53623530e85eeb7b958ee0cc 7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e 46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228 2025-08-09 07:30:28 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
98c5823148a8173192ad3c72d9f4ea39c6c9f246fdbbaa0951d52c0c5f8e77b8 [68a5239e621d09b2b1ed5e56] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\RecordingsGUI.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:37Z] [8a5f1e57ae11d28423d76cb656a26c7d] [442bc003f5180cc49734aa713f71766826622f60] [7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e] [f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c] [172.17.22.40] [172.17.22.40] 1 Success RecordingsGUI.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ RecordingsGUI 51200 8a5f1e57ae11d28423d76cb656a26c7d RecordingsGUI 1.0.0.0 Not Signed 2023-06-15 02:37:54 +0000 UTC 2023-06-15 02:37:54 +0000 UTC 442bc003f5180cc49734aa713f71766826622f60 7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
98a95506abccaa35c07debc753da55a30e02cdb9ebf9bf1c4cb2c893db23c09e [68a50bca7779aa65cf4b6098] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\MarquetteA5_5_3_10_3.msi] [Servers] [Servers Audit] [v2284] [] [PHILIPS FRANCE COMMERCIAL SAS] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:41:53Z] [0626022f937e6547de857658b88f7e30] [a320f0c9212d7d0249b75c3c1c0a5a7708f0e224] [f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84] [67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc] [172.17.23.18] [172.17.23.18] 1 Success MarquetteA5_5_3_10_3.msi C:\Users\CA_gs10109\Downloads\ 3076096 0626022f937e6547de857658b88f7e30 PHILIPS FRANCE COMMERCIAL SAS 2025-08-19 23:41:50 +0000 UTC 2025-08-19 23:41:52 +0000 UTC a320f0c9212d7d0249b75c3c1c0a5a7708f0e224 f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84 67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc 2025-08-19 23:42:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
989ec9cc45afa5d70a781bf3c041eef2cf9b3a15b63b30448e8086f98d1efafb [68a4709fa6c6568ae291d430] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ISSetup.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\software\Storage Manager Data Collector 20.1.2.14.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:39:56Z] [8656d6fdd16ca1d6e9155383064f43db] [1b21d73c29fc305a870b33b76d3aa997e45adc4a] [3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd] [3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d] [172.17.23.146] [172.17.23.146] 1 Success ISSetup.dll C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ InstallShield (R) Setup Engine 3583048 8656d6fdd16ca1d6e9155383064f43db InstallShield 22.0 Not Signed 2025-08-19 12:39:56 +0000 UTC 2025-08-19 12:39:56 +0000 UTC 1b21d73c29fc305a870b33b76d3aa997e45adc4a 3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd 3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d 2025-08-19 12:39:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
98785b23979f24fe0b15bb479bcb033372f10e9633e1a69522168b6a35b14392 [68a523949cec397f02de9f41] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AEMDictionary.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:24Z] [f3f4cfa0df21c55ead9c48d0dfa26574] [6ea7f80899194a24fbf750c0551fc6be488c11eb] [80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4] [4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c] [172.17.22.40] [172.17.22.40] 1 Success AEMDictionary.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 286720 f3f4cfa0df21c55ead9c48d0dfa26574 1.0.8565.40716 Not Signed 2023-06-15 02:37:16 +0000 UTC 2023-06-15 02:37:16 +0000 UTC 6ea7f80899194a24fbf750c0551fc6be488c11eb 80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4 4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9825e9ad234a4e8cfd0ca4f761bf814b06e39e903bb6479f57f6573a4cf3a741 [68a5c81947601aee5f76e917, 68a5c9d7599432010e418bd0] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\lttwn12n.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\regsvr32.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe] [2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z] [b36c26c98901c689faac7cc8689ea9c6] [11f1a1415556439b8c6d0307ec1d79b8ef93f3d7] [2af2471f93b342d3dc11033da9fe25a49a62cf51887cfdff58382672bc77f2b211516a8548d98355088e8813b1b8eeb3] [1e6605e2ba55084297cfc3cffb5d50a288c0e2adc0d1810cb59df4d43b7d842f6cf68d33e0faef8b507ca849b16b4b71b6c3199729603d6a25edfba2832b9206] [172.17.20.104] [172.17.20.104] 1 Success lttwn12n.dll E:\QS1\ LEADTOOLS(r) DLL for Win32 41472 b36c26c98901c689faac7cc8689ea9c6 LEADTOOLS(r) DLL for Win32 12.1.0.020 Not Signed 2025-04-14 13:01:50 +0000 UTC 2001-04-30 20:52:56 +0000 UTC 11f1a1415556439b8c6d0307ec1d79b8ef93f3d7 2af2471f93b342d3dc11033da9fe25a49a62cf51887cfdff58382672bc77f2b211516a8548d98355088e8813b1b8eeb3 1e6605e2ba55084297cfc3cffb5d50a288c0e2adc0d1810cb59df4d43b7d842f6cf68d33e0faef8b507ca849b16b4b71b6c3199729603d6a25edfba2832b9206 2025-07-17 16:15:22 +0000 UTC None None 2021-06-09 03:18:36 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-17 16:17:46.576 +0000 UTC
97c328205920d390811489de9f6422c397c9e92051610690a32e21f9ec986cbc [68a523949cec397f02de9f57] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventsGeneratorModule.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:29Z] [a00640fae1d989e1a7694484ed783170] [b6505d65a800bad37bfc415fcc8cffcb2560af3d] [b031056e682423161abbb2a8ef1ebefd8485f567c8b6ba80f508c1b0eaf6bc3f58b3db9e46829377148b3f2f3bb03413] [2a2afb04ea4b20897e080806c21e17e1100eab123d7b528b75286df1b4403cb69f92c5f6d9f2f9ab4856086c0cbdb95a8523636dd985d4bb5c928e45eba67e7a] [172.17.22.40] [172.17.22.40] 1 Success EventsGeneratorModule.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ EventsGeneratorModule 22016 a00640fae1d989e1a7694484ed783170 EventsGeneratorModule 1.0.0.0 Not Signed 2023-06-15 02:37:12 +0000 UTC 2023-06-15 02:37:12 +0000 UTC b6505d65a800bad37bfc415fcc8cffcb2560af3d b031056e682423161abbb2a8ef1ebefd8485f567c8b6ba80f508c1b0eaf6bc3f58b3db9e46829377148b3f2f3bb03413 2a2afb04ea4b20897e080806c21e17e1100eab123d7b528b75286df1b4403cb69f92c5f6d9f2f9ab4856086c0cbdb95a8523636dd985d4bb5c928e45eba67e7a 2025-08-20 01:23:32 +0000 UTC None None 2022-12-19 17:24:03 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
975ea175eadfdf66d1737a5bba6259c1d7645ef6e366d2065c42a537522f9e74 [68a16fe817c245683297ce48] [2] [SQLSERVERAGENT] [SUNR1MSD] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_sasv0xj3.dj0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] [D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] [2025-08-17T06:00:01Z] [] [] [] [] [172.24.20.7] [172.24.20.7] 1 Success __PSScriptPolicyTest_sasv0xj3.dj0.ps1 C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:00:01 +0000 UTC 2025-08-17 06:00:01 +0000 UTC 2025-08-17 06:00:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
96ff07a0eedbd7076a72e8437e437fdb2daa4fc1a9e602b883e7be15ab56ee7b [68a46f91773c0242a5f9ac18] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\RSWHostConfigLib.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Windows\Installer\MSICF19.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T12:35:28Z] [5c96012a71c21f3471db121fff79e09e] [9ae178c32bff752a942acecdafcc0b92a067c0a1] [7bef724546e99adf44e2d7f16d07a6808efcfac7ab6296f681a44ec0e7f591453a6cccae7d7ebca2c6ff1320e3471bbb] [24bc3088fbcf7c4276222943665a3abf0bba20870f74ccfd72432eb6bae83eb5488e3e68f3690405dffa0767f09866b985a5688e59903374df13c5b91ce80af8] [172.17.23.146] [172.17.23.146] 1 Success RSWHostConfigLib.dll E:\Program Files\Dell EMC\Storage Manager\ Dell Storage Host Config Module 70656 5c96012a71c21f3471db121fff79e09e Dell Storage Manager 1.4.0.109 Not Signed 2021-12-22 05:20:48 +0000 UTC 2021-12-22 05:20:48 +0000 UTC 9ae178c32bff752a942acecdafcc0b92a067c0a1 7bef724546e99adf44e2d7f16d07a6808efcfac7ab6296f681a44ec0e7f591453a6cccae7d7ebca2c6ff1320e3471bbb 24bc3088fbcf7c4276222943665a3abf0bba20870f74ccfd72432eb6bae83eb5488e3e68f3690405dffa0767f09866b985a5688e59903374df13c5b91ce80af8 2025-05-02 01:14:05 +0000 UTC None None 2024-10-30 10:53:27 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-05-02 01:15:37.59 +0000 UTC
966b014872df2b10771a6d6599d9eec4fd8d07864b4640d6e4292d0ee2318cd3 [68a19d4d339a5398da5a5181] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zolibxmz.drt.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:13:44Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_zolibxmz.drt.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:13:44 +0000 UTC 2025-08-17 09:13:44 +0000 UTC 2025-08-17 09:13:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9647877a7e4fdb83bbda5a2173ff9135b2a52d3d083c444ca8af53f35f2d4837 [68a1d738c11dd0afce1560b6, 68a328b63412995838d5c362] [2] [SYSTEM] [ITC-RODC-1] [NT AUTHORITY] [C:\Program Files\Npcap\CheckStatus.bat] [Servers] [Servers Audit] [v2248, v2253] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T13:11:09Z, 2025-08-18T13:11:05Z] [c1a174f329ffa8b331f6fc4fe6ab42f6] [47e61c26d8e04ebdf10dc2a848f7479ec31bd752] [a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c] [4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076] [172.17.20.198] [172.17.20.198] 1 Success CheckStatus.bat C:\Program Files\Npcap\ 880 c1a174f329ffa8b331f6fc4fe6ab42f6 Not Signed 2020-09-25 03:12:08 +0000 UTC 2020-09-25 03:12:08 +0000 UTC 47e61c26d8e04ebdf10dc2a848f7479ec31bd752 a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c 4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076 2025-04-17 02:20:31 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
95feb7eb3e3ecf712806fd2a8be19bdd62c76ef7862756398639298a88f7cae0 [68a523949cec397f02de9f58] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ExcitersDiagPlugIn.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:29Z] [159dbdfc8777d46c067121e0c063c16f] [039bdf8d9e0ab6315b08c9564545dd6f3cd1a574] [fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155] [e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37] [172.17.22.40] [172.17.22.40] 1 Success ExcitersDiagPlugIn.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ ExcitersDiagPlugIn 18944 159dbdfc8777d46c067121e0c063c16f ExcitersDiagPlugIn 1.0.0.0 Not Signed 2023-06-15 02:38:02 +0000 UTC 2023-06-15 02:38:02 +0000 UTC 039bdf8d9e0ab6315b08c9564545dd6f3cd1a574 fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155 e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89 [68a4e8a1ad898641af98fd93, 68a4fcd0011d94a251a4ef2f] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\nsProcess.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\nsProcess.dll] [Servers] [Servers Audit] [v2283, v2284] [] [Not Signed] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z] [05450face243b3a7472407b999b03a72] [ffd88af2e338ae606c444390f7eaaf5f4aef2cd9] [a9a59ab1a641545718cf538ee664407d11c6b697dc816b017d3dde86228a6782570c7fa422735f3cc8626f499d4b7483] [f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b] [172.17.23.18] [172.17.23.18] 1 Success nsProcess.dll C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\ 4096 05450face243b3a7472407b999b03a72 Not Signed 2025-08-19 21:11:56 +0000 UTC 2025-08-19 21:11:56 +0000 UTC ffd88af2e338ae606c444390f7eaaf5f4aef2cd9 a9a59ab1a641545718cf538ee664407d11c6b697dc816b017d3dde86228a6782570c7fa422735f3cc8626f499d4b7483 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b 2025-08-19 21:12:01 +0000 UTC None None 2025-08-15 22:51:22 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-08-19 04:32:47.43 +0000 UTC
952073dff01fd0ba7ccbbfaf8a6284e08720809453b4f0930fe9c9d9775d4955 [68a6afe50e0f3bd8deac4d0a, 68a6afe50e0f3bd8deac4d1e, 68a6afe50e0f3bd8deac4d2c, 68a6afe50e0f3bd8deac4d4c, 68a6afe50e0f3bd8deac4d6c, 68a6afe50e0f3bd8deac4d8c, 68a6afe50e0f3bd8deac4dac, 68a6afe50e0f3bd8deac4dcc, 68a6afe50e0f3bd8deac4dec, 68a6afe50e0f3bd8deac4e0c, 68a6afe50e0f3bd8deac4e2c, 68a6afe50e0f3bd8deac4e4c, 68a6afe50e0f3bd8deac4e6c, 68a6afe50e0f3bd8deac4e8c, 68a6afe50e0f3bd8deac4ebd, 68a6afe50e0f3bd8deac4ecc, 68a6afe50e0f3bd8deac4eec, 68a6afe50e0f3bd8deac4f0c, 68a6afe50e0f3bd8deac4f2c, 68a6afe50e0f3bd8deac4f56, 68a6afe50e0f3bd8deac4f76, 68a6afe50e0f3bd8deac4f96, 68a6afe50e0f3bd8deac4fb6, 68a6afe50e0f3bd8deac4fd6, 68a6afe50e0f3bd8deac4ff6, 68a6afe50e0f3bd8deac5016, 68a6afe50e0f3bd8deac5036, 68a6afe50e0f3bd8deac5056, 68a6afe50e0f3bd8deac5076, 68a6afe50e0f3bd8deac50a0, 68a6afe50e0f3bd8deac50c0, 68a6afe50e0f3bd8deac50e0, 68a6afe50e0f3bd8deac510a, 68a6afe50e0f3bd8deac512a, 68a6afe50e0f3bd8deac514a, 68a6afe50e0f3bd8deac5174, 68a6afe50e0f3bd8deac5194, 68a6afe50e0f3bd8deac51b4, 68a6afe50e0f3bd8deac51d5, 68a6afe50e0f3bd8deac5207, 68a6afe50e0f3bd8deac521e, 68a6afe50e0f3bd8deac5235, 68a6afe50e0f3bd8deac5255, 68a6afe50e0f3bd8deac5289, 68a6afe50e0f3bd8deac52a9, 68a6afe50e0f3bd8deac52c9, 68a6afe50e0f3bd8deac52e9, 68a6afe50e0f3bd8deac5309, 68a6afe50e0f3bd8deac5329, 68a6afe50e0f3bd8deac5349, 68a6afe50e0f3bd8deac5369, 68a6afe50e0f3bd8deac5389, 68a6afe50e0f3bd8deac538f, 68a6afe50e0f3bd8deac53cb, 68a6afe50e0f3bd8deac53cf, 68a6afe50e0f3bd8deac53ee, 68a6afe50e0f3bd8deac540f, 68a6afe50e0f3bd8deac544a, 68a6afe50e0f3bd8deac544f, 68a6afe50e0f3bd8deac546f, 68a6afe50e0f3bd8deac548f, 68a6afe50e0f3bd8deac54af, 68a6afe50e0f3bd8deac54cf, 68a6afe50e0f3bd8deac54ef, 68a6afe50e0f3bd8deac550f, 68a6afe50e0f3bd8deac552f, 68a6afe50e0f3bd8deac5558, 68a6afe50e0f3bd8deac5579, 68a6afe50e0f3bd8deac5599, 68a6afe50e0f3bd8deac55b9, 68a6afe50e0f3bd8deac55d9, 68a6afe50e0f3bd8deac55f9, 68a6afe50e0f3bd8deac5619, 68a6afe50e0f3bd8deac563f, 68a6afe50e0f3bd8deac5669, 68a6afe50e0f3bd8deac5697, 68a6afe50e0f3bd8deac56b7, 68a6afe50e0f3bd8deac56ef, 68a6afe50e0f3bd8deac56f7, 68a6afe50e0f3bd8deac5731, 68a6afe50e0f3bd8deac5737, 68a6afe50e0f3bd8deac576a, 68a6afe50e0f3bd8deac579f, 68a6afe50e0f3bd8deac57ab, 68a6afe50e0f3bd8deac57c1, 68a6afe50e0f3bd8deac57eb, 68a6afe50e0f3bd8deac581f, 68a6afe50e0f3bd8deac5838, 68a6afe50e0f3bd8deac5841, 68a6afe50e0f3bd8deac5869, 68a6afe50e0f3bd8deac589f, 68a6afe50e0f3bd8deac58b1, 68a6afe50e0f3bd8deac58c1, 68a6afe50e0f3bd8deac58f0, 68a6afe50e0f3bd8deac591b, 68a6afe50e0f3bd8deac5932, 68a6afe50e0f3bd8deac5941, 68a6afe50e0f3bd8deac5961, 68a6afe50e0f3bd8deac5998, 68a6afe50e0f3bd8deac59a1, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeCoreEngine.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:18Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [87b71725252e091a4cb61cbc3693b633] [a9b3200651eb21921d94c26452b0690e2f06a0fe] [e0217182a7d1d0cd80ab8694414fc84d2ae92c68a2229b212130680fc11edd0f0664bdde1175f532df6862115ed551e0] [131de62dc9e8f7a970ced59fb24bcc20e7f569a112741e60b11c69cb90c4031d17c7ddaee4998ba09bc218f11327ab337a1b42b2dc8eb83ed0657f406203ed43] [172.17.30.60] [172.17.30.60] 1 Success AmeCoreEngine.dll C:\Program Files\Fujifilm\NaxisWS6\ 8249856 87b71725252e091a4cb61cbc3693b633 Not Signed 2023-11-03 20:25:42 +0000 UTC 2023-06-16 03:06:31 +0000 UTC a9b3200651eb21921d94c26452b0690e2f06a0fe e0217182a7d1d0cd80ab8694414fc84d2ae92c68a2229b212130680fc11edd0f0664bdde1175f532df6862115ed551e0 131de62dc9e8f7a970ced59fb24bcc20e7f569a112741e60b11c69cb90c4031d17c7ddaee4998ba09bc218f11327ab337a1b42b2dc8eb83ed0657f406203ed43 2025-05-07 14:27:21 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
95110c1a469b7d9b3827ddb372ed092836c8321395b9c25ba549b5dda9fbbed3 [68a34b98a6132bf659cce5ad, 68a34df0b71eea1289980a12] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Common.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z] [408f1dc91e0b03f6f257c34bdbc09d01] [d5a3758015b9885cb698065828a86628665aa3ad] [039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f] [9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.Common.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Common Library 564736 408f1dc91e0b03f6f257c34bdbc09d01 Access It! 10.1.0.7 Not Signed 2023-04-26 15:02:40 +0000 UTC 2023-04-26 15:02:40 +0000 UTC d5a3758015b9885cb698065828a86628665aa3ad 039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f 9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d 2025-05-13 05:13:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
950b75c140c5d9c3199f5ca51b4100e7cca3bc9e0f71724a32881ef7f8a287d9 [68a16bd60756fe54a9918f8d, 68a2149cb58debea69d7c738, 68a2bd5ff793a9057f329bf1, 68a3663261f8067c48423ea7, 68a40efceddb3a9f1a71a5ef, 68a4b7cd36bc5d38057e2355] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Cmmlib.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [b394dfb05ceb80ac63edb50de392a1c7] [63c411b9ee55ddc4710dc2658a330b3a40fae4e0] [91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4] [49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8] [10.20.20.68] [10.20.20.68] 1 Success Cmmlib.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 2822456 b394dfb05ceb80ac63edb50de392a1c7 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 63c411b9ee55ddc4710dc2658a330b3a40fae4e0 91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4 49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:01:05 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
94e7408b722334f3631567ac6d326877568d1d35e377a0e1a2d601cbcca0ad6c [68a3146b5f0c41860c8c84ec, 68a3146b5f0c41860c8c854d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\queue.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [20c4f8397302a02b31f63b5ee9bd03a3] [76fd6d3949fd58da5a7e6f95a5938dccb396c415] [635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506] [9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3] [172.17.252.131] [172.17.252.131] 1 Success queue.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 17359 20c4f8397302a02b31f63b5ee9bd03a3 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 76fd6d3949fd58da5a7e6f95a5938dccb396c415 635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506 9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9c269c3ccae8cdfd948a0ad38c2b7f1bf344ae0d021c265ab3e58b957b590831 [68a233fd88f628d5134f0d74] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ea0bsm2n.vub.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:56:37Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_ea0bsm2n.vub.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:56:37 +0000 UTC 2025-08-17 19:56:37 +0000 UTC 2025-08-17 19:56:45 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9c26250cf5f231965e4dd9ee1b71e0e324551b86e64fbce130341ef3f2a47608 [68a164c5390404f85b716adc, 68a2b64cfd812c7de4e545af, 68a408129f3185cbaca3c5ca, 68a559bf118aff08c8ed4943, 68a6a931f7c977ec1548fcf3] [2] [SYSTEM] [i-vroggera] [NT AUTHORITY] [C:\icm\pcce\la\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z] [e95e27be69f2216256a8ccf328a5ac17] [39cb921aee036bf1584b9509ee9151157810659f] [edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2] [0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287] [172.17.196.42] [172.17.196.42] 1 Success purgeold.bat C:\icm\pcce\la\bin\ 406 e95e27be69f2216256a8ccf328a5ac17 Not Signed 2021-10-07 20:03:35 +0000 UTC 2021-10-07 20:03:35 +0000 UTC 39cb921aee036bf1584b9509ee9151157810659f edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2 0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9c05f6b3c8ce2288ec62b397f4a664c0124c27e8357a1b8a067ace6585f6ddc2 [68a71d98771132224a617f7e] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Windows.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [41c32905a6d5181bb40d080ceecf2d06] [10f8862f789173bc917f6d105f4bf0de52ae3273] [e4472e86332c8bedc22d6eaf21d6aa71c3b6ba722d78abd1ec5df8fdfdf2e9730f6d30cbc2500981d9af6c3a57674efd] [e66e9a5ba8994bd329f739a96253169e900d1a98bbaa7faf94d4c773d9dfb027ce97dc3f7fccd9010306bae5bccb04c6c078ecdf44499f9081825fc75f50c2b6] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.Windows.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.Windows.dll 35328 41c32905a6d5181bb40d080ceecf2d06 Mobile library assembly 20.2.2516.1 Not Signed 2020-05-11 15:01:58 +0000 UTC 2020-05-11 15:01:58 +0000 UTC 10f8862f789173bc917f6d105f4bf0de52ae3273 e4472e86332c8bedc22d6eaf21d6aa71c3b6ba722d78abd1ec5df8fdfdf2e9730f6d30cbc2500981d9af6c3a57674efd e66e9a5ba8994bd329f739a96253169e900d1a98bbaa7faf94d4c773d9dfb027ce97dc3f7fccd9010306bae5bccb04c6c078ecdf44499f9081825fc75f50c2b6 2025-07-16 19:27:14 +0000 UTC None None 2021-06-06 07:05:17 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
9bd06859f2cfb88267330b32599fa526ab2549b8ea71c724e57f6d7378a5d416 [68a16bd60756fe54a9918f9c, 68a2149cb58debea69d7c747, 68a2bd5ff793a9057f329c02, 68a3663261f8067c48423eb5, 68a40efceddb3a9f1a71a5fe, 68a4b7cd36bc5d38057e2363] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zPTApp.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [58b22b0d320b83af6d80cff0f993ee31] [c0478b771792203787592fe5485a5face9f4eb9c] [30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069] [8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b] [10.20.20.68] [10.20.20.68] 1 Success zPTApp.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 8505656 58b22b0d320b83af6d80cff0f993ee31 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:38 +0000 UTC 2025-07-07 01:28:19 +0000 UTC c0478b771792203787592fe5485a5face9f4eb9c 30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069 8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b 2025-07-15 17:40:29 +0000 UTC None None 2025-06-12 09:15:00 +0000 UTC 68 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
9b79b047ffcabcd68e19e7888c0cec805364b59493bf0434b1ef282004936da0 [68a354c3f5d774cd6ae7dfaa] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe] [Servers] [Servers Audit] [v2259.858] ["C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-18T16:28:48Z] [8f6ab8f8e345c8442395fc1e94abf53c] [7437ec517002030fd0499496eb4e4c06399057a8] [da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40] [e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2] [172.17.253.114] [172.17.253.114] 1 Success PanelUtil.exe C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Panel Utility 290304 8f6ab8f8e345c8442395fc1e94abf53c Access It! 10.1.0.7 Not Signed 2023-04-26 15:03:10 +0000 UTC 2023-04-26 15:03:10 +0000 UTC 7437ec517002030fd0499496eb4e4c06399057a8 da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40 e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2 2025-08-18 16:28:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9b4a8557217fe93c3a274d301e45c3f93caeb36f89b720a5f42ac34f7d27cd88 [68a472b1b022648922e235ae] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xercesImpl-2.9.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [da09b75b562ca9a8e9a535d2148be8e4] [1136d197e2755bbde296ceee217ec5fe2917477b] [3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a] [37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435] [172.17.23.146] [172.17.23.146] 1 Success xercesImpl-2.9.1.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 1229289 da09b75b562ca9a8e9a535d2148be8e4 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 1136d197e2755bbde296ceee217ec5fe2917477b 3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a 37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435 2025-08-19 11:29:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9aedfab326d5e3f307d5205bfc6a53d1615990c94cfb16a8b223b9f97f6e0469 [68a16556adb18f56bab6ec7d, 68a2b4a8c289c4a5fdc2edb0, 68a4085529d877e962e90ae5, 68a557e71e5d7a1efef2595d, 68a6a990a81c561389c37866] [2] [SYSTEM] [u-vpg1b] [NT AUTHORITY] [C:\icm\pcce\cg1B\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [80f96d46829afa7f40109f8216bf4750] [079dfe49b49dfa8d5f323413b49c7a077a5758ab] [7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e] [02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810] [172.25.196.36] [172.25.196.36] 1 Success purgeold.bat C:\icm\pcce\cg1B\bin\ 410 80f96d46829afa7f40109f8216bf4750 Not Signed 2021-10-07 20:05:32 +0000 UTC 2021-10-07 20:05:32 +0000 UTC 079dfe49b49dfa8d5f323413b49c7a077a5758ab 7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e 02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9addd5904e11aac0c9314145f7a3571f0a6c6904a088475ff74610d4021f7188 [68a3c3516dcf6e4208aef621] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-3A9C2E87-DA60-427D-B80A-82DC7674B69E\CitrixReceiverUpdater.exe] [C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe] [2025-08-19T00:17:04Z] [5b0b73b4180309831b886d262c2f581a] [07878f7908801a602bd37e6a7a6612369487387a] [fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6] [c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c] [10.20.20.68] [10.20.20.68] 1 Success rm.bat C:\Users\teknicor\AppData\Local\Temp\4\ 7357 5b0b73b4180309831b886d262c2f581a Not Signed 2025-08-19 00:17:04 +0000 UTC 2025-08-19 00:17:04 +0000 UTC 07878f7908801a602bd37e6a7a6612369487387a fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6 c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c 2025-08-19 00:20:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9a933035d08791e2782f9d3b15447d9d39970442a998a1bc5b1742acaa33f921 [68a46900de52a0eb07bb2cab] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:07:25Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:07:28 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9a3726ca46e5c03f051771dcde4dfb6ee31c3552a7a345655c5a916280a5fca0 [68a5f3b29b9fb9b13e357cc3] [2] [svc_methinks] [i-hMeThinks] [WVUHS] [C:\Users\svc_methinks\AppData\Local\Temp\1\8ca4fc1b-e498-4c03-ae74-6a16073d35b4.tmp.node] [Servers] [Servers Audit] [v2306] [] [Not Signed] [C:\Program Files\Docker\Docker\frontend\Docker Desktop.exe] [C:\Program Files\Docker\Docker\resources\com.docker.backend.exe] [2025-08-20T16:01:57Z] [595808a5981c518e408b20db02c91182] [e039562b6f463711ed9c3ad8ac499d813afdf966] [df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86] [f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121] [172.17.251.218] [172.17.251.218] 1 Success 9c93f735-e0b0-426b-830a-650d88cf56a5.tmp.node C:\Users\svc_methinks\AppData\Local\Temp\1\ 155136 595808a5981c518e408b20db02c91182 Not Signed 2025-07-16 16:01:47 +0000 UTC 2025-07-16 16:01:47 +0000 UTC e039562b6f463711ed9c3ad8ac499d813afdf966 df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86 f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121 2025-07-16 16:01:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
99f5ef22213d7e971d8bc8b5484f3e933cf66bf37b94e8d5aa5acf5e2220ca5a [68a48674c4cb2500be69260c, 68a48674c4cb2500be692622] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Hosting.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [54fea61134ad099f7ca3485319f3c4de] [b4dc1558d037e14add30d135864a478c444ca0c7] [db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3] [48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Extensions.Hosting.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Extensions.Hosting 40200 54fea61134ad099f7ca3485319f3c4de Serilog.Extensions.Hosting 4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd Stryker Corporation 2021-11-09 03:00:30 +0000 UTC 2024-02-15 18:02:03 +0000 UTC b4dc1558d037e14add30d135864a478c444ca0c7 db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3 48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
999c523b3e43f399966a49f3caeb2a7d8ccb39d5911dfe71fd15a6a0aa2b87fe [68a5c64d54e5003d1abde4bf, 68a5c77e05aa879ada66b41b, 68a5c77e05aa879ada66b421, 68a5c77e05aa879ada66b426, 68a5c77e05aa879ada66b42b] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\Disk1\ISSetup.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z] [708814a62ba813cea1a94bb77d68195b] [39c99a215751832481dc9b2ac2d6dbb17435195d] [a639dd70ec9a9652bc05b7bd58b8287b9df1321a5dfb238710be542c8db404bd966eae424e8d6969b3e6a7dccfc037a7] [426cd1a12e42212ff541b3bd9c239282d548596487929b17c657056958d71a77fce209c5daa606af4d0eb6c5f74779b6d332997d00e71f6ec80fd18407c57bd3] [172.17.20.104] [172.17.20.104] 1 Success ISSetup.dll C:\Users\ellisonmea\AppData\Local\Temp\{1FB787B1-89CF-48C2-9B76-ED951638D358}\ InstallShield (R) Setup Engine 552214 708814a62ba813cea1a94bb77d68195b InstallShield 12.0 Not Signed 2025-07-17 16:07:34 +0000 UTC 2025-04-14 15:20:36 +0000 UTC 39c99a215751832481dc9b2ac2d6dbb17435195d a639dd70ec9a9652bc05b7bd58b8287b9df1321a5dfb238710be542c8db404bd966eae424e8d6969b3e6a7dccfc037a7 426cd1a12e42212ff541b3bd9c239282d548596487929b17c657056958d71a77fce209c5daa606af4d0eb6c5f74779b6d332997d00e71f6ec80fd18407c57bd3 2025-07-17 16:07:41 +0000 UTC None None 2025-06-08 16:16:42 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-17 16:07:44.463 +0000 UTC
994a611ef09f8ae2fe98c2da01d655ce4fa347baa82b9c9915df9f6ec9fbfbc3 [68a523a99ba7c92b34976f9c] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Utils.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:43Z] [c709df517b83ce6b8dc1fea8d595054b] [8f53280dfe52874cff44f8780c0fc0fc115b5f3e] [dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490] [9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954] [172.17.22.40] [172.17.22.40] 1 Success Utils.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 7168 c709df517b83ce6b8dc1fea8d595054b 1.0.8565.40718 Not Signed 2023-06-15 02:37:18 +0000 UTC 2023-06-15 02:37:18 +0000 UTC 8f53280dfe52874cff44f8780c0fc0fc115b5f3e dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490 9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
98df3078f3f8bc3b2cd2b8ee77cb6c1b2ed806a39bbacb1384ae9efc24d9189f [68a3146b5f0c41860c8c84e9, 68a3146b5f0c41860c8c851d] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\encodings\__pycache__\cp1252.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] [fa5b299bcf803667db7c4c48d05a08df] [e854bca592b85a87408e883fb8ec1bbddee34662] [bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481] [4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f] [172.17.252.131] [172.17.252.131] 1 Success cp1252.cpython-313.pyc C:\Program Files\Python\Lib\encodings\__pycache__\ 3299 fa5b299bcf803667db7c4c48d05a08df Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC e854bca592b85a87408e883fb8ec1bbddee34662 bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481 4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
98ca15715d87f7d35a7756ea9bcfdbe3767ed4163fb017d675587792a3152fea [68a4cf29dfc75d42acc2fee6] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:23:10Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:23:21 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
98c7fa6109742b02106c96b2b99c72c0fefafae342651a8872b0796d11288b15 [68a46327817fe25f39e81a94] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\tmp_4a4ji0dj.v0h.psm1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T11:42:27Z] [a8a00094ca4d0ea2312187e43d5354ee] [6567ea2e3352de1259d836237c57870a171d2ef4] [d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c] [fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7] [172.17.252.110] [172.17.252.110] 1 Success tmp_4a4ji0dj.v0h.psm1 C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\ 4669944 a8a00094ca4d0ea2312187e43d5354ee Not Signed 2025-08-19 11:42:27 +0000 UTC 2025-08-19 11:42:27 +0000 UTC 6567ea2e3352de1259d836237c57870a171d2ef4 d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7 2025-08-19 11:42:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9f264451e7dcfa93593fa221b6d2661884b5f9554a28b0eadadb49e28069453b [68a306a5ba5832f49fe9cf43] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2COMPS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [376a4faf9a26b8f3fca39b0537a140b6] [8c87dff640521f57d42f85e232b7936c3c241b96] [f3d3841f183e4ffa65823996a53348cd809119bf3fd4a5966926ec1fd7b91772f44e03329a89bc839006c053cc79ce97] [dd5ecfbd5f3bc834d35d8912cd77417540a667ff0d0b665289d0289a4b2bb87b1a2aee8757b7734462b42178d042e8b4c1f1389ae179e8461713c61f7af44abf] [172.17.146.33] [172.17.146.33] 1 Success DI2COMPS.BPL C:\DICORP\DICORP_V5\RW\APPS\ 38912 376a4faf9a26b8f3fca39b0537a140b6 1.0.0.0 Not Signed 2022-07-06 14:52:09 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 8c87dff640521f57d42f85e232b7936c3c241b96 f3d3841f183e4ffa65823996a53348cd809119bf3fd4a5966926ec1fd7b91772f44e03329a89bc839006c053cc79ce97 dd5ecfbd5f3bc834d35d8912cd77417540a667ff0d0b665289d0289a4b2bb87b1a2aee8757b7734462b42178d042e8b4c1f1389ae179e8461713c61f7af44abf 2025-04-30 20:02:53 +0000 UTC None None 2025-03-13 05:12:30 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
9e9e38773b97fac96937b516d9a32db59eb414381251b0ef854054ca564f3750 [68a306a5ba5832f49fe9cf49] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CCTABS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [c161e9903e7f25b14044fb24f4ba8da4] [f7beb14091dcf02cf66a7e5479f9eb3e838ca1d5] [9f74b15867d9f94831b55a18798e423eced84925b967b6202f62b0ab76df5a039af5ac39100faa7e7cddb6a65f668485] [4ed7061279e55cb651e66ff3b9b1a7f6257d17f8575bee183a104a4dbdc4bef5a8bd31f515498b752bd3c1887493c506aee7c1ca30f056910aae170f26c511ee] [172.17.146.33] [172.17.146.33] 1 Success CCTABS.BPL C:\DICORP\DICORP_V5\RW\APPS\ CCTabs 88576 c161e9903e7f25b14044fb24f4ba8da4 2.94.2 Not Signed 2022-07-06 14:52:04 +0000 UTC 2024-09-14 04:02:48 +0000 UTC f7beb14091dcf02cf66a7e5479f9eb3e838ca1d5 9f74b15867d9f94831b55a18798e423eced84925b967b6202f62b0ab76df5a039af5ac39100faa7e7cddb6a65f668485 4ed7061279e55cb651e66ff3b9b1a7f6257d17f8575bee183a104a4dbdc4bef5a8bd31f515498b752bd3c1887493c506aee7c1ca30f056910aae170f26c511ee 2025-04-30 20:02:53 +0000 UTC None None 2016-12-16 05:54:41 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
9e8d01f172301b966f1f404aa6fc0bdbec478ae9197256ad95bfcad1ef927601 [68a472a799ad3734d804e2fb] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-logging-1.1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [6b62417e77b000a87de66ee3935edbf5] [ba24d5de831911b684c92cd289ed5ff826271824] [2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f] [5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630] [172.17.23.146] [172.17.23.146] 1 Success commons-logging-1.1.jar D:\hms\server\default\tmp\deploy\tmp2592723483578379162ems.ear-contents\ems.sar-contents\ 52915 6b62417e77b000a87de66ee3935edbf5 Not Signed 2025-04-28 02:32:27 +0000 UTC 2025-04-28 02:32:27 +0000 UTC ba24d5de831911b684c92cd289ed5ff826271824 2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f 5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630 2025-04-28 02:32:42 +0000 UTC None None 2025-03-26 07:56:25 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-28 01:46:49.87 +0000 UTC
9e6418c6b426c57d04673ad2ea1691cf052bd5b35b0af0566c2043a8ebde33a4 [68a5c9c80a9c36d9537b967c] [2] [SYSTEM] [i-nQS1mgtn] [NT AUTHORITY] [C:\Windows\Temp\MSI1ACF.tmp] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe] [C:\Windows\System32\msiexec.exe] [2025-08-20T13:12:31Z] [] [] [] [] [172.17.20.104] [172.17.20.104] 1 Success MSIB3C0.tmp C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-07-17 16:14:52 +0000 UTC None None 2025-03-17 12:30:26 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-07-17 02:52:11.135 +0000 UTC
9e060acd96a0d21fadc52d209a12f1038fc73e3d3dad79ac993c7bbe4cb07ea2 [68a6afe50e0f3bd8deac4f50, 68a6afe50e0f3bd8deac509b, 68a6afe50e0f3bd8deac5104, 68a6afe50e0f3bd8deac516e, 68a6afe50e0f3bd8deac5553, 68a6afe50e0f3bd8deac5649, 68a6afe50e0f3bd8deac5764, 68a6afe50e0f3bd8deac5d2e, 68a6afe50e0f3bd8deac5daf, 68a6afe50e0f3bd8deac5eed] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\icuuc53.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [1c906171953d3d548a0edad1c25586de] [5e8df0b599bbb1a9b1c501e227d6dd5ea9d3f401] [e3a7506589e55e7e61c6b6001c714bf8bfbac0dc750510bf8b87706d504b77f005053a04648d79cd63a7fb8d885c3e1f] [788d021cdd86aad824cc038c7cb7ffc4a5115f62b91c4bdf1729838295e119b08472ee3967000e4b57ea53aa6d7b28572210a4ac4bb64d1b437207da57deee92] [172.17.30.60] [172.17.30.60] 1 Success icuuc53.dll C:\Program Files\PostgreSQL\12\bin\ ICU Common DLL 1317376 1c906171953d3d548a0edad1c25586de International Components for Unicode 53, 1, 0, 0 Not Signed 2023-10-19 17:59:22 +0000 UTC 2019-12-13 12:43:37 +0000 UTC 5e8df0b599bbb1a9b1c501e227d6dd5ea9d3f401 e3a7506589e55e7e61c6b6001c714bf8bfbac0dc750510bf8b87706d504b77f005053a04648d79cd63a7fb8d885c3e1f 788d021cdd86aad824cc038c7cb7ffc4a5115f62b91c4bdf1729838295e119b08472ee3967000e4b57ea53aa6d7b28572210a4ac4bb64d1b437207da57deee92 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2024-06-08 09:21:48 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-04-30 06:40:28.291 +0000 UTC
9dfb220bb3f348f33dc86e0fc936db0ca2efc1a3789c9e1121cb512ec33077fa [68a17ca68feea10e77a5fb6a] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1x2unr4g.5ni.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:54:25Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_1x2unr4g.5ni.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:54:25 +0000 UTC 2025-08-17 06:54:25 +0000 UTC 2025-08-17 06:54:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9db972fb315a206061dd8d2e0dc1416055b3867dfa04dc408bd3a7a446df3648 [68a306a5ba5832f49fe9cf57] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FORMENG2.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [e4fb2c4a1b902290ce0af3bbc92a2610] [a81215af8ce0921fba6dfb8202e9039342506b6c] [1960ffdbc2fa4a3050e482c51b8576f36eba093293fc68327d095fca1f3c0c8f193e51707681224c71418ee4b2d59fde] [348e079e766022f143a8375a556df717f3c27a855bd44eec3e6d8cfd88b87bc96e8b229cfd523f0ad18879de1a887a1a9c0dbf308c7848441c22b1bf68de33d0] [172.17.146.33] [172.17.146.33] 1 Success FORMENG2.BPL C:\DICORP\DICORP_V5\RW\APPS\ CDA Form Engine 187392 e4fb2c4a1b902290ce0af3bbc92a2610 1.20 Not Signed 2022-07-06 14:52:15 +0000 UTC 2024-09-14 04:02:50 +0000 UTC a81215af8ce0921fba6dfb8202e9039342506b6c 1960ffdbc2fa4a3050e482c51b8576f36eba093293fc68327d095fca1f3c0c8f193e51707681224c71418ee4b2d59fde 348e079e766022f143a8375a556df717f3c27a855bd44eec3e6d8cfd88b87bc96e8b229cfd523f0ad18879de1a887a1a9c0dbf308c7848441c22b1bf68de33d0 2025-04-30 20:02:53 +0000 UTC None None 2021-11-09 15:54:26 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
9da55b55bf7f629825cea208fa7f81ec54f6a19daa972c58ae7dc286f4d68594 [68a2a7d21e529195058821a8] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_qmir4he3.i00.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T04:10:52Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_qmir4he3.i00.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 04:10:52 +0000 UTC 2025-08-18 04:10:52 +0000 UTC 2025-08-18 04:10:58 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9d9a4969ee818d3ab6eb78ee164b44f9376111d781e2bcd9b51f52b35898d341 [68a24268b7be513faed67bb0] [2] [SYSTEM] [i-hPRNRemisol] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koanizjm.loh.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:58:10Z] [] [] [] [] [172.17.23.88] [172.17.23.88] 1 Success __PSScriptPolicyTest_koanizjm.loh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:58:10 +0000 UTC 2025-08-17 20:58:10 +0000 UTC 2025-08-17 20:58:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9d97578780dbb03cc0c396200b96fce7e7645af7bafa5f5dc7fba849474f3c07 [68a5c8eceb9e7b7716dce203, 68a5ca39b5df6e9c598d9a15, 68a5ca39b5df6e9c598d9a22, 68a5ccf2ddfdba423e488638, 68a5ccf2ddfdba423e488646, 68a5ccf2ddfdba423e488654, 68a5ccf2ddfdba423e488661, 68a5ccf2ddfdba423e48866e, 68a5ccf2ddfdba423e48867b, 68a5ccf2ddfdba423e488688, 68a5ccf2ddfdba423e488695] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\powershell.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [774bf83f632cbecb715ee124673f4a07] [1af8f80e3fac45073288d420016eb0718463a2df] [1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016] [ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855] [172.17.252.194] [172.17.252.194] 1 Success powershell.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ 10213 774bf83f632cbecb715ee124673f4a07 Not Signed 2025-08-20 13:08:38 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 1af8f80e3fac45073288d420016eb0718463a2df 1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016 ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9d59e4a2f76cd64d5749bd32d2ff4b194967c71546ab94d1ac2a1883f9738c35 [68a1a56518d384e847176013] [2] [SYSTEM] [u-devsqltest1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ejhf5yxn.j5m.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:48:10Z] [] [] [] [] [172.25.17.220] [172.25.17.220] 1 Success __PSScriptPolicyTest_ejhf5yxn.j5m.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:48:10 +0000 UTC 2025-08-17 09:48:10 +0000 UTC 2025-08-17 09:48:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9d111e03218a7eea9537a00e1863cddde10211dba9218b3d6b47608f1e77c251 [68a3146b5f0c41860c8c8540] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\_compression.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [af1c1193de59fb127d8911df425569ca] [6fd4756649e5aad5421b16a620fd166330c51cce] [a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1] [fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298] [172.17.252.131] [172.17.252.131] 1 Success _compression.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 7813 af1c1193de59fb127d8911df425569ca Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 6fd4756649e5aad5421b16a620fd166330c51cce a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1 fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9cdf0d9852f8c3557cfe9a6e3ee68cd450c4fc09bd2664d77bfa66af82c82726 [68a3146b5f0c41860c8c8525, 68a3146b5f0c41860c8c856e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\message.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] [1f9cf3f516b09dca73c5d70db0ae5491] [2b812bdaf15435914d726ada0f6149e822eba183] [d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa] [6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d] [172.17.252.131] [172.17.252.131] 1 Success message.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 51634 1f9cf3f516b09dca73c5d70db0ae5491 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 2b812bdaf15435914d726ada0f6149e822eba183 d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa 6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9cdd435552e4798b104c63a8918b11cb96b5a4a7618907130342a4ffbd5a839a [68a2452ec0a888da2a3144f6] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1puaykw.vxr.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:09:53Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_s1puaykw.vxr.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:09:53 +0000 UTC 2025-08-17 21:09:53 +0000 UTC 2025-08-17 21:10:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
9cb71f00c19397723d39861ff809c70f9d2cdbcf91b3dd8021060714512a39cb [68a4e8a1ad898641af98fd94, 68a4fcd0011d94a251a4ef30] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\nsExec.dll] [Servers] [Servers Audit] [v2283, v2284] [] [Not Signed] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z] [1139fb5cc942e668c8277f8b8f1e5f20] [94bbb2454dad420b70553c0fca4899f120d3ed43] [91b21d7f4bf65cf9c6b3e4c15067b33b654b5d61a30a14f300abaf62d12daa6837ae1387e8e9c584dbd1753620c13b70] [08e8eb820801875208d9f28fb1416e0fc66abf5cc343e7ac973cc6736dbcd0f85b1bf42e8d110ad8c9a9ced204c00cf530099b8c411871762615051e1f7061d0] [172.17.23.18] [172.17.23.18] 1 Success nsExec.dll C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\ 9216 1139fb5cc942e668c8277f8b8f1e5f20 Not Signed 2025-08-19 21:11:56 +0000 UTC 2025-08-19 21:11:56 +0000 UTC 94bbb2454dad420b70553c0fca4899f120d3ed43 91b21d7f4bf65cf9c6b3e4c15067b33b654b5d61a30a14f300abaf62d12daa6837ae1387e8e9c584dbd1753620c13b70 08e8eb820801875208d9f28fb1416e0fc66abf5cc343e7ac973cc6736dbcd0f85b1bf42e8d110ad8c9a9ced204c00cf530099b8c411871762615051e1f7061d0 2025-08-19 21:12:01 +0000 UTC None None 2025-08-17 22:00:41 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
9c4b5ce1dc29be4d5b9dddab220de247696495cf359c659d98e4a8faec482df8 [68a501fb7a753eb605659393] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\q0440fxp.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-19T23:00:04Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success q0440fxp.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 23:00:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a31ce0c5fb2fb5a70ae2f5675d2e718053ab5a33f61fe21ee4068a320772e549 [68a3263cd45919f0090e7c01] [2] [SYSTEM] [i-nCTX-CC-PRD2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_amguifg1.dah.ps1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T13:10:15Z] [] [] [] [] [172.17.146.3] [172.17.146.3] 1 Success __PSScriptPolicyTest_amguifg1.dah.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 13:10:15 +0000 UTC 2025-08-18 13:10:15 +0000 UTC 2025-08-18 13:10:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a24c6cf2c1296bf625d34337de2c4b74f05f5b63458662733e93e461aebb19fb [68a70bdc2a90344d346daef0] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe] [Servers] [Servers Audit] [v2314.900] ["C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" ] [Not Signed] [C:\Program Files\Google\Chrome\Application\chrome.exe] [C:\Windows\explorer.exe] [2025-08-21T12:06:43Z] [8ff9ef7b9b3cf60ede52251e1cbeb69e] [ef838e007ff4c6ace164c39a44ee021e70c9c913] [e54890ade199651cd1463a8edc236e1ef28914358d92899d5ad45d081e7d03f4f2f2b132cabf8180947aabe5542334e9] [32293a2cb2bf8defaf3ebe83dcd9771ea4b31f4b57d2babaad220c848aba91861fc002d590761de6384fe7ffa55d4d955ac80854cf5a01f5025a790583aac305] [172.17.20.75] [172.17.20.75] 1 Success SetupYabe_v2.1.0.exe C:\Users\SVC_SL_ControlSystem\Downloads\ Yabe Setup 2618889 8ff9ef7b9b3cf60ede52251e1cbeb69e Yabe 2.1.0 Not Signed 2025-08-21 12:06:16 +0000 UTC 2025-08-21 12:06:37 +0000 UTC ef838e007ff4c6ace164c39a44ee021e70c9c913 e54890ade199651cd1463a8edc236e1ef28914358d92899d5ad45d081e7d03f4f2f2b132cabf8180947aabe5542334e9 32293a2cb2bf8defaf3ebe83dcd9771ea4b31f4b57d2babaad220c848aba91861fc002d590761de6384fe7ffa55d4d955ac80854cf5a01f5025a790583aac305 2025-08-21 12:06:52 +0000 UTC None None 2025-08-14 17:14:24 +0000 UTC 73 2 KNOWN 0 Benign 0.30 2025-08-20 18:12:07.258 +0000 UTC
a1480a44ff827a97701dd6a4137a19fcdeb576045215acfbffeee086f6aea2a5 [68a472a799ad3734d804e2e9] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-swing-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [381f6591ce10dbdec1d4040edf9e68dc] [79ae20903bd6cf67aa7d2b7c697c93be5decfdd0] [5af4447d2424fdd259095a8f161a1674be4e551371c085f7067a9c906ce59575e12a56a0293f73698288bc88f5f5b98d] [6f1d81f1ab029e40cf0da4db3bdb558ed54b886718cfb4cffa91e6bfbce39e782a7e866cd972dbc0dd5c0856067fd2946833a7e5f481cd860d6772b77eebbc81] [172.17.23.146] [172.17.23.146] 1 Success batik-swing-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 190772 381f6591ce10dbdec1d4040edf9e68dc Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 79ae20903bd6cf67aa7d2b7c697c93be5decfdd0 5af4447d2424fdd259095a8f161a1674be4e551371c085f7067a9c906ce59575e12a56a0293f73698288bc88f5f5b98d 6f1d81f1ab029e40cf0da4db3bdb558ed54b886718cfb4cffa91e6bfbce39e782a7e866cd972dbc0dd5c0856067fd2946833a7e5f481cd860d6772b77eebbc81 2025-08-19 11:29:20 +0000 UTC None None 2024-10-11 05:23:38 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
a143f84acb242d2ae93165cf5caa808116878e47cb0686e9830bf9a0abb1fcd9 [68a1638d6b917cef7bc97208] [2] [insqadhocadmin] [inSQADHOC] [INSQADHOC] [D:\DxFlats\SQ-AdHoc.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:02Z] [bb3305a61952566315ce176436bd4621] [029fd1a6c08c26b003c740a134e6f98c79ad8496] [fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901] [f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c] [172.17.253.151] [172.17.253.151] 1 Success SQ-AdHoc.ps1 D:\DxFlats\ 83576 bb3305a61952566315ce176436bd4621 Not Signed 2024-06-13 14:05:23 +0000 UTC 2024-05-23 19:22:49 +0000 UTC 029fd1a6c08c26b003c740a134e6f98c79ad8496 fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901 f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c 2025-08-10 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a131c59ce31216aa82e7546a4b29e1afce259d87212f7f5cdfddf2cfcba76cc5 [68a523949cec397f02de9f56] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventMechanism.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:29Z] [c159bbc0a5b7044ad2341d142bb49419] [f4677064145ae5286fa91bf3a06c3f0362c1f6cc] [4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4] [cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26] [172.17.22.40] [172.17.22.40] 1 Success EventMechanism.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 8192 c159bbc0a5b7044ad2341d142bb49419 1.0.8565.40737 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC f4677064145ae5286fa91bf3a06c3f0362c1f6cc 4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4 cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a11bb160641b9f5e4b916fe8c1332a7daea7cb5bec0ff20aca1ed56cd38403c9 [68a25fb2e970d941642e7ede, 68a25fb2e970d941642e7eeb, 68a3b2cf09045b56b2a707b6, 68a3b2cf09045b56b2a707c3, 68a502e12ae1a61fbf4caf14, 68a502e12ae1a61fbf4caf21, 68a65489c4cae84feadc5714, 68a65489c4cae84feadc5721] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\typealiases.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:07Z, 2025-08-20T23:00:15Z] [6edb4820eefbf4bf8f34890da9a4df9a] [d8b1ce8e599da18ebf86d4082cfd62d30a68f185] [e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712] [fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d] [172.17.252.12] [172.17.252.12] 1 Success typealiases.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\ 13502 6edb4820eefbf4bf8f34890da9a4df9a dbatools 2024-03-28 19:42:23 +0000 UTC 2024-03-16 13:33:48 +0000 UTC d8b1ce8e599da18ebf86d4082cfd62d30a68f185 e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712 fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d 2025-08-08 23:00:16 +0000 UTC None None 2024-09-24 17:17:25 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
a10b871ec3447828b319d9b2e28d6149b355385b2769f30727d4a0c8473ddf74 [68a1f34c27d6d6088ad4500e] [2] [SYSTEM] [u-v3MWeb] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_m1lxrrkv.j3z.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T15:20:36Z] [] [] [] [] [172.25.19.80] [172.25.19.80] 1 Success __PSScriptPolicyTest_m1lxrrkv.j3z.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 15:20:36 +0000 UTC 2025-08-17 15:20:36 +0000 UTC 2025-08-17 15:20:44 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a0f9448462d634ee1d128826515e829d6fe4e5ffe437e8223d9160e17434506d [68a73eeccf2548d3f5b4dc5f, 68a73f16c50eeb69d9e9620f, 68a7416d0d35e93ff55f30c3, 68a743c53e4f6ed539ccb985] [2] [SVC_SL_EQ2HEMS] [i-nHEMS1] [WVUHS] [E:\HEMS Installation Files\WEB812\WEB812\deploy.bat] [Servers] [Servers Audit] [v2324.910] [] [Not Signed] [C:\Windows\explorer.exe, C:\Windows\System32\cmd.exe] [C:\Windows\System32\userinit.exe, C:\Windows\explorer.exe] [2025-08-21T15:44:31Z, 2025-08-21T15:44:32Z, 2025-08-21T15:52:47Z, 2025-08-21T15:55:38Z] [929f3267690c5d511b621ab2cea44e26] [47ab10b2d3b2649e232c2b3e4c5bab2e001e0b8c] [5b48a57051a9931a34ef146284ccca5d1d9f362b82765830c83c26b0c3102275dfc5fac57377b3810c4fd2341be0c97b] [b208cb7218b30d4ec6586e7ac77f6d031e04b25c345de3af441481f1a5674f6822674470337df76a51629297c206b95dcebac4dbc7474873bd39864149127f8c] [172.17.20.170] [172.17.20.170] 1 Success deploy.bat E:\HEMS Installation Files\WEB812\WEB812\ 345 929f3267690c5d511b621ab2cea44e26 Not Signed 2022-08-04 20:01:48 +0000 UTC 2025-08-21 15:35:24 +0000 UTC 47ab10b2d3b2649e232c2b3e4c5bab2e001e0b8c 5b48a57051a9931a34ef146284ccca5d1d9f362b82765830c83c26b0c3102275dfc5fac57377b3810c4fd2341be0c97b b208cb7218b30d4ec6586e7ac77f6d031e04b25c345de3af441481f1a5674f6822674470337df76a51629297c206b95dcebac4dbc7474873bd39864149127f8c 2025-08-21 15:44:44 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a08bb4d95e13cd7f071180ecc9b403249364af378c3a63dc24f56600ca6d54a1 [68a471ad04130eaeee8f8d05] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:44:24Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:44:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a04620ce2adb9cce34ae2ec9142bcfdc9025b2b3c2e67014c22afecfc3b7bd02 [68a3146b5f0c41860c8c84e7, 68a3146b5f0c41860c8c851a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\encodings\__pycache__\aliases.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] [6d4c823e9d2c59e8c7a1c22385febbc1] [9c505a63924d0934af779792b915ccaf391a6a6b] [8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3] [7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22] [172.17.252.131] [172.17.252.131] 1 Success aliases.cpython-313.pyc C:\Program Files\Python\Lib\encodings\__pycache__\ 12393 6d4c823e9d2c59e8c7a1c22385febbc1 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 9c505a63924d0934af779792b915ccaf391a6a6b 8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3 7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a03926359987dde8bfa14905c2e91b0dcb912cc1c5c4e5cc4e08a3f410a51975 [68a48674c4cb2500be69261b, 68a48674c4cb2500be692631] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\log4net.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z] [3b9e164c32b6dde7701c518e1c515196] [0b7e5cedc915c5952cdaf018df7f46d91cabe893] [eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684] [8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68] [172.17.252.226] [172.17.252.226] 1 Success log4net.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Apache log4net for .NET Standard 2.0 270048 3b9e164c32b6dde7701c518e1c515196 log4net 2.0.15.0-.NET Standard 2.0 Stryker Corporation 2022-07-25 12:40:06 +0000 UTC 2024-02-15 18:01:58 +0000 UTC 0b7e5cedc915c5952cdaf018df7f46d91cabe893 eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684 8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a01fa864af44f514a8ca839c76e037070eea0ddf92270f74bdbce2a8e63f63ff [68a5c64d54e5003d1abde4c6] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\QINST.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE] [C:\Windows\System32\svchost.exe] [2025-08-20T12:57:41Z] [3f405d2fd3a79616620d01393f1d961f] [9588954c67246bc9aaeb0f505ed21c4809714963] [851b6726999d133ecafa321231e5e24fe784fc076b31e45de5b797ae9ed5b670c534585592d56edbf84c1caddff2ca9a] [0da8e5fc9e1431fb985907bcbc90b2080a4fe75c3b717cf0d48dbca514bf8ddda102b4e8f52d95bf2bef4fb75d362b4a26ae1c688aa1b8a3aa4fee29de2b691b] [172.17.20.104] [172.17.20.104] 1 Success QINST.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\ QINST DLL 172032 3f405d2fd3a79616620d01393f1d961f QINST Dynamic Link Library 1, 9, 0, 0 Not Signed 2025-08-20 12:57:41 +0000 UTC 2005-11-28 16:13:00 +0000 UTC 9588954c67246bc9aaeb0f505ed21c4809714963 851b6726999d133ecafa321231e5e24fe784fc076b31e45de5b797ae9ed5b670c534585592d56edbf84c1caddff2ca9a 0da8e5fc9e1431fb985907bcbc90b2080a4fe75c3b717cf0d48dbca514bf8ddda102b4e8f52d95bf2bef4fb75d362b4a26ae1c688aa1b8a3aa4fee29de2b691b 2025-08-20 12:57:49 +0000 UTC None None 2024-06-05 23:33:47 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-08-20 13:00:50.983 +0000 UTC
9fe625d221dea59ac1c5ab0f79858f4c045abebb697b1c3eb027a414b2958437 [68a5c7c9c8d0bc698419a39b] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\ISSetup.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe] [D:\QS1\QAU\Updates\191042001Depends.exe] [2025-08-20T13:04:06Z] [f8a8127aad81320181a335b2302e1508] [88144bf920725b1b6a1cb70f5f4dfb5f61750705] [e20877476ddd8d882e84d927a5e5e53a0207ef30545b08ed8b0fd4f6c3fa9d9e242c1cb09ddd4809891a2d390d2a59a0] [7517fe9eb4ec1d23c16cb0e969b764b808fb432aff8ad22382e5b7ddf6746374eab2285a1741a130e35a39ff1dfde84d943491d61359b35a57881b0b56564d0d] [172.17.20.104] [172.17.20.104] 1 Success ISSetup.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\ InstallShield (R) Setup Engine 2446807 f8a8127aad81320181a335b2302e1508 InstallShield 22.0 Not Signed 2025-08-20 13:04:06 +0000 UTC 2025-08-20 13:04:06 +0000 UTC 88144bf920725b1b6a1cb70f5f4dfb5f61750705 e20877476ddd8d882e84d927a5e5e53a0207ef30545b08ed8b0fd4f6c3fa9d9e242c1cb09ddd4809891a2d390d2a59a0 7517fe9eb4ec1d23c16cb0e969b764b808fb432aff8ad22382e5b7ddf6746374eab2285a1741a130e35a39ff1dfde84d943491d61359b35a57881b0b56564d0d 2025-08-20 13:04:09 +0000 UTC None None 2024-02-14 03:35:39 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-08-20 13:05:52.276 +0000 UTC
9fd2800a6ee13d69c81facd1f787e3bb4455ed0fc730451f00fc996925c71f67 [68a306a5ba5832f49fe9cf3b] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPLDRI.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [14581feb98f274e635a1b43ae13178b0] [c777647bb6323cd9e16de5ce509717fe673a40c9] [51d2485260d8d82ad7a3a677d5888e6d68d58bd89a0294469db566299706e092d65b36e2bbed06f425052d46985da901] [c2e60fcae775445d9919b031aef20a26e93de97d1be68cd4fc6d6bd19a0e5270a33c77ddc3b9bf8923ff1eef799517b3a6f559ba9f31bd07d5b5a6c5c7aeb84d] [172.17.146.33] [172.17.146.33] 1 Success APPLDRI.DLL C:\DICORP\DICORP_V5\RW\APPS\ 9728 14581feb98f274e635a1b43ae13178b0 Not Signed 2022-07-06 14:52:02 +0000 UTC 2024-09-14 04:02:48 +0000 UTC c777647bb6323cd9e16de5ce509717fe673a40c9 51d2485260d8d82ad7a3a677d5888e6d68d58bd89a0294469db566299706e092d65b36e2bbed06f425052d46985da901 c2e60fcae775445d9919b031aef20a26e93de97d1be68cd4fc6d6bd19a0e5270a33c77ddc3b9bf8923ff1eef799517b3a6f559ba9f31bd07d5b5a6c5c7aeb84d 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 16:26:41 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
9f99575689b7e32b88c81ce7d3553b185fc3568cb2a27485d762cb6b5dfbe93f [68a472b1b022648922e23572] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmStorageCenterApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [3545642ecd8b1fad16503d6b79d591f8] [31f259d55dd99d4cf2a12637d49347a0056805af] [15eb77b0830f2747cd0c82e2d8424c9abebf4022770b16f685d0773c15738f6c5e0aad5d8d9204e04240700213711d6c] [d22061dea3a40ff9a27749ee27710fa07c5797bb55725404f9df7626a5290d51f832d8862475838f718b3b2bb4fe75b4bcf6b5e055c83eb9821730fbb9b3621a] [172.17.23.146] [172.17.23.146] 1 Success DsmStorageCenterApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 3057596 3545642ecd8b1fad16503d6b79d591f8 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 31f259d55dd99d4cf2a12637d49347a0056805af 15eb77b0830f2747cd0c82e2d8424c9abebf4022770b16f685d0773c15738f6c5e0aad5d8d9204e04240700213711d6c d22061dea3a40ff9a27749ee27710fa07c5797bb55725404f9df7626a5290d51f832d8862475838f718b3b2bb4fe75b4bcf6b5e055c83eb9821730fbb9b3621a 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:51 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
9f6dc00e7d0000006079d5e2ce106967e2ebc046d4a9f8e041b02d6264831b71 [68a4cc1d3f45e81aa92ef529] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [D:\CARDDAS\Backend\bin\GEHC.XI.Shared.Formulas.Globals.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [D:\CARDDAS\Backend\bin\GESCProcess.exe] [D:\CARDDAS\Backend\bin\GEServiceController.exe] [2025-08-19T19:10:14Z] [c06ed6d1d0a7c4eb01cd24bdc80fc3a2] [eccd928e1bc57300c08c04737cc9e896d0cbd3f3] [9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77] [a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168] [10.36.132.49] [10.36.132.49] 1 Success GEHC.XI.Shared.Formulas.Globals.dll D:\CARDDAS\Backend\bin\ GEHC.XI.Shared.Formulas.Globals 30208 c06ed6d1d0a7c4eb01cd24bdc80fc3a2 Centricity Cardio Workflow 1.0.0.0 Not Signed 2021-10-13 16:45:46 +0000 UTC 2020-12-02 02:05:25 +0000 UTC eccd928e1bc57300c08c04737cc9e896d0cbd3f3 9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77 a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168 2025-08-19 19:10:21 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
a70abcb3640f722ba91de8272c43459616c3249eed6a70fe73426299248a0921 [68a3b50e0570ac6ecb876346, 68a7449f1fda64ac50b71047] [2] [SYSTEM] [i-nBMCAtlas] [NT AUTHORITY] [C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\charsets.jar] [Servers] [Servers Audit] [v2272.867, v2324.910] [] [Not Signed] [C:\Program Files\Amazon Corretto\jdk1.8.0_352\bin\java.exe] [C:\Atlas\PevcoCore\ServiceWrapper.exe] [2025-08-18T23:19:40Z, 2025-08-21T16:07:26Z] [d7251e5cfabd1851fc9f161add6c4614] [f8109e7d9708f7915de0513be7afb9b34bf1654b] [fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b] [4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a] [172.17.252.62] [172.17.252.62] 1 Success charsets.jar C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\ 3092101 d7251e5cfabd1851fc9f161add6c4614 Not Signed 2022-10-15 02:36:30 +0000 UTC 2022-10-15 02:36:30 +0000 UTC f8109e7d9708f7915de0513be7afb9b34bf1654b fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b 4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a 2025-08-18 23:19:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a6cd66e10949aed9399a361660c3a31728d676132440d32d9b7edb1a005f580f [68a51e96c8556d85247b1372] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe] [Servers] [Servers Audit] [v2284] ["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe" /COMPUTER:localhost] [PHILIPS FRANCE COMMERCIAL SAS] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-20T01:02:09Z] [99df7d512c46663d311ff21b6a397a7c] [fd2dbd2766b4a205081e88640035ed1ad5ce7781] [01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab] [9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f] [172.17.23.18] [172.17.23.18] 1 Success DCAdmin.exe C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\ DCAdmin Module 2647776 99df7d512c46663d311ff21b6a397a7c DataCaptor 11.8.1.345 PHILIPS FRANCE COMMERCIAL SAS 2024-11-12 22:03:52 +0000 UTC 2025-08-20 01:01:22 +0000 UTC fd2dbd2766b4a205081e88640035ed1ad5ce7781 01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab 9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f 2025-08-20 01:02:14 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
a6b136aacbe10b92c762f356579330100e2c8b1ae9d6d5657974f9490b3b7f45 [68a3146b5f0c41860c8c8545] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\random.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [c2ce0e5ec437c6d8538c27ae345c1042] [b7828fe39a90bb14a046eab7bf0a18259468b4d6] [e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27] [1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff] [172.17.252.131] [172.17.252.131] 1 Success random.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 35246 c2ce0e5ec437c6d8538c27ae345c1042 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC b7828fe39a90bb14a046eab7bf0a18259468b4d6 e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27 1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a5ff7457fce680ffacc0bba20ac6a177e78341c7dcae31abefcba7e577e64a7f [68a32d9ee5fbd5313b7dadcc] [2] [shke0124] [UH-ADSSP] [UTWNNET] [C:\DesktopInfo\dtlaunch2.vbs] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\wscript.exe] [C:\Windows\explorer.exe] [2025-08-18T13:41:46Z] [e1ace6499530151980189be914a5f89a] [3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3] [ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba] [eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b] [172.17.253.172] [172.17.253.172] 1 Success dtlaunch2.vbs C:\DesktopInfo\ 176 e1ace6499530151980189be914a5f89a Not Signed 2019-05-07 16:56:42 +0000 UTC 2019-04-30 12:25:16 +0000 UTC 3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3 ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b 2025-08-12 21:44:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a596db3f46aad59dc048c9604dd923c50cc42f4839cba96ce5341875ebfdfd96 [68a54627d2a51a0036bb0308] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2rcrpoi2.rwf.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T03:50:54Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_2rcrpoi2.rwf.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 03:50:54 +0000 UTC 2025-08-20 03:50:54 +0000 UTC 2025-08-20 03:51:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a548df31d03d23622cb379acfbc0695202c0e6f9d3fd292b8231855119eed7eb [68a50d976457caa3bd4cff40] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\MedRadA_5_0_2_8.msi] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:49:35Z] [689ccd0909386b792a96ff44490c0330] [ec4d7c17af12efd1448a71da2447d4ae8a11e588] [6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35] [513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22] [172.17.23.18] [172.17.23.18] 1 Success MedRadA_5_0_2_8.msi C:\Users\CA_gs10109\Downloads\ 851968 689ccd0909386b792a96ff44490c0330 Not Signed 2025-08-19 23:49:26 +0000 UTC 2025-08-19 23:49:28 +0000 UTC ec4d7c17af12efd1448a71da2447d4ae8a11e588 6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35 513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22 2025-08-19 23:49:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a4fb99caa5f9c76cb638e6277d2a08ca60291241513e64ef8614d5f494708b4b [68a5239e621d09b2b1ed5e61] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.MVVM.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:39Z] [a0116d71c2bf7d9b02ec8f810131729a] [0a48bc49abd332c14c031050c67ba147ce752b0d] [2978dfa74cc28a4559b5ad081f0fbd3c28a19b7a232494d4db7f0e1d17f1e5000cd1a079b05635f63b3a5f4992b50910] [8923081b5e8268a5630db28d943b0b119e1477ea18ed517ec2e256e8967306de8cb879e6c621b3acee4a68ff615b8efdac1e43e2cc96f7e37ebbe0d379d46d72] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.MVVM.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.MVVM 8704 a0116d71c2bf7d9b02ec8f810131729a Stanley.Infra.MVVM 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC 0a48bc49abd332c14c031050c67ba147ce752b0d 2978dfa74cc28a4559b5ad081f0fbd3c28a19b7a232494d4db7f0e1d17f1e5000cd1a079b05635f63b3a5f4992b50910 8923081b5e8268a5630db28d943b0b119e1477ea18ed517ec2e256e8967306de8cb879e6c621b3acee4a68ff615b8efdac1e43e2cc96f7e37ebbe0d379d46d72 2025-08-20 01:23:42 +0000 UTC None None 2022-12-19 17:24:53 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
a4a5a9bd80cb73fd325ee15e645a860069e36ff5c05c932e2efd9626bee05efe [68a25fb2e970d941642e7edc, 68a25fb2e970d941642e7ee9, 68a3b2cf09045b56b2a707b4, 68a3b2cf09045b56b2a707c1, 68a502e12ae1a61fbf4caf12, 68a502e12ae1a61fbf4caf1f, 68a65489c4cae84feadc5712, 68a65489c4cae84feadc571f] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\dbatools.psm1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:06Z, 2025-08-20T23:00:15Z] [cbadc5b980f5f88524209de74cb9d288] [841515e5cc99849bb746688968e5a2f9b2800d69] [dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a] [d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9] [172.17.252.12] [172.17.252.12] 1 Success dbatools.psm1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\ 51056 cbadc5b980f5f88524209de74cb9d288 dbatools 2024-03-28 19:42:27 +0000 UTC 2024-03-16 13:34:02 +0000 UTC 841515e5cc99849bb746688968e5a2f9b2800d69 dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9 2025-08-08 23:00:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a48e7e331904068e317f8aead7ddc244424fc8f0d0fd9595195727b3e7348a93 [68a24592503474046d56002d, 68a6643ac834a71c320c303b] [2] [SYSTEM] [IMAGENOW73-PROD] [NT AUTHORITY] [C:\Program Files\erl8.3\lib\asn1-4.0.4\priv\lib\asn1rt_nif.dll] [Servers] [Servers Audit] [v2248, v2314] [] [Not Signed] [C:\Program Files\erl8.3\erts-8.3\bin\erl.exe] [C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe] [2025-08-17T21:02:16Z, 2025-08-21T00:02:17Z] [a938f609f23ef250d9275783f6ee19ef] [50cb99e8c0d3c1040e34b471f231d378e90fc2df] [7d071fe6c3f094833c457b5ddc17e3c4b1daf8ae7153c4126983244f49811828de5d0cbbcb528374f47ecea17075be28] [6e23cfd8516b708996d055b6b96c6640c1eae3bc3cdc05a4acef70523767973a0494ac2045f741ca2b75718a9d828521a430bbeb4450742cd5437ec1ccb41b05] [10.101.100.216] [10.101.100.216] 1 Success asn1rt_nif.dll C:\Program Files\erl8.3\lib\asn1-4.0.4\priv\lib\ 17920 a938f609f23ef250d9275783f6ee19ef Not Signed 2017-03-14 21:29:24 +0000 UTC 2017-03-14 21:29:24 +0000 UTC 50cb99e8c0d3c1040e34b471f231d378e90fc2df 7d071fe6c3f094833c457b5ddc17e3c4b1daf8ae7153c4126983244f49811828de5d0cbbcb528374f47ecea17075be28 6e23cfd8516b708996d055b6b96c6640c1eae3bc3cdc05a4acef70523767973a0494ac2045f741ca2b75718a9d828521a430bbeb4450742cd5437ec1ccb41b05 2025-07-17 00:02:31 +0000 UTC None None 2019-12-12 13:35:55 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-07-17 00:06:14.119 +0000 UTC
a44bd80e82cb0f4cfac0dac8575746223802514e3cec9dc75235bc0de646af14 [68a472b1b022648922e235ad] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xalan-2.7.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [6aa6607802502c8016b676f25f8e4873] [d55d3f02a56ec4c25695fe67e1334ff8c2ecea23] [f107b40321720128c82aa3cdef232c8dc393dc2023de47c9e4c6b16c49caa1fc72f7390fe32e9ae3f3668d30df2125a3] [00f859c5bd65f6dc91e396ce91fe2f6d30b2354d6b419cd9ea96984c5403e5cd1342bb9362b0ae1f2792612f0df731c4f7ac92f16a825bb7e22089c27a129c6c] [172.17.23.146] [172.17.23.146] 1 Success xalan-2.7.2.jar C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\ 3154938 6aa6607802502c8016b676f25f8e4873 Not Signed 2022-05-18 18:38:28 +0000 UTC 2021-02-09 20:57:00 +0000 UTC d55d3f02a56ec4c25695fe67e1334ff8c2ecea23 f107b40321720128c82aa3cdef232c8dc393dc2023de47c9e4c6b16c49caa1fc72f7390fe32e9ae3f3668d30df2125a3 00f859c5bd65f6dc91e396ce91fe2f6d30b2354d6b419cd9ea96984c5403e5cd1342bb9362b0ae1f2792612f0df731c4f7ac92f16a825bb7e22089c27a129c6c 2025-08-08 17:07:24 +0000 UTC None None 2025-03-21 10:43:36 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-08 17:21:09.865 +0000 UTC
a4454856dcfed999425856c0fd6a1b93a0ffaa9f3847c3c8553a54171ceb81ed [68a28941494a241570529b12] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\tmpEXO_4quyqcfh.c4k.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T02:00:24Z] [3a71ee92f23de090c1f5c4f973e12c93] [0e445921ea26bec3569ea162bf961f3a24c0ed37] [961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116] [a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_4quyqcfh.c4k.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\ 2290479 3a71ee92f23de090c1f5c4f973e12c93 Not Signed 2025-08-18 02:00:23 +0000 UTC 2025-08-18 02:00:23 +0000 UTC 0e445921ea26bec3569ea162bf961f3a24c0ed37 961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116 a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328 2025-08-18 02:00:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a3a373e7af1e1a849e77ac7afeda3c2fcb310114787f26f0bda956e435b85a2e [68a4cf1f4971da3ff4f65d7a] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:23:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:23:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a3724c84c328061648a13640100576fa1495c17595531d32511c386cb89ad0d0 [68a523a99ba7c92b34976f9a] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingControl.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:42Z] [81bb796392271fdee395ef35a86dd765] [00289d1c9869b2ff54b9f6d773ba1a33719b7d1d] [0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828] [ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05] [172.17.22.40] [172.17.22.40] 1 Success UnderlyingControl.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ UnderlyingControl 43520 81bb796392271fdee395ef35a86dd765 UnderlyingControl 1.0.0.0 Not Signed 2023-06-15 02:37:40 +0000 UTC 2023-06-15 02:37:40 +0000 UTC 00289d1c9869b2ff54b9f6d773ba1a33719b7d1d 0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828 ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a35f7e2e854e0a9bec312d0e231257abf44ccd69ca8d4ce54a45a37c4b33e944 [68a3146b5f0c41860c8c84ee, 68a3146b5f0c41860c8c8544] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\warnings.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [7d85eaf7564ffaa1209cf036319c7ee9] [d08d019620615f931d936c43e8c10fe455351f14] [258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232] [50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9] [172.17.252.131] [172.17.252.131] 1 Success warnings.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 29539 7d85eaf7564ffaa1209cf036319c7ee9 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC d08d019620615f931d936c43e8c10fe455351f14 258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232 50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a324b6ad763bc358149289b8e56cf6af34165731120eac06b4c11545098abe80 [68a3344d439a37dcf9cca092] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rrmcis01.ufu.ps1] [Servers] [Servers Audit] [v2255.853] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T14:10:10Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_rrmcis01.ufu.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 14:10:10 +0000 UTC 2025-08-18 14:10:10 +0000 UTC 2025-08-18 14:10:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a32017ae555c56a0e151a37d90e172e739a0be07eba0325f360d41187c2a4915 [68a3146b5f0c41860c8c8503, 68a3146b5f0c41860c8c8529] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\re\__pycache__\_compiler.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [3fe222e07defb25b338445dbcab0bfb9] [a105528d5535f8082be6782364ab5baaa5e0bfcb] [4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16] [f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac] [172.17.252.131] [172.17.252.131] 1 Success _compiler.cpython-313.pyc C:\Program Files\Python\Lib\re\__pycache__\ 26774 3fe222e07defb25b338445dbcab0bfb9 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC a105528d5535f8082be6782364ab5baaa5e0bfcb 4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16 f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ab3e4f08e2c7a570c28ca7c164108d27b6143f29ccb057cc4a83a9802489df05 [68a25fb2e970d941642e7eda, 68a25fb2e970d941642e7ee7, 68a3b2cf09045b56b2a707b2, 68a3b2cf09045b56b2a707bf, 68a502e12ae1a61fbf4caf10, 68a502e12ae1a61fbf4caf1d, 68a65489c4cae84feadc5710, 68a65489c4cae84feadc571d] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\bogus\bogus.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:05Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:05Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:04Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:05Z, 2025-08-20T23:00:15Z] [a61f8b7824f907fb6c358393c82c5940] [c30336669104b991f2c6b492f653998c8c77b1ad] [1d04f4b56a0edf786dd23ee356cb9d5f5474a9e94e9add2dbc7c10badf9e0816467efb6263f6ca5c8681ef498ca68960] [1098b35b74559b78d303a032489fd9f1926c79a05049698d515e9a9899a27ec25b3606d944adae25db284568637c3099b98c9db0a0d9efa2a312482941c6dd5d] [172.17.252.12] [172.17.252.12] 1 Success bogus.dll C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\bogus\ Bogus Fake Data Generator for .NET 2431488 a61f8b7824f907fb6c358393c82c5940 Bogus 35.4.1 built on 2024-03-02 18:42:42Z Not Signed 2024-03-28 18:35:30 +0000 UTC 2024-03-02 22:45:14 +0000 UTC c30336669104b991f2c6b492f653998c8c77b1ad 1d04f4b56a0edf786dd23ee356cb9d5f5474a9e94e9add2dbc7c10badf9e0816467efb6263f6ca5c8681ef498ca68960 1098b35b74559b78d303a032489fd9f1926c79a05049698d515e9a9899a27ec25b3606d944adae25db284568637c3099b98c9db0a0d9efa2a312482941c6dd5d 2025-05-10 23:00:23 +0000 UTC None None 2024-04-03 16:29:02 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-05-10 23:01:16.463 +0000 UTC
ab2b298d409c891edf1513d3484c5c164cb6060a64944ea2e6c0b6dd496f0097 [68a246ffe80acba0b194f586] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_fxyje5js.4bs.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:17:47Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_fxyje5js.4bs.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:17:47 +0000 UTC 2025-08-17 21:17:47 +0000 UTC 2025-08-17 21:17:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ab0001b12e7ad572eb986b3f639d489d860bcdd5c1a84f13f16bc73235b11c44 [68a3146b5f0c41860c8c84ea, 68a3146b5f0c41860c8c851e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\encodings\__pycache__\utf_8_sig.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z] [efb0079be3128e1ca929caf3e6968501] [3aad7766e3c7603ad9e0b90a344edb5158b6f556] [7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664] [dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb] [172.17.252.131] [172.17.252.131] 1 Success utf_8_sig.cpython-313.pyc C:\Program Files\Python\Lib\encodings\__pycache__\ 6921 efb0079be3128e1ca929caf3e6968501 Not Signed 2024-11-22 16:26:59 +0000 UTC 2024-11-22 16:26:59 +0000 UTC 3aad7766e3c7603ad9e0b90a344edb5158b6f556 7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664 dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
aaf84151e67fc2d21578b8d07a8bc592af20149f26cf05cc67de7acee9f4637b [68a2349d93dd7dbb6ab7e942] [2] [SYSTEM] [u-nUHCPaging] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_53h31yga.ysi.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:59:20Z] [] [] [] [] [172.25.22.57] [172.25.22.57] 1 Success __PSScriptPolicyTest_53h31yga.ysi.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:59:20 +0000 UTC 2025-08-17 19:59:20 +0000 UTC 2025-08-17 19:59:25 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
aa20b24267545230ee528dc0d011fc2431c53e24cbc89d13638c19dfaf93cf3c [68a6afe50e0f3bd8deac4d03, 68a6afe50e0f3bd8deac4d18, 68a6afe50e0f3bd8deac4d45, 68a6afe50e0f3bd8deac4d66, 68a6afe50e0f3bd8deac4d85, 68a6afe50e0f3bd8deac4da5, 68a6afe50e0f3bd8deac4dc6, 68a6afe50e0f3bd8deac4de6, 68a6afe50e0f3bd8deac4e06, 68a6afe50e0f3bd8deac4e26, 68a6afe50e0f3bd8deac4e46, 68a6afe50e0f3bd8deac4e66, 68a6afe50e0f3bd8deac4e86, 68a6afe50e0f3bd8deac4ea6, 68a6afe50e0f3bd8deac4eb8, 68a6afe50e0f3bd8deac4ee7, 68a6afe50e0f3bd8deac4f06, 68a6afe50e0f3bd8deac4f26, 68a6afe50e0f3bd8deac4f47, 68a6afe50e0f3bd8deac4f6f, 68a6afe50e0f3bd8deac4f90, 68a6afe50e0f3bd8deac4fb0, 68a6afe50e0f3bd8deac4fd0, 68a6afe50e0f3bd8deac4ff0, 68a6afe50e0f3bd8deac5010, 68a6afe50e0f3bd8deac5030, 68a6afe50e0f3bd8deac504f, 68a6afe50e0f3bd8deac5070, 68a6afe50e0f3bd8deac5090, 68a6afe50e0f3bd8deac50ba, 68a6afe50e0f3bd8deac50d9, 68a6afe50e0f3bd8deac50fa, 68a6afe50e0f3bd8deac5124, 68a6afe50e0f3bd8deac5146, 68a6afe50e0f3bd8deac5164, 68a6afe50e0f3bd8deac518e, 68a6afe50e0f3bd8deac51ae, 68a6afe50e0f3bd8deac51cd, 68a6afe50e0f3bd8deac51ee, 68a6afe50e0f3bd8deac5201, 68a6afe50e0f3bd8deac5218, 68a6afe50e0f3bd8deac524f, 68a6afe50e0f3bd8deac526f, 68a6afe50e0f3bd8deac5282, 68a6afe50e0f3bd8deac52a3, 68a6afe50e0f3bd8deac52c3, 68a6afe50e0f3bd8deac52e3, 68a6afe50e0f3bd8deac5303, 68a6afe50e0f3bd8deac5323, 68a6afe50e0f3bd8deac5343, 68a6afe50e0f3bd8deac5363, 68a6afe50e0f3bd8deac5383, 68a6afe50e0f3bd8deac53a9, 68a6afe50e0f3bd8deac53c4, 68a6afe50e0f3bd8deac53e8, 68a6afe50e0f3bd8deac5408, 68a6afe50e0f3bd8deac5429, 68a6afe50e0f3bd8deac5444, 68a6afe50e0f3bd8deac546a, 68a6afe50e0f3bd8deac5489, 68a6afe50e0f3bd8deac54a8, 68a6afe50e0f3bd8deac54c9, 68a6afe50e0f3bd8deac54e9, 68a6afe50e0f3bd8deac5508, 68a6afe50e0f3bd8deac5529, 68a6afe50e0f3bd8deac5549, 68a6afe50e0f3bd8deac5573, 68a6afe50e0f3bd8deac5593, 68a6afe50e0f3bd8deac55b3, 68a6afe50e0f3bd8deac55d3, 68a6afe50e0f3bd8deac55f3, 68a6afe50e0f3bd8deac5614, 68a6afe50e0f3bd8deac5633, 68a6afe50e0f3bd8deac563c, 68a6afe50e0f3bd8deac5662, 68a6afe50e0f3bd8deac5682, 68a6afe50e0f3bd8deac5691, 68a6afe50e0f3bd8deac56b1, 68a6afe50e0f3bd8deac56d1, 68a6afe50e0f3bd8deac56e9, 68a6afe50e0f3bd8deac5711, 68a6afe50e0f3bd8deac572a, 68a6afe50e0f3bd8deac5751, 68a6afe50e0f3bd8deac575a, 68a6afe50e0f3bd8deac5799, 68a6afe50e0f3bd8deac57a5, 68a6afe50e0f3bd8deac57da, 68a6afe50e0f3bd8deac57e5, 68a6afe50e0f3bd8deac5819, 68a6afe50e0f3bd8deac5832, 68a6afe50e0f3bd8deac585b, 68a6afe50e0f3bd8deac5863, 68a6afe50e0f3bd8deac589a, 68a6afe50e0f3bd8deac58aa, 68a6afe50e0f3bd8deac58da, 68a6afe50e0f3bd8deac58ec, 68a6afe50e0f3bd8deac5914, 68a6afe50e0f3bd8deac592b, 68a6afe50e0f3bd8deac595b, 68a6afe50e0f3bd8deac597b, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\cip-zwrapper-16-vc140-64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...] [8753dfd88c2f17946cc3f0d6f3b275e2] [e4cfebc6b3fb92a21b64a555ff94674d87f702f5] [430c713d06411b42858c750bfb66a1a31841b613b772949f3fa12f19c091934ff48947d21040a8ef2383bd01c4302d80] [27ace49187c0e9c624cc7114814d966732b60471fb5ecd1b0d94230d453d9bcf3a31b09d21edcd9a29a1bad51ad60a3848166f7af39bc0aa601fc2d222212c4d] [172.17.30.60] [172.17.30.60] 1 Success cip-zwrapper-16-vc140-64.dll C:\Program Files\Fujifilm\NaxisWS6\ cip-zwrapper-16-vc140-64 ダイナミックリンクライブラリ 62976 8753dfd88c2f17946cc3f0d6f3b275e2 CIP 1.6.5.2 Not Signed 2023-11-03 20:25:43 +0000 UTC 2015-10-13 05:41:08 +0000 UTC e4cfebc6b3fb92a21b64a555ff94674d87f702f5 430c713d06411b42858c750bfb66a1a31841b613b772949f3fa12f19c091934ff48947d21040a8ef2383bd01c4302d80 27ace49187c0e9c624cc7114814d966732b60471fb5ecd1b0d94230d453d9bcf3a31b09d21edcd9a29a1bad51ad60a3848166f7af39bc0aa601fc2d222212c4d 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
aa13263cf877fba12972c6ed947fca30c01b3d65106e1346ada8772145045119 [68a2676e765f21351af39a4b] [2] [SYSTEM] [HV-I-FAMELASTIC] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjuufxzf.lny.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T23:36:04Z] [] [] [] [] [172.17.252.183] [172.17.252.183] 1 Success __PSScriptPolicyTest_hjuufxzf.lny.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 23:36:04 +0000 UTC 2025-08-17 23:36:04 +0000 UTC 2025-08-17 23:36:14 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a95a3864848994037a1db9261c87490070f83ce90f08af579cd568bd979bfe8f [68a5239e621d09b2b1ed5e5b] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellHostsDataModel.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [65262622b831d010834ff3548a3dd05a] [f1f44b243a97ceff5f11eacd61789dc2e1ad3f21] [bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4] [517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103] [172.17.22.40] [172.17.22.40] 1 Success ShellHostsDataModel.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 13824 65262622b831d010834ff3548a3dd05a 1.0.8565.40718 Not Signed 2023-06-15 02:37:18 +0000 UTC 2023-06-15 02:37:18 +0000 UTC f1f44b243a97ceff5f11eacd61789dc2e1ad3f21 bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4 517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a94fd67daf9137b26e2d98aa4cf46614439bd64263c5c211369a232c444862ea [68a4e8a1ad898641af98fd91, 68a4fcd0011d94a251a4ef2d] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\UserInfo.dll] [Servers] [Servers Audit] [v2283, v2284] [] [Not Signed] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:52Z, 2025-08-19T22:09:39Z] [9f0cb655a832fdecb9433dd781004637] [bea6b32a5d2d6d152a52847db1184fab956a9d3b] [5c09eafe2f161f74f7aa03230bbed01693e7ed426b7923744a035cf1a54e7a73f9b6388ac92b5bd1bffdcd130a947c6a] [5fd32197a5d9bb7cc65e3917791023fbe2b80a34899d4363475a7fb05fb1051c0a17c72359f3c215d0fd41bbb2dfed0bb95c766131fc175c18ac91cf54b05551] [172.17.23.18] [172.17.23.18] 1 Success UserInfo.dll C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\ 6144 9f0cb655a832fdecb9433dd781004637 Not Signed 2025-08-19 21:11:52 +0000 UTC 2025-08-19 21:11:52 +0000 UTC bea6b32a5d2d6d152a52847db1184fab956a9d3b 5c09eafe2f161f74f7aa03230bbed01693e7ed426b7923744a035cf1a54e7a73f9b6388ac92b5bd1bffdcd130a947c6a 5fd32197a5d9bb7cc65e3917791023fbe2b80a34899d4363475a7fb05fb1051c0a17c72359f3c215d0fd41bbb2dfed0bb95c766131fc175c18ac91cf54b05551 2025-08-19 21:12:01 +0000 UTC None None 2025-08-17 21:57:13 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
a8c69cff170a11e09c0db48f6eff36552f0e55bead875b852f53e4014d2ec4ad [68a5ea05ebe5b1fd9532e2b9] [2] [SYSTEM] [i-nnvr8] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0q2akhpz.hat.ps1] [Servers] [Servers Audit] [v2303.894] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T15:29:28Z] [] [] [] [] [172.17.250.215] [172.17.250.215] 1 Success __PSScriptPolicyTest_0q2akhpz.hat.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 15:29:28 +0000 UTC 2025-08-20 15:29:28 +0000 UTC 2025-08-20 15:30:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a8ae15a09049933a89fdb4389e64b361166effd3c50059a27b421c35661ab8ec [68a3146b5f0c41860c8c84f7, 68a3146b5f0c41860c8c8538] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\selectors.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [dce6f6cf31043a85ae09dd17ed5d2d5f] [811715ac731526bdaee76bf10571075361ecf9d5] [544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011] [8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786] [172.17.252.131] [172.17.252.131] 1 Success selectors.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 26363 dce6f6cf31043a85ae09dd17ed5d2d5f Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 811715ac731526bdaee76bf10571075361ecf9d5 544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011 8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a89d98e45048ab6c95c9bcd763368cdba07ce23cccae4c0397a21465a704f696 [68a16bd60756fe54a9918f9d, 68a2149cb58debea69d7c748, 68a2bd5ff793a9057f329c03, 68a3663261f8067c48423eb8, 68a40efceddb3a9f1a71a600, 68a4b7cd36bc5d38057e2365] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\XmppDll.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [e9993b2952f59b356b8d698593ee395c] [918396277f3549bc9b03d29c6e39a4daf0493ef0] [8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a] [9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc] [10.20.20.68] [10.20.20.68] 1 Success XmppDll.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ gloox Jabber/XMPP library 2290488 e9993b2952f59b356b8d698593ee395c 1.0.11 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 918396277f3549bc9b03d29c6e39a4daf0493ef0 8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a 9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:01:43 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad [68a472b1b022648922e235af] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xml-apis-1.4.01.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [7eaad6fea5925cca6c36ee8b3e02ac9d] [3789d9fada2d3d458c4ba2de349d48780f381ee3] [bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce] [8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268] [172.17.23.146] [172.17.23.146] 1 Success xml-apis-1.4.01.jar C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\ 220536 7eaad6fea5925cca6c36ee8b3e02ac9d Not Signed 2022-05-18 18:38:29 +0000 UTC 2021-02-09 20:57:00 +0000 UTC 3789d9fada2d3d458c4ba2de349d48780f381ee3 bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce 8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268 2025-08-08 17:07:24 +0000 UTC None None 2025-07-07 10:45:19 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-08 17:21:09.865 +0000 UTC
a7cccc87ac2b6a10d20c9bc854dda16ada4efba273b52f1b2aea2e1590febe83 [68a311cdc2d0d6e3eb77f213] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AddRemoveADGroupMembers.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [6125933ae4a52b308e5db3f580da5971] [9bd2f70e769baa4eeadac833831062423a4ace2b] [c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b] [3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5] [172.25.17.86] [172.25.17.86] 1 Success AddRemoveADGroupMembers.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 433 6125933ae4a52b308e5db3f580da5971 Not Signed 2021-11-18 18:17:40 +0000 UTC 2021-02-15 19:13:49 +0000 UTC 9bd2f70e769baa4eeadac833831062423a4ace2b c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b 3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a777578b5261143b213a8b866c266b434757c0d70c0bff30823ba2aa77cb6f99 [68a1dcde696c67888926ebf4] [2] [SYSTEM] [WH1EMGSQL1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_g5umrco1.qad.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:44:48Z] [] [] [] [] [172.18.99.115] [172.18.99.115] 1 Success __PSScriptPolicyTest_g5umrco1.qad.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:44:48 +0000 UTC 2025-08-17 13:44:48 +0000 UTC 2025-08-17 13:45:02 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a767d9dc32d4a0e488878f652ef5e97ceb11636426ed07e4243ad94ac1a882c2 [68a1f0fecfcf9ec5faefd427] [2] [SYSTEM] [u-v3MWeb] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o0k5mtai.fpt.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T15:10:44Z] [] [] [] [] [172.25.19.80] [172.25.19.80] 1 Success __PSScriptPolicyTest_o0k5mtai.fpt.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 15:10:44 +0000 UTC 2025-08-17 15:10:44 +0000 UTC 2025-08-17 15:10:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
a74e1014a652da7a239592f6d0165e69ba56f2890c3a6192f18481090e01ff37 [68a2529a2a645cc96ea797bf] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cob2eltw.0et.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:07:14Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_cob2eltw.0et.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:07:14 +0000 UTC 2025-08-17 22:07:14 +0000 UTC 2025-08-17 22:07:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ada1fdc640def878fdcc18021bedea9d70ed8c536f9747198187bbb5d17356cf [68a238fd2d0808cf577455c5] [2] [SYSTEM] [u-hvhprod12] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_od0m00va.ovq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:17:57Z] [] [] [] [] [172.25.19.217] [172.25.19.217] 1 Success __PSScriptPolicyTest_od0m00va.ovq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:17:57 +0000 UTC 2025-08-17 20:17:57 +0000 UTC 2025-08-17 20:18:05 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ad89571f2b2cb3680b5f6178667a3c01b1ad085b0a046a9c24ad542f574dc02b [68a71d98771132224a617f7b] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Event Server\VideoOS.Event.Server.TrayController.exe] [Servers] [Servers Audit] [v2321.907] ["C:\Program Files\Milestone\XProtect Event Server\VideoOS.Event.Server.TrayController.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\explorer.exe] [2025-08-21T13:14:38Z] [0bd181c7ce7eb21f003927b9a13f5f96] [7c2862073507c837c7d771db494fe151a9c9b69a] [a0cec1718341afa841287c50a3241226d455d0e4676e9791d3cfb9aba8631747ea6914bfe064e9f825e214acc440ccf4] [6fdfc4c0633ab205cc49090189b3fbe2b3e191d6222c7ddb80a5004cd6e2ebcd6d4f74baa3f0eeb8d500240d091df4ccb0d041099e58b5abf68578a288b21de9] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Event.Server.TrayController.exe C:\Program Files\Milestone\XProtect Event Server\ Event Server manager 59904 0bd181c7ce7eb21f003927b9a13f5f96 VideoOS 20.2.2035.1 Not Signed 2020-05-01 19:51:34 +0000 UTC 2020-05-01 19:51:34 +0000 UTC 7c2862073507c837c7d771db494fe151a9c9b69a a0cec1718341afa841287c50a3241226d455d0e4676e9791d3cfb9aba8631747ea6914bfe064e9f825e214acc440ccf4 6fdfc4c0633ab205cc49090189b3fbe2b3e191d6222c7ddb80a5004cd6e2ebcd6d4f74baa3f0eeb8d500240d091df4ccb0d041099e58b5abf68578a288b21de9 2025-07-16 19:27:14 +0000 UTC None None 2022-01-11 11:29:30 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
ad7c0b2129710ddf993b52f160a9045d9ba52aadc123df4370360ea7f70b3152 [68a16bd60756fe54a9918f9e, 68a2149cb58debea69d7c74a, 68a2bd5ff793a9057f329c04, 68a3663261f8067c48423eb7, 68a40efceddb3a9f1a71a601, 68a4b7cd36bc5d38057e2366] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMsgAppCommon.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [8ebe28011c96596c46449bb1073ef46e] [14337012084411cbc0624f820c9fea5072ca6c1b] [a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421] [66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e] [10.20.20.68] [10.20.20.68] 1 Success zMsgAppCommon.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 10472248 8ebe28011c96596c46449bb1073ef46e Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 14337012084411cbc0624f820c9fea5072ca6c1b a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421 66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e 2025-07-15 17:40:29 +0000 UTC None None 2025-06-12 09:17:11 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
ad3d406f876972eb8546c0464c04d3728c2928bbaa961d25359a1386c77c655c [68a70bf158372bc3075d1d47] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Yabe.exe] [Servers] [Servers Audit] [v2314.900] ["C:\Program Files\Yabe\Yabe.exe"] [Not Signed] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe] [2025-08-21T12:07:03Z] [863329bcff088adc2e1f1bbc16de8e56] [03ccd0a7e520defb9babd8ac71de101142ddcaea] [e119f161b2087ffbce3d9c2387e6c5788ba7492971b83e768c48f63449d2b40096ab7d8586c643416321b31bf7b79574] [0dfcc2ed17e37de087e03ed5e9516df9f199b5de8ff65c8e527349e29ecffefcb43a5f1754b058b56745b6cb5b887e539a09c9a75dffedcb2744ebe24c99bf95] [172.17.20.75] [172.17.20.75] 1 Success Yabe.exe C:\Program Files\Yabe\ Yabe 2409984 863329bcff088adc2e1f1bbc16de8e56 Yabe 2.1.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-07-10 09:09:52 +0000 UTC 03ccd0a7e520defb9babd8ac71de101142ddcaea e119f161b2087ffbce3d9c2387e6c5788ba7492971b83e768c48f63449d2b40096ab7d8586c643416321b31bf7b79574 0dfcc2ed17e37de087e03ed5e9516df9f199b5de8ff65c8e527349e29ecffefcb43a5f1754b058b56745b6cb5b887e539a09c9a75dffedcb2744ebe24c99bf95 2025-08-21 12:07:13 +0000 UTC None None 2025-08-14 17:19:26 +0000 UTC 73 2 KNOWN 0 Benign 0.40 2025-08-20 18:12:07.258 +0000 UTC
ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce [68a472a799ad3734d804e2f8] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-codec-1.9.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [75615356605c8128013da9e3ac62a249] [9ce04e34240f674bc72680f8b843b1457383161a] [29ef73a57b1f0ed729409d4a0200f1c9a444a4f6ac355c5c8f09e7acb23fdb6dca3074009b916fb6ec073f7cccc0adbf] [b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102] [172.17.23.146] [172.17.23.146] 1 Success commons-codec.jar E:\weblogic\user_projects\domains\swisslog\servers\AdminServer\tmp\_WL_user\pim-war\r2ub70\war\WEB-INF\lib\ 263965 75615356605c8128013da9e3ac62a249 Not Signed 2024-09-20 03:24:08 +0000 UTC 2023-09-28 14:22:30 +0000 UTC 9ce04e34240f674bc72680f8b843b1457383161a 29ef73a57b1f0ed729409d4a0200f1c9a444a4f6ac355c5c8f09e7acb23fdb6dca3074009b916fb6ec073f7cccc0adbf b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102 2025-08-11 05:11:21 +0000 UTC None None 2025-06-24 12:17:15 +0000 UTC 64 0 KNOWN 0 Microsoft attested file 2025-08-10 09:14:12.412 +0000 UTC
ad17815283c3efec2632516bfb653476c33644002df5f1aa22804c8b165f6170 [68a311cdc2d0d6e3eb77f21e] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:39:07Z] [51edb535cb2fcd632ec8c09c14fe100f] [ed4596c1f4043fb241a493063969f44e970c3e04] [994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd] [a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6] [172.25.17.86] [172.25.17.86] 1 Success Microsoft.PowerShellISE_profile.ps1 C:\Users\georgemag\Documents\WindowsPowerShell\ 152 51edb535cb2fcd632ec8c09c14fe100f Not Signed 2025-05-29 17:38:09 +0000 UTC 2023-08-31 18:12:15 +0000 UTC ed4596c1f4043fb241a493063969f44e970c3e04 994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ad12fe924b6dbe1f869a20425a873f3d69862ab4deae20bfd6345adf5cf6a1c0 [68a7159f4aa14456bb5cd15f] [2] [CA_Jnt_SVAsp] [u-hAADConnect] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_9273e095-4825-45ca-bdb1-4155db91ed74_Untitled1.ps1] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:42:34Z] [] [] [] [] [172.25.19.63] [172.25.19.63] 1 Success AutoSaved_9273e095-4825-45ca-bdb1-4155db91ed74_Untitled1.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 12:27:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
acbc4f0a5eaf7c7d93ac6e6b7215bfc3335342b6e2dd8dca6f53dcb7ee79b033 [68a2a5fb28c6be6b08f580b6] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5tf0ydu5.0zc.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T04:03:01Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_5tf0ydu5.0zc.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 04:03:01 +0000 UTC 2025-08-18 04:03:01 +0000 UTC 2025-08-18 04:03:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973 [68a72d39787594c630b4edf3] [2] [sk10219sa] [n-sktartarus] [WVUHS] [C:\Users\sk10219sa\AppData\Local\Temp\2\nss2F7A.tmp\registry.dll] [Servers] [Servers Audit] [v2324.910] [] [Not Signed] [E:\Notepad++Portable\Notepad++Portable.exe] [C:\Windows\explorer.exe] [2025-08-21T14:23:07Z] [2880bf3bbbc8dcaeb4367df8a30f01a8] [cb5c65eae4ae923514a67c95ada2d33b0c3f2118] [f1936b8653ddf29cb9e10da4b80ac2fa2073cf27bbbbb74aaf4a4906e9153263d4f9bf756c0b199545609ccfaa7489a4] [ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3] [172.17.20.94] [172.17.20.94] 1 Success registry.dll C:\Users\SVC_SL_Biomer\AppData\Local\Temp\6\nsn13A1.tmp\ 29696 2880bf3bbbc8dcaeb4367df8a30f01a8 Not Signed 2025-05-05 16:24:57 +0000 UTC 2025-05-05 16:24:57 +0000 UTC cb5c65eae4ae923514a67c95ada2d33b0c3f2118 f1936b8653ddf29cb9e10da4b80ac2fa2073cf27bbbbb74aaf4a4906e9153263d4f9bf756c0b199545609ccfaa7489a4 ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3 2025-05-05 16:24:58 +0000 UTC None None 2025-05-02 17:55:51 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-05 12:57:36.74 +0000 UTC
ac5c7e37104a139a3ea877b75658eff5f399de2333e5ba8c3e5388f8890389dc [68a523949cec397f02de9f4f] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Control.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:27Z] [3f5edae09a2d2bbfda7864aa86623e86] [a31163d319bb84f551dcd9ee88b4bc9fb6323152] [7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9] [87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47] [172.17.22.40] [172.17.22.40] 1 Success Control.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 20480 3f5edae09a2d2bbfda7864aa86623e86 1.0.8565.40744 Not Signed 2023-06-15 02:38:10 +0000 UTC 2023-06-15 02:38:10 +0000 UTC a31163d319bb84f551dcd9ee88b4bc9fb6323152 7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9 87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
abfc4eadbf5b3acb9932b4f2d763d6aa06f05c2031a181854aa56996337ce231 [68a4ce1bb0bf18198cad4ef7] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cweckucy.31w.ps1] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:18:42Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_cweckucy.31w.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 19:18:42 +0000 UTC 2025-08-19 19:18:42 +0000 UTC 2025-08-19 19:18:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
abd869d106c61140b3d80bd9cc1a008c3d4d508926a67934a664f7987c30311a [68a5239e621d09b2b1ed5e62] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.UIUtils.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:39Z] [1e5cee344d8f60e9f329b21d53a74f4b] [100cbac39f16b76b3c4bf875e20cddb93f89355b] [65839e770d4100b7cfa2dbb31f23931b96c8f7e105709e0812cc577cda33df8506e730057a440b237e2d22eb0a924d59] [c7f2b3a4f50b15c532dfb98513896340321fbf2111dbe96fc7b828edcffbaada084d8ecc0d3909e4cf931b4b8c99545c115abda0fe2d68512f450589ec45fb3d] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.UIUtils.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.UIUtils 27648 1e5cee344d8f60e9f329b21d53a74f4b Stanley.Infra.UIUtils 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC 100cbac39f16b76b3c4bf875e20cddb93f89355b 65839e770d4100b7cfa2dbb31f23931b96c8f7e105709e0812cc577cda33df8506e730057a440b237e2d22eb0a924d59 c7f2b3a4f50b15c532dfb98513896340321fbf2111dbe96fc7b828edcffbaada084d8ecc0d3909e4cf931b4b8c99545c115abda0fe2d68512f450589ec45fb3d 2025-08-20 01:23:42 +0000 UTC None None 2022-12-19 17:24:02 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
ab9cadc80e234580e3f3c8c18644314fccd4b3cd3f7085d4e934866cb561b95d [68a472b1b022648922e23590] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-api-2.17.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [935fcbd8c8273c0a4f1652de53493050] [bbd791e9c8c9421e45337c4fe0a10851c086e36c] [4bb853d3edb5ded142e8434a14e13e2c80c7c075bc57eca331974e23c81099f4bb3f973466c09e1b9241702bad3e2462] [6391788510d015ae2d94527b942cf49a9518e8628932e0a08a1d8a46297499f9cd8a81f7dd99409f69beb06e844f9fc33b6c5c403786202cb3face9e182a5496] [172.17.23.146] [172.17.23.146] 1 Success log4j-api-2.17.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 301776 935fcbd8c8273c0a4f1652de53493050 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC bbd791e9c8c9421e45337c4fe0a10851c086e36c 4bb853d3edb5ded142e8434a14e13e2c80c7c075bc57eca331974e23c81099f4bb3f973466c09e1b9241702bad3e2462 6391788510d015ae2d94527b942cf49a9518e8628932e0a08a1d8a46297499f9cd8a81f7dd99409f69beb06e844f9fc33b6c5c403786202cb3face9e182a5496 2025-03-28 16:04:26 +0000 UTC None None 2024-10-23 15:11:58 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
ab9b7bb85b4a86b0959ea8ab79a27d2943d17f81f93306f5628edf2f0e1d69ee [68a4855388937a93ff144374] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Data.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:08:10Z] [f6f2e748b8e7aebde05c149eccef41f3] [279bb7a5349ffe29333bc142aac24e8e2cfa883c] [c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de] [2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Authentication.Data.dll C:\Stryker\iBed Server Application\Stryker.Authentication\ Stryker.iBedServer.Authentication.Data 11264 f6f2e748b8e7aebde05c149eccef41f3 Stryker.iBedServer.Authentication.Data 1.0.0 Not Signed 2023-03-16 10:22:16 +0000 UTC 2023-03-16 10:22:16 +0000 UTC 279bb7a5349ffe29333bc142aac24e8e2cfa883c c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de 2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8 2025-08-19 14:08:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ab560b0d3264fb18db34b6e934db7a947b7091d6384524f728d3ab53b93b28ac [68a306a5ba5832f49fe9cf47] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FE2CMPS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [73b6eded7c5fd671f52d68f3edae4ca9] [73f32cfcd330441690385be65724169a8f89d934] [ed9b4ccf0c323dbe5ff6d433e44585c48715ff87f78b06a6d1e5c75637e996806d498693ac408aec2cac60878068d69c] [00ce22a461c6f0deef98931c2e7535098827444a547119e686694910de5e5893812459d1a5ccbc1b8cb2e7f3cbc54a1f7031b20e35298744f424d2a110d232b9] [172.17.146.33] [172.17.146.33] 1 Success FE2CMPS.BPL C:\DICORP\DICORP_V5\RW\APPS\ 536064 73b6eded7c5fd671f52d68f3edae4ca9 1.24.2 Not Signed 2022-07-06 14:52:13 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 73f32cfcd330441690385be65724169a8f89d934 ed9b4ccf0c323dbe5ff6d433e44585c48715ff87f78b06a6d1e5c75637e996806d498693ac408aec2cac60878068d69c 00ce22a461c6f0deef98931c2e7535098827444a547119e686694910de5e5893812459d1a5ccbc1b8cb2e7f3cbc54a1f7031b20e35298744f424d2a110d232b9 2025-04-30 20:02:53 +0000 UTC None None 2021-07-19 05:53:37 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
ab43a515bf8b14a2a9c2994df65a7c29e928b93092b1b77cddb95a748c3e356a [68a6afe50e0f3bd8deac4f4f, 68a6afe50e0f3bd8deac5099, 68a6afe50e0f3bd8deac5103, 68a6afe50e0f3bd8deac516d, 68a6afe50e0f3bd8deac5552, 68a6afe50e0f3bd8deac5644, 68a6afe50e0f3bd8deac5763, 68a6afe50e0f3bd8deac5d2c, 68a6afe50e0f3bd8deac5dae, 68a6afe50e0f3bd8deac5eec] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\icuin53.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [81182110c7efd4a1ca04b3f9459caf57] [a3ba426552698c1fee9df6f3a58afa00f487396d] [312c932e25b6a59d9f136d6ce760489fd55ce01b2b4d71d5c99211d521422534e98d81923d84d27c44f3f6b34a96784a] [b2375b979efd272a2c8a2d06d2d9bb5ca78585e5ddba824bc13c70f4162e71c009b32034b23afd8320c329766ce82461ec74ff5e98d02b983bab27177e39ed65] [172.17.30.60] [172.17.30.60] 1 Success icuin53.dll C:\Program Files\PostgreSQL\12\bin\ ICU I18N DLL 1844224 81182110c7efd4a1ca04b3f9459caf57 International Components for Unicode 53, 1, 0, 0 Not Signed 2023-10-19 17:59:23 +0000 UTC 2019-12-13 12:43:37 +0000 UTC a3ba426552698c1fee9df6f3a58afa00f487396d 312c932e25b6a59d9f136d6ce760489fd55ce01b2b4d71d5c99211d521422534e98d81923d84d27c44f3f6b34a96784a b2375b979efd272a2c8a2d06d2d9bb5ca78585e5ddba824bc13c70f4162e71c009b32034b23afd8320c329766ce82461ec74ff5e98d02b983bab27177e39ed65 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-10 12:39:31 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 06:40:28.291 +0000 UTC
08fdd39cece7dfe6201bda96bc2af42eaddb0c51af311571f4fcd66b72cdb961 [68a5239e621d09b2b1ed5e67] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\System.Data.SQLite.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:40Z] [4fcac7bf3ed72062425643cddab98ece] [24601d0641ef8b5f30833f270e45671b0ba95171] [cc749a936d4d8e27ccd8950eee8d9b8ff57f1bfb53ff489d2c87cf6ce14f2739643a79b8801a7712defd91a134fb569d] [789607ea5f3f2e00f015027b19b647a1a749dcb5d950c34266de5e3e0f699e8bc0eda61d7347801eaa0ffcd4481afb5b339e45a225e566f241e95f146920a508] [172.17.22.40] [172.17.22.40] 1 Success System.Data.SQLite.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ System.Data.SQLite Interop Library 502272 4fcac7bf3ed72062425643cddab98ece System.Data.SQLite 1.0 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC 24601d0641ef8b5f30833f270e45671b0ba95171 cc749a936d4d8e27ccd8950eee8d9b8ff57f1bfb53ff489d2c87cf6ce14f2739643a79b8801a7712defd91a134fb569d 789607ea5f3f2e00f015027b19b647a1a749dcb5d950c34266de5e3e0f699e8bc0eda61d7347801eaa0ffcd4481afb5b339e45a225e566f241e95f146920a508 2025-08-20 01:23:42 +0000 UTC None None 2022-08-05 07:07:38 +0000 UTC 69 1 KNOWN 1 Benign 0.70 2025-08-20 01:26:27.286 +0000 UTC
08f4b407953309b37462a1b49111c0346f505c18df73ad795fe1f3d08a26a13c [68a2407e7f644124333c5597] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_az4bceeu.ygt.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:49:53Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_az4bceeu.ygt.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:49:53 +0000 UTC 2025-08-17 20:49:53 +0000 UTC 2025-08-17 20:50:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
08ded4c8af90b220466832bcd7ec8e5a81b80f84609e90d7adefa12059f2df88 [68a34b98a6132bf659cce5b2, 68a34df0b71eea1289980a17] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadDock.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z] [28879b8c421e36c48de2516b86e8ad42] [e23d1238671eaf5cdb219cb147bc97b5ace02066] [fb49b10fa8269187e762f7adca78ce8b832003743e63f9324a976c9612fa14aa81238930df458a1bc862c861563e45c0] [4b537d2df27de2ef48f0375ab4b58b2877ba8e7d9ea08cfd5a383ad531b46d938de403d2486e536a53b3f3302deea45605a8ee16764d0596abba81c9e76ec9d6] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.RadDock.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.RadDock 900096 28879b8c421e36c48de2516b86e8ad42 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:00 +0000 UTC 2023-07-25 16:12:01 +0000 UTC e23d1238671eaf5cdb219cb147bc97b5ace02066 fb49b10fa8269187e762f7adca78ce8b832003743e63f9324a976c9612fa14aa81238930df458a1bc862c861563e45c0 4b537d2df27de2ef48f0375ab4b58b2877ba8e7d9ea08cfd5a383ad531b46d938de403d2486e536a53b3f3302deea45605a8ee16764d0596abba81c9e76ec9d6 2025-06-09 21:58:51 +0000 UTC None None 2022-04-23 05:15:43 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
b037b79be171f4aa0667e324cadfec44ffe7822980c741fe4c0e08263c13e651 [68a5239e621d09b2b1ed5e50] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:35Z] [3f67c30ff4a260e1eb472273f8adddae] [6cc927b8950e31a2117aabc6226b40ba6e255fe0] [1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98] [32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874] [172.17.22.40] [172.17.22.40] 1 Success PlaybackData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Data 1496576 3f67c30ff4a260e1eb472273f8adddae Data 1.0.0.0 Not Signed 2023-06-15 02:37:24 +0000 UTC 2023-06-15 02:37:24 +0000 UTC 6cc927b8950e31a2117aabc6226b40ba6e255fe0 1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98 32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b001c8a9342cace11b481d2a09c0da0fa6d773e695beeb5b73e0605eb4bfe43d [68a71d98771132224a617f7c, 68a71d98771132224a617f84] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Event Server\VideoOS.Utilities.dll, C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Utilities.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP7C7E~1\VIDEOO~1.EXE, C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:38Z, 2025-08-21T13:14:39Z] [a4d0de7cbab9e6286a4d7fa619361abb] [ac16a7547ca24e71a436bb1243a1c7044f58ecda] [4272a9e2fe2c5ec2c2edbfd39f3aeef8c58df98c9b39ca66ed9529122fd042237e18342e40adb69fc6a1f927a01e7415] [26b03eef9ad4f00987e40474e1784bc65e6749973e5f22729dbfb236b90cc7c89a71e5470bf2d926fd5872ca9d535d0d7ee2ea9d5194933a6a71c8d5b260f054] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Utilities.dll C:\Program Files\Milestone\XProtect Event Server\ Common Utilities 615424 a4d0de7cbab9e6286a4d7fa619361abb VideoOS 20.2.216.1 Not Signed 2020-05-01 19:13:06 +0000 UTC 2020-05-01 19:13:06 +0000 UTC ac16a7547ca24e71a436bb1243a1c7044f58ecda 4272a9e2fe2c5ec2c2edbfd39f3aeef8c58df98c9b39ca66ed9529122fd042237e18342e40adb69fc6a1f927a01e7415 26b03eef9ad4f00987e40474e1784bc65e6749973e5f22729dbfb236b90cc7c89a71e5470bf2d926fd5872ca9d535d0d7ee2ea9d5194933a6a71c8d5b260f054 2025-07-16 19:27:14 +0000 UTC None None 2024-03-25 17:25:58 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
afe3176a14b043f58c56704a27e21b9475b8f09d831e28f4fcc5d1f3cbef7405 [68a1642f671392a6ca40e557, 68a1804bf8ae7dd3df476f08, 68a2b3ef86404a813dc06ef7, 68a4059c5671ca7f23589561, 68a558aca07fa49408288e4a, 68a6a8f326e2a7ae27aa5354] [2] [postgres] [vm-ASCNEO] [VM-ASCNEO] [C:\Program Files (x86)\ASC\ASC Product Suite\scripts\database.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Program Files (x86)\pgAgent\bin\pgagent.exe] [2025-08-17T05:00:05Z, 2025-08-17T07:00:01Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z, 2025-08-21T05:00:01Z] [bb8911d4382b8a47f80788ddae424b5e] [4de6d08bc1e8b11e7bf5103511383b4b580be052] [88a7d44a0d060f268d18579441c450d467092733ae765cd56a41231ec42b6282afc05751f36dd905da129bcc5cf61d3b] [464c98c46143d08846caf906c10b6f8be29f6ce623ea51efbd3a3f1cc0e0396d8fa169fa3e93a2eff1a7a3484df58d7f2cb0d6670659a801a9718940923272b6] [172.17.20.9] [172.17.20.9] 1 Success database.bat C:\Program Files (x86)\ASC\ASC Product Suite\scripts\ 2792 bb8911d4382b8a47f80788ddae424b5e Not Signed 2020-05-15 14:27:52 +0000 UTC 2020-05-15 14:27:52 +0000 UTC 4de6d08bc1e8b11e7bf5103511383b4b580be052 88a7d44a0d060f268d18579441c450d467092733ae765cd56a41231ec42b6282afc05751f36dd905da129bcc5cf61d3b 464c98c46143d08846caf906c10b6f8be29f6ce623ea51efbd3a3f1cc0e0396d8fa169fa3e93a2eff1a7a3484df58d7f2cb0d6670659a801a9718940923272b6 2025-08-09 05:00:09 +0000 UTC None None 2021-03-08 13:27:59 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-08-09 05:00:32.765 +0000 UTC
afd354cdedd2b9416488113376fb0d902eed137a474db3f4950dfe724f4af992 [68a3146b5f0c41860c8c84f1, 68a3146b5f0c41860c8c852e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\collections\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [d9f076f7a677fa5a6ef8c75ca0ba3c77] [92b5e1df018c550f117247f779ae19db21eaae9f] [4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a] [a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\collections\__pycache__\ 73105 d9f076f7a677fa5a6ef8c75ca0ba3c77 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 92b5e1df018c550f117247f779ae19db21eaae9f 4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
afcee321d7c7d802d9cd2489bd88d1aa30043b3576078e4ecbfb9c8fb3b7df7b [68a165183f1f36f01a2f3ff2, 68a2b69c8b983fbe0c82338d, 68a40846a972cb7f3cce6ebb, 68a5578d6ea23be9f4b23b73, 68a6a93bfd31eba40e58e7ca] [2] [SYSTEM] [u-vroggerb] [NT AUTHORITY] [C:\icm\pcce\rb\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z] [9b70ea11df34de22f6a0b16fddf15abc] [296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358] [6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052] [ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292] [172.25.196.35] [172.25.196.35] 1 Success purgeold.bat C:\icm\pcce\rb\bin\ 406 9b70ea11df34de22f6a0b16fddf15abc Not Signed 2021-10-07 20:04:22 +0000 UTC 2021-10-07 20:04:22 +0000 UTC 296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358 6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052 ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
afa68b96334ea8493bcb908743af3dbd619cf26be7b44460179abd4d75d849d2 [68a162e82a638d4aa3f3a7de, 68a2b471d463128b1e9bad1c, 68a4061e04f40cbca7b61c8d, 68a557c15db6cbee6e2f08cc, 68a6a9787a86f4672b9b6281] [2] [svc_sunnuc] [NT-SUNCHECK] [WVUHS] [C:\Program Files\nodejs\npm.cmd] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:09Z, 2025-08-18T05:00:09Z, 2025-08-19T05:00:09Z, 2025-08-20T05:00:09Z, 2025-08-21T05:00:09Z] [d5b5acb61c9bf69fb8bfc65eba28c6ab] [eebdd696f7f1aaea15ac4e10f5a6e5aa5a6aca8c] [e8cdb0183a63c298c54fac2f222f64c25d7406acc7158312c01bcf6220543a41777561ce274f791f2daa66e047cba2d7] [69483d7c5e49efdcdf054b3c5d96d9d315e436f60ef3059dd6a80472445d79068655a8a27d868e907f2ebafc49b8f638947b2fb49d42e4a9f427fec74fb58822] [172.17.36.3] [172.17.36.3] 1 Success npm.cmd C:\Program Files\nodejs\ 483 d5b5acb61c9bf69fb8bfc65eba28c6ab Not Signed 2021-02-23 00:32:30 +0000 UTC 2021-02-23 00:32:30 +0000 UTC eebdd696f7f1aaea15ac4e10f5a6e5aa5a6aca8c e8cdb0183a63c298c54fac2f222f64c25d7406acc7158312c01bcf6220543a41777561ce274f791f2daa66e047cba2d7 69483d7c5e49efdcdf054b3c5d96d9d315e436f60ef3059dd6a80472445d79068655a8a27d868e907f2ebafc49b8f638947b2fb49d42e4a9f427fec74fb58822 2025-08-09 05:00:19 +0000 UTC None None 2025-07-14 20:22:01 +0000 UTC 63 0 KNOWN 0 Microsoft attested file 2025-08-08 12:10:30.248 +0000 UTC
af99df13a42a0e67c70d559948cf794b9df7d5fc84dbb69e4b32ad84fe7aca55 [68a306a5ba5832f49fe9cf59] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CFGDATA.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [aafddb6202b25809659546608e51a682] [fc4b1331b97da0e5e1462462c26d0f0799a961ac] [602bb01e4ee73e56a6da15c76288156f8c9ebbbae28c3bfc2d154eb8298c9470983aed45d972b91f62416f274d1b19fb] [dc1a678eef2ab975a553d5caefe489b06a5fc33abf9d92ebb11bbf03993a0a58a6aa8bf6fe70e54b1d3605f118460d6b4c875781023622cd117ffe84b56b1c3b] [172.17.146.33] [172.17.146.33] 1 Success CFGDATA.BPL C:\DICORP\DICORP_V5\RW\APPS\ 27136 aafddb6202b25809659546608e51a682 CfgData 1.0.0.0 Not Signed 2022-07-06 14:52:04 +0000 UTC 2024-09-14 04:02:48 +0000 UTC fc4b1331b97da0e5e1462462c26d0f0799a961ac 602bb01e4ee73e56a6da15c76288156f8c9ebbbae28c3bfc2d154eb8298c9470983aed45d972b91f62416f274d1b19fb dc1a678eef2ab975a553d5caefe489b06a5fc33abf9d92ebb11bbf03993a0a58a6aa8bf6fe70e54b1d3605f118460d6b4c875781023622cd117ffe84b56b1c3b 2025-04-30 20:02:53 +0000 UTC None None 2022-10-02 05:01:41 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
af92fc52408ffd0a52b3c898e7d4126e06b42495c28d98f06f78934ea0393139 [68a70bf158372bc3075d1d49] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Plugins\CheckStatusFlags.dll] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Program Files\Yabe\Yabe.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:07:06Z] [430174ae9646bff13c7bcf74cd9bf1d9] [575df67e248571180452bcb9a03ad6a649fd2fec] [284d179131d4cf8b450fccc7b3f1fdfdfc7b17db065879525f9987dc105b1f8dc3b49f783ce79ab3477e5a6f8a18c461] [0f3b0b3e981fffcf203e676f692cbe7f3f633f1db1e1f9b934da4b800b3ff422a6cd3b290c1d59c2cea122e9cf1a77d703278d350358a19ac536f732b8f3e8cf] [172.17.20.75] [172.17.20.75] 1 Success CheckStatusFlags.dll C:\Program Files\Yabe\Plugins\ CheckReliability Yabe Plugin 22016 430174ae9646bff13c7bcf74cd9bf1d9 CheckReliability 1.0.0.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-01-17 11:17:44 +0000 UTC 575df67e248571180452bcb9a03ad6a649fd2fec 284d179131d4cf8b450fccc7b3f1fdfdfc7b17db065879525f9987dc105b1f8dc3b49f783ce79ab3477e5a6f8a18c461 0f3b0b3e981fffcf203e676f692cbe7f3f633f1db1e1f9b934da4b800b3ff422a6cd3b290c1d59c2cea122e9cf1a77d703278d350358a19ac536f732b8f3e8cf 2025-08-21 12:07:13 +0000 UTC None None 2025-02-25 18:29:06 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
ae938cf2fc97de3ecebb4366788b40c4b0278d5d8590cfec49822ceccaba6cc1 [68a32505df020a242f955315] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q3yphmy4.esi.ps1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T13:05:08Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_q3yphmy4.esi.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 13:05:08 +0000 UTC 2025-08-18 13:05:08 +0000 UTC 2025-08-18 13:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ae79d3bb94a62586e22d6319312d1a9bac29432617a879a3c81c12cc070dd0ef [68a5c81947601aee5f76e90f, 68a5c9d7599432010e418bc9] [2] [SYSTEM, SVC_SL_RedSailTech] [i-nQS1mgtn] [NT AUTHORITY, WVUHS] [D:\QS1\ltfil14N.DLL] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe] [C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe] [2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z] [ea579b87170fb740ed95a50d5b9633c5] [9ee176043363bae65d21eed48ad91a8b14149268] [61bb9220bf441c7970c8f54f3d4f3c8b78a468b302db7edc4da4b5f086726911938058de8544c6ea9ee4fca4ec06ac74] [f94c9cc139a8a94d63721b95392dffbbed578dfcfe979e64623d315d2deaa8e48dbeeea3b0f8329b5d48fc0928928f585bf3b056201c04138c5b262241acce62] [172.17.20.104] [172.17.20.104] 1 Success ltfil14N.DLL C:\QS1\ LEADTOOLS(r) DLL for Win32 155648 ea579b87170fb740ed95a50d5b9633c5 LEADTOOLS(r) DLL for Win32 14.5.0.013 Not Signed 2025-07-17 16:13:27 +0000 UTC 2006-06-03 04:44:30 +0000 UTC 9ee176043363bae65d21eed48ad91a8b14149268 61bb9220bf441c7970c8f54f3d4f3c8b78a468b302db7edc4da4b5f086726911938058de8544c6ea9ee4fca4ec06ac74 f94c9cc139a8a94d63721b95392dffbbed578dfcfe979e64623d315d2deaa8e48dbeeea3b0f8329b5d48fc0928928f585bf3b056201c04138c5b262241acce62 2025-07-17 16:15:22 +0000 UTC None None 2024-05-09 09:34:17 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-07-17 16:17:46.576 +0000 UTC
ae73137687a27f2a7dac88f244bb0a8bf7932a7d05c197173f1621766e66d7e2 [68a253ef9fa0433bd6158684] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eygtkwak.uks.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:12:56Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_eygtkwak.uks.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:12:56 +0000 UTC 2025-08-17 22:12:56 +0000 UTC 2025-08-17 22:13:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ae05305e7aba537e3a237d01bd252ddfc50e1a2773932b0bc822524ea5106909 [68a306a5ba5832f49fe9cf33] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STATUSCR.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:35Z] [ea17aa006763ebd9d98447e3bba818be] [caf8bdbc3576be8252abdaf38180e54ca753a2b6] [d8e2908a992f16bc55372bbb207ff71b94c124a7495d12cf16ee8c03bd060f41ce35c31bbeafbb1aaf92d8ddf8ef9a98] [decbe90ee6f19a7c1488b700ad8fe17bcfd9f387c1ffcc513c57ecf9a366c63f05f46d95b5448c40ab8c0aadf9c83478674f462f9e6fd1ac200181c2513b4931] [172.17.146.33] [172.17.146.33] 1 Success STATUSCR.DLL C:\DICORP\DICORP_V5\SDL\APPS\ 13312 ea17aa006763ebd9d98447e3bba818be 1.01.0.0 Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC caf8bdbc3576be8252abdaf38180e54ca753a2b6 d8e2908a992f16bc55372bbb207ff71b94c124a7495d12cf16ee8c03bd060f41ce35c31bbeafbb1aaf92d8ddf8ef9a98 decbe90ee6f19a7c1488b700ad8fe17bcfd9f387c1ffcc513c57ecf9a366c63f05f46d95b5448c40ab8c0aadf9c83478674f462f9e6fd1ac200181c2513b4931 2025-05-01 08:09:58 +0000 UTC None None 2025-04-02 05:00:54 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
adaefc2aa3397945c97b623d64120ad2b6519d4851e36bff57f9f0883c771108 [68a164117581c1d365b56ef1, 68a2b59a1058adce8154cb02] [2] [sunrisebackup] [CI1BEFS3] [WHI] [D:\adminscripts\SCMNightlyAdmin.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:00Z, 2025-08-18T05:00:00Z] [3347796315705d161a99178531496358] [edba27f15fb9731ee5129e5325e18ebbab93f9a2] [2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687] [0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2] [172.18.112.86] [172.18.112.86] 1 Success SCMNightlyAdmin.bat D:\adminscripts\ 70 3347796315705d161a99178531496358 Not Signed 2019-09-17 15:10:50 +0000 UTC 2013-08-21 18:34:04 +0000 UTC edba27f15fb9731ee5129e5325e18ebbab93f9a2 2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687 0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2 2025-08-09 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b07f775760a7fe4a33f58c4db6d53037c94625def8cfde62ebe8b7971c53c987 [68a48674c4cb2500be69260f, 68a48674c4cb2500be692625] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Async.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [8ad6b881cc4d5180f4d24828d54d78ae] [c86a4f3444888a9c12414814d12e71c3e6bedbe6] [f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3] [2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.Async.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Sinks.Async 21240 8ad6b881cc4d5180f4d24828d54d78ae Serilog.Sinks.Async 1.5.0 Stryker Corporation 2021-06-25 13:05:08 +0000 UTC 2024-02-15 18:02:04 +0000 UTC c86a4f3444888a9c12414814d12e71c3e6bedbe6 f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3 2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b064ecea39c5e774709a9e0a949b035b655c5802060b137b86fef2cd7052a9da [68a306a5ba5832f49fe9cf37] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\POPUPSD.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [99ff8bb651a4e1ff48049e0a06596063] [2a61da7049c9eb2d01d55efdc3eaff3690437c44] [01c5bedb5a0d449ddd51e77e253e631b72c74263d5a46092bec86ee3d77a1166a20c966486b4f834c733ff39120b1954] [e543b4a3e7b05b1eb09e809dd620833ef93de84392fec28c389deb9f4ee5eb7f707a762d437a9bb16c40056156016838b6cef074249af4c9ebf24855f5077394] [172.17.146.33] [172.17.146.33] 1 Success POPUPSD.DLL C:\DICORP\DICORP_V5\RW\APPS\ 22528 99ff8bb651a4e1ff48049e0a06596063 1.10 Not Signed 2022-07-06 14:52:24 +0000 UTC 2024-09-14 04:02:52 +0000 UTC 2a61da7049c9eb2d01d55efdc3eaff3690437c44 01c5bedb5a0d449ddd51e77e253e631b72c74263d5a46092bec86ee3d77a1166a20c966486b4f834c733ff39120b1954 e543b4a3e7b05b1eb09e809dd620833ef93de84392fec28c389deb9f4ee5eb7f707a762d437a9bb16c40056156016838b6cef074249af4c9ebf24855f5077394 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:06:15 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
b05164c297f162623bc1e95e24652366aefa9c1981e348865e032cd0560206f2 [68a198085cb01f9c46d51708] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kvkgjkg.3ev.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:51:14Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_1kvkgjkg.3ev.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:51:14 +0000 UTC 2025-08-17 08:51:14 +0000 UTC 2025-08-17 08:51:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b03f066abb26f7b16e18cf10144ff5f30bcc8a36068d06284214536ecb09ddeb [68a71d98771132224a617f7f] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Portable.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [c8d73ea3ec2d837cfdd564e3ae6b824b] [fae41385bd1e214c745d3fe4d773ddc55f6f6709] [a0f8f64efe1c82855099615c0acc0dfaeb788c04ce8bf6f304a58137ff1a851b83a2af2d71e6fad726bd04f65bd2ec64] [7545060c21242bba33d18e8ea5deec6056982b2b690a29d372d696f73ff4cbc8f6e5411726a3d50d557abcf1b399335c55d26034d9d8cf93488eef7936fea93e] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.Portable.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.Portable.dll 475136 c8d73ea3ec2d837cfdd564e3ae6b824b Mobile library portable assembly 20.2.2516.1 Not Signed 2020-05-11 15:01:56 +0000 UTC 2020-05-11 15:01:56 +0000 UTC fae41385bd1e214c745d3fe4d773ddc55f6f6709 a0f8f64efe1c82855099615c0acc0dfaeb788c04ce8bf6f304a58137ff1a851b83a2af2d71e6fad726bd04f65bd2ec64 7545060c21242bba33d18e8ea5deec6056982b2b690a29d372d696f73ff4cbc8f6e5411726a3d50d557abcf1b399335c55d26034d9d8cf93488eef7936fea93e 2025-07-16 19:27:14 +0000 UTC None None 2021-06-30 06:37:55 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
0bd8154ae4c3cbfbe53faf7231b74923957cfc58fbbdfb75fbb8720c9987dfd3 [68a70dd16d1f6520c5ed8b07] [2] [ca_tsk_peak] [i-npeak01] [WVUHS] [\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\EGScript2.vbs] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Windows\SysWOW64\cscript.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:15:01Z] [67b66568ea040e1c41e823789ebb240f] [b5c133c8c11146048dc67efa9c29b46472ee6595] [a8806c40f21c74ca11ad25d9234613be73285bd393598b51f4e6c930986fc7e6286910c6069420611de9c0f5fe57825d] [a441c7b1e54a9e994b21aa65daaf7cf7672ed7688564b750047ae9884a0373f6f92d8b3d0a50190b1078991d92ad8fec5eb4919c510051ed516a8504c1855e04] [172.17.22.1] [172.17.22.1] 1 Success EGScript2.vbs \\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\ 1742 67b66568ea040e1c41e823789ebb240f Not Signed 2025-06-19 18:22:17 +0000 UTC 2025-06-19 18:22:17 +0000 UTC b5c133c8c11146048dc67efa9c29b46472ee6595 a8806c40f21c74ca11ad25d9234613be73285bd393598b51f4e6c930986fc7e6286910c6069420611de9c0f5fe57825d a441c7b1e54a9e994b21aa65daaf7cf7672ed7688564b750047ae9884a0373f6f92d8b3d0a50190b1078991d92ad8fec5eb4919c510051ed516a8504c1855e04 2025-08-21 12:15:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0bd4d2b2fab316e2b6167cba5029721eb5848087645ef44f2ccb09f1108383fd [68a5c675884e598888847639, 68a5c77e05aa879ada66b420] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\MFC42.DLL, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\pft79AF.tmp\MFC42.DLL] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [D:\QS1\QMenuBld.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\pft79AF.tmp\AGLSetup.exe] [D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\20230420001ARCHGL.EXE] [2025-08-20T12:58:23Z, 2025-08-20T12:59:51Z] [4d197238fdfaa5793d1b0961aaef649a] [a3898f146eab31ae3dee74d368b1b330ecfa3b06] [2360ecbd299108fe56192925d1c663b959100c7528adec61a4ec4c8454cf7244e7ca4b85311b8a368e98eff9267a02af] [28b313884d858ad4f2424028d4c767dbe3e7a3c03541d4e0e63864c0eedee53fddc6a20ad5098e3902c019e43507f4fa545f499dee3f584bbbb00d413157c051] [172.17.20.104] [172.17.20.104] 1 Success MFC42.DLL E:\QS1\ MFCDLL Shared Library - Retail Version 995383 4d197238fdfaa5793d1b0961aaef649a Microsoft (R) Visual C++ 6.0.100 Not Signed 2025-03-05 14:21:16 +0000 UTC 1998-09-26 08:00:00 +0000 UTC a3898f146eab31ae3dee74d368b1b330ecfa3b06 2360ecbd299108fe56192925d1c663b959100c7528adec61a4ec4c8454cf7244e7ca4b85311b8a368e98eff9267a02af 28b313884d858ad4f2424028d4c767dbe3e7a3c03541d4e0e63864c0eedee53fddc6a20ad5098e3902c019e43507f4fa545f499dee3f584bbbb00d413157c051 2025-05-01 04:00:28 +0000 UTC None None 2025-03-29 04:00:16 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-04-30 21:32:47.382 +0000 UTC
0b9cfba6305c8496162fda85b7983c16a54a0cf9f440e78036aa9b1bbbd1880a [68a2a7be3873668df54ea750] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e0qjqdxl.ujj.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T04:10:32Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_e0qjqdxl.ujj.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 04:10:32 +0000 UTC 2025-08-18 04:10:32 +0000 UTC 2025-08-18 04:10:38 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0b6dfe5782a8538388a876949b905a42200e3a0782364dc9ce4bc31d0715f921 [68a1c8289d2b908295246da3] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_45ebkynn.fr2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T12:16:33Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_45ebkynn.fr2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 12:16:33 +0000 UTC 2025-08-17 12:16:33 +0000 UTC 2025-08-17 12:16:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0b2589c1cc725326d3a418caf0255671120c8022a07e7a9a275819d0210553fb [68a306a5ba5832f49fe9cf38] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\TXTDISP.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [a4ab1423490d37c3faaa7382f18eacaa] [8749511557ebc7195eae625826ea3900f9218c07] [db80a18c711fb13a01fa104f5aed1927ab696e36c32dc29477881b7675daf08334571292edfc55bcd8504e5d11b62a44] [def8fccd135ef7658bbaf980542a214725864f571e8b59eba544a099b6fedd21e0ffc3d9aa27de8dd648bb6bfc9f2f0206c37b340fc1bcd961e21c46c825539b] [172.17.146.33] [172.17.146.33] 1 Success TXTDISP.DLL C:\DICORP\DICORP_V5\RW\APPS\ 17920 a4ab1423490d37c3faaa7382f18eacaa 1.1 Not Signed 2022-07-06 14:52:39 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 8749511557ebc7195eae625826ea3900f9218c07 db80a18c711fb13a01fa104f5aed1927ab696e36c32dc29477881b7675daf08334571292edfc55bcd8504e5d11b62a44 def8fccd135ef7658bbaf980542a214725864f571e8b59eba544a099b6fedd21e0ffc3d9aa27de8dd648bb6bfc9f2f0206c37b340fc1bcd961e21c46c825539b 2025-04-30 20:02:53 +0000 UTC None None 2025-03-19 05:12:08 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
0afa64e00fa3297457ecce77cec084a74bb8249564892f7bebfeb90889821242 [68a3146b5f0c41860c8c8553] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\subprocess.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [b98aec5604af4147d92232924b474ec2] [9f22741de1461c01ea9501244734fbed0b843d10] [a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7] [fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b] [172.17.252.131] [172.17.252.131] 1 Success subprocess.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 81473 b98aec5604af4147d92232924b474ec2 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 9f22741de1461c01ea9501244734fbed0b843d10 a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7 fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0a9dbe448ddb227553c9a48de77405193eb5fe2bebabab9d6527c15d84d8c2ba [68a1a3e8ae65e4e5452ad825] [2] [SYSTEM] [u-hvhprod10] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gasrem2i.gfx.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:41:54Z] [] [] [] [] [172.25.19.215] [172.25.19.215] 1 Success __PSScriptPolicyTest_gasrem2i.gfx.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:41:54 +0000 UTC 2025-08-17 09:41:54 +0000 UTC 2025-08-17 09:42:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0a7a5d0917668ae4ac4f30b1478c5194203e78937a808d6431141eb772c3667d [68a34b98a6132bf659cce5b5, 68a34df0b71eea1289980a1a] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadWebCam.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:14Z, 2025-08-18T15:58:05Z] [b8cfbf0f53bbd1805563fe2ad6c092cc] [837e866e14c6b812afb996c2dc2fa34bf60efa6b] [e53934ceb0d866b8279090a81048eade19173b1bfd46342a825825e2077c8077a20198ebfceb76642929716ec79dfa7b] [0933f29e0b9cd38162e73e18236c69fad0a7b33b21b6e73d5030b6b03d2e18d2f624b0c4946d81fd3b023f822af5d45adc9c0fac1da8d61d4a6f1b2ec94258e3] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.RadWebCam.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.RadWebCam 44544 b8cfbf0f53bbd1805563fe2ad6c092cc Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC 837e866e14c6b812afb996c2dc2fa34bf60efa6b e53934ceb0d866b8279090a81048eade19173b1bfd46342a825825e2077c8077a20198ebfceb76642929716ec79dfa7b 0933f29e0b9cd38162e73e18236c69fad0a7b33b21b6e73d5030b6b03d2e18d2f624b0c4946d81fd3b023f822af5d45adc9c0fac1da8d61d4a6f1b2ec94258e3 2025-06-09 21:58:51 +0000 UTC None None 2022-04-23 05:15:41 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
0a0ff20d66f01b5fa8926bace01d4a73a24db54811a975ea5ea4a01d43eb585b [68a5319ce132e4c5dc00a81c] [2] [SYSTEM] [u-v3mWebTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vfkwh45z.3qh.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T02:23:12Z] [] [] [] [] [172.25.19.83] [172.25.19.83] 1 Success __PSScriptPolicyTest_vfkwh45z.3qh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 02:23:12 +0000 UTC 2025-08-20 02:23:12 +0000 UTC 2025-08-20 02:23:24 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
097bbfae1d0892c24236778e721ffe5fc95b840bc664d8a3913220a6d2d49d2e [68a16bd60756fe54a9918f8e, 68a2149cb58debea69d7c739, 68a2bd5ff793a9057f329bf4, 68a3663261f8067c48423ea4, 68a40efceddb3a9f1a71a5f0, 68a4b7cd36bc5d38057e2352] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\msaalib.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [6a50b127ea76fb89e03c2d875f6a7ac9] [c28b7cddcfd0a7d635ebca504a463eef23e082db] [85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985] [16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43] [10.20.20.68] [10.20.20.68] 1 Success msaalib.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 53560 6a50b127ea76fb89e03c2d875f6a7ac9 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC c28b7cddcfd0a7d635ebca504a463eef23e082db 85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985 16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:01:40 +0000 UTC 73 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
092d18bd968e95133e7af93ebf48edda4dacbff12db23935b3fda6156292f445 [68a23262644a537a218593af] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ngnjcvkf.sli.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:49:46Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_ngnjcvkf.sli.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:49:46 +0000 UTC 2025-08-17 19:49:46 +0000 UTC 2025-08-17 19:49:54 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
09225ceef00a8012fc441f581bb567e63e4d8c0379b8a9466e29ca79db1e0fd3 [68a1a41aafa35cf692bdcd7a] [2] [SYSTEM] [U-nCTX-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4hscutvi.yka.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:42:47Z] [] [] [] [] [172.25.246.19] [172.25.246.19] 1 Success __PSScriptPolicyTest_4hscutvi.yka.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:42:47 +0000 UTC 2025-08-17 09:42:47 +0000 UTC 2025-08-17 09:42:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b3413f96707997fb76ae3dc559e6efe5dafdd3c6fe2192556350e65eb0e4ab2b [68a5c81947601aee5f76e910, 68a5c9d7599432010e418bc8] [2] [SYSTEM, SVC_SL_RedSailTech] [i-nQS1mgtn] [NT AUTHORITY, WVUHS] [D:\QS1\LTDIS14N.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe] [C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe] [2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z] [e6d240f61eda26c597b334bd74623b99] [64c5771f7e3d59e386c344901d089c5d75f1368e] [321c5601d02c3db14751c485a81ec5ff7c13799d0d314842f213b7810e4d9f8060a4e979dfe58be0f61b1d1e2c6df0ec] [5796ecaf7a2536eea556d033096e74a7885c980e3c072cdb69a800f1cebd2fc03dcecbc9f61ff0c33b625324ec4b3aa2555e5d32eb9fcb1a4e30551bf74e1c06] [172.17.20.104] [172.17.20.104] 1 Success LTDIS14N.dll C:\QS1\ LEADTOOLS(r) DLL for Win32 262144 e6d240f61eda26c597b334bd74623b99 LEADTOOLS(r) DLL for Win32 14.5.0.013 Not Signed 2025-07-17 16:13:27 +0000 UTC 2006-06-01 17:58:24 +0000 UTC 64c5771f7e3d59e386c344901d089c5d75f1368e 321c5601d02c3db14751c485a81ec5ff7c13799d0d314842f213b7810e4d9f8060a4e979dfe58be0f61b1d1e2c6df0ec 5796ecaf7a2536eea556d033096e74a7885c980e3c072cdb69a800f1cebd2fc03dcecbc9f61ff0c33b625324ec4b3aa2555e5d32eb9fcb1a4e30551bf74e1c06 2025-07-17 16:15:22 +0000 UTC None None 2024-05-13 01:21:42 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-17 16:17:46.576 +0000 UTC
b32e714dba63f4419642f37f9dc3ec07e796f64d74ed423212e42bbfd60b3011 [68a5c7fb01814ea84d75e597, 68a5ca39b5df6e9c598d9a09] [2] [CA_Jnt_Talis1] [VM-TalisWave] [WVUHS] [C:\DevOps_Agent_MDI\config.cmd] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:04:57Z, 2025-08-20T13:04:58Z] [62f91d7b9e1f8c5d2b6e72541b2a5dfa] [48e84dff2af8d7a19c64fe8debc73206411eefb9] [273c2f160231864b2d187d853f563c7abd1f3aecac7ecd60ef772d2568182c7f0968161f1b00a5c8b98f4d4615e5c85a] [75c72d6b55cff1361f81c3208d3e544e6ad8cfc709315279808f6184053d9b1d4a332ed35c56c730a45a2d3c86c9c452c1c88decc79bd039c402bbc35f67f190] [172.17.252.194] [172.17.252.194] 1 Success config.cmd C:\DevOps_Agent_MDI\ 2967 62f91d7b9e1f8c5d2b6e72541b2a5dfa Not Signed 2025-08-20 13:04:51 +0000 UTC 2023-10-11 22:42:38 +0000 UTC 48e84dff2af8d7a19c64fe8debc73206411eefb9 273c2f160231864b2d187d853f563c7abd1f3aecac7ecd60ef772d2568182c7f0968161f1b00a5c8b98f4d4615e5c85a 75c72d6b55cff1361f81c3208d3e544e6ad8cfc709315279808f6184053d9b1d4a332ed35c56c730a45a2d3c86c9c452c1c88decc79bd039c402bbc35f67f190 2025-08-20 13:04:59 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None 2025-08-04 21:43:45 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-20 13:05:52.276 +0000 UTC
b2f925f8d062ab2fc1673c086fb48594e430fd2c0ec7eb934f81d96a34d0ea16 [68a164af314711b37247c0a3, 68a2b633bc43c5800255e65f, 68a408552c9c833f6d66b3f9, 68a559867a66111383e972e2, 68a6ab388907e10b3b3c7b09] [2] [SYSTEM] [i-vpg1a] [NT AUTHORITY] [C:\icm\pcce\PG1A\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [ef14e4a8cc642332fc30ac0bcb94fe34] [6caa0f9496776587777d38905a7de70c6487a3a3] [04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74] [22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000] [172.17.196.43] [172.17.196.43] 1 Success purgeold.bat C:\icm\pcce\PG1A\bin\ 410 ef14e4a8cc642332fc30ac0bcb94fe34 Not Signed 2021-10-07 20:04:31 +0000 UTC 2022-12-21 07:59:47 +0000 UTC 6caa0f9496776587777d38905a7de70c6487a3a3 04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74 22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b2b829e8a8e70f50b6a8cf06fce67da3a1ca6a94edaf3695549d26121c3b7714 [68a4767cdfcdccd185a6a0e1] [2] [SYSTEM] [i-nctx-pvs2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d04ale1f.v4l.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T13:04:58Z] [] [] [] [] [172.17.246.5] [172.17.246.5] 1 Success __PSScriptPolicyTest_d04ale1f.v4l.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 13:04:58 +0000 UTC 2025-08-19 13:04:58 +0000 UTC 2025-08-19 13:05:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b2ab9b7fc01dfac2ba9dbb7df1b50e9b15085fe0b2bc421e7e69745ce4e85b1e [68a472b1b022648922e23577] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFsPackageManager.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:39Z] [857834d461d47e01c347e04870201423] [7ab4230def1628058b600ae2333c2f92f3172119] [a6e5fca77ab835d3b43aa12b4eec9a5afd1965f95a055039281f7f279fd87ac0f2aa3ac841a0d4587af48ad19b657982] [e034a09f3c9a38f87ff2058cd5f2170af78e1f822340037c474b794ce822eabda79bd597c9c9de2b3fb5356d570dbfa645315735ab878d0aefd100ba427dc93b] [172.17.23.146] [172.17.23.146] 1 Success FluidFsPackageManager.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\FluidFsPackageManager.jar-f8b70fdea874fc90\ 30380 857834d461d47e01c347e04870201423 Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC 7ab4230def1628058b600ae2333c2f92f3172119 a6e5fca77ab835d3b43aa12b4eec9a5afd1965f95a055039281f7f279fd87ac0f2aa3ac841a0d4587af48ad19b657982 e034a09f3c9a38f87ff2058cd5f2170af78e1f822340037c474b794ce822eabda79bd597c9c9de2b3fb5356d570dbfa645315735ab878d0aefd100ba427dc93b 2025-03-28 16:06:36 +0000 UTC None None 2022-03-17 18:11:47 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
b29891eb56e0294032177d3e010dc819c5b71ef58a86a6b4d59901c6903f24bd [68a5239e621d09b2b1ed5e4d] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServicesFacade.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:34Z] [2b18faf53fc63bb5296888bd87664da1] [4f0c9afc061841d8539cc5a3e3320483d837b9da] [be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb] [2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393] [172.17.22.40] [172.17.22.40] 1 Success PeCommServicesFacade.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ PeCommServicesFacade 90624 2b18faf53fc63bb5296888bd87664da1 PeCommServicesFacade 1.0.0.0 Not Signed 2023-06-15 02:37:18 +0000 UTC 2023-06-15 02:37:18 +0000 UTC 4f0c9afc061841d8539cc5a3e3320483d837b9da be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb 2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b22a5bd87191cfbc9e6edb3e9a804f120c7da8eb995d56d8c6aeff8ad3da2d86 [68a5c90aab7f84c2d5a0971d] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe] [Servers] [Servers Audit] [v2287.880] ["C:\Users\SVC_SL~1\AppData\Local\Temp\RarSFX0\Package.exe" ] [Lexmark International, Inc.] [C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe] [C:\Windows\explorer.exe] [2025-08-20T13:09:26Z] [5c64c62f044ea1fae6d3adc7f4be5688] [f86c5dea9f6931b69fc490414635ae398efe5229] [e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5] [0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca] [172.17.20.104] [172.17.20.104] 1 Success Package.exe C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\ Package Selection Options 3653920 5c64c62f044ea1fae6d3adc7f4be5688 1.0.0.1 Lexmark International, Inc. 2025-08-20 13:09:26 +0000 UTC 2017-08-16 14:18:52 +0000 UTC f86c5dea9f6931b69fc490414635ae398efe5229 e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5 0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca 2025-08-20 13:09:30 +0000 UTC None None 2024-08-19 23:25:52 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
b20b976d3c543ddaf040e446fb5d2b222c48d92f4138ac8c84ff50c098a595a1 [68a311cdc2d0d6e3eb77f215] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result-2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [5df2e31963b90c169c0b60f6fcbe78ca] [3d68e24539d2676b2e1baf19621f037391dc5d8b] [5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e] [c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d] [172.25.17.86] [172.25.17.86] 1 Success GP-Result-2.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 281 5df2e31963b90c169c0b60f6fcbe78ca Not Signed 2023-02-22 21:35:08 +0000 UTC 2023-02-22 21:35:08 +0000 UTC 3d68e24539d2676b2e1baf19621f037391dc5d8b 5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b1e050b0e221b917e880a41c58bd8f26e60419a342809625acc0ac34e10d9c47 [68a65386dfe30ebba74d31c8] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_qao1xvkd.d2n.ps1] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-20T23:00:14Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success __PSScriptPolicyTest_qao1xvkd.d2n.ps1 C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 80 Not Signed 2025-08-20 23:00:14 +0000 UTC 2025-08-20 23:00:14 +0000 UTC 2025-08-20 23:00:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b1d22e20b8225402b76387421d0f1e10986724d4d9dac1441de2530507aa913c [68a57f5c9ded16611b655b1f] [2] [SYSTEM] [istools] [NT AUTHORITY] [C:\Windows\Temp\_ir_tu2_temp_1\IRZip.lmd] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Program Files (x86)\FMAuditOnsite\Update.exe] [C:\Program Files (x86)\FMAuditOnsite\fmaonsite.exe] [2025-08-20T07:55:00Z] [fcf0d70f428b081937103d32889535b8] [a703030f601e5840d4718d570c4f59a4ff735158] [095766e149333648839344752be3856bb0dce24a49116897ebbd08e88cc289bcb0f448279394b0a22e744b4f92175156] [ad0dd0ac2046a19eaaf14b9fca99f770446f8c211f1506dc86795bc763a823421eb391945e1f0536d41bc3f8706d9f05a53bc61c3ce34bccbfcd39f6b66a9468] [10.36.132.210] [10.36.132.210] 1 Success IRZip.lmd C:\Windows\Temp\_ir_tu2_temp_0\ Indigo Rose Zip Plugin 344064 fcf0d70f428b081937103d32889535b8 IRZip Action Plugin 1.0.2.0 Not Signed 2010-07-15 10:00:00 +0000 UTC 2010-07-15 10:00:00 +0000 UTC a703030f601e5840d4718d570c4f59a4ff735158 095766e149333648839344752be3856bb0dce24a49116897ebbd08e88cc289bcb0f448279394b0a22e744b4f92175156 ad0dd0ac2046a19eaaf14b9fca99f770446f8c211f1506dc86795bc763a823421eb391945e1f0536d41bc3f8706d9f05a53bc61c3ce34bccbfcd39f6b66a9468 2025-04-25 05:48:09 +0000 UTC None None 2025-04-22 14:44:33 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-25 05:50:55.236 +0000 UTC
b190e0e5f23a28b0bd6b36cc81ef964d9609cd3c74a31fe6e2e34efde4d9239b [68a5c8eceb9e7b7716dce1f9, 68a5ca39b5df6e9c598d9a0b, 68a5ca39b5df6e9c598d9a18, 68a5ccf2ddfdba423e48862e, 68a5ccf2ddfdba423e48863c, 68a5ccf2ddfdba423e48864a, 68a5ccf2ddfdba423e488657, 68a5ccf2ddfdba423e488664, 68a5ccf2ddfdba423e488671, 68a5ccf2ddfdba423e48867e, 68a5ccf2ddfdba423e48868b] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\FindFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [6c754bf54698d9c86af4a51385851f09] [9b01fc728c1ad5d5eaa326a56bc6dfe77605a294] [887e7ffe7a2bc3b23c2f7b3973234d9ec3464538b581a3caae456fd2e4326660fc5a8c7ab6fd717478982de601d97ca4] [1e7a990f7cbfaeda688e02d5e9739a65e6d1799d977c9c1fc7ad9d7d65d6760caf6433e2732a058e820bae029293c09bf2f36b3c485d5375522bd187483dbfab] [172.17.252.194] [172.17.252.194] 1 Success FindFunctions.ps1 C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ 27376 6c754bf54698d9c86af4a51385851f09 Not Signed 2025-08-20 13:08:40 +0000 UTC 2024-01-20 18:07:08 +0000 UTC 9b01fc728c1ad5d5eaa326a56bc6dfe77605a294 887e7ffe7a2bc3b23c2f7b3973234d9ec3464538b581a3caae456fd2e4326660fc5a8c7ab6fd717478982de601d97ca4 1e7a990f7cbfaeda688e02d5e9739a65e6d1799d977c9c1fc7ad9d7d65d6760caf6433e2732a058e820bae029293c09bf2f36b3c485d5375522bd187483dbfab 2025-08-20 13:09:00 +0000 UTC None None 2024-08-08 19:43:02 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-08-20 13:10:54.011 +0000 UTC
b180bc0178b09ceeda8bfbc9d31b027b81c5d22112d3565439e93d55fba48e26 [68a34b98a6132bf659cce5b6, 68a34df0b71eea1289980a1b] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.BadgeDesigner.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z] [494ef760b62995f95b39dbab2b3dede0] [daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4] [b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81] [973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.BadgeDesigner.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Badge Designer 1878528 494ef760b62995f95b39dbab2b3dede0 Access It! 10.1.0.7 Not Signed 2023-04-26 15:02:58 +0000 UTC 2023-04-26 15:02:58 +0000 UTC daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4 b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81 973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a 2025-05-13 05:13:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b155a8c60e6ab1faaafc6abccc7b0a3d422882d236d1653fe05500225d93eb4a [68a306a5ba5832f49fe9cf55] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\EQGRIDD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [60e4ff73d5b65f5c2c097b19416e7be1] [848b4a155cfa1182390f2623ed750ae03560266b] [f3c3b05967f1954e73027e786f17c3531e134100b06b91b19e0ffdab7d2fa46cbaecdfb8b6822758afdb878b0625b103] [324081455ebc0e62a15ab21b5c1685c91f527c2b8b6be22cd805f3849d84053986079f9c26763156680184e280cfe44f4f0ed4975b1bfc8d6e6c2ca93a208552] [172.17.146.33] [172.17.146.33] 1 Success EQGRIDD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express QuantumGrid Components 417280 60e4ff73d5b65f5c2c097b19416e7be1 ExpressQuantumGrid 3.2 Not Signed 2022-07-06 14:52:12 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 848b4a155cfa1182390f2623ed750ae03560266b f3c3b05967f1954e73027e786f17c3531e134100b06b91b19e0ffdab7d2fa46cbaecdfb8b6822758afdb878b0625b103 324081455ebc0e62a15ab21b5c1685c91f527c2b8b6be22cd805f3849d84053986079f9c26763156680184e280cfe44f4f0ed4975b1bfc8d6e6c2ca93a208552 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:31:35 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
b1488a51345ec65399924b338a116841ec55647b58545f134b763fc74e6cdd6b [68a5239e621d09b2b1ed5e51] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackGUI.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:36Z] [91881048e0480bb6f1d2a01a584dbc0e] [197bbba69f29bd0ad3259f80e9fbaa46572c04ec] [56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a] [4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0] [172.17.22.40] [172.17.22.40] 1 Success PlaybackGUI.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ GUI 112128 91881048e0480bb6f1d2a01a584dbc0e GUI 1.0.0.0 Not Signed 2023-06-15 02:37:58 +0000 UTC 2023-06-15 02:37:58 +0000 UTC 197bbba69f29bd0ad3259f80e9fbaa46572c04ec 56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a 4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b13fd81c7196ec3a08414d632e41768dd453368707898569a112522c52d021a8 [68a191be4a6689329df75d3c] [2] [SYSTEM] [u-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0cdtq1pr.td3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:24:26Z] [] [] [] [] [172.25.10.9] [172.25.10.9] 1 Success __PSScriptPolicyTest_0cdtq1pr.td3.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:24:26 +0000 UTC 2025-08-17 08:24:26 +0000 UTC 2025-08-17 08:24:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b0c8cbaecbdb0386376e51b838bdc5126f68432b9ae7ee2a40ccaabf7aa347b7 [68a533e1954adb953e029f0c] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o5ngoajq.xjy.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T02:33:00Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_o5ngoajq.xjy.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 02:33:00 +0000 UTC 2025-08-20 02:33:00 +0000 UTC 2025-08-20 02:33:05 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b67e96557db684ea3d20a57301813992a9bb287858163364903b7812408d80dc [68a2a2b145e54eb8011b598c, 68a3f3b82b0ad9191f472694, 68a545ad1588ee149e3e4b07, 68a696eb697ef63577880b6d] [2] [jskwv] [I-nMoveItXfer] [WVUHS] [E:\MOVEitTransfer\Scheduler\Transfer_Backup.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T03:39:01Z, 2025-08-19T03:39:01Z, 2025-08-20T03:39:01Z, 2025-08-21T03:39:04Z] [74742b6a20af7f6a8d04c5730e252d6f] [5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9] [705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc] [3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9] [172.17.253.253] [172.17.253.253] 1 Success Transfer_Backup.bat E:\MOVEitTransfer\Scheduler\ 179 74742b6a20af7f6a8d04c5730e252d6f Not Signed 2024-02-21 18:38:03 +0000 UTC 2024-02-27 13:33:08 +0000 UTC 5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9 705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc 3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9 2025-08-09 03:39:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b5d7aeb1b57572ef3c25893b3dbdfbddff207e741e87b3af78941e08b1b66f3c [68a31ae889b2c7794e79451a] [2] [be10045] [i-nsdprint1] [WVUHS] [C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_hwz0hraw.sk0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:21:56Z] [] [] [] [] [172.17.252.10] [172.17.252.10] 1 Success __PSScriptPolicyTest_hwz0hraw.sk0.ps1 C:\Users\be10045\AppData\Local\Temp\2\ 80 Not Signed 2025-08-18 12:21:56 +0000 UTC 2025-08-18 12:21:56 +0000 UTC 2025-08-18 12:22:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b5c4840198ec973d3f940a1a54639be4eb24bb6a8ebe6519dd1810ea2d437f98 [68a2d482450a223d0231431b, 68a57528577ea16290f09fee] [2] [1801910989] [UH-LIBRX] [UH-LIBRX] [C:\Program Files\Siber Systems\GoodSync\gsync.exe] [Servers] [Servers Audit] [v2248, v2284.877] ["C:\Program Files\Siber Systems\GoodSync\gsync.exe" /runner-service=(user)] [Siber Systems] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-18T07:00:38Z, 2025-08-20T07:00:41Z] [6d0db0f2170f8b674f059587ed5d89bc] [bfd4582ba3e95eec900600e9a60cf57d0ca9dcec] [9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737] [b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c] [10.101.101.35] [10.101.101.35] 1 Success gsync.exe C:\Program Files\Siber Systems\GoodSync\ Command Line GoodSync 8298240 6d0db0f2170f8b674f059587ed5d89bc GoodSync 10.20.9.9 Siber Systems 2022-11-21 14:59:15 +0000 UTC 2022-11-21 14:59:16 +0000 UTC bfd4582ba3e95eec900600e9a60cf57d0ca9dcec 9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737 b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c 2025-07-18 07:00:49 +0000 UTC None None 2023-07-31 00:16:36 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-18 07:05:17.975 +0000 UTC
b5aee07f2266fd28bcbdfbcf19b2bf189282126828701fc1d0c7502c9d97952c [68a34b98a6132bf659cce5bc, 68a34df0b71eea1289980a21] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Silver.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z] [30e345918d7eb6d974f765ae9488b5b6] [c47a721f8c12d6aa927eff7d9a8c0b5c11f65453] [367a01c288a50fac40934767b499effab7c30c36ebe8110c927364422c5fa85357e8873082c79a0939f66d5c3e9892f1] [af1f5365ad38a711daddd0d41b4eebf0238fb6ddda72d790844863bfdbc4e6412aaaeb18bf10f33b40f85f0e71bf95931daf2b44ecd1ae381a76646469dde885] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Office2010Silver.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Office2010Silver 858112 30e345918d7eb6d974f765ae9488b5b6 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC c47a721f8c12d6aa927eff7d9a8c0b5c11f65453 367a01c288a50fac40934767b499effab7c30c36ebe8110c927364422c5fa85357e8873082c79a0939f66d5c3e9892f1 af1f5365ad38a711daddd0d41b4eebf0238fb6ddda72d790844863bfdbc4e6412aaaeb18bf10f33b40f85f0e71bf95931daf2b44ecd1ae381a76646469dde885 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:17 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
b59bec3484b1e3784e15b424f7e821225085d138b019e05882bda94241dc00e3 [68a311cdc2d0d6e3eb77f210] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\STJ-RoboCopy Backups.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [c31cd4a84106cd950c509053746c600a] [6947d2e1b5f8f8b4edc283006497752985874c4b] [8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398] [15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577] [172.25.17.86] [172.25.17.86] 1 Success STJ-RoboCopy Backups.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 2852 c31cd4a84106cd950c509053746c600a Not Signed 2021-11-18 18:17:22 +0000 UTC 2025-04-16 19:23:14 +0000 UTC 6947d2e1b5f8f8b4edc283006497752985874c4b 8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398 15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b59250b9adde69abc6f23216abeb16e32637bb047a8192277bc1a8c55586c512 [68a3146b5f0c41860c8c8533] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\signal.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z] [98e32654cc4beecc5b9986354e2cb5dd] [8a835d62b26651f30621da221a647e38e6c7a3df] [c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff] [59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708] [172.17.252.131] [172.17.252.131] 1 Success signal.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 4546 98e32654cc4beecc5b9986354e2cb5dd Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 8a835d62b26651f30621da221a647e38e6c7a3df c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff 59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b58922e0574cad1fbef0f5a65531b4eddf34269f9722653e0c7f36fe98e6bd46 [68a472b1b022648922e2358e] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jsr181-api-1.0-MR1.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [885a3ad96d314881cffb7191b4a27d71] [9f10fa5e6eaf2adf1360503cccf807e42951f45e] [c91a6f516c4bba394656789b0ddf1045b5493fb07c1cf455fe9e529fbb3d755eb191edf7946d1db93431771d8f9d3dca] [4e7f6b6061a3acc24c17d29a0174f08d53e9b100aa17cfd847f45baeb92f57b8a2ee19b761f6e4b3a1fc32eb7562b114725c3b87ed1003697a128730b002784c] [172.17.23.146] [172.17.23.146] 1 Success jsr181-api-1.0-MR1.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jsr181-api-1.0-MR1.jar-e34e49ec3c528050\ 7993 885a3ad96d314881cffb7191b4a27d71 Not Signed 2025-03-28 16:06:12 +0000 UTC 2025-03-28 16:06:12 +0000 UTC 9f10fa5e6eaf2adf1360503cccf807e42951f45e c91a6f516c4bba394656789b0ddf1045b5493fb07c1cf455fe9e529fbb3d755eb191edf7946d1db93431771d8f9d3dca 4e7f6b6061a3acc24c17d29a0174f08d53e9b100aa17cfd847f45baeb92f57b8a2ee19b761f6e4b3a1fc32eb7562b114725c3b87ed1003697a128730b002784c 2025-03-28 16:06:36 +0000 UTC None None 2023-01-24 00:52:29 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
b561139fa338c5b200834e229f07a555a9205fe738e17c4049ff79395c89908a [68a55e004fbc48ef3ae2d514] [2] [SYSTEM] [i-nctx-pvs1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cann4xwj.005.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:32:41Z] [] [] [] [] [172.17.146.5] [172.17.146.5] 1 Success __PSScriptPolicyTest_cann4xwj.005.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:32:41 +0000 UTC 2025-08-20 05:32:41 +0000 UTC 2025-08-20 05:32:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b525aee11faa91060c160da0de662ebdaae0ca7ce740e76133a078823edf2a62 [68a306a5ba5832f49fe9cf4f] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMADS.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [c57e297d4e7c7a2f6c6c953023c78c0b] [c2e5c4deb2ac5a5b8ac8b9b36bf49f3cc7c634a0] [14126afe1ad881b5ba382a0899acbd804ab8aed2b17c3a61e1bc43e3c30f7d3b40fb4aa475601d72b2986038a47ef3ca] [ad92bb18bf98e411632af195888e2be8cce54f58fba7f40d3b6fb6d44e16e323c7cdc736f7ab0cfd6d9091aaf60b3ccef96b4ab96bea785d35c8a9a1401267f2] [172.17.146.33] [172.17.146.33] 1 Success SCHEMADS.BPL C:\DICORP\DICORP_V5\SDL\APPS\ Schema DataSet 50688 c57e297d4e7c7a2f6c6c953023c78c0b 2.2.4 Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC c2e5c4deb2ac5a5b8ac8b9b36bf49f3cc7c634a0 14126afe1ad881b5ba382a0899acbd804ab8aed2b17c3a61e1bc43e3c30f7d3b40fb4aa475601d72b2986038a47ef3ca ad92bb18bf98e411632af195888e2be8cce54f58fba7f40d3b6fb6d44e16e323c7cdc736f7ab0cfd6d9091aaf60b3ccef96b4ab96bea785d35c8a9a1401267f2 2025-05-01 08:09:58 +0000 UTC None None 2018-01-18 18:51:12 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
b511a6022af485b824a56917829fb0ef0ca73c3f9e1d33f129726fc72d2c3336 [68a523949cec397f02de9f44] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AnalyzerFacade.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:25Z] [8b60c2b5e55285098541e339810946da] [6d4c57ebde036e7090fcdd723f58ad5eee852c70] [7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1] [6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2] [172.17.22.40] [172.17.22.40] 1 Success AnalyzerFacade.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ AnalyzerFacade 12800 8b60c2b5e55285098541e339810946da AnalyzerFacade 1.0.0.0 Not Signed 2023-06-15 02:37:42 +0000 UTC 2023-06-15 02:37:42 +0000 UTC 6d4c57ebde036e7090fcdd723f58ad5eee852c70 7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1 6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b4af2e4f4c385a595462e2f811e1c0ee74fcc354cfaebc71d7eaa2be8f89826e [68a6afe50e0f3bd8deac4ce7, 68a6afe50e0f3bd8deac4cf6, 68a6afe50e0f3bd8deac4d2a, 68a6afe50e0f3bd8deac4d38, 68a6afe50e0f3bd8deac4d58, 68a6afe50e0f3bd8deac4d78, 68a6afe50e0f3bd8deac4d98, 68a6afe50e0f3bd8deac4db8, 68a6afe50e0f3bd8deac4dd8, 68a6afe50e0f3bd8deac4df8, 68a6afe50e0f3bd8deac4e18, 68a6afe50e0f3bd8deac4e38, 68a6afe50e0f3bd8deac4e58, 68a6afe50e0f3bd8deac4e78, 68a6afe50e0f3bd8deac4e98, 68a6afe50e0f3bd8deac4ec9, 68a6afe50e0f3bd8deac4ed8, 68a6afe50e0f3bd8deac4ef8, 68a6afe50e0f3bd8deac4f18, 68a6afe50e0f3bd8deac4f38, 68a6afe50e0f3bd8deac4f62, 68a6afe50e0f3bd8deac4f82, 68a6afe50e0f3bd8deac4fa2, 68a6afe50e0f3bd8deac4fc2, 68a6afe50e0f3bd8deac4fe2, 68a6afe50e0f3bd8deac5002, 68a6afe50e0f3bd8deac5022, 68a6afe50e0f3bd8deac5042, 68a6afe50e0f3bd8deac5062, 68a6afe50e0f3bd8deac5082, 68a6afe50e0f3bd8deac50ac, 68a6afe50e0f3bd8deac50cc, 68a6afe50e0f3bd8deac50ec, 68a6afe50e0f3bd8deac5116, 68a6afe50e0f3bd8deac5136, 68a6afe50e0f3bd8deac5156, 68a6afe50e0f3bd8deac5180, 68a6afe50e0f3bd8deac51a0, 68a6afe50e0f3bd8deac51c0, 68a6afe50e0f3bd8deac51e1, 68a6afe50e0f3bd8deac5213, 68a6afe50e0f3bd8deac522a, 68a6afe50e0f3bd8deac5241, 68a6afe50e0f3bd8deac5261, 68a6afe50e0f3bd8deac5275, 68a6afe50e0f3bd8deac5295, 68a6afe50e0f3bd8deac52b5, 68a6afe50e0f3bd8deac52d5, 68a6afe50e0f3bd8deac52f5, 68a6afe50e0f3bd8deac5315, 68a6afe50e0f3bd8deac5335, 68a6afe50e0f3bd8deac5355, 68a6afe50e0f3bd8deac5375, 68a6afe50e0f3bd8deac539b, 68a6afe50e0f3bd8deac53b7, 68a6afe50e0f3bd8deac53db, 68a6afe50e0f3bd8deac53fa, 68a6afe50e0f3bd8deac541b, 68a6afe50e0f3bd8deac5435, 68a6afe50e0f3bd8deac545b, 68a6afe50e0f3bd8deac547b, 68a6afe50e0f3bd8deac549b, 68a6afe50e0f3bd8deac54bb, 68a6afe50e0f3bd8deac54db, 68a6afe50e0f3bd8deac54fb, 68a6afe50e0f3bd8deac551b, 68a6afe50e0f3bd8deac553b, 68a6afe50e0f3bd8deac5565, 68a6afe50e0f3bd8deac5585, 68a6afe50e0f3bd8deac55a5, 68a6afe50e0f3bd8deac55c5, 68a6afe50e0f3bd8deac55e5, 68a6afe50e0f3bd8deac5605, 68a6afe50e0f3bd8deac5625, 68a6afe50e0f3bd8deac5654, 68a6afe50e0f3bd8deac5675, 68a6afe50e0f3bd8deac56a3, 68a6afe50e0f3bd8deac56c3, 68a6afe50e0f3bd8deac56db, 68a6afe50e0f3bd8deac5702, 68a6afe50e0f3bd8deac571d, 68a6afe50e0f3bd8deac5743, 68a6afe50e0f3bd8deac5776, 68a6afe50e0f3bd8deac5789, 68a6afe50e0f3bd8deac57b7, 68a6afe50e0f3bd8deac57cd, 68a6afe50e0f3bd8deac57f7, 68a6afe50e0f3bd8deac580b, 68a6afe50e0f3bd8deac5824, 68a6afe50e0f3bd8deac584d, 68a6afe50e0f3bd8deac5875, 68a6afe50e0f3bd8deac588b, 68a6afe50e0f3bd8deac58bc, 68a6afe50e0f3bd8deac58cd, 68a6afe50e0f3bd8deac58fc, 68a6afe50e0f3bd8deac5907, 68a6afe50e0f3bd8deac593e, 68a6afe50e0f3bd8deac594d, 68a6afe50e0f3bd8deac596d, 68a6afe50e0f3bd8deac5984, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\PrometheusSvr.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [43747ee0e4e03ff34b76a6701584480c] [820982a35763a0555d44c78f839256a5babff5c1] [d4930d584ffcf00642c95c0cc13afe3af04178c1e7d8c2c66f6c65087b398ec9868d51a72dc62aa5cd32b0061026f467] [d42b5eda4572832fb13e578b126b6fff3990114bffadaeed5a14a5559db8f7ca695207de8c2d886e88e881acd90bb6b11c1df0867170bfd0386c656e1b03b723] [172.17.30.60] [172.17.30.60] 1 Success PrometheusSvr.dll C:\Program Files\Fujifilm\NaxisWS6\ 1416704 43747ee0e4e03ff34b76a6701584480c Not Signed 2023-11-03 20:25:56 +0000 UTC 2023-06-16 03:04:49 +0000 UTC 820982a35763a0555d44c78f839256a5babff5c1 d4930d584ffcf00642c95c0cc13afe3af04178c1e7d8c2c66f6c65087b398ec9868d51a72dc62aa5cd32b0061026f467 d42b5eda4572832fb13e578b126b6fff3990114bffadaeed5a14a5559db8f7ca695207de8c2d886e88e881acd90bb6b11c1df0867170bfd0386c656e1b03b723 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
b4078ab651d17c4b369f8715ad39efccc3486c43f9251216892df4b2c5803d82 [68a1a4ec481e55b8d125b626] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cvo0wbij.qu1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:46:14Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_cvo0wbij.qu1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:46:14 +0000 UTC 2025-08-17 09:46:14 +0000 UTC 2025-08-17 09:46:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b3f3dce7a596ba8e3a87f5ddeaaad498b74d1b3393eecfc602a33d4968ffaf2b [68a2219559db607aeb81cbd5] [2] [SYSTEM] [uvOSCCN2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a2eipcbx.muw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T18:38:04Z] [] [] [] [] [172.25.18.157] [172.25.18.157] 1 Success __PSScriptPolicyTest_a2eipcbx.muw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 18:38:04 +0000 UTC 2025-08-17 18:38:04 +0000 UTC 2025-08-17 18:38:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b3aee295edf894a88964eb7fa381561a95f892e2a2a3c29630c97c882aab46d9 [68a31bbacbbb0c7bfb580ca8] [2] [SYSTEM] [i-nWHLAPP01] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2kil5soy.rh3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:25:27Z] [] [] [] [] [172.17.146.33] [172.17.146.33] 1 Success __PSScriptPolicyTest_2kil5soy.rh3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:25:27 +0000 UTC 2025-08-18 12:25:27 +0000 UTC 2025-08-18 12:25:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b37be6e880d1111feb27c4482864a487c1ce7bf7ff74f481aef0aa5cbd0cb936 [68a5c233a5c8de03b7ff4fb5] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_fec2b8080fd34625874eec49b533f1b5.dll] [Servers] [Servers Audit] [v2287.879] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T12:40:13Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_fec2b8080fd34625874eec49b533f1b5.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 12:40:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b35b32d6e755eb4d7a586d90f0719eda7cc411146d22fbaa1f1370638e656ebc [68a24592503474046d56002c, 68a6643ac834a71c320c303a] [2] [SYSTEM] [IMAGENOW73-PROD] [NT AUTHORITY] [C:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\win32sysinfo.exe] [Servers] [Servers Audit] [v2248, v2314] ["c:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\win32sysinfo.exe"] [Not Signed] [C:\Program Files\erl8.3\erts-8.3\bin\erl.exe] [C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe] [2025-08-17T21:02:09Z, 2025-08-21T00:02:16Z] [ab84bb4715791a04eb91742f5e41f33a] [92a2578c1729556210b2b2926b4565510c9c39dd] [927dfe7cd3bd4d5d63f9da97ca229dfdbf9dc04833b7fabb1b9b1b938af030b0b5f5e96f7ba76f03cbad34f608c944d2] [66fa46376beb2ecf24227cab0ae9cf10b1509b5c0cee14ff171b3b0cafd17e5e5a068134c978f3f81dab1bdbaa3a739636e07beb6e83912b89fef656936c6c5e] [10.101.100.216] [10.101.100.216] 1 Success win32sysinfo.exe C:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\ 11264 ab84bb4715791a04eb91742f5e41f33a Not Signed 2017-03-14 21:32:40 +0000 UTC 2017-03-14 21:32:40 +0000 UTC 92a2578c1729556210b2b2926b4565510c9c39dd 927dfe7cd3bd4d5d63f9da97ca229dfdbf9dc04833b7fabb1b9b1b938af030b0b5f5e96f7ba76f03cbad34f608c944d2 66fa46376beb2ecf24227cab0ae9cf10b1509b5c0cee14ff171b3b0cafd17e5e5a068134c978f3f81dab1bdbaa3a739636e07beb6e83912b89fef656936c6c5e 2025-07-17 00:02:21 +0000 UTC None None 2021-07-14 21:29:51 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-17 00:06:14.119 +0000 UTC
b99374cf4c828d4f0a0cc7479cd72181f5e1e8cb7d06e4542fe9f70a092364a7 [68a50d29c9694e1e7f8f163d] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\MasimoA_5_0_3_6.msi] [Servers] [Servers Audit] [v2284] [] [Not Signed] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:47:50Z] [b05d0a00db3ebcaaf5e56cadb578324c] [ba246078ee4beeee2e07d8585ddba002f741bcc6] [2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac] [71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405] [172.17.23.18] [172.17.23.18] 1 Success MasimoA_5_0_3_6.msi C:\Users\CA_gs10109\Downloads\ 836608 b05d0a00db3ebcaaf5e56cadb578324c Not Signed 2025-08-19 23:47:36 +0000 UTC 2025-08-19 23:47:46 +0000 UTC ba246078ee4beeee2e07d8585ddba002f741bcc6 2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac 71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405 2025-08-19 23:47:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b96d73284c337848272fa37ac7ce8d932f38fac1e8ce7c4cad00d0269c3c6d95 [68a181c21bfbeda4694fdffa, 68a2d3509d0518d9d631f7e6, 68a424e9ee9f96031977be4b, 68a5773a7caf7da878b3cf54, 68a6c8221b27d3859e4f0bd5] [2] [hppc] [ivOSCCN1] [IVOSCCN1] [C:\bin\OsccBackup.cmd] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:10:25Z, 2025-08-18T07:10:25Z, 2025-08-19T07:10:26Z, 2025-08-20T07:10:25Z, 2025-08-21T07:10:25Z] [fcf50a056b3ffa96b640a38d655dc1f6] [56bac5386ef9a04cd2807ff235f395be9bd0cfe6] [d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113] [0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530] [172.17.21.34] [172.17.21.34] 1 Success OsccBackup.cmd C:\bin\ 2975 fcf50a056b3ffa96b640a38d655dc1f6 Not Signed 2022-05-08 10:19:37 +0000 UTC 2022-03-01 18:22:37 +0000 UTC 56bac5386ef9a04cd2807ff235f395be9bd0cfe6 d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113 0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530 2025-08-09 07:10:28 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b9589642180b32d9a18ca52398fb0d53893e3f8a35611ce3f854492fa0349871 [68a48674c4cb2500be692617, 68a48674c4cb2500be69262d] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.ServiceAgents.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [b49ebe2365863c63c5fa3d96eb031469] [b3fb3dd5136ae2fe56a4cd7646029f67dd46980d] [3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a] [1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6] [172.17.252.226] [172.17.252.226] 1 Success SEWSI.ServiceAgents.dll C:\Stryker\iBed Server Application\Stryker.IOT\ SEWSI.ServiceAgents 61176 b49ebe2365863c63c5fa3d96eb031469 Connected Hospital 1.0.0.0 Stryker Corporation 2023-03-16 10:22:36 +0000 UTC 2024-02-15 18:02:04 +0000 UTC b3fb3dd5136ae2fe56a4cd7646029f67dd46980d 3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a 1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b8b19794e923a87fdd28cbda97d035b042db36fcee37dd4484df192b845048d9 [68a34d6610b57c5bffc57dae] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:29Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b89a7bc12b53e050d63c480c02dca3465ec46030fdc218b1e39fa9e3ac4de1b0 [68a5cc349d52e7a8b7af63d8] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:53Z] [818225421d2ff632a02c29cb34911515] [fb0da057d2c2e63d16b2edabf800317ff1330839] [747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650] [55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169] [172.17.252.194] [172.17.252.194] 1 Success e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1 C:\_work_devops_mdi\_temp\ 1822 818225421d2ff632a02c29cb34911515 Not Signed 2025-08-20 13:22:52 +0000 UTC 2025-08-20 13:22:52 +0000 UTC fb0da057d2c2e63d16b2edabf800317ff1330839 747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650 55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169 2025-08-20 13:23:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b890b88192a223a900d9aad500373d9063f118fc8766d8b4735a325fb6801018 [68a51d7e1d680695d3f9edbd] [2] [SYSTEM] [i-nCTX-CC-PRD1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_shrbidj0.cko.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T00:57:23Z] [] [] [] [] [172.17.146.2] [172.17.146.2] 1 Success __PSScriptPolicyTest_shrbidj0.cko.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 00:57:23 +0000 UTC 2025-08-20 00:57:23 +0000 UTC 2025-08-20 00:57:34 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b86ff7561af0f3e859b9e84637797298246dc1ce387949f2edbd3d5b1e77280a [68a191aae18cc7bf65302e71] [2] [SYSTEM] [u-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_idh1m53d.0uw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:24:07Z] [] [] [] [] [172.25.10.9] [172.25.10.9] 1 Success __PSScriptPolicyTest_idh1m53d.0uw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:24:07 +0000 UTC 2025-08-17 08:24:07 +0000 UTC 2025-08-17 08:24:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b85b23da452663f58b6f9b7ab45593958feea65172bf427c8b37face06a87982 [68a3146b5f0c41860c8c850b, 68a3146b5f0c41860c8c855e] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\_parseaddr.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [7b77eb5e6cbc5ad91a9839f110240b19] [c026a9d1bf349081e31bc6d062263cd6283cadee] [d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5] [4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6] [172.17.252.131] [172.17.252.131] 1 Success _parseaddr.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 23570 7b77eb5e6cbc5ad91a9839f110240b19 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC c026a9d1bf349081e31bc6d062263cd6283cadee d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5 4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b84fc2be29f8ec8d88aeeab2dcb336c1f5f8e6ca8377fc5e362c14b5d7107cfa [68a5be0ff6fc3715f4449f44] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\tmp_5ltoq3rq.ifx.psm1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T12:22:33Z] [965ce93ed86a419fab19dac9c846905f] [db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef] [3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e] [6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234] [172.17.252.110] [172.17.252.110] 1 Success tmp_5ltoq3rq.ifx.psm1 C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\ 4669944 965ce93ed86a419fab19dac9c846905f Not Signed 2025-08-20 12:22:33 +0000 UTC 2025-08-20 12:22:33 +0000 UTC db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef 3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e 6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234 2025-08-20 12:22:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b7fe4622933d7c1a7c53299db1c824d52a784e0af74283aae7ec1b9169dd8a20 [68a164af314711b37247c0a4, 68a2b633bc43c5800255e660, 68a408552c9c833f6d66b3f8, 68a559867a66111383e972e4, 68a6ab388907e10b3b3c7b0a] [2] [SYSTEM] [i-vpg1a] [NT AUTHORITY] [C:\icm\pcce\PG3A\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [527c15cbb2fe42bc3c85f5a6c8722700] [ab323a93daa8ccdbc6c23f5fbf5779189899cfc3] [030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c] [890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d] [172.17.196.43] [172.17.196.43] 1 Success purgeold.bat C:\icm\pcce\PG3A\bin\ 410 527c15cbb2fe42bc3c85f5a6c8722700 Not Signed 2021-10-07 20:04:45 +0000 UTC 2021-10-07 20:04:45 +0000 UTC ab323a93daa8ccdbc6c23f5fbf5779189899cfc3 030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c 890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b7f2e8f1f6db47a8161afee3f7622b254ca82a8359fd0abb491c6c6dfbf4d64f [68a311cdc2d0d6e3eb77f206] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\Get-O365Recip-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [499c7364c1c683bfe66b60484bcd9d37] [ac1ccb570f21610993e4deae5958e14f68b2e40c] [3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd] [01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68] [172.25.17.86] [172.25.17.86] 1 Success Get-O365Recip-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 47512 499c7364c1c683bfe66b60484bcd9d37 Not Signed 2025-02-28 16:56:32 +0000 UTC 2025-02-28 16:56:32 +0000 UTC ac1ccb570f21610993e4deae5958e14f68b2e40c 3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd 01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b7d519ae6a735e97fcb0cd79bdab293c9bcfa2506bb6bd7f8fa5d472db60459c [68a523949cec397f02de9f4e] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CommonPropertiesViewAccessor.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:27Z] [d5b36a1cfb5d705b9b73158b06477362] [d9fd05e56d2e29cc1562b515b18468fc3f4a5b78] [d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f] [3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e] [172.17.22.40] [172.17.22.40] 1 Success CommonPropertiesViewAccessor.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ CommonPropertiesViews 10240 d5b36a1cfb5d705b9b73158b06477362 CommonPropertiesViews 1.0.0.0 Not Signed 2023-06-15 02:37:52 +0000 UTC 2023-06-15 02:37:52 +0000 UTC d9fd05e56d2e29cc1562b515b18468fc3f4a5b78 d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f 3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b7b074a8be506995e4f7f47f986e3fa7e7e5de6b93db80ae4b178c336f308368 [68a4c47e2db3c760ec3d2a2b] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_7df3f40078b24ec2b13b78976237aec3.dll] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T18:37:40Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_7df3f40078b24ec2b13b78976237aec3.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 18:37:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b78984455debffa0028d3e0622604eed012e7af47b86694db7145688d5665881 [68a3245120cdf2a94b146f91] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\tmp_xyrtah4t.fox.psm1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T13:02:08Z] [5a50d1d12cefd1d7851797d436fefba4] [bf6cbc8bade556ceffa2a7e056ad531a37ae415f] [0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60] [b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8] [172.25.17.86] [172.25.17.86] 1 Success tmp_xyrtah4t.fox.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\ 4669542 5a50d1d12cefd1d7851797d436fefba4 Not Signed 2025-08-18 13:02:08 +0000 UTC 2025-08-18 13:02:08 +0000 UTC bf6cbc8bade556ceffa2a7e056ad531a37ae415f 0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60 b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8 2025-08-18 13:02:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b7825fdc3e3579c3e55c8ada3988398c80f2bf0210559ffd4a4a2e877281142e [68a254cb23f365394e70285a] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fed2ttov.ux0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:16:32Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_fed2ttov.ux0.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:16:32 +0000 UTC 2025-08-17 22:16:32 +0000 UTC 2025-08-17 22:16:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b77c030cc7905994ec426f0da89c90fe737ec024b6c5993906e40ecb5da71451 [68a37f2f3086ee3e1235fb78] [2] [SYSTEM] [I-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_biqeuy3o.ye3.ps1] [Servers] [Servers Audit] [v2267.864] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T19:29:49Z] [] [] [] [] [172.17.146.25] [172.17.146.25] 1 Success __PSScriptPolicyTest_biqeuy3o.ye3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 19:29:49 +0000 UTC 2025-08-18 19:29:49 +0000 UTC 2025-08-18 19:29:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bddc530b9300a27f70c238d542f107dd3fe56831bf9c2b46fc5f2490358bedee [68a50cecb4890326e80ca020] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\Downloads\MaquetC_5_4_9_24.msi] [Servers] [Servers Audit] [v2284] [] [PHILIPS FRANCE COMMERCIAL SAS] [C:\Windows\System32\msiexec.exe] [C:\Program Files\Google\Chrome\Application\chrome.exe] [2025-08-19T23:46:44Z] [0c379659877fcb46c2b1ed42e5f08649] [8b35c794af260f72bfaa4b9eb93a634e911231fb] [bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36] [9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a] [172.17.23.18] [172.17.23.18] 1 Success MaquetC_5_4_9_24.msi C:\Users\CA_gs10109\Downloads\ 2547712 0c379659877fcb46c2b1ed42e5f08649 PHILIPS FRANCE COMMERCIAL SAS 2025-08-19 23:46:40 +0000 UTC 2025-08-19 23:46:42 +0000 UTC 8b35c794af260f72bfaa4b9eb93a634e911231fb bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36 9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a 2025-08-19 23:46:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bd79e98f45782e89ee51e26e013872c1faf37f65e8587e8548d46ad3f983620c [68a241507a42095fec9759e0] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aolq2wnp.tpe.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:53:27Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_aolq2wnp.tpe.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:53:27 +0000 UTC 2025-08-17 20:53:27 +0000 UTC 2025-08-17 20:53:36 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bd2fb70755ce42ee8c06c2369072646bb3b358d84caad212790cc7a7765f4aa2 [68a31bce8786a3280b2dd174] [2] [SYSTEM] [i-nWHLAPP01] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_r4slq4hq.rmb.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:25:48Z] [] [] [] [] [172.17.146.33] [172.17.146.33] 1 Success __PSScriptPolicyTest_r4slq4hq.rmb.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:25:48 +0000 UTC 2025-08-18 12:25:48 +0000 UTC 2025-08-18 12:25:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bcb7eca729429e6e4bde18597726ed72e9254a2170afc225e8153e8adc0c4647 [68a1a47e2fff6fd1138de638] [2] [SYSTEM] [u-hvhprod10] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vxfvtst4.00q.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:44:20Z] [] [] [] [] [172.25.19.215] [172.25.19.215] 1 Success __PSScriptPolicyTest_vxfvtst4.00q.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:44:20 +0000 UTC 2025-08-17 09:44:20 +0000 UTC 2025-08-17 09:44:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bc9cf02ea7753bec4aa072388d1712951cb6fbdf6189a89af968a0049dca7e5a [68a4a6605961c54c81f645c8] [2] [be10045eu] [i-nsdprodmon1] [WVUHS] [C:\Users\be10045eu\AppData\Local\Temp\2\__PSScriptPolicyTest_lxe33krl.g3q.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:29:15Z] [] [] [] [] [172.17.252.208] [172.17.252.208] 1 Success __PSScriptPolicyTest_lxe33krl.g3q.ps1 C:\Users\be10045eu\AppData\Local\Temp\2\ 81 Not Signed 2025-08-19 16:29:15 +0000 UTC 2025-08-19 16:29:15 +0000 UTC 2025-08-19 16:29:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bc9ae90107a5c1f70c604ec5dff275f870d4e75c684dc03d05ef9fa4406d0c70 [68a5621beb84499e47622cf6] [2] [SYSTEM] [I-EXTHSW-NP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qqnyxqog.4g5.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:50:09Z] [] [] [] [] [172.17.46.130] [172.17.46.130] 1 Success __PSScriptPolicyTest_qqnyxqog.4g5.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:50:09 +0000 UTC 2025-08-20 05:50:09 +0000 UTC 2025-08-20 05:50:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bc5a7b4a00675634fdaebf906e31c462451c097ab7271aca010a27d235a55f64 [68a24592503474046d56002f, 68a6643ac834a71c320c303d] [2] [SYSTEM] [IMAGENOW73-PROD] [NT AUTHORITY] [C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\crypto_callback.dll] [Servers] [Servers Audit] [v2248, v2314] [] [Not Signed] [C:\Program Files\erl8.3\erts-8.3\bin\erl.exe] [C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe] [2025-08-17T21:02:24Z, 2025-08-21T00:02:18Z] [607acf16c9a90ec5de916299b342a430] [67157292b29599f8284f65ec5d7bad9af0d97a1a] [081ae60c14ef018e0ba1006e3a86e01810b26f74b4f8338e45f308ea6bc5eb3184f6ac58583032b22404a0d8ea00bbee] [59868d7200f7d128a4d843bca378ad93a1f1da517d74076d6e5726229cfcc76df6174903d3da502cc22858af839238c38b573408d61a16cf91690e6ab5f037a7] [10.101.100.216] [10.101.100.216] 1 Success crypto_callback.dll C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\ 7680 607acf16c9a90ec5de916299b342a430 Not Signed 2017-03-14 21:32:04 +0000 UTC 2017-03-14 21:32:04 +0000 UTC 67157292b29599f8284f65ec5d7bad9af0d97a1a 081ae60c14ef018e0ba1006e3a86e01810b26f74b4f8338e45f308ea6bc5eb3184f6ac58583032b22404a0d8ea00bbee 59868d7200f7d128a4d843bca378ad93a1f1da517d74076d6e5726229cfcc76df6174903d3da502cc22858af839238c38b573408d61a16cf91690e6ab5f037a7 2025-07-17 00:02:31 +0000 UTC None None 2019-12-12 15:27:44 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-07-17 00:06:14.119 +0000 UTC
bc0ed4db8de326d7c19c7939ea915f38ed472ce6816289b859858ab012d5f985 [68a5c9c80a9c36d9537b967b] [2] [SYSTEM] [i-nQS1mgtn] [NT AUTHORITY] [C:\Windows\Temp\MSI1AAF.tmp] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\msiexec.exe] [C:\Windows\System32\msiexec.exe] [2025-08-20T13:12:31Z] [] [] [] [] [172.17.20.104] [172.17.20.104] 1 Success MSIB39F.tmp C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-07-17 16:14:52 +0000 UTC None None 2024-08-07 18:46:33 +0000 UTC 75 0 KNOWN 0 Benign 0.00 2025-07-17 02:52:11.135 +0000 UTC
bbd86edc2c3565783aa1938aa5f3bd807cc89a133ace4980c6023c6002109e50 [68a1b24bfa129e536415c635] [2] [SYSTEM] [u-nLanSweep1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gnb4wcd.hsz.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:43:10Z] [] [] [] [] [172.25.17.127] [172.25.17.127] 1 Success __PSScriptPolicyTest_2gnb4wcd.hsz.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:43:10 +0000 UTC 2025-08-17 10:43:10 +0000 UTC 2025-08-17 10:43:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
badbdd1da0042ec4e9d34d2d9badabcd4d0fe9f9d8e24c61c277bccb77aca8a2 [68a523949cec397f02de9f46] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Apache.NMS.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:25Z] [7f08c7a68144ab87f22d28285ad41bec] [7c2ec54871d788ef2f6d34a672a4c7ded8202132] [d70c94d19b1810ae8231f4830853ebd6bd6159eb02ecbba54cc3fd46c4ac668488786e961f449f910099e21d3f46b694] [cde815bfb62b47f64f4cba6991158a48ed736c6d9a81bedd5faa813598e7580e1c0fab5c5bacd47dde0bcb40aff0b54905a4880b29c747700ef7424ef8e06c8b] [172.17.22.40] [172.17.22.40] 1 Success Apache.NMS.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Apache NMS Class Library 64512 7f08c7a68144ab87f22d28285ad41bec Apache NMS Class Library 1.6.0 Not Signed 2023-06-15 02:37:12 +0000 UTC 2023-06-15 02:37:12 +0000 UTC 7c2ec54871d788ef2f6d34a672a4c7ded8202132 d70c94d19b1810ae8231f4830853ebd6bd6159eb02ecbba54cc3fd46c4ac668488786e961f449f910099e21d3f46b694 cde815bfb62b47f64f4cba6991158a48ed736c6d9a81bedd5faa813598e7580e1c0fab5c5bacd47dde0bcb40aff0b54905a4880b29c747700ef7424ef8e06c8b 2025-08-20 01:23:32 +0000 UTC None None 2020-08-19 19:35:04 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
bac8eb3f47e2f86cc0c63b0e0ddf4d59f7f484f12e636d3dc485555944a9fc44 [68a16bd60756fe54a9918f90, 68a2149cb58debea69d7c73b, 68a2bd5ff793a9057f329bf6, 68a3663261f8067c48423ea9, 68a40efceddb3a9f1a71a5f1, 68a4b7cd36bc5d38057e2356] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTask.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [cba32f4fc85fa047780b98586445d649] [bf00992713ad9d38e3090bf52e8b1e82b1647fdb] [f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc] [79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798] [10.20.20.68] [10.20.20.68] 1 Success ZoomTask.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 389432 cba32f4fc85fa047780b98586445d649 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC bf00992713ad9d38e3090bf52e8b1e82b1647fdb f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc 79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:01:42 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
ba81e8ceff38640c2aef358ea04002dbdd2231c3c987001c15b6fc73ba75466d [68a25fb2e970d941642e7ed9, 68a25fb2e970d941642e7ee6, 68a3b2cf09045b56b2a707b1, 68a3b2cf09045b56b2a707be, 68a502e12ae1a61fbf4caf0f, 68a502e12ae1a61fbf4caf1c, 68a65489c4cae84feadc570f, 68a65489c4cae84feadc571c] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\dbatools.library.psm1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [dbatools] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:04Z, 2025-08-20T23:00:14Z] [5654ec4ceddb9b01a8f94166ba14091d] [5cfeb2b421fd0881a3ec31af07e3a285404d1fb4] [b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb] [2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6] [172.17.252.12] [172.17.252.12] 1 Success dbatools.library.psm1 C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\ 18768 5654ec4ceddb9b01a8f94166ba14091d dbatools 2024-02-21 21:01:13 +0000 UTC 2023-09-21 14:59:12 +0000 UTC 5cfeb2b421fd0881a3ec31af07e3a285404d1fb4 b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb 2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6 2025-08-08 23:00:06 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ba72fc4388172874b1939f7066f2216e2a3bc68fd4270ce70289271537f3b218 [68a34b98a6132bf659cce5aa, 68a34df0b71eea1289980a0f] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Controls.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:10Z, 2025-08-18T15:58:03Z] [b31ce0cf803ae8da1785b059a6bfbb59] [1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb] [19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b] [f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.Controls.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Controls 823296 b31ce0cf803ae8da1785b059a6bfbb59 Access It! 10.1.0.7 Not Signed 2023-04-26 15:02:44 +0000 UTC 2023-04-26 15:02:44 +0000 UTC 1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb 19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8 2025-05-13 12:24:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ba6629e795cffb8817cc3c0107f7236a6c5de18c79028ebf70764952b39da475 [68a523949cec397f02de9f50] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CoverageAndAccuracyAnalyzer.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:27Z] [ae5d8bbe8d977a4803d26ca7e9f13e54] [8657b548e0b81e31a64d88c4fb0a7ddc694c7823] [868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9] [c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6] [172.17.22.40] [172.17.22.40] 1 Success CoverageAndAccuracyAnalyzer.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 458752 ae5d8bbe8d977a4803d26ca7e9f13e54 1.0.8565.40750 Not Signed 2023-06-15 02:38:24 +0000 UTC 2023-06-15 02:38:24 +0000 UTC 8657b548e0b81e31a64d88c4fb0a7ddc694c7823 868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9 c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ba0a35ba189d00bdb6b111752821f3669b627aaca52bb4b10f5fcf64160f529b [68a223c52dfc87abfe6c481e] [2] [SYSTEM] [DP-Fairmont] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xhjpbhxc.j3s.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T18:47:29Z] [] [] [] [] [172.16.121.132] [172.16.121.132] 1 Success __PSScriptPolicyTest_xhjpbhxc.j3s.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 18:47:29 +0000 UTC 2025-08-17 18:47:29 +0000 UTC 2025-08-17 18:47:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
b9a96cee003b20d0bb55c2e7f974aa492bd30d4b320ff76462b277aa41ff1298 [68a4698d5445b9aa205794ec] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:09:47Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:09:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c20c9862e9f229c783934344ec3cf0effa49a4fa48f8aa9ec11af817ce5f9624 [68a17f77d37f800f0e604b32] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2orxsm0.eiy.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:06:19Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_s2orxsm0.eiy.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:06:19 +0000 UTC 2025-08-17 07:06:19 +0000 UTC 2025-08-17 07:06:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c1b1e782a095f948cd8e5b162ad54e4df932e5d2b5f237c8b567af8b4d6a0764 [68a4eb94aedd0434fc149c6a, 68a4eb94aedd0434fc149c6b] [2] [SpokSrv] [VM-Spokapp1] [WVUHS] [C:\Program Files (x86)\Amcom Software\Amcom Console\IDESKLauncher.exe] [Servers] [Servers Audit] [v2284.877] ["C:\Program Files (x86)\Amcom Software\Amcom Console\IDESKLauncher.exe" IdeskAdmin.Exe -NORMAL] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-19T21:14:53Z, 2025-08-19T21:15:26Z] [ce676d2e46b67c2f3b5fd3cd89ce0648] [011564a2f5238e56833edc57092cec9752835d4b] [f7d01ac8492a9ecc08996f2be53a52f68af91fe04639b91741598ab9afaff16a05043b9c38628434317c3bab6eb7ac44] [e8528e236f15a8dcf82c454ea97541640294adbe67094364c5479aaa0c2a4f06762e1ac84ecf0b40194a87302a1b92e6d573468b075539efba3921083ca5895f] [172.17.251.253] [172.17.251.253] 1 Success IDESKLauncher.exe C:\Program Files (x86)\Amcom Software\Amcom Console\ 110694 ce676d2e46b67c2f3b5fd3cd89ce0648 Not Signed 2019-10-10 06:10:02 +0000 UTC 2019-10-10 06:10:02 +0000 UTC 011564a2f5238e56833edc57092cec9752835d4b f7d01ac8492a9ecc08996f2be53a52f68af91fe04639b91741598ab9afaff16a05043b9c38628434317c3bab6eb7ac44 e8528e236f15a8dcf82c454ea97541640294adbe67094364c5479aaa0c2a4f06762e1ac84ecf0b40194a87302a1b92e6d573468b075539efba3921083ca5895f 2025-07-15 02:21:51 +0000 UTC None None 2023-12-08 18:15:58 +0000 UTC 72 5 KNOWN 1 Benign 0.60 2025-07-15 02:26:01.582 +0000 UTC
c195f5ba344cf791d23156d6ff388f703b39cee05cec3c1717928b35b9ec838b [68a472a799ad3734d804e2f2] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\blowfishj-2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [d773b78b0422efc5d3a7f242ddacb86c] [5a5c9138fd86a8ace5988462723879c2fe31b136] [ad6050e83750f905414467df89663c7af7b503bb52b24c375070fbc23283dd3d72e18604105dcd8cc125fed041ca82d0] [9314b03bb7f66acbed7d0ee2c4109129278a07823bebb4324a125a6adb3a6bc0af0c5b481dc4027aa7727598e2af4a04a22c47183852f84a348bb92e473c8389] [172.17.23.146] [172.17.23.146] 1 Success blowfishj-2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\sourceforge\blowfishj\main\ 32047 d773b78b0422efc5d3a7f242ddacb86c Not Signed 2024-04-05 21:55:13 +0000 UTC 1980-02-01 05:00:00 +0000 UTC 5a5c9138fd86a8ace5988462723879c2fe31b136 ad6050e83750f905414467df89663c7af7b503bb52b24c375070fbc23283dd3d72e18604105dcd8cc125fed041ca82d0 9314b03bb7f66acbed7d0ee2c4109129278a07823bebb4324a125a6adb3a6bc0af0c5b481dc4027aa7727598e2af4a04a22c47183852f84a348bb92e473c8389 2025-03-28 16:06:16 +0000 UTC None None 2017-01-20 02:55:24 +0000 UTC 55 0 KNOWN 0 Benign 0.00 2025-04-11 01:58:11.933 +0000 UTC
c164b1bd80936370ff6016453cc9427cdbbf89245cf4aca8a6fa4d20ef06ea77 [68a717f82c01dbda38bdd3d7] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\mbahost.dll] [Servers] [Servers Audit] [v2319.906] [] [Not Signed] [C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe] [C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe] [2025-08-21T12:58:29Z] [fc8b1707f5183f09609501728b93358c] [ff8ecf8ad8b5e2addd7543963b96fff7f931f407] [51206f4a255d4d1a1d511228ac6f158baa3a1592bbf55c0bcd7fc7a69e1804ea9b2c1c7e798ad815c65df8110eed6002] [3a51bebad86daad406407f2ae6d82d80921a6fc617637c9f485f61d6d868e94fdd9d924b0a514ff97db1ef39e6899d57e518ac84a4bd602fb1570a1471319412] [172.17.37.230] [172.17.36.114] 1 Success mbahost.dll C:\Users\Juggernaut\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\ Managed Bootstrapper Application Host 66048 fc8b1707f5183f09609501728b93358c Windows Installer XML 3.7.3517.0 Not Signed 2014-11-17 15:38:08 +0000 UTC 2014-11-17 15:38:08 +0000 UTC ff8ecf8ad8b5e2addd7543963b96fff7f931f407 51206f4a255d4d1a1d511228ac6f158baa3a1592bbf55c0bcd7fc7a69e1804ea9b2c1c7e798ad815c65df8110eed6002 3a51bebad86daad406407f2ae6d82d80921a6fc617637c9f485f61d6d868e94fdd9d924b0a514ff97db1ef39e6899d57e518ac84a4bd602fb1570a1471319412 2025-06-25 18:05:20 +0000 UTC None None 2025-03-24 03:58:22 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-06-24 22:47:06.637 +0000 UTC
c150d983ad4f863bf8caf9c5948481ea40a122b0bb81f1a13134c5f97affdce0 [68a5c7d3fe4e7ef11ca5feb3, 68a5c9d7599432010e418bd1] [2] [SVC_SL_RedSailTech, SYSTEM] [i-nQS1mgtn] [WVUHS, NT AUTHORITY] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AFE33D5-1C08-4BEC-ABE2-DD894A26805B}\SetACL64.exe, C:\Windows\Temp\{E69728DE-360F-46C7-B2C4-6A1C0B087C5A}\SetACL64.exe] [Servers] [Servers Audit] [v2287.880] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AFE33D5-1C08-4BEC-ABE2-DD894A26805B}\SetACL64.exe -on HKEY_LOCAL_MACHINE\Software\Microsoft\Windows -ot reg -actn ace -ace "n:power users;p:full" , C:\Windows\Temp\{E69728DE-360F-46C7-B2C4-6A1C0B087C5A}\SetACL64.exe -on HKEY_LOCAL_MACHINE\Software\Microsoft\Windows -ot reg -actn ace -ace "n:power users;p:full" ] [Not Signed] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, C:\Windows\Temp\{3F64586E-9E75-4E93-A75B-88E798BC0CE3}\191042001Depends.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\191042001Depends.exe] [2025-08-20T13:04:13Z, 2025-08-20T13:12:38Z] [84551cd8625713feedfebc769562a67d] [3c5be5394a55578199e0adb9fa12caf087d2030b] [db3e5fd597e716d1772065ca2b53b2f5af0e3d5cb1593e40d85bcee9a8cdc03012b8d4f8c228c8eea6a16ad359416428] [41d10f7fa0c0eef729c0142fd3804342e41f793f2293d063fe548de40c8cc853b928005d8207319e2de7d6336ef422c43a77cb1e91329cabbc8067610ed6b327] [172.17.20.104] [172.17.20.104] 1 Success SetACL64.exe C:\Windows\Temp\{74D56724-9D08-439F-B683-ECB6E1E727E2}\ SetACL 2 443392 84551cd8625713feedfebc769562a67d SetACL 2, 1, 3, 0 Not Signed 2025-07-17 16:14:45 +0000 UTC 2025-07-17 16:14:45 +0000 UTC 3c5be5394a55578199e0adb9fa12caf087d2030b db3e5fd597e716d1772065ca2b53b2f5af0e3d5cb1593e40d85bcee9a8cdc03012b8d4f8c228c8eea6a16ad359416428 41d10f7fa0c0eef729c0142fd3804342e41f793f2293d063fe548de40c8cc853b928005d8207319e2de7d6336ef422c43a77cb1e91329cabbc8067610ed6b327 2025-07-17 16:15:02 +0000 UTC None None 2025-06-27 17:54:30 +0000 UTC 73 0 KNOWN 0 Microsoft attested file 2025-07-17 16:17:46.576 +0000 UTC
c0ebe5d656d755ce4f5f399105a936b82b36951fc2640a2e64c72316414e16a1 [68a55d10a6e1a08ed492f8f2] [2] [SYSTEM] [DP-Jackson] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_imgqx5ud.rnw.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:28:42Z] [] [] [] [] [172.31.113.2] [172.31.113.2] 1 Success __PSScriptPolicyTest_imgqx5ud.rnw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:28:42 +0000 UTC 2025-08-20 05:28:42 +0000 UTC 2025-08-20 05:28:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c0a8ed297345fae7a0e2c5e97b92df98da9107d5ebea48a0ef63d094ca6f0d99 [68a4ccc785b914a60d739e42, 68a4d07753a851daf11e692c, 68a4d2d1ff2b441b84428124] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [D:\Qdx_work\custom_scripts\CloverleafAutoStart.ps1] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T19:13:00Z, 2025-08-19T19:23:00Z, 2025-08-19T19:33:00Z] [6070a9a674793a659ece679e56c0413c] [55204a5d25518210d99df5e3908b07b14d5c3c17] [c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78] [9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82] [10.36.132.49] [10.36.132.49] 1 Success CloverleafAutoStart.ps1 D:\Qdx_work\custom_scripts\ 3464 6070a9a674793a659ece679e56c0413c Not Signed 2020-04-27 17:40:48 +0000 UTC 2020-04-27 17:40:48 +0000 UTC 55204a5d25518210d99df5e3908b07b14d5c3c17 c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78 9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c06ca9f2522de6b59a5bdf15e8be2f96e2ca48ae6a1fdef55b7de47d63ba64aa [68a511b1e4d3ba2a8e3af5c3] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:07:02Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:07:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c05a64ef54feee47008c74b3ec8a0d4bd0966b183e05b8a61cb14baf116a2c1e [68a306a5ba5832f49fe9cf56] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPLDR.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [90c2cf7fc66d0effe39ce31a84eac978] [fa0dbef0f9f74739993c1b000cc686200a56e78b] [64539c1c43a4b958138bf10ca450083a52a92d8c27b7267311f4bbac23ab2766c52b211c1fe2015cbe785c2ef0c99a24] [1262de8f13e3bf393a95b3330437703a21e6812e51169b9af51d9c7e135c187bab29e36a5da04b1913f23b1705b479b3d68f1d65889d470852a0a64fb211aa56] [172.17.146.33] [172.17.146.33] 1 Success APPLDR.BPL C:\DICORP\DICORP_V5\RW\APPS\ 20480 90c2cf7fc66d0effe39ce31a84eac978 1.0.0.0 Not Signed 2022-07-06 14:52:01 +0000 UTC 2024-09-14 04:02:48 +0000 UTC fa0dbef0f9f74739993c1b000cc686200a56e78b 64539c1c43a4b958138bf10ca450083a52a92d8c27b7267311f4bbac23ab2766c52b211c1fe2015cbe785c2ef0c99a24 1262de8f13e3bf393a95b3330437703a21e6812e51169b9af51d9c7e135c187bab29e36a5da04b1913f23b1705b479b3d68f1d65889d470852a0a64fb211aa56 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 16:46:26 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
bff9aab5dab9e2075db20262c2f58cf81db4c6ee97c513c599029bf441282a7a [68a15648b3fb2a7f3ef2c4b5] [2] [SYSTEM] [WHL-STOREFRONT1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfas0q2g.4wq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:10:35Z] [] [] [] [] [172.18.112.145] [172.18.112.145] 1 Success __PSScriptPolicyTest_nfas0q2g.4wq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:10:35 +0000 UTC 2025-08-17 04:10:35 +0000 UTC 2025-08-17 04:10:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bf941354d209769734c601d7d725941fb53ce6cfeb77bac36709c89ec9bc8b50 [68a4e8fbf38f9e1f8274ab4c] [2] [SYSTEM] [i-ncapsule12] [NT AUTHORITY] [C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe] [Servers] [Servers Audit] [v2283] ["C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe" req -new -x509 -extensions rootca_cert -passout pass:V]7H:]Vp#>3l:&mj/I#F -keyout "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.key" -out "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.crt" -days 3653 -config "C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\Root.cnf"] [Open Source Developer, François PIETTE] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\SysWOW64\msiexec.exe] [2025-08-19T21:13:27Z] [36a5d769ada5511b269cd7f028f80b36] [568b532bef2967af9fef30d860972fc5b67827e4] [11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d] [c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda] [172.17.23.18] [172.17.23.18] 1 Success openssl.exe C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\ OpenSSL application 732016 36a5d769ada5511b269cd7f028f80b36 The OpenSSL Toolkit 1.1.1b Open Source Developer, François PIETTE 2019-02-27 14:53:24 +0000 UTC 2019-02-27 14:53:24 +0000 UTC 568b532bef2967af9fef30d860972fc5b67827e4 11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda 2025-08-19 21:13:31 +0000 UTC None None 2019-05-07 09:32:58 +0000 UTC 69 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
bf42bb8c665225c28749685e2f8b661c02baa300701ba9ec2b32e0703b41073c [68a5239e621d09b2b1ed5e5f] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.Helpers.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [328d30770ede8b155abe1fa9a87ef03a] [7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708] [7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44] [2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.CommLayerBase.Helpers.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.CommLayerBase.Helpers 9728 328d30770ede8b155abe1fa9a87ef03a Stanley.Infra.CommLayerBase.Helpers 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC 7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708 7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44 2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
be82e978adc037a3a56135bf555c5d4442c67d8c4e58572201d2349fba6f7b0e [68a1951058f868128a49bffc] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_o1ghm1vm.52u.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:38:28Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_o1ghm1vm.52u.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:38:28 +0000 UTC 2025-08-17 08:38:28 +0000 UTC 2025-08-17 08:38:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
be6d136082036017ac3b1cf3a626c42a3a76561171691e0345cf9cec5cf07209 [68a6afe50e0f3bd8deac4d08, 68a6afe50e0f3bd8deac4d1c, 68a6afe50e0f3bd8deac4d4a, 68a6afe50e0f3bd8deac4d6a, 68a6afe50e0f3bd8deac4d8a, 68a6afe50e0f3bd8deac4daa, 68a6afe50e0f3bd8deac4dca, 68a6afe50e0f3bd8deac4dea, 68a6afe50e0f3bd8deac4e0a, 68a6afe50e0f3bd8deac4e2a, 68a6afe50e0f3bd8deac4e4a, 68a6afe50e0f3bd8deac4e6a, 68a6afe50e0f3bd8deac4e8a, 68a6afe50e0f3bd8deac4eaa, 68a6afe50e0f3bd8deac4eba, 68a6afe50e0f3bd8deac4eea, 68a6afe50e0f3bd8deac4f0a, 68a6afe50e0f3bd8deac4f2a, 68a6afe50e0f3bd8deac4f4a, 68a6afe50e0f3bd8deac4f74, 68a6afe50e0f3bd8deac4f94, 68a6afe50e0f3bd8deac4fb4, 68a6afe50e0f3bd8deac4fd4, 68a6afe50e0f3bd8deac4ff4, 68a6afe50e0f3bd8deac5014, 68a6afe50e0f3bd8deac5034, 68a6afe50e0f3bd8deac5054, 68a6afe50e0f3bd8deac5074, 68a6afe50e0f3bd8deac5094, 68a6afe50e0f3bd8deac50be, 68a6afe50e0f3bd8deac50dd, 68a6afe50e0f3bd8deac50fe, 68a6afe50e0f3bd8deac5128, 68a6afe50e0f3bd8deac5148, 68a6afe50e0f3bd8deac5168, 68a6afe50e0f3bd8deac5192, 68a6afe50e0f3bd8deac51b2, 68a6afe50e0f3bd8deac51d2, 68a6afe50e0f3bd8deac51f3, 68a6afe50e0f3bd8deac5205, 68a6afe50e0f3bd8deac521c, 68a6afe50e0f3bd8deac5253, 68a6afe50e0f3bd8deac5273, 68a6afe50e0f3bd8deac5287, 68a6afe50e0f3bd8deac52a7, 68a6afe50e0f3bd8deac52c7, 68a6afe50e0f3bd8deac52e7, 68a6afe50e0f3bd8deac5307, 68a6afe50e0f3bd8deac5327, 68a6afe50e0f3bd8deac5347, 68a6afe50e0f3bd8deac5367, 68a6afe50e0f3bd8deac5387, 68a6afe50e0f3bd8deac53ad, 68a6afe50e0f3bd8deac53c8, 68a6afe50e0f3bd8deac53ed, 68a6afe50e0f3bd8deac540c, 68a6afe50e0f3bd8deac542d, 68a6afe50e0f3bd8deac5447, 68a6afe50e0f3bd8deac546d, 68a6afe50e0f3bd8deac548d, 68a6afe50e0f3bd8deac54ad, 68a6afe50e0f3bd8deac54cd, 68a6afe50e0f3bd8deac54ed, 68a6afe50e0f3bd8deac550d, 68a6afe50e0f3bd8deac552d, 68a6afe50e0f3bd8deac554d, 68a6afe50e0f3bd8deac5577, 68a6afe50e0f3bd8deac5597, 68a6afe50e0f3bd8deac55b7, 68a6afe50e0f3bd8deac55d7, 68a6afe50e0f3bd8deac55f7, 68a6afe50e0f3bd8deac5617, 68a6afe50e0f3bd8deac5637, 68a6afe50e0f3bd8deac5667, 68a6afe50e0f3bd8deac5687, 68a6afe50e0f3bd8deac5695, 68a6afe50e0f3bd8deac56b5, 68a6afe50e0f3bd8deac56d5, 68a6afe50e0f3bd8deac56ed, 68a6afe50e0f3bd8deac5715, 68a6afe50e0f3bd8deac572f, 68a6afe50e0f3bd8deac5755, 68a6afe50e0f3bd8deac575e, 68a6afe50e0f3bd8deac579d, 68a6afe50e0f3bd8deac57a9, 68a6afe50e0f3bd8deac57de, 68a6afe50e0f3bd8deac57e9, 68a6afe50e0f3bd8deac581d, 68a6afe50e0f3bd8deac5836, 68a6afe50e0f3bd8deac585f, 68a6afe50e0f3bd8deac5867, 68a6afe50e0f3bd8deac589d, 68a6afe50e0f3bd8deac58ae, 68a6afe50e0f3bd8deac58df, 68a6afe50e0f3bd8deac58e9, 68a6afe50e0f3bd8deac5919, 68a6afe50e0f3bd8deac5930, 68a6afe50e0f3bd8deac595f, 68a6afe50e0f3bd8deac597f, 68a6afe50e0f3bd8deac5996, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\libcrypto-1_1-x64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:47Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [3ff61aef6545cc4fe20493c24388fb64] [2a11cb2f5d89afb4638b32dcd9239986df7882e4] [ff38cae2ab0aff63f479d8fff29fedaffe2cb90af7117391c4e47fee39861118d78d53de1cbad5351b1d0a0f96b6f09a] [2f59b2fe12b896fe8d1020cc36ab4f3f8d024af5cc053747b1477209c333483acdedb17c9287667c3bb5d10874fe1302cad0fe034d78c9cd468f9fcb8f916538] [172.17.30.60] [172.17.30.60] 1 Success libcrypto-1_1-x64.dll C:\Program Files\Fujifilm\NaxisWS6\ OpenSSL library 3442176 3ff61aef6545cc4fe20493c24388fb64 The OpenSSL Toolkit 1.1.1d Not Signed 2023-11-03 20:25:46 +0000 UTC 2023-03-07 00:33:42 +0000 UTC 2a11cb2f5d89afb4638b32dcd9239986df7882e4 ff38cae2ab0aff63f479d8fff29fedaffe2cb90af7117391c4e47fee39861118d78d53de1cbad5351b1d0a0f96b6f09a 2f59b2fe12b896fe8d1020cc36ab4f3f8d024af5cc053747b1477209c333483acdedb17c9287667c3bb5d10874fe1302cad0fe034d78c9cd468f9fcb8f916538 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
be5e9587e3ca556aef9c2cde627026bcf487a2c0577ed5d5878c9045719f8ac0 [68a2a383740bfa0e8661429f] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tnnwgcbz.kx3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T03:52:27Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_tnnwgcbz.kx3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 03:52:27 +0000 UTC 2025-08-18 03:52:27 +0000 UTC 2025-08-18 03:52:35 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
bdf42be3e8a2d355425f5b3cde6143964bc5bc8e34a4eeef8d5ce9168187ba14 [68a523949cec397f02de9f4b] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Caliburn.Micro.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:26Z] [6983fd92ac73d4eeba2138a9fb060504] [9058f7800a0c0580583935a7d7d5c7a725e273cf] [75d55a4f64ac3796cc8c374ff44d407530b74757b362f227c1606633223ba1b3a7da55c676b95e1d01d246d137b6e363] [843bef8a15921c4cc9e6ed752953d5a00bb7496246dd8d50dca42ced8ffb427aed5ae6f9294f57cdf7f4dc6a7d0ad7250749162c19be81b6687b09f4c36e7771] [172.17.22.40] [172.17.22.40] 1 Success Caliburn.Micro.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Caliburn Micro 62464 6983fd92ac73d4eeba2138a9fb060504 Caliburn.Micro 2.0.1.0 Not Signed 2023-06-15 02:37:26 +0000 UTC 2023-06-15 02:37:26 +0000 UTC 9058f7800a0c0580583935a7d7d5c7a725e273cf 75d55a4f64ac3796cc8c374ff44d407530b74757b362f227c1606633223ba1b3a7da55c676b95e1d01d246d137b6e363 843bef8a15921c4cc9e6ed752953d5a00bb7496246dd8d50dca42ced8ffb427aed5ae6f9294f57cdf7f4dc6a7d0ad7250749162c19be81b6687b09f4c36e7771 2025-08-20 01:23:32 +0000 UTC None None 2022-10-12 02:13:26 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
c6b6dc489be976c353613a2e6ccc00459d683607f7016bf7100b54f3840c9de8 [68a514957c462c6feed1d6ec] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_645608853d614555ad24aa760135fa91.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:19:28Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_645608853d614555ad24aa760135fa91.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:19:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c64d02709f5a2a0f2b1f7fdce51ea690718e118b044861c776bd216796720ce1 [68a27594b1c6255cad9f46e0] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fqfwtzyh.2si.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T00:36:24Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_fqfwtzyh.2si.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 00:36:24 +0000 UTC 2025-08-18 00:36:24 +0000 UTC 2025-08-18 00:36:36 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c5ed39440ed5c887e029536b2385b4abcb5c92dc545a0aa6da398b6d107d47ec [68a17aee0ae38deaa00d340b] [2] [SYSTEM] [i-v3MAppTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pwoh1wzv.2ff.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:47:02Z] [] [] [] [] [172.17.23.50] [172.17.23.50] 1 Success __PSScriptPolicyTest_pwoh1wzv.2ff.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:47:02 +0000 UTC 2025-08-17 06:47:02 +0000 UTC 2025-08-17 06:47:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c5aff149a88b77be98108f0bcd11aecbc95552b149633da6e4802ebacebb5b7a [68a5562678064307c83a4ac0] [2] [SYSTEM] [I-NCTXSA-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbgibpfr.i4d.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T04:59:17Z] [] [] [] [] [172.17.188.22] [172.17.188.22] 1 Success __PSScriptPolicyTest_jbgibpfr.i4d.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-20 04:59:17 +0000 UTC 2025-08-20 04:59:17 +0000 UTC 2025-08-20 04:59:18 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c596c3c0daaf9055213284e42bd337e3b6754890efe1c480f0e7731ad4060af5 [68a16bd60756fe54a9918fa7, 68a2149cb58debea69d7c752, 68a2bd5ff793a9057f329c0d, 68a3663261f8067c48423ec0, 68a40efceddb3a9f1a71a609, 68a4b7cd36bc5d38057e236e] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\CmmBrowserEngine.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z] [097f29d6fcdb18a270a67a77726f02e0] [572c07086245d07726fa885459d62fe77733dfbc] [0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d] [f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16] [10.20.20.68] [10.20.20.68] 1 Success CmmBrowserEngine.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 199480 097f29d6fcdb18a270a67a77726f02e0 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 572c07086245d07726fa885459d62fe77733dfbc 0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:02:28 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
c535b5c57d55794d09c08b5caba7399add0cfd2043491bafb35453d6aebff17a [68a4ccc785b914a60d739e53, 68a4ce1fc826337212f53bf1, 68a4d07753a851daf11e693c, 68a4d07753a851daf11e6952, 68a4d2d1ff2b441b84428134, 68a4d2d1ff2b441b8442814b] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\API.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [6ddc8640259abb08c4a7aab5963f9132] [64c7beca37e5f11c99f66bf2ba9aa4d549147813] [c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710] [7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8] [10.36.132.49] [10.36.132.49] 1 Success API.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\ 17920 6ddc8640259abb08c4a7aab5963f9132 Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:13:04 +0000 UTC 64c7beca37e5f11c99f66bf2ba9aa4d549147813 c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710 7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c534f09b89879437205c2c070f09e847f00ca5462acc567fab450fe01d667c57 [68a3146b5f0c41860c8c8505, 68a3146b5f0c41860c8c852b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\re\__pycache__\_constants.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [ad6cb6b298821e0783d24bd040205667] [1068bc2e3f910a9d0d9a00b67dc90a726720fdc8] [fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0] [47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6] [172.17.252.131] [172.17.252.131] 1 Success _constants.cpython-313.pyc C:\Program Files\Python\Lib\re\__pycache__\ 5382 ad6cb6b298821e0783d24bd040205667 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 1068bc2e3f910a9d0d9a00b67dc90a726720fdc8 fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0 47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c4d5f27d397b627a66b385a571f63b327f086b0c10eadd90ada70474097443c7 [68a34b98a6132bf659cce5af, 68a34df0b71eea1289980a14] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\NuGet.Squirrel.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z] [c29d753ab575ba590dee09d9951fe391] [06514982da9ebd5a13d13808abbc475260b0b566] [ca4ab209e7f9f2731de9896057c8d82a6736bf8672c214a32ede567e6b0da21a5fcc7356784b5f629b8d9d1a990bc065] [3f165fc822655cab20c54859673799d070a547d737ee16c96bc309067e2974870b7f8991695410729d486e244d8312438faaed6738f9b2d7223582a77c37c83a] [172.17.253.114] [172.17.253.114] 1 Success NuGet.Squirrel.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ NuGet.Core 509952 c29d753ab575ba590dee09d9951fe391 NuGet 3.0.0-preview Not Signed 2023-07-25 16:11:52 +0000 UTC 2023-07-25 16:11:52 +0000 UTC 06514982da9ebd5a13d13808abbc475260b0b566 ca4ab209e7f9f2731de9896057c8d82a6736bf8672c214a32ede567e6b0da21a5fcc7356784b5f629b8d9d1a990bc065 3f165fc822655cab20c54859673799d070a547d737ee16c96bc309067e2974870b7f8991695410729d486e244d8312438faaed6738f9b2d7223582a77c37c83a 2025-06-09 21:58:41 +0000 UTC None None 2025-03-23 08:47:41 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
c48ee8109815a5443615dc6932ffe0a3fa4d8ba3ba73cc481a0eea00785f76be [68a16fc09b16dfa10f38c979] [2] [SYSTEM] [WH1EMGSQL1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hkdjfhdi.ivf.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T05:59:23Z] [] [] [] [] [172.18.99.115] [172.18.99.115] 1 Success __PSScriptPolicyTest_hkdjfhdi.ivf.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 05:59:23 +0000 UTC 2025-08-17 05:59:23 +0000 UTC 2025-08-17 05:59:28 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c47706e64fc4a76a6a9491ecb56a34662e8b6e68399c73a5b2cf319b46ada3a6 [68a3364098a9a1f4e6f8e02d] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kft34fye.mii.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T14:18:32Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_kft34fye.mii.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 14:18:32 +0000 UTC 2025-08-18 14:18:32 +0000 UTC 2025-08-18 14:18:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c3a00c139fea67d3b256e9119dd35e0bbaef4fd51a800022f693a0f157bdcdd3 [68a3240b38d5d5195ff8315f] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\tmpEXO_h3psaegy.pzf.psm1] [Servers] [Servers Audit] [v2253.852] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T13:00:50Z] [4337273c42ec7d667280321798203a81] [6cecb446e53d0bceb0598e63c47129b289f76680] [01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b] [81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_h3psaegy.pzf.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\ 2290479 4337273c42ec7d667280321798203a81 Not Signed 2025-08-18 13:00:48 +0000 UTC 2025-08-18 13:00:48 +0000 UTC 6cecb446e53d0bceb0598e63c47129b289f76680 01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b 81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493 2025-08-18 13:00:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c3796735f397c34b8190c04151071a3700e9356214c940fc7a16781c1678c998 [68a16bd60756fe54a9918f9b, 68a2149cb58debea69d7c746, 68a2bd5ff793a9057f329c01, 68a3663261f8067c48423eb4, 68a40efceddb3a9f1a71a5fd, 68a4b7cd36bc5d38057e2362] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWinRes.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [ea160d8a356d92ab1ce2cef57b69cd5a] [4e49b884b2592720404e91cdd2d526af82c02c6b] [77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56] [917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6] [10.20.20.68] [10.20.20.68] 1 Success zWinRes.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 10790712 ea160d8a356d92ab1ce2cef57b69cd5a Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:38 +0000 UTC 2025-07-07 01:28:19 +0000 UTC 4e49b884b2592720404e91cdd2d526af82c02c6b 77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56 917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6 2025-07-15 17:40:29 +0000 UTC None None 2025-06-12 09:14:39 +0000 UTC 51 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
c3667c28750579a47d4170b1f5e1442a386fe1cebe6246179a6c27d1b53c2de5 [68a2324e8d5b232a80ba583b] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrvnheh0.wft.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:45:56Z] [] [] [] [] [172.29.132.47] [172.29.132.47] 1 Success __PSScriptPolicyTest_jrvnheh0.wft.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:45:56 +0000 UTC 2025-08-17 19:45:56 +0000 UTC 2025-08-17 19:49:34 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c301ca5c745a7ea2471ae58975afc931ee83421bb7d51d06311cce889fd41407 [68a17a26093dbf71ffe19bcf] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mhcpaqhq.f01.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:43:45Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_mhcpaqhq.f01.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:43:45 +0000 UTC 2025-08-17 06:43:45 +0000 UTC 2025-08-17 06:43:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c2ed1c813c3e9df1cce05bdae49d2c20edf56502f916ca8c55d8ac08f1b7f682 [68a16bd60756fe54a9918f8b, 68a2149cb58debea69d7c736, 68a2bd5ff793a9057f329bf2, 68a3663261f8067c48423ea6, 68a40efceddb3a9f1a71a5ed, 68a4b7cd36bc5d38057e2354] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\DuiLib.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [46daed87222362c75d0f93c9ceebecee] [5d2aa57dbda3c6914acd7024280a2cb71a290cc5] [2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14] [e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85] [10.20.20.68] [10.20.20.68] 1 Success DuiLib.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 2146104 46daed87222362c75d0f93c9ceebecee Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 5d2aa57dbda3c6914acd7024280a2cb71a290cc5 2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14 e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:01:10 +0000 UTC 71 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
c261f75c1a25ecb17d1936efe34a34236b5d0e79415b34ffb9324359a30a8c08 [68a472b1b022648922e2358a] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxws-api-2.3.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [f72dee163a5730f80c0e198decba2b2a] [82db2dfe70624d6ed1e93737abfbb0a4df084a89] [d442fe94c113ac7c7acf83e1f22063e853e712f47eab137c89d075cc6c89c00a87443d3ea10954f96fb6d16c618cf865] [a43235ad5688b96e121b951715819963fb00af9e573d1d3582a2351450c270160d88caa0c3615321c0cf8ec59c3ad09789e58fb8d4339fc61face5c7e93c7e3e] [172.17.23.146] [172.17.23.146] 1 Success jaxws-api-2.3.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 52437 f72dee163a5730f80c0e198decba2b2a Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 82db2dfe70624d6ed1e93737abfbb0a4df084a89 d442fe94c113ac7c7acf83e1f22063e853e712f47eab137c89d075cc6c89c00a87443d3ea10954f96fb6d16c618cf865 a43235ad5688b96e121b951715819963fb00af9e573d1d3582a2351450c270160d88caa0c3615321c0cf8ec59c3ad09789e58fb8d4339fc61face5c7e93c7e3e 2025-03-28 16:04:26 +0000 UTC None None 2024-09-24 02:46:58 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
ca0f677ea03e930eab6d803e0015635200a3e4a1de4391cd78a7c6b33b722ad7 [68a3146b5f0c41860c8c8550, 68a3146b5f0c41860c8c8576] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\textwrap.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [a983cb636c494edd66f26bbb0d50debd] [b1e72b671ead0a94705dc8fce5642bba7d658c8c] [07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb] [83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6] [172.17.252.131] [172.17.252.131] 1 Success textwrap.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 17938 a983cb636c494edd66f26bbb0d50debd Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC b1e72b671ead0a94705dc8fce5642bba7d658c8c 07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb 83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c9fc184e1ca62fe686fbd38a18904c7d84f091a080e009089e170d1b30b664f0 [68a48674c4cb2500be692633] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerUI.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:15Z] [4d6da26c03021f4618d9339970734fcf] [1f147bd82cbdc20c0f3edf7844e0096e65201b69] [98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0] [4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.SwaggerUI.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Swashbuckle.AspNetCore.SwaggerUI 3265296 4d6da26c03021f4618d9339970734fcf Swashbuckle.AspNetCore.SwaggerUI 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Stryker Corporation 2023-01-11 11:49:02 +0000 UTC 2024-02-15 18:02:07 +0000 UTC 1f147bd82cbdc20c0f3edf7844e0096e65201b69 98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0 4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660 2025-07-15 14:07:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c9f6192ea1b31abf195f87899b9a689fa2eade5036fcdaed0057948f970df578 [68a6afe50e0f3bd8deac4ce6, 68a6afe50e0f3bd8deac4cf5, 68a6afe50e0f3bd8deac4d29, 68a6afe50e0f3bd8deac4d37, 68a6afe50e0f3bd8deac4d57, 68a6afe50e0f3bd8deac4d77, 68a6afe50e0f3bd8deac4d97, 68a6afe50e0f3bd8deac4db7, 68a6afe50e0f3bd8deac4dd7, 68a6afe50e0f3bd8deac4df7, 68a6afe50e0f3bd8deac4e17, 68a6afe50e0f3bd8deac4e37, 68a6afe50e0f3bd8deac4e56, 68a6afe50e0f3bd8deac4e77, 68a6afe50e0f3bd8deac4e97, 68a6afe50e0f3bd8deac4ec8, 68a6afe50e0f3bd8deac4ed7, 68a6afe50e0f3bd8deac4ef7, 68a6afe50e0f3bd8deac4f17, 68a6afe50e0f3bd8deac4f37, 68a6afe50e0f3bd8deac4f61, 68a6afe50e0f3bd8deac4f81, 68a6afe50e0f3bd8deac4fa1, 68a6afe50e0f3bd8deac4fc1, 68a6afe50e0f3bd8deac4fe1, 68a6afe50e0f3bd8deac5001, 68a6afe50e0f3bd8deac5021, 68a6afe50e0f3bd8deac5041, 68a6afe50e0f3bd8deac5061, 68a6afe50e0f3bd8deac5081, 68a6afe50e0f3bd8deac50ab, 68a6afe50e0f3bd8deac50cb, 68a6afe50e0f3bd8deac50eb, 68a6afe50e0f3bd8deac5115, 68a6afe50e0f3bd8deac5135, 68a6afe50e0f3bd8deac5155, 68a6afe50e0f3bd8deac517f, 68a6afe50e0f3bd8deac519f, 68a6afe50e0f3bd8deac51bf, 68a6afe50e0f3bd8deac51e0, 68a6afe50e0f3bd8deac5212, 68a6afe50e0f3bd8deac5229, 68a6afe50e0f3bd8deac5240, 68a6afe50e0f3bd8deac5260, 68a6afe50e0f3bd8deac5274, 68a6afe50e0f3bd8deac5294, 68a6afe50e0f3bd8deac52b4, 68a6afe50e0f3bd8deac52d4, 68a6afe50e0f3bd8deac52f4, 68a6afe50e0f3bd8deac5314, 68a6afe50e0f3bd8deac5334, 68a6afe50e0f3bd8deac5354, 68a6afe50e0f3bd8deac5374, 68a6afe50e0f3bd8deac539a, 68a6afe50e0f3bd8deac53b6, 68a6afe50e0f3bd8deac53da, 68a6afe50e0f3bd8deac53f9, 68a6afe50e0f3bd8deac541a, 68a6afe50e0f3bd8deac5434, 68a6afe50e0f3bd8deac545a, 68a6afe50e0f3bd8deac547a, 68a6afe50e0f3bd8deac549a, 68a6afe50e0f3bd8deac54ba, 68a6afe50e0f3bd8deac54da, 68a6afe50e0f3bd8deac54fa, 68a6afe50e0f3bd8deac551a, 68a6afe50e0f3bd8deac553a, 68a6afe50e0f3bd8deac5564, 68a6afe50e0f3bd8deac5584, 68a6afe50e0f3bd8deac55a4, 68a6afe50e0f3bd8deac55c4, 68a6afe50e0f3bd8deac55e4, 68a6afe50e0f3bd8deac5604, 68a6afe50e0f3bd8deac5624, 68a6afe50e0f3bd8deac5653, 68a6afe50e0f3bd8deac5674, 68a6afe50e0f3bd8deac56a2, 68a6afe50e0f3bd8deac56c2, 68a6afe50e0f3bd8deac56d9, 68a6afe50e0f3bd8deac5703, 68a6afe50e0f3bd8deac571c, 68a6afe50e0f3bd8deac5742, 68a6afe50e0f3bd8deac5775, 68a6afe50e0f3bd8deac5788, 68a6afe50e0f3bd8deac57b6, 68a6afe50e0f3bd8deac57cc, 68a6afe50e0f3bd8deac57f6, 68a6afe50e0f3bd8deac580a, 68a6afe50e0f3bd8deac5823, 68a6afe50e0f3bd8deac584c, 68a6afe50e0f3bd8deac5874, 68a6afe50e0f3bd8deac5889, 68a6afe50e0f3bd8deac58bb, 68a6afe50e0f3bd8deac58cc, 68a6afe50e0f3bd8deac58fb, 68a6afe50e0f3bd8deac5906, 68a6afe50e0f3bd8deac593d, 68a6afe50e0f3bd8deac594c, 68a6afe50e0f3bd8deac596c, 68a6afe50e0f3bd8deac5983, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeDicomLib.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [8038198f467aa6483596d5a103224695] [6b8a73173f513d5f61a988c35488840d6ca5168e] [3b2a8ba76a6c692b44e50997fe5e1f03c21d176182103f9d517415cfd2b7f08e202b0df323aa1b4c6cc9014e774b97af] [8d17003e1ed1d73f2af8db29b4bfdd8b995a238cf2c7c55930356696609c35b18674db5861f83e8ead902541d8d3c0506cdeee98c4026fbe200ddcf57579c479] [172.17.30.60] [172.17.30.60] 1 Success AmeDicomLib.dll C:\Program Files\Fujifilm\NaxisWS6\ 805888 8038198f467aa6483596d5a103224695 Not Signed 2023-11-03 20:25:42 +0000 UTC 2023-06-16 02:58:17 +0000 UTC 6b8a73173f513d5f61a988c35488840d6ca5168e 3b2a8ba76a6c692b44e50997fe5e1f03c21d176182103f9d517415cfd2b7f08e202b0df323aa1b4c6cc9014e774b97af 8d17003e1ed1d73f2af8db29b4bfdd8b995a238cf2c7c55930356696609c35b18674db5861f83e8ead902541d8d3c0506cdeee98c4026fbe200ddcf57579c479 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
c9ef35bed70ffa0981bafd0071185b56fdad8f9c97f3582a4dae9b420959fb97 [68a16bc4ad9c33d9c2e65756, 68a172cdc0f8055f64713419, 68a179d338572cbc65616da3, 68a1804bf8ae7dd3df476f09, 68a187e553ac2a86abb03491, 68a18eee729156ffa7259826, 68a195f4b86f0c8aa5216084, 68a19cfd64bf60820d0181d7, 68a1acc43dfbfac90032a3bc, 68a1b219d07230b57463e87a, 68a1b91d1b24cf3f4771b897, 68a1c025a1293bdf5a6549d4, 68a1c8e646186b37f5ac3e87, 68a1ce37ff8f091c89bd7e0d, 68a1d53f1824f04bdbbd2e23, 68a1dc48e9b446590d212ea0, 68a1e5096f3390a2d4c45b8c, 68a1ea59c2807bfb4e6bd79c, 68a1f1620185d739f28077bb, 68a1f86b5860bb1ab8fe7017, 68a1ff7362f73c75ea20c3bb, 68a2082f5e302bb8f76a1c47, 68a20d8405e6e35077c2d29f, 68a2148da524a919a2880941, 68a21b919d11196cc9a616c8, 68a224516b6c4aefe37db14b, 68a229a21145934075cf7126, 68a230aa01dfad25d66e06ad, 68a237b34da7992cf394be68, 68a23ebc1a2eedb9e67ef5e6, 68a245c42c7d715a036f384d, 68a24ccd8e7f175fcd84e41f, 68a253d6ff6fb2ed210c0356, 68a25ade53979dd9da3732e3, 68a261e7f7947656655fe7f3, 68a268f0bf25183df43efe44, 68a26ff84abd96da16a47c80, 68a276fc59c12c68e71a249e, 68a27e04e0494e7574f3f455, 68a286c0c2c9f189b338b621, 68a28c1603b4ee1c551eca8b, 68a2931ece09f4c6f7c419ba, 68a29a274b7ddc2c84ed0de8, 68a2a13073586ea39d62a078, 68a2a83649f642cc5ae7b7cd, 68a2af3f4b461c4e4d1d89c8, 68a2b6470f9c8e52cbbbc6d5, 68a2bf0021586b29ef838133, 68a2c4594c433b4f88aee0d2, 68a2d26ac62ed9324f721122, 68a2db21e09739c45d0affdf, 68a2e07cbfa1fc05015beff7, 68a2e7801b323c2b294d5eef, 68a2ee88859e37426da93b3a, 68a2f73f59738bf4fccfab7d, 68a2fc9a63de2d038778f96b, 68a303a3f3e03189a3aa3911, 68a30aab0a4862a38db25377, 68a313622b6d412403ad79e7, 68a318bd8a60dcd0ab189d81, 68a31fe2a56bfbffe27a6f4a, 68a326d1b268d794f2486717, 68a32dda58c5336b9826ccf7, 68a335889425eeb6da079393, 68a33bf133704992ab564775, 68a342f93a3f2f2cfdc38a7e, 68a34a0193c9f2686216d5a4, 68a35109dcbdb9af79d6422e, 68a358166446b584fbeb48c3, 68a35f2142f657a8fa28b6de, 68a3662b8a74df93031e2923, 68a36d3468bb70b8808727af, 68a3743c4da128919d6758a4, 68a37b44fb7d353a77331404, 68a382515b1f8341940efc7d, 68a3895d4c9b0119e59522a1, 68a39066d0e53033691833c3, 68a3976f18606035299d68b7, 68a39e7854bebae70e617202, 68a3a580ce25cbb9eaded924, 68a3ac89afed4126737f38d2, 68a3b392ad655e1e5bbbb968, 68a3ba9a92f306c5b333cb4f, 68a3c1a1f23aad622f92975c, 68a3c8a9722676e14095e6f5, 68a3cfb4b1198f9d919d82d2, 68a3d6ba7bb221454426601c, 68a3ddc229b489dea56d4b00, 68a3e4cbc58c42da95af4e8a, 68a3ed57b89d663e9f8db999, 68a3f2dc83b11b3c1185cfc6, 68a3f9e36c6aa49846cec062, 68a400eb110dffa88df03c55, 68a4097a4aede4ad63908d0e, 68a40efc829243526b28a480, 68a41d0ec853cfc461d34dcb, 68a42416e061813ba1fb0b23, 68a4322671829e8c619d02f8, 68a4392fe2f86f318f61ae53, 68a440378219e384ff7cd411, ...] [2] [ASCSvc] [vm-ASCNEO] [WVUH] [E:\OrecX_Export\fart.exe] [Servers] [Servers Audit] [v2248.849, v2253.852, v2255.853, v2258.856, v2260.859, v2263.860, v2264.862, v2267.864, v2269.866, v2270.866, v2272.867, v2273.867, v2276.867, v2280.871, v2282.875, v2283.876, v2284.877, v2286.879, v2287.880, v2293.885, v2295.887, v2298.891, v2306.895, v2307.897, v2309.897, v2310.898, v2311.899, v2314.902, v2317.903, v2319.906, v2322.909, v2324.910] [FART -i -r "\\wvuhs.com\files\callminer\orecx_TempMoved\*.xml" "<filename>/" "<filename>"] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:39:49Z, 2025-08-17T06:09:49Z, 2025-08-17T06:39:49Z, 2025-08-17T07:09:50Z, 2025-08-17T07:39:46Z, 2025-08-17T08:09:49Z, 2025-08-17T08:39:59Z, 2025-08-17T09:09:48Z, 2025-08-17T10:09:47Z, 2025-08-17T10:39:50Z, 2025-08-17T11:09:47Z, 2025-08-17T11:39:49Z, 2025-08-17T12:09:49Z, 2025-08-17T12:39:50Z, 2025-08-17T13:09:47Z, 2025-08-17T13:39:48Z, 2025-08-17T14:09:50Z, 2025-08-17T14:39:49Z, 2025-08-17T15:09:49Z, 2025-08-17T15:39:49Z, 2025-08-17T16:09:50Z, 2025-08-17T16:39:48Z, 2025-08-17T17:09:48Z, 2025-08-17T17:39:49Z, 2025-08-17T18:09:49Z, 2025-08-17T18:39:49Z, 2025-08-17T19:09:50Z, 2025-08-17T19:39:50Z, 2025-08-17T20:09:50Z, 2025-08-17T20:39:48Z, 2025-08-17T21:09:50Z, 2025-08-17T21:39:49Z, 2025-08-17T22:09:51Z, 2025-08-17T22:39:50Z, 2025-08-17T23:09:47Z, 2025-08-17T23:39:50Z, 2025-08-18T00:09:47Z, 2025-08-18T00:39:49Z, 2025-08-18T01:09:50Z, 2025-08-18T01:39:49Z, 2025-08-18T02:09:50Z, 2025-08-18T02:39:47Z, 2025-08-18T03:09:49Z, 2025-08-18T03:39:50Z, 2025-08-18T04:09:48Z, 2025-08-18T04:39:48Z, 2025-08-18T05:09:48Z, 2025-08-18T05:39:50Z, 2025-08-18T06:09:49Z, 2025-08-18T07:09:49Z, 2025-08-18T07:39:49Z, 2025-08-18T08:09:50Z, 2025-08-18T08:39:50Z, 2025-08-18T09:09:50Z, 2025-08-18T09:39:51Z, 2025-08-18T10:09:50Z, 2025-08-18T10:39:47Z, 2025-08-18T11:09:48Z, 2025-08-18T11:39:53Z, 2025-08-18T12:09:54Z, 2025-08-18T12:39:56Z, 2025-08-18T13:09:59Z, 2025-08-18T13:40:01Z, 2025-08-18T14:09:59Z, 2025-08-18T14:40:00Z, 2025-08-18T15:09:59Z, 2025-08-18T15:39:57Z, 2025-08-18T16:09:55Z, 2025-08-18T16:39:56Z, 2025-08-18T17:09:54Z, 2025-08-18T17:39:59Z, 2025-08-18T18:09:59Z, 2025-08-18T18:40:01Z, 2025-08-18T19:09:59Z, 2025-08-18T19:39:57Z, 2025-08-18T20:09:59Z, 2025-08-18T20:39:57Z, 2025-08-18T21:09:54Z, 2025-08-18T21:39:51Z, 2025-08-18T22:09:50Z, 2025-08-18T22:39:48Z, 2025-08-18T23:09:51Z, 2025-08-18T23:39:51Z, 2025-08-19T00:10:00Z, 2025-08-19T00:39:52Z, 2025-08-19T01:09:49Z, 2025-08-19T01:39:50Z, 2025-08-19T02:09:48Z, 2025-08-19T02:39:49Z, 2025-08-19T03:09:50Z, 2025-08-19T03:39:49Z, 2025-08-19T04:09:50Z, 2025-08-19T04:39:49Z, 2025-08-19T05:09:51Z, 2025-08-19T05:39:50Z, 2025-08-19T06:39:50Z, 2025-08-19T07:09:49Z, 2025-08-19T08:09:50Z, 2025-08-19T08:39:50Z, 2025-08-19T09:09:50Z, ...] [25936f3ce854af30d298199102a845a1] [f6e0452325d7d325d802fbb1aa367cec50c37a03] [6b0ae9f033be6801c9316787e7593bf9fd5c92d7d4f89b93a75afa93060a3985a5c6b36bf91a19b1725922fbd80f173d] [98fcb3a19f7eab55122d9657e4616146136a1039bb896689a0d39289a9ed7808122d27c5e31cce3df05960692156fe2223d5ea2c01fddae1cbf1c3ed497349d5] [172.17.20.9] [172.17.20.9] 1 Success fart.exe E:\OrecX_Export\ 69660 25936f3ce854af30d298199102a845a1 Not Signed 2023-04-06 17:10:54 +0000 UTC 2023-04-06 12:05:53 +0000 UTC f6e0452325d7d325d802fbb1aa367cec50c37a03 6b0ae9f033be6801c9316787e7593bf9fd5c92d7d4f89b93a75afa93060a3985a5c6b36bf91a19b1725922fbd80f173d 98fcb3a19f7eab55122d9657e4616146136a1039bb896689a0d39289a9ed7808122d27c5e31cce3df05960692156fe2223d5ea2c01fddae1cbf1c3ed497349d5 2025-07-15 15:10:02 +0000 UTC None None 2025-06-13 21:35:10 +0000 UTC 72 1 KNOWN 0 Benign 0.20 2025-07-15 15:11:24.988 +0000 UTC
c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b [68a4f26f8c32b5989becd6c8, 68a4fcd0011d94a251a4ef40] [2] [ReevesJoe, CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\InstallOptions.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\InstallOptions.dll] [Servers] [Servers Audit] [v2284.877, v2284] [] [Not Signed] [C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe] [C:\Program Files\TAP-Windows\Uninstall.exe] [2025-08-19T21:53:45Z, 2025-08-19T22:13:50Z] [325b008aec81e5aaa57096f05d4212b5] [27a2d89747a20305b6518438eff5b9f57f7df5c3] [b8c14c65edc79a4a1805d1d881466b30dcdaab52aa95d0567f32431ba7becf85823cbb0f39d9b3e84cdd67247fcf97eb] [18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf] [172.17.23.18] [172.17.23.18] 1 Success InstallOptions.dll C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\ 14848 325b008aec81e5aaa57096f05d4212b5 Not Signed 2025-07-01 11:54:09 +0000 UTC 2025-07-01 11:54:09 +0000 UTC 27a2d89747a20305b6518438eff5b9f57f7df5c3 b8c14c65edc79a4a1805d1d881466b30dcdaab52aa95d0567f32431ba7becf85823cbb0f39d9b3e84cdd67247fcf97eb 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf 2025-07-01 11:54:21 +0000 UTC None None 2025-06-08 03:47:14 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-01 11:55:24.484 +0000 UTC
c9cc6face476f8d775daa32503e747868b65a73ee9eb306cf78c86c767ad09bb [68a5e788692da313f892a122, 68a5f7f47c4424bb71e0a54b, 68a614164c5f9631798f265a] [2] [SYSTEM] [u-nviewpoint01] [NT AUTHORITY] [C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\cp.dll] [Servers] [Servers Audit] [v2299.891, v2306.895, v2307.897] [] [Bomgar Corporation] [C:\Windows\System32\LogonUI.exe] [C:\Windows\System32\winlogon.exe] [2025-08-20T15:09:54Z, 2025-08-20T16:19:41Z, 2025-08-20T18:26:45Z] [8d45b8ff739f914564f869bb37d05386] [558f84d716b9a8e3de2ef25cef42c936315ba190] [8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293] [d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39] [172.25.17.210] [172.25.17.210] 1 Success cp.dll C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\ ACH Credential Provider 1185872 8d45b8ff739f914564f869bb37d05386 Automated Credential Handling 24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) Bomgar Corporation 2025-07-23 17:47:09 +0000 UTC 2025-07-23 17:47:09 +0000 UTC 558f84d716b9a8e3de2ef25cef42c936315ba190 8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293 d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39 2025-07-23 17:47:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c9963a3f8abf6fedc8f983a9655a387d67c752bd59b0d16fd6fc2396b4b4ca67 [68a4e8a1ad898641af98fd99, 68a4e9b3061a87dd106e473f, 68a4f315247c4b5c9ccb9235, 68a4fcd0011d94a251a4ef35, 68a4fcd0011d94a251a4ef3f] [2] [CA_gs10109, ReevesJoe] [i-ncapsule12] [WVUHS] [C:\Program Files\TAP-Windows\bin\tapinstall.exe] [Servers] [Servers Audit] [v2283, v2284.877, v2284] ["C:\Program Files\TAP-Windows\bin\tapinstall.exe" hwids tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" install "C:\Program Files\TAP-Windows\driver\OemVista.inf" tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" remove tap0901] [OpenVPN Technologies, Inc.] [C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe] [C:\Windows\Installer\MSIED82.tmp, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Windows\Installer\MSI50B.tmp, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe] [2025-08-19T21:11:56Z, 2025-08-19T21:11:57Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z] [d10f74d86cd350732657f542df533f82] [c54074f8f162a780819175e7169c43f6706ad46c] [0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855] [0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e] [172.17.23.18] [172.17.23.18] 1 Success tapinstall.exe C:\Program Files\TAP-Windows\bin\ Windows Setup API 92304 d10f74d86cd350732657f542df533f82 Windows (R) Win 7 DDK driver 6.1.7600.16385 OpenVPN Technologies, Inc. 2016-04-21 11:34:12 +0000 UTC 2016-04-21 11:34:12 +0000 UTC c54074f8f162a780819175e7169c43f6706ad46c 0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855 0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e 2025-08-19 21:12:01 +0000 UTC None None 2025-08-18 12:31:35 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
c9448c282682d6dcd44a45c57f7e86467ab4d1b9c2810d14ec339bee64373cfe [68a558192779d54c7ac75dd5] [2] [SYSTEM] [I-NCTXSA-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t2efjwra.hhh.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:07:34Z] [] [] [] [] [172.17.188.22] [172.17.188.22] 1 Success __PSScriptPolicyTest_t2efjwra.hhh.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:07:34 +0000 UTC 2025-08-20 05:07:34 +0000 UTC 2025-08-20 05:07:37 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c93a02f29261eb3cd4a6ea20651aa00d111b39dbd8fac6f9bc6bbab25e805335 [68a2c44535b1d4ea68c6ff9a] [2] [SYSTEM] [i-nctxsf-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_cxplm4ri.gl2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T06:12:08Z] [] [] [] [] [172.17.146.22] [172.17.146.22] 1 Success __PSScriptPolicyTest_cxplm4ri.gl2.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 06:12:08 +0000 UTC 2025-08-18 06:12:08 +0000 UTC 2025-08-18 06:12:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c8ed615889a62d7957c4ea44b0d1d290b9f308c88edabac325526957259d7f14 [68a472b1b022648922e2358f] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-1.2.13.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [52169b4a318e3246483f39f62b84b948] [8b1b85d04eea979c33109ea42808b7d3f6d355ab] [ec69e3071705a77a9e8c88abd39f2f061b7370153dcd3c03586703b6b7fa00524c9f42137feff7cee2ee30bd22114814] [3fb663e1507e87680001ae678ed46d58cb4386bad363c3f07ff941a636da8599c4d4c9f9eb8e0128140a5d692dbaeaa31bf863e8c4a406ed9232b3a69090be4b] [172.17.23.146] [172.17.23.146] 1 Success log4j-1.2.13.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 358180 52169b4a318e3246483f39f62b84b948 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 8b1b85d04eea979c33109ea42808b7d3f6d355ab ec69e3071705a77a9e8c88abd39f2f061b7370153dcd3c03586703b6b7fa00524c9f42137feff7cee2ee30bd22114814 3fb663e1507e87680001ae678ed46d58cb4386bad363c3f07ff941a636da8599c4d4c9f9eb8e0128140a5d692dbaeaa31bf863e8c4a406ed9232b3a69090be4b 2025-03-28 16:04:26 +0000 UTC None None 2025-03-10 06:43:15 +0000 UTC 64 0 KNOWN 0 Microsoft attested file 2025-04-11 01:37:57.011 +0000 UTC
c8e0699e1ad7ef4335945a3df4a6b09fb48c4d6664c52528ef1b438a3f191dbc [68a5239e621d09b2b1ed5e49] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringGUI.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:33Z] [fdb5557de080a49af4fe2d6f23075dce] [593450197694057604548da9fe073096fe4fb5dc] [d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5] [dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32] [172.17.22.40] [172.17.22.40] 1 Success MonitoringGUI.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ GUI 125952 fdb5557de080a49af4fe2d6f23075dce GUI 1.0.0.0 Not Signed 2023-06-15 02:38:20 +0000 UTC 2023-06-15 02:38:20 +0000 UTC 593450197694057604548da9fe073096fe4fb5dc d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5 dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c8d41b93bca9f8a77314a18fb5484ae1f408f2ac6257a70a502fc1bb03104ae1 [68a4e94b8258ccd0ca80c68c, 68a4ec0d73c037b116f16924, 68a4f0bd96d8259b6fb14198, 68a4fcd0011d94a251a4ef3a, 68a4fcd0011d94a251a4ef45, 68a4fcd0011d94a251a4ef47] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\UpgradeOpenVpn.bat] [Servers] [Servers Audit] [v2283, v2284.877, v2284] [] [Not Signed] [C:\Windows\SysWOW64\cmd.exe] [C:\Users\CA_GS1~1\AppData\Local\Temp\2\{6D2A95DD-7878-4173-A054-2C5C8E3A05BA}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{F27E6C83-3351-4D92-A677-9892A6651C41}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{2D0EBECB-0573-490E-BE9B-5F2DF93F480D}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{D464CC00-C9E1-418A-9BDB-FEE337D77CB0}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{4E1205BB-A26B-4AD2-B6F7-7F2CCF9E40F7}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe] [2025-08-19T21:14:48Z, 2025-08-19T21:19:32Z, 2025-08-19T21:41:39Z, 2025-08-19T22:11:25Z, 2025-08-19T22:18:26Z, 2025-08-19T22:27:20Z] [2a4056367ecab3c800d65cbf14391e32] [7d553db7049d990e5eddc5b68e2dfdf9c374bb2b] [178e2319fe404f0862bc43f8303d7fb29f02926ea0df12f73dd0f8276447f844b0da8f977d84beb95881781d57b6189f] [704fed8e9024340b2344c914452b81d396045de471c4a07445ca8c7e54a8b2c033b7e4c7052729c1118199335c441dde314aa3d057950e219fd0e4ed6c9d28b8] [172.17.23.18] [172.17.23.18] 1 Success UpgradeOpenVpn.bat C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\ 5921 2a4056367ecab3c800d65cbf14391e32 Not Signed 2024-11-12 21:43:14 +0000 UTC 2024-11-12 21:43:14 +0000 UTC 7d553db7049d990e5eddc5b68e2dfdf9c374bb2b 178e2319fe404f0862bc43f8303d7fb29f02926ea0df12f73dd0f8276447f844b0da8f977d84beb95881781d57b6189f 704fed8e9024340b2344c914452b81d396045de471c4a07445ca8c7e54a8b2c033b7e4c7052729c1118199335c441dde314aa3d057950e219fd0e4ed6c9d28b8 2025-08-19 21:14:51 +0000 UTC None None 2024-12-05 13:26:47 +0000 UTC 62 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
c826e8208f2d2a00b4b3b99d67e4e058607f19a4ed623b7b0d541f3b6d51ab05 [68a3146b5f0c41860c8c84fe, 68a3146b5f0c41860c8c8531] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\copyreg.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [2e6e1613760385356bd6e3679ca43aef] [61aee40c895eb5ae249aec746a1e337d43ec0537] [cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e] [b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447] [172.17.252.131] [172.17.252.131] 1 Success copyreg.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 7544 2e6e1613760385356bd6e3679ca43aef Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 61aee40c895eb5ae249aec746a1e337d43ec0537 cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c7d8756c30a879fe1f41d094bac39382e5437a03d911dcbcc4b903d3eb2e7373 [68a48674c4cb2500be692615, 68a48674c4cb2500be69262b] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.BusinessLogic.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z] [d27f531fe42e94037f1d13cbfb5e81ed] [0972769cb0b0517846d9181e89115cacd8f530b9] [79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86] [bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75] [172.17.252.226] [172.17.252.226] 1 Success StrykerIOTAPI.BusinessLogic.dll C:\Stryker\iBed Server Application\Stryker.IOT\ StrykerIOTAPI.BusinessLogic 39176 d27f531fe42e94037f1d13cbfb5e81ed StrykerIOTAPI.BusinessLogic 1.0.0 Stryker Corporation 2023-03-16 10:22:38 +0000 UTC 2024-02-15 18:02:05 +0000 UTC 0972769cb0b0517846d9181e89115cacd8f530b9 79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86 bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
c7cdeeed98e9230cb209e6a27aa4ee323544b37bef6d60f6a25a2b380d96c500 [68a5c81947601aee5f76e916, 68a5c9d7599432010e418bcd] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\ltkrn12n.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\regsvr32.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe] [2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z] [93edb390937aa43ef7a47a1dd5e210e4] [887041d2e285cc18a7b0752df43262962c689f8d] [3509b9f8415277dfb439fa20f0ff0669027eb23e0ca546b4ccd1e30a9c96d4824762d24b5cb31c859db4041456e51c6b] [244cccac2e0f05f30dc0357a3ad64530bbf69a65e668c715942f592c0e2eda8dae8140ebf2502efc653a064cb93e9351105212531332345a085f6a372eea53bf] [172.17.20.104] [172.17.20.104] 1 Success ltkrn12n.dll E:\QS1\ LEADTOOLS(r) DLL for Win32 782848 93edb390937aa43ef7a47a1dd5e210e4 LEADTOOLS(r) DLL for Win32 12.1.0.020 Not Signed 2025-04-14 13:01:48 +0000 UTC 2001-05-01 18:25:40 +0000 UTC 887041d2e285cc18a7b0752df43262962c689f8d 3509b9f8415277dfb439fa20f0ff0669027eb23e0ca546b4ccd1e30a9c96d4824762d24b5cb31c859db4041456e51c6b 244cccac2e0f05f30dc0357a3ad64530bbf69a65e668c715942f592c0e2eda8dae8140ebf2502efc653a064cb93e9351105212531332345a085f6a372eea53bf 2025-07-17 16:15:32 +0000 UTC None None 2017-10-12 12:33:16 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-07-17 16:17:46.576 +0000 UTC
c79f55277315bf61dcf751ced6a62eda0a6fc7513fe52797360e6f5977f1707f [68a306a5ba5832f49fe9cf4e] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMA2.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [d8eacc58fcaf01c75bb860b492388043] [076b4e75fea44dedceded8900e3d8c7c1561e5cd] [3c04c1751df27531a5be1ee49eb8fb36dc2ce3e0fd86109df5eae00a937fd608ce16c40e1844424efcaf0079057ea3dc] [5a4df1da6242edd1cd2154c8de3ab47a65558c146ef7293551f20a92f3f192f8053fdfea5f6c16ee9974aadb1d345fd4a499bdcc74aa46c874044a2209b3554d] [172.17.146.33] [172.17.146.33] 1 Success SCHEMA2.BPL C:\DICORP\DICORP_V5\RW\APPS\ 28160 d8eacc58fcaf01c75bb860b492388043 1.0.0.0 Not Signed 2022-07-06 14:52:35 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 076b4e75fea44dedceded8900e3d8c7c1561e5cd 3c04c1751df27531a5be1ee49eb8fb36dc2ce3e0fd86109df5eae00a937fd608ce16c40e1844424efcaf0079057ea3dc 5a4df1da6242edd1cd2154c8de3ab47a65558c146ef7293551f20a92f3f192f8053fdfea5f6c16ee9974aadb1d345fd4a499bdcc74aa46c874044a2209b3554d 2025-04-30 20:02:53 +0000 UTC None None 2016-12-19 17:09:58 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
cdcb9886eec269fe986be220ddc0a58d7cd307bdf3ecc1f48390b918bd56101d [68a24655c6a8e4430722eaf8] [2] [SYSTEM] [i-nCtx-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_ewmsmzj2.prq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:14:55Z] [] [] [] [] [172.17.146.9] [172.17.146.9] 1 Success __PSScriptPolicyTest_ewmsmzj2.prq.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:14:55 +0000 UTC 2025-08-17 21:14:55 +0000 UTC 2025-08-17 21:15:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cd79a7570ed7d959919f8e7ceee95df75e07349692c2bbab9929ab608099ff36 [68a4c29edcf2a23051e711be] [2] [lindseye] [i-HNOCnoc] [WVUHS] [C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\Interop.Taskschd.dll] [Servers] [Servers Audit] [v2283.876] [] [Solarwinds Worldwide, LLC] [C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ScpServerTray.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T18:21:29Z] [fec0d051646249d6e0b962e8af2bf997] [d50af831c045c754b457eee80d0b4087d8a91d9a] [e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d] [35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b] [172.18.0.16] [172.18.0.16] 1 Success Interop.Taskschd.dll C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ 61272 fec0d051646249d6e0b962e8af2bf997 Solarwinds Worldwide, LLC 2023-08-07 15:09:26 +0000 UTC 2023-08-07 15:09:26 +0000 UTC d50af831c045c754b457eee80d0b4087d8a91d9a e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d 35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b 2025-05-20 13:40:01 +0000 UTC None None 2023-11-24 14:44:41 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-05-20 13:41:46.619 +0000 UTC
cd34acbad5993e309d24cffa925af6e5cb8e08a0c5b4a401dc8df4d306212be4 [68a16bd60756fe54a9918f9a, 68a2149cb58debea69d7c744, 68a2bd5ff793a9057f329bff, 68a3663261f8067c48423eb1, 68a40efceddb3a9f1a71a5fc, 68a4b7cd36bc5d38057e235f] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zContext.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [f58a3055af8d49f2bed351e9eeb27d79] [a6df905855b434565f04c548ba5f7fbc22452446] [e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6] [34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427] [10.20.20.68] [10.20.20.68] 1 Success zContext.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 53048 f58a3055af8d49f2bed351e9eeb27d79 Zoom 1,0,0,0 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC a6df905855b434565f04c548ba5f7fbc22452446 e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6 34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 05:58:23 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
cd2b03a835ed9cfdfa700e76fea8101d80de47b79dce14e63cd16afadfafc226 [68a717f82c01dbda38bdd3d8] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\BootstrapperCore.dll] [Servers] [Servers Audit] [v2319.906] [] [Not Signed] [C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe] [C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe] [2025-08-21T12:58:30Z] [7ae2481f6444721ee433edb5f396fb28] [cabb4816b2ccc3f0a92e3a91ec6ddfe1951e3419] [f1f3d5f2bc8fb59a1943eedb3497ebe8d664348375d8144298564796d42d2908537d53c002c05594481bdb5a648457c5] [9c606889b1091babd2469ff53294d03bef3a9fcb55dc414bb730f129be40361c4a1f4d0610fc4ab16ed3479d704a4e46ef9118ebf29957bf6049686effada5c1] [172.17.37.230] [172.17.36.114] 1 Success BootstrapperCore.dll C:\Users\Juggernaut\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\ Managed Bootstrapper Application (WiX) 77824 7ae2481f6444721ee433edb5f396fb28 Windows Installer XML 3.7.3517.0 Not Signed 2014-11-17 15:38:04 +0000 UTC 2014-11-17 15:38:04 +0000 UTC cabb4816b2ccc3f0a92e3a91ec6ddfe1951e3419 f1f3d5f2bc8fb59a1943eedb3497ebe8d664348375d8144298564796d42d2908537d53c002c05594481bdb5a648457c5 9c606889b1091babd2469ff53294d03bef3a9fcb55dc414bb730f129be40361c4a1f4d0610fc4ab16ed3479d704a4e46ef9118ebf29957bf6049686effada5c1 2025-06-25 18:05:20 +0000 UTC None None 2025-03-24 07:04:14 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-06-24 22:47:06.637 +0000 UTC
ccfd4b0b29921797227890e20977974f0fe6926fb9f986a398ed037177b6857b [68a375ce012e144044008db2] [2] [ellisonmea] [I-CAJump] [WVUHS] [C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\tmpEXO_panxtvgi.v0r.psm1] [Servers] [Servers Audit] [v2264.862] [] [Not Signed] [C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T18:49:45Z] [689e2c4d14099359d012d5e70e628648] [d263ae2c2def641b81fa637242f6d8fc9e91210e] [bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30] [baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_panxtvgi.v0r.psm1 C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\ 2308296 689e2c4d14099359d012d5e70e628648 Not Signed 2025-08-18 18:49:44 +0000 UTC 2025-08-18 18:49:44 +0000 UTC d263ae2c2def641b81fa637242f6d8fc9e91210e bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30 baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be 2025-08-18 18:49:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cce7f425a62f12d67abc77f70988d9a7d3825fea909f25f1bab56920c1547a13 [68a523a99ba7c92b34976f98] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViews.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:42Z] [348f84ac608fd0a3180668c30900baba] [0503248ce5fe744f1ee7cfad7988b298938e0be5] [bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6] [ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4] [172.17.22.40] [172.17.22.40] 1 Success SystemManagerViews.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ SystemManagerViews 1011712 348f84ac608fd0a3180668c30900baba SystemManagerViews 1.0.0.0 Not Signed 2023-06-15 02:37:52 +0000 UTC 2023-06-15 02:37:52 +0000 UTC 0503248ce5fe744f1ee7cfad7988b298938e0be5 bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6 ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4 2025-08-20 01:23:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ccb32d4642faabe002c701e6be6e3b163a048083828be362348f794b0f9747a5 [68a5caae25c43d3642b34826, 68a5ccf2ddfdba423e48862c] [2] [CA_Jnt_Talis1] [VM-TalisWave] [WVUHS] [C:\Talis\Atlas\temp\InstallSqlExpress.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\explorer.exe, C:\Windows\System32\svchost.exe] [2025-08-20T13:16:21Z, 2025-08-20T13:17:20Z] [81440bc342bcb6afe5f64e770c1dbc77] [6686557cf11cb209763c41f954d1cf9a8a700aa3] [3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41] [21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5] [172.17.252.194] [172.17.252.194] 1 Success InstallSqlExpress.ps1 C:\Talis\Atlas\temp\ 833 81440bc342bcb6afe5f64e770c1dbc77 Not Signed 2025-08-20 13:08:55 +0000 UTC 2025-08-20 13:08:55 +0000 UTC 6686557cf11cb209763c41f954d1cf9a8a700aa3 3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41 21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5 2025-08-20 13:16:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ccaaa857b6cabca57de07fc67d6069f2737c0bb306e8323748e7d0c76258769e [68a5c90aab7f84c2d5a0971e] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\InstallMsiDll.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe] [C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe] [2025-08-20T13:09:27Z] [7ee2f66086cad162ba1a7691506356da] [1da4fbe65d54db4288abf9aaf7fe39e50b93c8d1] [262cc27152b25c394be75ce943caef844a6a5f9930000ca8dae2cebbcb774f05c89a6aa9c89c41da911bd12d9e865508] [18ff56640dc8e3fcf18f552aa26a4010d76cf9b3caa10567008ec23e62b6024d6d41f23453847e3d07020652058c58abfe01645c296d3acc9c631ebf77218a50] [172.17.20.104] [172.17.20.104] 1 Success InstallMsiDll.dll C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\ Installer GUI 1954304 7ee2f66086cad162ba1a7691506356da Installer GUI 1.0.10.0 Not Signed 2025-08-20 13:09:26 +0000 UTC 2015-02-09 09:55:40 +0000 UTC 1da4fbe65d54db4288abf9aaf7fe39e50b93c8d1 262cc27152b25c394be75ce943caef844a6a5f9930000ca8dae2cebbcb774f05c89a6aa9c89c41da911bd12d9e865508 18ff56640dc8e3fcf18f552aa26a4010d76cf9b3caa10567008ec23e62b6024d6d41f23453847e3d07020652058c58abfe01645c296d3acc9c631ebf77218a50 2025-08-20 13:09:30 +0000 UTC None None 2025-06-11 15:46:14 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 13:10:54.011 +0000 UTC
cc0de569518a5cd1c48e39444315deec0532cd42eb60b5d146e040515dd1c085 [68a472b1b022648922e235ab] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\vsphere-sdk-6.0-SNAPSHOT.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [63b3f9bc3cccd5b300ca3c3dcfc8db16] [7a5b2e852df2953351249e50893cbd3004a77af8] [ca2d02757b987c2c9cd3f20b726ec187c9285b22c54f7ea415f70e5893515d48b7bdfa36c853110e4f861e9341d449bd] [7430a47394dd399fc18860894ad3f9bd641be00ce8b3014a7142a07feb7f04ab86dcb24c114a91f175c16a100287fdba013730aa5bd5d1bfef569b576f6f4ff3] [172.17.23.146] [172.17.23.146] 1 Success vsphere-sdk-6.0-SNAPSHOT.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 7688666 63b3f9bc3cccd5b300ca3c3dcfc8db16 Not Signed 2021-12-22 05:20:56 +0000 UTC 2021-12-22 05:20:56 +0000 UTC 7a5b2e852df2953351249e50893cbd3004a77af8 ca2d02757b987c2c9cd3f20b726ec187c9285b22c54f7ea415f70e5893515d48b7bdfa36c853110e4f861e9341d449bd 7430a47394dd399fc18860894ad3f9bd641be00ce8b3014a7142a07feb7f04ab86dcb24c114a91f175c16a100287fdba013730aa5bd5d1bfef569b576f6f4ff3 2025-03-28 16:04:36 +0000 UTC None None 2022-03-17 18:11:52 +0000 UTC 57 1 KNOWN 0 Benign 0.10 2025-04-11 01:37:57.011 +0000 UTC
cbe345399a7a40adc97084ceb3b564b8954687f82c1ff70e9ce060535e914c87 [68a311cdc2d0d6e3eb77f20e] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Get-Sidhistory.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [20ba5446b5e3742b0af6bf5e74c11c45] [1e0cd7d9ccc008749c121260de20c255f1dd168b] [a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281] [5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668] [172.25.17.86] [172.25.17.86] 1 Success Get-Sidhistory.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 213 20ba5446b5e3742b0af6bf5e74c11c45 Not Signed 2022-05-24 18:19:40 +0000 UTC 2022-06-10 20:28:02 +0000 UTC 1e0cd7d9ccc008749c121260de20c255f1dd168b a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281 5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cbce83feb3a1075e711a778264441ec9227105e1a9573289de7d59af2cf388ff [68a5239e621d09b2b1ed5e5c] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShortcutbarMechanism.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [314aa989c3340e2e4a88551949eec9f2] [31bad1d1e4e96b06cf2f126a4e62be93446004da] [f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252] [7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8] [172.17.22.40] [172.17.22.40] 1 Success ShortcutbarMechanism.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 12288 314aa989c3340e2e4a88551949eec9f2 1.0.8565.40750 Not Signed 2023-06-15 02:38:22 +0000 UTC 2023-06-15 02:38:22 +0000 UTC 31bad1d1e4e96b06cf2f126a4e62be93446004da f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252 7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cbc1e9a027df224d6182596062ef744f07095fa259aef053f60330fdb55f44a1 [68a3146b5f0c41860c8c84f9, 68a3146b5f0c41860c8c8527] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\enum.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z] [b3d34b7698ce20e327b55db5543aa834] [9ac116d05a984aff49961679e499920ef973f32f] [a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066] [602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c] [172.17.252.131] [172.17.252.131] 1 Success enum.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 84563 b3d34b7698ce20e327b55db5543aa834 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 9ac116d05a984aff49961679e499920ef973f32f a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066 602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cb91fc48deaa953fa6bc86e50101278ba472aa46d3997cf1d2f862e9d2faafc6 [68a17efae2809bffe9dd0ee5, 68a2d0803665ae20b1f78f7c, 68a42221091a6202e3d1b16e, 68a573b695791e485505569b, 68a6c64a54dcd30516737152] [2] [hyperwebsvc] [I-NCTXEHH-001] [WVUHS] [C:\HomeHealth\__SCRIPT REF Files\EpicHHEnvREF_SmartUpdate.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z, 2025-08-21T07:00:00Z] [2b4fc9419788dc26cf2e48ff48ee8d59] [d1cf90955367d76e04a1c2d0fb607bc614829af6] [9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85] [83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276] [172.17.146.25] [172.17.146.25] 1 Success EpicHHEnvREF_SmartUpdate.bat C:\HomeHealth\__SCRIPT REF Files\ 114 2b4fc9419788dc26cf2e48ff48ee8d59 Not Signed 2023-04-26 14:42:09 +0000 UTC 2025-04-17 14:44:28 +0000 UTC d1cf90955367d76e04a1c2d0fb607bc614829af6 9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85 83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276 2025-08-09 07:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cad26ec2668965b7f85ebd6a033e660553c0924e270090a3769eb7c0c6571825 [68a5c81947601aee5f76e913, 68a5c9d7599432010e418bce] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\ltfil12n.DLL] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\regsvr32.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe] [2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z] [e07f24a80e597ccbb5166def70c4dcba] [a86f707a4ad0ce4a6205759dba0e2b1770def80c] [02371c3f3160bc320f608e3090ddfdb088f6baefec78040c25e52c69daacc29736b21ad0235ef19e6ea47f9d346b7aba] [3037fe0f4e04e83b0d7bcb55ada8e786af88893f7c1868ffad31a58cf70285bb8ec46d44e42048682478bbd3cb75685a6468f6cdc70e788139238fadea625527] [172.17.20.104] [172.17.20.104] 1 Success ltfil12n.DLL E:\QS1\ LEADTOOLS(r) DLL for Win32 146944 e07f24a80e597ccbb5166def70c4dcba LEADTOOLS(r) DLL for Win32 12.1.0.020 Not Signed 2025-04-14 13:01:37 +0000 UTC 2001-05-02 14:18:38 +0000 UTC a86f707a4ad0ce4a6205759dba0e2b1770def80c 02371c3f3160bc320f608e3090ddfdb088f6baefec78040c25e52c69daacc29736b21ad0235ef19e6ea47f9d346b7aba 3037fe0f4e04e83b0d7bcb55ada8e786af88893f7c1868ffad31a58cf70285bb8ec46d44e42048682478bbd3cb75685a6468f6cdc70e788139238fadea625527 2025-07-17 16:15:22 +0000 UTC None None 2017-10-12 12:30:13 +0000 UTC 66 1 KNOWN 0 Benign 0.30 2025-07-17 16:17:46.576 +0000 UTC
caaad5beee085968aa4b7c606e87506f20d0a5fc9f86604c2f71804bea252c94 [68a4cf29dfc75d42acc2fee7] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setsite_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:23:11Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setsite_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:23:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ca9e5214526a26c1426a88c635b711362bb42e2a12bc6a37bb05b855af9b5d57 [68a5c8eceb9e7b7716dce202, 68a5ca39b5df6e9c598d9a14, 68a5ca39b5df6e9c598d9a21, 68a5ccf2ddfdba423e488637, 68a5ccf2ddfdba423e488645, 68a5ccf2ddfdba423e488653, 68a5ccf2ddfdba423e488660, 68a5ccf2ddfdba423e48866d, 68a5ccf2ddfdba423e48867a, 68a5ccf2ddfdba423e488687, 68a5ccf2ddfdba423e488694] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\OutFunctions.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z] [419d17d2343c1cd0219b5546b4fa27a2] [de59feb5cc4ceaa0f1bec035647c9fb89348e274] [22f8877efd87ac3467ba533663c9b26f4f82ee5729a734d71e2a94cb5dfa71ee7781c624c3d0013c1aa9c536428d8d06] [e81a572144d180a72d272ddd1171db17bd99968945542993bffec7969ed9c4720ce9068cb945ad32d7c4b28c3d124a218280e6a42d2ee558158c46389ebcc075] [172.17.252.194] [172.17.252.194] 1 Success OutFunctions.ps1 C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\ 3386 419d17d2343c1cd0219b5546b4fa27a2 Not Signed 2024-07-08 16:27:53 +0000 UTC 2024-06-18 17:58:02 +0000 UTC de59feb5cc4ceaa0f1bec035647c9fb89348e274 22f8877efd87ac3467ba533663c9b26f4f82ee5729a734d71e2a94cb5dfa71ee7781c624c3d0013c1aa9c536428d8d06 e81a572144d180a72d272ddd1171db17bd99968945542993bffec7969ed9c4720ce9068cb945ad32d7c4b28c3d124a218280e6a42d2ee558158c46389ebcc075 2025-04-16 18:42:30 +0000 UTC None None 2024-08-08 19:43:02 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-04-16 18:46:05.968 +0000 UTC
d1acae5721d973102e9a1430bbe56065a631fbe6a593d3abdcbd6aad31da26df [68a664031c5215248b78c9c0, 68a66656590bb14aa89a1bd7] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Local\Temp\4\rm.bat] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-B495E4A3-062F-4A9F-8DF6-D5625677E07B\CitrixReceiverUpdater.exe, C:\Windows\SysWOW64\cmd.exe] [C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe, C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-B495E4A3-062F-4A9F-8DF6-D5625677E07B\CitrixReceiverUpdater.exe] [2025-08-21T00:07:08Z, 2025-08-21T00:07:09Z] [de13e0378bbe3e7dfd33a89369348869] [a5a218611db4f765b2cd7d8df8f9e07e0e83c79b] [07c47ed04069c396643587c281b9a7bd3614a675ac57d538be798bd25108393ff965baa0c63cef6a7525e5366d2f6e13] [cff762a61ff12c74ea86926c1f2be55e5b0bbf2bbba95bcc9179c5b13c439e1c6365bfe1883a5660d3600cf369b6fbbc342acee17e3cfa419ff457c175aed06a] [10.20.20.68] [10.20.20.68] 1 Success rm.bat C:\Users\teknicor\AppData\Local\Temp\4\ 7357 de13e0378bbe3e7dfd33a89369348869 Not Signed 2025-08-21 00:07:08 +0000 UTC 2025-08-21 00:07:08 +0000 UTC a5a218611db4f765b2cd7d8df8f9e07e0e83c79b 07c47ed04069c396643587c281b9a7bd3614a675ac57d538be798bd25108393ff965baa0c63cef6a7525e5366d2f6e13 cff762a61ff12c74ea86926c1f2be55e5b0bbf2bbba95bcc9179c5b13c439e1c6365bfe1883a5660d3600cf369b6fbbc342acee17e3cfa419ff457c175aed06a 2025-08-21 00:10:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d1a2e822a1ea07df47bc922137f71f102d160466cabe022f2deea5317148a526 [68a3146b5f0c41860c8c8551, 68a3146b5f0c41860c8c8577] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\_colorize.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [b7b78adc50cac8e240a21e27725b637a] [a53749b2d528d575041644b00e9efe548bcf3000] [43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0] [0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3] [172.17.252.131] [172.17.252.131] 1 Success _colorize.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 2722 b7b78adc50cac8e240a21e27725b637a Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC a53749b2d528d575041644b00e9efe548bcf3000 43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0 0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d12bcbcfaed5f8dd7b8132ab68424aa19f72d76766fe3ae6db7b001a14c1daae [68a472b1b022648922e23578] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFsWebClient-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:40Z] [ba1d224efe62ee4724541e4d1a64b00e] [8e7b7215b40daffc0cf08f861c7dc8ed4633d86e] [33fd790b7b9f9bb5c534da48019ab9f11d4e0ec829104b31511d4e14103cb5488762bd6e69bf9496df7c84540a193c6b] [389f7f0c7c5a7bc0c44874b317fc4386bff95adca78630b88f3e8677a26216b93d860bce2404c663a8804ce5462b246c087b4c45065b6027356920b52b186eb1] [172.17.23.146] [172.17.23.146] 1 Success FluidFsWebClient-20.1.2.14.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 13999 ba1d224efe62ee4724541e4d1a64b00e Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 8e7b7215b40daffc0cf08f861c7dc8ed4633d86e 33fd790b7b9f9bb5c534da48019ab9f11d4e0ec829104b31511d4e14103cb5488762bd6e69bf9496df7c84540a193c6b 389f7f0c7c5a7bc0c44874b317fc4386bff95adca78630b88f3e8677a26216b93d860bce2404c663a8804ce5462b246c087b4c45065b6027356920b52b186eb1 2025-08-19 11:29:31 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
d095c35b7eefd84a40162c8fd75586439afdf8d43f8194e076806d6ba1d80ea8 [68a48674c4cb2500be692640] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Business.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z] [1282e0d899b8c6c77293157e628f8fe9] [b1bc26f40ef3caf7a21eb88d27f9a8041234c646] [17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4] [fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Clinical.Business.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Stryker.iBedServer.Clinical.Business 15360 1282e0d899b8c6c77293157e628f8fe9 Stryker.iBedServer.Clinical.Business 1.0.0 Not Signed 2023-03-16 10:22:30 +0000 UTC 2023-03-16 10:22:30 +0000 UTC b1bc26f40ef3caf7a21eb88d27f9a8041234c646 17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4 fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed 2025-07-15 14:08:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d070b1af61401b6ac25e9d3acc825add99084a26832db9f5f5cb23017c2148a3 [68a38065cabe22b27c6c0f7d] [2] [SYSTEM] [i-nctxddc-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4sxq3vi5.4r5.ps1] [Servers] [Servers Audit] [v2267.864] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T19:34:53Z] [] [] [] [] [172.17.146.23] [172.17.146.23] 1 Success __PSScriptPolicyTest_4sxq3vi5.4r5.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 19:34:53 +0000 UTC 2025-08-18 19:34:53 +0000 UTC 2025-08-18 19:35:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d02dde50a8ac8cff74d90ba4819f52d21b089f7add0407bfe8e41f2390d4be90 [68a523949cec397f02de9f48] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseGUI.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:26Z] [a1566f1d2da1f9413f76dc2b914f4311] [6dcf1ac94eb4a724f25d13833404c64f4a0f1f16] [fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307] [f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc] [172.17.22.40] [172.17.22.40] 1 Success BaseGUI.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ BaseGUI 62464 a1566f1d2da1f9413f76dc2b914f4311 BaseGUI 1.0.0.0 Not Signed 2023-06-15 02:37:42 +0000 UTC 2023-06-15 02:37:42 +0000 UTC 6dcf1ac94eb4a724f25d13833404c64f4a0f1f16 fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307 f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cfc7ff5198de9882b23541e72a7e55009b732822186d4e0fbe5d4de605ac2fa9 [68a606ccc8c5aba8e6424dc3, 68a62c4fe0cb7d1d0b6ef98f] [2] [NETWORK SERVICE] [u-NFP2] [NT AUTHORITY] [C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe] [Servers] [Servers Audit] [v2307.897, v2310.898] ["C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T17:27:31Z, 2025-08-20T20:05:48Z] [72c43b468c92cb9fc0aff73b9a553afc] [da0df395838297b918fa34920aed9a840c8b2c4b] [1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5] [2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee] [172.25.17.195] [172.25.17.195] 1 Success HL7TrackerService.exe C:\Program Files (x86)\FormFast\HL7TrackerService\ FormFast.FastPrint.HL7TrackerService 70656 72c43b468c92cb9fc0aff73b9a553afc FormFast.FastPrint.HL7TrackerService 23.6.0.20130 Not Signed 2023-06-20 18:25:04 +0000 UTC 2023-06-20 18:25:04 +0000 UTC da0df395838297b918fa34920aed9a840c8b2c4b 1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5 2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee 2025-07-01 15:13:40 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
cfc2a838569a48d16a15269bb701de87b81b3d2bc303bb7c4c3724cc3bba0c50 [68a523949cec397f02de9f5e] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ICSharpCode.SharpZipLib.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [0b3b4e8d1de31f844e466d61cf7937b5] [d699e5b46a14ea4d7c052e4193f85f0a4f2b29eb] [5d6bf21d1dfed9fa73e93f700e58e05712487b133134331e88dec07ff81dbfe709c5c761113aa7ef7120df9279f9ac9d] [a5e7d1f8b7d9242f213046cfe19b0e01d41fcb285072bd079a054293b6778ca78a76b3b2ec4aba8af396a7fc46d6eeb62c2df652187b77ef7f7900c130d26e12] [172.17.22.40] [172.17.22.40] 1 Success ICSharpCode.SharpZipLib.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ SharpZipLib for .NET Framework 2.0 192512 0b3b4e8d1de31f844e466d61cf7937b5 #ZipLibrary 0.85.5 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC d699e5b46a14ea4d7c052e4193f85f0a4f2b29eb 5d6bf21d1dfed9fa73e93f700e58e05712487b133134331e88dec07ff81dbfe709c5c761113aa7ef7120df9279f9ac9d a5e7d1f8b7d9242f213046cfe19b0e01d41fcb285072bd079a054293b6778ca78a76b3b2ec4aba8af396a7fc46d6eeb62c2df652187b77ef7f7900c130d26e12 2025-08-20 01:23:32 +0000 UTC None None 2025-08-14 02:01:00 +0000 UTC 55 0 KNOWN 0 Microsoft attested file 2025-08-19 07:04:27.695 +0000 UTC
cf53580ed462204e6798cf3e5b7b95b46bfd77b6bbf98a5de5659f9b08b49f86 [68a31e1752cf7ae3b21d642b] [2] [SYSTEM] [i-nCGChaSdb] [NT AUTHORITY] [C:\Program Files\Affymetrix\ChASDx\DBScripts\backup-db-dx.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T12:31:00Z] [ba9bc91d6cf75474827bdbe5cb54143a] [7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec] [4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846] [34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543] [172.17.250.114] [172.17.250.114] 1 Success backup-db-dx.bat C:\Program Files\Affymetrix\ChASDx\DBScripts\ 8176 ba9bc91d6cf75474827bdbe5cb54143a Not Signed 2024-04-16 21:08:16 +0000 UTC 2024-04-16 21:08:16 +0000 UTC 7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec 4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846 34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543 2025-08-11 12:31:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ceb41d3db82f15d6adeca195e94fab52d8dba69de261c443f0fd070b85492df3 [68a34b98a6132bf659cce5a8, 68a34df0b71eea1289980a0d] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [Servers] [Servers Audit] [v2258.855] ["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-18T15:47:07Z, 2025-08-18T15:58:02Z] [51ed6c6f3a876991868784d8285350c0] [89d12eb4b9d23a50803daba4fe898656d76a4d42] [7855a64a62b5a92bce06cf8fb0a098544fab6374ce02fe95eb208f32faacea87d4f3db6582708e72a1789794c5728fa6] [b380eb3f0ef7eef16aeacd4b1c50af3f94ee7d538559ea8e1c537684c21fb91309a4e972c7fe7f02eddb5388b7371996daa05fd31356bc0491eb183856b539df] [172.17.253.114] [172.17.253.114] 1 Success AIUniWksNET.exe C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\ Access It! 509952 51ed6c6f3a876991868784d8285350c0 Access It! 10.1.0.7 Not Signed 2023-07-25 16:11:38 +0000 UTC 2023-07-25 16:11:38 +0000 UTC 89d12eb4b9d23a50803daba4fe898656d76a4d42 7855a64a62b5a92bce06cf8fb0a098544fab6374ce02fe95eb208f32faacea87d4f3db6582708e72a1789794c5728fa6 b380eb3f0ef7eef16aeacd4b1c50af3f94ee7d538559ea8e1c537684c21fb91309a4e972c7fe7f02eddb5388b7371996daa05fd31356bc0491eb183856b539df 2025-06-09 21:58:31 +0000 UTC None None 2025-04-18 23:18:57 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
ce84c2abd2888d88b9eed0496c93a5a2ba355c1d7eca42db9bc19048c05b7261 [68a165183f1f36f01a2f3ff3, 68a2b69c8b983fbe0c82338e, 68a40846a972cb7f3cce6ebc, 68a5578d6ea23be9f4b23b72, 68a6a93bfd31eba40e58e7c9] [2] [SYSTEM] [u-vroggerb] [NT AUTHORITY] [C:\icm\pcce\lb\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z] [307a281df67046994ab424072bef8918] [ab7e9aeb72c04a2b35eb308f42b3f6fed9012698] [e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233] [a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94] [172.25.196.35] [172.25.196.35] 1 Success purgeold.bat C:\icm\pcce\lb\bin\ 406 307a281df67046994ab424072bef8918 Not Signed 2021-10-07 20:03:35 +0000 UTC 2021-10-07 20:03:35 +0000 UTC ab7e9aeb72c04a2b35eb308f42b3f6fed9012698 e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233 a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ce6a9577d1e06139cd06bc9a39a07c301700792b3afac3878301dace79349d7c [68a194caf9b0b5c55ccb01c0] [2] [SYSTEM] [nt-compass5] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uic3pfdb.jpy.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:37:27Z] [] [] [] [] [172.29.172.3] [172.29.172.3] 1 Success __PSScriptPolicyTest_uic3pfdb.jpy.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:37:27 +0000 UTC 2025-08-17 08:37:27 +0000 UTC 2025-08-17 08:37:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ce5a107dad43a4101eeb3fe84ff6d173a6d55f34f0bff725b536366f10e99410 [68a31c5575f8857a10efc135, 68a33178be8bbcffc7c0e55c] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\workday\lib\itextsharp.dll] [Servers] [Servers Audit] [v2248.849, v2255.853] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:28Z, 2025-08-18T13:51:06Z] [b31f086a89de327192a017df159084e6] [7cefee1d2d80bc40172b7c9f677d6ccd874c1077] [8b51c36269ba0543d2b4ee1aa3bc9341c43fa6d87b8ae5093d86178e2b642f7890283cfc637245e45f9beffe181ae3e3] [6fb1408dbcc0034cd8580d9a8192bc88e7a510ff42ce2b89eb270891f04d7afc4ae417631f3a5f4bf2aa6b0e165043b8e25c79092414844c56a7726f9c8650bd] [172.17.252.10] [172.17.252.10] 1 Success itextsharp.dll D:\scripts\workday\lib\ iTextSharp 2592768 b31f086a89de327192a017df159084e6 iTextSharp 5.5.13.3 Not Signed 2023-10-30 13:42:03 +0000 UTC 2022-02-24 17:50:06 +0000 UTC 7cefee1d2d80bc40172b7c9f677d6ccd874c1077 8b51c36269ba0543d2b4ee1aa3bc9341c43fa6d87b8ae5093d86178e2b642f7890283cfc637245e45f9beffe181ae3e3 6fb1408dbcc0034cd8580d9a8192bc88e7a510ff42ce2b89eb270891f04d7afc4ae417631f3a5f4bf2aa6b0e165043b8e25c79092414844c56a7726f9c8650bd 2025-07-30 13:02:09 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None 2025-03-21 23:01:27 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-07-30 12:32:47.889 +0000 UTC
ce1e0333b5608aa3bee2dba745c23ac32adc20f7928d7509aeaf494a5f53a69b [68a48674c4cb2500be692643, 68a48674c4cb2500be692651] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.Swagger.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.Swagger.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:52Z, 2025-08-19T14:08:10Z] [f3f7dcc7b2d5d547ac79d355d4d61855] [38279903274231ca76033743cae7df32e5768260] [03aefd5a330eab0b8adf00517d2dc1106434c49c7df7011ae59e65075211853418dd27af3b92fc434af78bfe9166c9bc] [ea6d67039ad08478bac39278c10acf04390c74ea13742929632c061ecebc7cd3e8aae4bfcf74231f3d00050f7d3fe07009d6879e7d68e30682e02dd9ce5de0d9] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.Swagger.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Swashbuckle.AspNetCore.Swagger 15360 f3f7dcc7b2d5d547ac79d355d4d61855 Swashbuckle.AspNetCore.Swagger 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Not Signed 2023-01-11 11:48:20 +0000 UTC 2023-01-11 11:48:20 +0000 UTC 38279903274231ca76033743cae7df32e5768260 03aefd5a330eab0b8adf00517d2dc1106434c49c7df7011ae59e65075211853418dd27af3b92fc434af78bfe9166c9bc ea6d67039ad08478bac39278c10acf04390c74ea13742929632c061ecebc7cd3e8aae4bfcf74231f3d00050f7d3fe07009d6879e7d68e30682e02dd9ce5de0d9 2025-07-15 14:08:03 +0000 UTC None None 2024-05-15 22:39:03 +0000 UTC 72 0 KNOWN 0 Benign 0.00 2025-07-15 14:11:01.183 +0000 UTC
cdf46074d14821e21128b09a9ee98fb39f61a843bcc71e0415e36bdba7fb2bf3 [68a25c735f19cff323c8f40b] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zqbn2i55.u22.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:49:18Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_zqbn2i55.u22.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:49:18 +0000 UTC 2025-08-17 22:49:18 +0000 UTC 2025-08-17 22:49:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
cdd309eaf023ea43c578ad53d4ca6881ab204851ea007d0e85d7a8df209da2be [68a472a799ad3734d804e2e1] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-extension-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [2afe6d5160f1d0b2069319009aa5d688] [e947026552361a3f6d100d92cde1ea1af8e231e4] [1c233725261008833b29613787bab06c0de096df9eaa2983f0a79619ec92df93bf544839d7cbfbdd3386aeb8bb5b4b93] [2731207029e96ab33bc80679556ac40baa9fa9b2067ab339253dbb6db1a788526bf60fde0e0223ff9de107488c229f864ce6a847c84690b278dc623bc225c970] [172.17.23.146] [172.17.23.146] 1 Success batik-extension-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 72081 2afe6d5160f1d0b2069319009aa5d688 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC e947026552361a3f6d100d92cde1ea1af8e231e4 1c233725261008833b29613787bab06c0de096df9eaa2983f0a79619ec92df93bf544839d7cbfbdd3386aeb8bb5b4b93 2731207029e96ab33bc80679556ac40baa9fa9b2067ab339253dbb6db1a788526bf60fde0e0223ff9de107488c229f864ce6a847c84690b278dc623bc225c970 2025-08-19 11:29:20 +0000 UTC None None 2024-10-11 05:23:29 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6 [68a5e788692da313f892a11f] [2] [SYSTEM] [u-nviewpoint01] [NT AUTHORITY] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe] [Servers] [Servers Audit] [v2299.891] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90] [Bomgar Corporation] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe] [C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe] [2025-08-20T15:09:52Z] [b7948c5b27f648de74db6918b1ecd775] [6f077c46d82ba1b5b44d943eb167e0e99f92464f] [289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5] [8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b] [172.25.17.210] [172.25.17.210] 1 Success launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\ Remote Support Customer Client 6610128 b7948c5b27f648de74db6918b1ecd775 Remote Support Customer Client 24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b) Bomgar Corporation 2025-07-23 17:47:07 +0000 UTC 2025-07-23 17:47:07 +0000 UTC 6f077c46d82ba1b5b44d943eb167e0e99f92464f 289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5 8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b 2025-07-23 17:47:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d6437530f4cba4030aec0cfaf564dc2f75ffee366a72651fea49297f3e4b4c9b [68a31c8cd2481b6854d4f544] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_htoxxven.jj0.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:28:57Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_htoxxven.jj0.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:28:57 +0000 UTC 2025-08-18 12:28:57 +0000 UTC 2025-08-18 12:29:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d60b88c5d1932de8d98edd5a3ae2d5d5647793de3eb6157015807ee523cd2bee [68a472a799ad3734d804e2f0] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcprov-jdk14-138.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:37Z] [2cb031d0966bfebbdb7c60f799b24dc9] [de366c3243a586eb3c0e2bcde1ed9bb1bfb985ff] [8f73129646efcac79fff4ea664ed95b9fcc08ccadb9cd5fe0250517cca6dbe5ef3165997e3be3d5c4131db4537155fb9] [2add1b0d82d79aa65051b1a273317fe43e5f6649fa41d4d32925cae1c8d919c31d7932f1ad96592d32b72382d1c569d7a7c09b16b034371d8ba01d3cd1feedd6] [172.17.23.146] [172.17.23.146] 1 Success bcprov-jdk14-138.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 1551468 2cb031d0966bfebbdb7c60f799b24dc9 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC de366c3243a586eb3c0e2bcde1ed9bb1bfb985ff 8f73129646efcac79fff4ea664ed95b9fcc08ccadb9cd5fe0250517cca6dbe5ef3165997e3be3d5c4131db4537155fb9 2add1b0d82d79aa65051b1a273317fe43e5f6649fa41d4d32925cae1c8d919c31d7932f1ad96592d32b72382d1c569d7a7c09b16b034371d8ba01d3cd1feedd6 2025-08-19 11:29:20 +0000 UTC None None 2025-06-03 01:03:21 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
d54451027064bc1d6df9f1c3ddee9ad674d26c622b11d3608f5afeb8bbfabf70 [68a523949cec397f02de9f47] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseData.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:26Z] [b2a5050b7d0bc08167b05bfe29af445d] [abaccb61e12a56d1efad87526af3a9e07a3fd55b] [77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7] [36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839] [172.17.22.40] [172.17.22.40] 1 Success BaseData.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ BaseData 13824 b2a5050b7d0bc08167b05bfe29af445d BaseData 1.0.0.0 Not Signed 2023-06-15 02:37:38 +0000 UTC 2023-06-15 02:37:38 +0000 UTC abaccb61e12a56d1efad87526af3a9e07a3fd55b 77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7 36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d4b66ff4d0d6b949b0514f402923fdb6ef388eb2b45f6c3414e0eb5c309cc390 [68a306a5ba5832f49fe9cf3c] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FRMENGD.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [2d70500aa44310faec56619fb4c9f115] [fa913d9a1b4ddecf7726f8bbce0f2439ba3d5abd] [60084e85d7ab4d88371756bb17cb935670d38add0d32111ffdef08df325c560eadb5f8a587678ac5fcfc9930fe19479c] [8bde69574d38446abf5e2dc14d86322254de2e084d4f387591b567db8ef8023a68957d1114a99b599b191ea0d7bc632eb72b25d3d5270255b2e09da49c34862f] [172.17.146.33] [172.17.146.33] 1 Success FRMENGD.DLL C:\DICORP\DICORP_V5\RW\APPS\ Form Engine DLL - Delphi 49152 2d70500aa44310faec56619fb4c9f115 1.17.1 Not Signed 2022-07-06 14:52:15 +0000 UTC 2024-09-14 04:02:50 +0000 UTC fa913d9a1b4ddecf7726f8bbce0f2439ba3d5abd 60084e85d7ab4d88371756bb17cb935670d38add0d32111ffdef08df325c560eadb5f8a587678ac5fcfc9930fe19479c 8bde69574d38446abf5e2dc14d86322254de2e084d4f387591b567db8ef8023a68957d1114a99b599b191ea0d7bc632eb72b25d3d5270255b2e09da49c34862f 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:10:22 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
d45a86e8eefb45e6d3246ea6244f969b8b01b9308364dec0aa47ef9f138c1891 [68a5e018c5b265f07bb9e53a] [2] [ghermanc] [I-CAJump] [WVUHS] [C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\tmpEXO_rudypo3c.3fk.psm1] [Servers] [Servers Audit] [v2295.887] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-20T14:47:45Z] [cf3be61b7b7864bd18276f2a15d1929e] [5d5fdacd8a04903f4d950f608f12da17f71b1ee8] [31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95] [bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90] [172.17.252.110] [172.17.252.110] 1 Success tmpEXO_rudypo3c.3fk.psm1 C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\ 2308419 cf3be61b7b7864bd18276f2a15d1929e Not Signed 2025-08-20 14:47:44 +0000 UTC 2025-08-20 14:47:44 +0000 UTC 5d5fdacd8a04903f4d950f608f12da17f71b1ee8 31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95 bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90 2025-08-20 14:47:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d43a2099c8fd9976bc0e46f7249032ac3e3856f5ba5bc427e68b2d4e7e186585 [68a4ccc785b914a60d739e48, 68a4ce1fc826337212f53be2, 68a4ce1fc826337212f53be8, 68a4d07753a851daf11e6932, 68a4d07753a851daf11e6945, 68a4d07753a851daf11e6956, 68a4d2d1ff2b441b8442812a, 68a4d2d1ff2b441b8442813d, 68a4d2d1ff2b441b8442814e] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\Registry.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:06Z, 2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z] [a203fffcd1d985aadfef505588b0a4cb] [76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b] [227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c] [0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef] [10.36.132.49] [10.36.132.49] 1 Success Registry.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\ 158208 a203fffcd1d985aadfef505588b0a4cb Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:12:20 +0000 UTC 76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b 227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c 0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d40f30dca6093992b1c335a7d540862b1cf841e379d547a9ac8cafcbceed8328 [68a7159f4aa14456bb5cd160] [2] [CA_Jnt_SVAsp] [u-hAADConnect] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_df2da3df-b1a0-4d36-8e49-5bedaf2442ba_Untitled2.ps1] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-21T12:42:34Z] [] [] [] [] [172.25.19.63] [172.25.19.63] 1 Success AutoSaved_df2da3df-b1a0-4d36-8e49-5bedaf2442ba_Untitled2.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 12:27:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d3f591e5750c86bedd1f9332364185b803e59927f06d2190aa78ec6e4411e888 [68a34b98a6132bf659cce5b1, 68a34df0b71eea1289980a16] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadDiagram.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z] [e91b9a358b526bbfe757d860acd190ed] [76e2a1a5c8ec159281b188c58150c44f3f972dff] [f3358dd1fb197c60711099848c769cf770be4ff36a28bd35f8bc7a6c3c612a8202ce8444e3d952f179dd8afe75ec37f3] [1013617a066ffc14f629a7d36a22d1f2b6ac1f649fafe46ff8d700e5f29116a9a0687ad4d9970929271512894ba276d19bfeb88c4b55f47015f838e30ac11b0d] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.RadDiagram.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.RadDiagram 1788928 e91b9a358b526bbfe757d860acd190ed Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:00 +0000 UTC 2023-07-25 16:12:00 +0000 UTC 76e2a1a5c8ec159281b188c58150c44f3f972dff f3358dd1fb197c60711099848c769cf770be4ff36a28bd35f8bc7a6c3c612a8202ce8444e3d952f179dd8afe75ec37f3 1013617a066ffc14f629a7d36a22d1f2b6ac1f649fafe46ff8d700e5f29116a9a0687ad4d9970929271512894ba276d19bfeb88c4b55f47015f838e30ac11b0d 2025-06-09 21:58:51 +0000 UTC None None 2022-04-23 05:15:44 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
d3d7a66293ebab3af9baba4a16e865aedbb74adae7d5d4cf6ae2dda125ae0e7f [68a246235d01fff0e1ca28f1] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_axjq3wng.oka.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:10:43Z] [] [] [] [] [172.29.132.47] [172.29.132.47] 1 Success __PSScriptPolicyTest_axjq3wng.oka.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:10:43 +0000 UTC 2025-08-17 21:10:43 +0000 UTC 2025-08-17 21:14:16 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d3c63e150036f10e73e8cb6478091077532ea4eef2720b551a7be14e35ae9c96 [68a48674c4cb2500be69260b, 68a48674c4cb2500be692621] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.AspNetCore.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [e5a12ea408c1bb924baba6710f8a210a] [952925b6de0a96d202f1f965ab347745228e2973] [1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94] [bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526] [172.17.252.226] [172.17.252.226] 1 Success Serilog.AspNetCore.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.AspNetCore 27896 e5a12ea408c1bb924baba6710f8a210a Serilog.AspNetCore 5.0.0 Stryker Corporation 2022-02-16 03:02:56 +0000 UTC 2024-02-15 18:02:03 +0000 UTC 952925b6de0a96d202f1f965ab347745228e2973 1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94 bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d3618219fd8422d3844101b0d57fa596aee7e01dfa8cb6e7dc95eb9c8cd4818f [68a62a808890319de023d467] [2] [SYSTEM] [u-NFP2] [NT AUTHORITY] [C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe] [Servers] [Servers Audit] [v2310.898] ["C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-20T20:05:16Z] [232c2871a4ec6371d7629acb78e34fe5] [1feca74aa50c755fa4c7f8d79fa6fa1557a119f0] [2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797] [6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2] [172.25.17.195] [172.25.17.195] 1 Success FFSchedulerService.exe C:\Program Files (x86)\FormFast\Common\ FFSchedulerService 51200 232c2871a4ec6371d7629acb78e34fe5 FFSchedulerService 1.0.0.0 Not Signed 2023-06-20 18:28:16 +0000 UTC 2023-06-20 18:28:16 +0000 UTC 1feca74aa50c755fa4c7f8d79fa6fa1557a119f0 2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797 6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2 2025-08-20 20:05:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d3445778ced79263ad697bbbeef21f6a13f06a58f291cec1a239efd0ef8bcbff [68a4ccc785b914a60d739e57, 68a4d07753a851daf11e693f, 68a4d2d1ff2b441b84428137] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\Glob.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:07Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z] [473ab010839c2be697c44e2949f9e203] [00022b4d9500e922d2e442a721ba5ecde46ffa26] [fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d] [e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d] [10.36.132.49] [10.36.132.49] 1 Success Glob.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\ 22528 473ab010839c2be697c44e2949f9e203 Not Signed 2021-10-20 13:41:12 +0000 UTC 2016-12-02 07:11:31 +0000 UTC 00022b4d9500e922d2e442a721ba5ecde46ffa26 fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d326cab93b94da954e3255e3ae9798ccbb29cafdd6a42ec86f49db136837a447 [68a2cfaafd36357b5aad62ea] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\tmpEXO_vlwbbir4.r3y.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T07:00:50Z] [8e1f2d25559f493185469321f6bbdb4c] [d46dfdcb82328fa63f83d551ae51ef321adbbce9] [3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759] [d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_vlwbbir4.r3y.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\ 2290479 8e1f2d25559f493185469321f6bbdb4c Not Signed 2025-08-18 07:00:48 +0000 UTC 2025-08-18 07:00:48 +0000 UTC d46dfdcb82328fa63f83d551ae51ef321adbbce9 3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759 d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d 2025-08-18 07:00:58 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d2a581d4a6d27c24440d4a37a52ded76d4f22cdb5d200ed7939e4f1cf9ef63d9 [68a2c16aad07b1f3cadf8bd3] [2] [SQLSERVERAGENT] [SUNR1MSD] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_yck4oyto.shs.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] [D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] [2025-08-18T06:00:00Z] [] [] [] [] [172.24.20.7] [172.24.20.7] 1 Success __PSScriptPolicyTest_yck4oyto.shs.ps1 C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ 80 Not Signed 2025-08-18 06:00:00 +0000 UTC 2025-08-18 06:00:00 +0000 UTC 2025-08-18 06:00:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d21817fe72ac59de692437e50c43dd1bae22fd9bfd9d5fe6f002ecc5001133aa [68a4ccd13efa8341e1766c85] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:11Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:13:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
db952a6299fb8c832b4006433c766c58a449e5b3da78577807051ea80e74724c [68a4cc4fe7cc38673861dc6c] [2] [my10040sa] [i-ncapsule12] [WVUHS] [C:\software\WindowsDefenderATPLocalOnboardingScript.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T19:11:05Z] [5cbcac73eacda04bf93734eac54ec250] [b6a7d80a56fd86c90b2b84c0bea58308a83abad3] [1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc] [84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4] [172.17.23.18] [172.17.23.18] 1 Success WindowsDefenderATPLocalOnboardingScript.cmd C:\software\ 17420 5cbcac73eacda04bf93734eac54ec250 Not Signed 2025-08-15 21:00:30 +0000 UTC 2025-08-19 18:11:40 +0000 UTC b6a7d80a56fd86c90b2b84c0bea58308a83abad3 1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc 84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4 2025-08-19 19:11:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
db8489e9e278ffa12f9e253414e358380bddac21d2c3b574d6d63463fb13a767 [68a71d98771132224a617f81] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [ca261867dd7ae9bb2972af34c672134f] [d3eb5f43ef58cbde6a08d444445b7b7d1ddd36f8] [596da61248647797b1bbd6e2b9e7f04cd955deca0c68e16008c551f917bc009727f641de12a34e8400c5f3510a3d0714] [256f5fda816febb5e14e752741ad8b4aeb2fba873ee08dc3879752cadeaafb9f8f3ec9991a2965632987a28ca6db8cd9ab23c736f7e6516cd47f0773eaafa908] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.dll 441856 ca261867dd7ae9bb2972af34c672134f Mobile library assembly 20.2.2516.1 Not Signed 2020-05-11 15:02:00 +0000 UTC 2020-05-11 15:02:00 +0000 UTC d3eb5f43ef58cbde6a08d444445b7b7d1ddd36f8 596da61248647797b1bbd6e2b9e7f04cd955deca0c68e16008c551f917bc009727f641de12a34e8400c5f3510a3d0714 256f5fda816febb5e14e752741ad8b4aeb2fba873ee08dc3879752cadeaafb9f8f3ec9991a2965632987a28ca6db8cd9ab23c736f7e6516cd47f0773eaafa908 2025-07-16 19:27:14 +0000 UTC None None 2021-04-25 05:43:38 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
db47e797535a71d7971867b3e33ada1549410843ca9d2a361bfe802c5ba86eeb [68a523949cec397f02de9f55] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticUnitTests.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:29Z] [7990057f38e4716679765f0a52c270d1] [48fb434df935c9ab7759f840f7e7924663f6b621] [f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3] [cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252] [172.17.22.40] [172.17.22.40] 1 Success DiagnosticUnitTests.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ DiagnosticUnitTests 25088 7990057f38e4716679765f0a52c270d1 DiagnosticUnitTests 1.0.0.0 Not Signed 2023-06-15 02:38:06 +0000 UTC 2023-06-15 02:38:06 +0000 UTC 48fb434df935c9ab7759f840f7e7924663f6b621 f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3 cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
db14786e73bc0ee8455dca51b61a6ccd8871c06886334a30c9a83d3b5716635e [68a48674c4cb2500be69263d, 68a48674c4cb2500be69264f] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.Debug.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.Debug.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z] [aaf27757b63c604c4545e853ad3b8d54] [a35640ddc42571b881e15c9735d09b57a1698734] [6b0aeeb1ef1333684ff97d7b00dc12ccd55827ab743ba7629420f6895d6112d7ade7906ff4c82ddf3a143c37c96ffe4b] [d09de65e537792c9bcbfdc9d3d2857c811821ca26625d9da207e3462d49122f86446727892b7191377dfd66957d013a2a19586ed90d264f1a740c56303a4e2e0] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.Debug.dll C:\ProgramData\Laurel Bridge Software\Compass\www\ Serilog.Sinks.Debug 7168 aaf27757b63c604c4545e853ad3b8d54 Serilog.Sinks.Debug 2.0.0-master-68cc513 Not Signed 2024-08-30 13:04:08 +0000 UTC 2024-08-30 13:04:08 +0000 UTC a35640ddc42571b881e15c9735d09b57a1698734 6b0aeeb1ef1333684ff97d7b00dc12ccd55827ab743ba7629420f6895d6112d7ade7906ff4c82ddf3a143c37c96ffe4b d09de65e537792c9bcbfdc9d3d2857c811821ca26625d9da207e3462d49122f86446727892b7191377dfd66957d013a2a19586ed90d264f1a740c56303a4e2e0 2025-04-29 13:21:39 +0000 UTC None None 2025-03-21 15:57:31 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-29 01:04:12.861 +0000 UTC
da692790deb2efd860d435719a2efc139b3cc1dd0d01b5b764d693e57a326554 [68a5c8eceb9e7b7716dce207] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:08:58Z] [fcbd65813fcd1136ccc166072f2645f2] [750592861995231496d153cd8968f6d0ec9d4b52] [79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0] [585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682] [172.17.252.194] [172.17.252.194] 1 Success 7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1 C:\_work_devops_mdi\_temp\ 379 fcbd65813fcd1136ccc166072f2645f2 Not Signed 2025-08-20 13:08:58 +0000 UTC 2025-08-20 13:08:58 +0000 UTC 750592861995231496d153cd8968f6d0ec9d4b52 79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0 585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682 2025-08-20 13:09:00 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
da41728504a6b8736b7af7e25b17c6b48777776cbbc6ff3872b28fb5d84d9fd1 [68a5c233a5c8de03b7ff4fb4] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll] [Servers] [Servers Audit] [v2287.879] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T12:40:11Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 12:40:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d9f7d9e7bb23fea463e56b71f502481381b3814bd7cb29a8f6e9e8635902f75b [68a55e78808b9b08c1edd7d3] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mctygn31.xjd.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:34:37Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_mctygn31.xjd.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:34:37 +0000 UTC 2025-08-20 05:34:37 +0000 UTC 2025-08-20 05:34:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d9d0fd73379de8bdc1eade22b7cc044fe5b529c69363603fe804c0532eb0c03c [68a5119d85fcc7c992c6135c] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T00:06:50Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 00:06:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d903abf447ce00d5dd900781f9d3bf38dd229cb581327acab35b9cf56ee0c4db [68a25fb2e970d941642e7ee0, 68a25fb2e970d941642e7eed, 68a3b2cf09045b56b2a707b8, 68a3b2cf09045b56b2a707c5, 68a502e12ae1a61fbf4caf16, 68a502e12ae1a61fbf4caf23, 68a65489c4cae84feadc5716, 68a65489c4cae84feadc5723] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\message-transforms.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z] [ae2777418704ce0440e2ad1cd37a221c] [d779623250a51664703e299e95177e7e0915ac50] [4bf640c4184cb8648876afe84da1fe472cb5f9ad2a8d0709ca93847dfe02717ec1f26b10f678d09764ed2a60e681baa6] [809b2b42593d70f9d9e85cb1cde53a7a3b3357cc85f6f8c83b464825a5f3611b54c5bdcd07f3f11a653816a666496714ec2d42a263be99dfacc376dee7179bec] [172.17.252.12] [172.17.252.12] 1 Success message-transforms.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\ 684 ae2777418704ce0440e2ad1cd37a221c Not Signed 2024-03-28 19:42:27 +0000 UTC 2023-03-06 16:58:14 +0000 UTC d779623250a51664703e299e95177e7e0915ac50 4bf640c4184cb8648876afe84da1fe472cb5f9ad2a8d0709ca93847dfe02717ec1f26b10f678d09764ed2a60e681baa6 809b2b42593d70f9d9e85cb1cde53a7a3b3357cc85f6f8c83b464825a5f3611b54c5bdcd07f3f11a653816a666496714ec2d42a263be99dfacc376dee7179bec 2025-08-08 23:00:16 +0000 UTC None None 2024-07-30 12:49:20 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
d8787479d685a3ea387e552be8f051f2bdf3217c5f32e5c8f84a44d78f7ad179 [68a306a5ba5832f49fe9cf39] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RECGRIDD.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [fd8340b0dffcabd4edb7a129910cdbcd] [0d122a7798cedae53732a4d24a2b7b71310ca87a] [b7c0a153ed58565ae0d5de20b04576dcb93307fda7b47fc70fb8a623b168b2c725ee4f0cc5bb1d491416611a1541fb91] [ba795955cedbdf07b31b700bae1cb6174688090cac37c49e081d8901017223fcfe43070d7da8f7f844781ef2700febb5ba831e7cdd46eaf46eb3a9eaa39288e5] [172.17.146.33] [172.17.146.33] 1 Success RECGRIDD.DLL C:\DICORP\DICORP_V5\RW\APPS\ 104960 fd8340b0dffcabd4edb7a129910cdbcd Not Signed 2022-07-06 14:52:25 +0000 UTC 2024-09-14 04:02:52 +0000 UTC 0d122a7798cedae53732a4d24a2b7b71310ca87a b7c0a153ed58565ae0d5de20b04576dcb93307fda7b47fc70fb8a623b168b2c725ee4f0cc5bb1d491416611a1541fb91 ba795955cedbdf07b31b700bae1cb6174688090cac37c49e081d8901017223fcfe43070d7da8f7f844781ef2700febb5ba831e7cdd46eaf46eb3a9eaa39288e5 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 18:06:23 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
d858454b7ca0629f84a0ba95b8257b00d4fbab318882d9882b6c5a15e67e2e34 [68a4f26f8c32b5989becd6c7, 68a4fcd0011d94a251a4ef3b] [2] [ReevesJoe, CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Program Files\TAP-Windows\Uninstall.exe] [Servers] [Servers Audit] [v2284.877, v2284] ["C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe" _?=C:\Program Files\TAP-Windows\, "C:\Program Files\TAP-Windows\Uninstall.exe" ] [Not Signed] [C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\System32\dllhost.exe] [C:\Windows\ImmersiveControlPanel\SystemSettings.exe, C:\Windows\System32\svchost.exe] [2025-08-19T21:53:42Z, 2025-08-19T22:13:43Z] [7a39c7e83f8dbb5835c354a30f4c47d9] [270a2a94b06e55a34b78db33e18e83c207724ac4] [dd4c34519e59d20e33ffcfd384f252e122b580b45ae555a0acb99d488dad848e5b563cd63648bc91006ff5e9ebe28cff] [f942aea6a65cf9ee34cf2a9368f0e61fd6897c3e167288c6befb4a0da47bcdccd211bcb6c0ba09e8a85b5f479f7bbca39c21499e1783e21f6fcd5390790572c9] [172.17.23.18] [172.17.23.18] 1 Success Au_.exe C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\ 83811 7a39c7e83f8dbb5835c354a30f4c47d9 Not Signed 2025-08-19 21:53:42 +0000 UTC 2025-08-19 21:12:19 +0000 UTC 270a2a94b06e55a34b78db33e18e83c207724ac4 dd4c34519e59d20e33ffcfd384f252e122b580b45ae555a0acb99d488dad848e5b563cd63648bc91006ff5e9ebe28cff f942aea6a65cf9ee34cf2a9368f0e61fd6897c3e167288c6befb4a0da47bcdccd211bcb6c0ba09e8a85b5f479f7bbca39c21499e1783e21f6fcd5390790572c9 2025-08-19 21:53:51 +0000 UTC None None 2025-08-18 06:11:18 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:56:05.781 +0000 UTC
d821a62802900b068dcf61ddc9fdff2f7ada04b706815ab6e5038b21543da8a5 [68a4e8a1ad898641af98fd90, 68a4fcd0011d94a251a4ef2c] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\System.dll] [Servers] [Servers Audit] [v2283, v2284] [] [Not Signed] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:52Z, 2025-08-19T22:09:39Z] [2e025e2cee2953cce0160c3cd2e1a64e] [dec3da040ea72d63528240598bf14f344efb2a76] [80b0a552b28cca460a8a08ed32a7fe321301797734d890fdf79a3683ef81b0906846bf9bab48fab4aee841a081537f07] [3cafce382b605a68e5a3f35f95b32761685112c5a9da9f87b0a06ec13da4155145bd06ffb63131bf87c3dc8bd61cb085884c5e78c832386d70397e3974854860] [172.17.23.18] [172.17.23.18] 1 Success System.dll C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\ 24064 2e025e2cee2953cce0160c3cd2e1a64e Not Signed 2025-08-19 21:11:52 +0000 UTC 2025-08-19 21:11:52 +0000 UTC dec3da040ea72d63528240598bf14f344efb2a76 80b0a552b28cca460a8a08ed32a7fe321301797734d890fdf79a3683ef81b0906846bf9bab48fab4aee841a081537f07 3cafce382b605a68e5a3f35f95b32761685112c5a9da9f87b0a06ec13da4155145bd06ffb63131bf87c3dc8bd61cb085884c5e78c832386d70397e3974854860 2025-08-19 21:12:01 +0000 UTC None None 2025-08-18 12:24:28 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-19 21:16:02.876 +0000 UTC
d79c2392afb4ba0f2422e52d1384a3c935e60c579ce42b2ad0c7ff9b4f41e6ea [68a320afd74235903a162cdc] [2] [georgemag] [I-CAJump] [WVUHS] [C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\tmp_s4vxl2td.srp.psm1] [Servers] [Servers Audit] [v2251.850] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T12:46:32Z] [3334cf3826bfe1d724ba53ca9ff4e71c] [2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216] [333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1] [aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f] [172.17.252.110] [172.17.252.110] 1 Success tmp_s4vxl2td.srp.psm1 C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\ 4669944 3334cf3826bfe1d724ba53ca9ff4e71c Not Signed 2025-08-18 12:46:32 +0000 UTC 2025-08-18 12:46:32 +0000 UTC 2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216 333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1 aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f 2025-08-18 12:46:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
d797eba683f29627641c38b9b2b040728c6af55bdae60aabe83fe51da73611c3 [68a480b9c5e8b0fd75ea7cdf, 68a5cda96d5ff24fa71bf7d3] [2] [SYSTEM] [vm-ScerisWeb] [NT AUTHORITY] [C:\Windows\Temp\Accusoft\{D5CE9ED4-28C2-461a-8EC5-2F81C1DF22B5}\Accusoft.BarcodeXpress.Common.10.0.0.10-10.0.ssm] [Servers] [Servers Audit] [v2273.867, v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T13:40:24Z, 2025-08-20T13:28:16Z] [bb6eed9250fcbff70388c02e5cf91051] [1236a7a98ad10ce3fbdfe070f7f68a1ad2a9e1fc] [4013f67a387e41166b49b3aa1ecf9f4796f8453b4316292c230612811b0d9e99bb12424dc2ae43b2b49ef0d34c3cbebd] [5fdbb4f7f3668fdb3cf75fdbe93981970fe0900b79c115215933478ffe18bcde58570d9cce2fa8da45c6d0f2aaba370cd843c15666d1f475783c70b02e23a3c0] [172.17.251.197] [172.17.251.197] 1 Success Accusoft.BarcodeXpress.Common.10.0.0.10-10.0.ssm C:\Windows\Temp\Accusoft\{D5CE9ED4-28C2-461a-8EC5-2F81C1DF22B5}\ Accusoft BarcodeXpress 10 Common 1974272 bb6eed9250fcbff70388c02e5cf91051 BarcodeXpress 10 10.0.0.10 Not Signed 2025-02-12 14:49:20 +0000 UTC 2025-02-12 14:49:20 +0000 UTC 1236a7a98ad10ce3fbdfe070f7f68a1ad2a9e1fc 4013f67a387e41166b49b3aa1ecf9f4796f8453b4316292c230612811b0d9e99bb12424dc2ae43b2b49ef0d34c3cbebd 5fdbb4f7f3668fdb3cf75fdbe93981970fe0900b79c115215933478ffe18bcde58570d9cce2fa8da45c6d0f2aaba370cd843c15666d1f475783c70b02e23a3c0 2025-04-29 15:26:00 +0000 UTC None None 2017-11-08 15:23:42 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-29 15:30:45.418 +0000 UTC
d7972a6a2d0cb079067d8433e711207e7e3ba70b54db7169788b0ec4d994a9ca [68a6afe50e0f3bd8deac4ced, 68a6afe50e0f3bd8deac4d22, 68a6afe50e0f3bd8deac4d2e, 68a6afe50e0f3bd8deac4d50, 68a6afe50e0f3bd8deac4d70, 68a6afe50e0f3bd8deac4d90, 68a6afe50e0f3bd8deac4dae, 68a6afe50e0f3bd8deac4dd0, 68a6afe50e0f3bd8deac4df0, 68a6afe50e0f3bd8deac4e10, 68a6afe50e0f3bd8deac4e30, 68a6afe50e0f3bd8deac4e50, 68a6afe50e0f3bd8deac4e70, 68a6afe50e0f3bd8deac4e90, 68a6afe50e0f3bd8deac4ec1, 68a6afe50e0f3bd8deac4ed0, 68a6afe50e0f3bd8deac4ef0, 68a6afe50e0f3bd8deac4f10, 68a6afe50e0f3bd8deac4f30, 68a6afe50e0f3bd8deac4f5a, 68a6afe50e0f3bd8deac4f7a, 68a6afe50e0f3bd8deac4f9a, 68a6afe50e0f3bd8deac4fba, 68a6afe50e0f3bd8deac4fda, 68a6afe50e0f3bd8deac4ffa, 68a6afe50e0f3bd8deac501a, 68a6afe50e0f3bd8deac503a, 68a6afe50e0f3bd8deac505a, 68a6afe50e0f3bd8deac507a, 68a6afe50e0f3bd8deac50a3, 68a6afe50e0f3bd8deac50c4, 68a6afe50e0f3bd8deac50e4, 68a6afe50e0f3bd8deac510e, 68a6afe50e0f3bd8deac512e, 68a6afe50e0f3bd8deac514e, 68a6afe50e0f3bd8deac5178, 68a6afe50e0f3bd8deac5198, 68a6afe50e0f3bd8deac51b8, 68a6afe50e0f3bd8deac51d9, 68a6afe50e0f3bd8deac520b, 68a6afe50e0f3bd8deac5221, 68a6afe50e0f3bd8deac5239, 68a6afe50e0f3bd8deac5259, 68a6afe50e0f3bd8deac528d, 68a6afe50e0f3bd8deac52ad, 68a6afe50e0f3bd8deac52cd, 68a6afe50e0f3bd8deac52ed, 68a6afe50e0f3bd8deac530d, 68a6afe50e0f3bd8deac532d, 68a6afe50e0f3bd8deac534d, 68a6afe50e0f3bd8deac536d, 68a6afe50e0f3bd8deac538d, 68a6afe50e0f3bd8deac5393, 68a6afe50e0f3bd8deac53ae, 68a6afe50e0f3bd8deac53d4, 68a6afe50e0f3bd8deac53f1, 68a6afe50e0f3bd8deac5413, 68a6afe50e0f3bd8deac544d, 68a6afe50e0f3bd8deac5452, 68a6afe50e0f3bd8deac5473, 68a6afe50e0f3bd8deac5492, 68a6afe50e0f3bd8deac54b3, 68a6afe50e0f3bd8deac54d3, 68a6afe50e0f3bd8deac54f3, 68a6afe50e0f3bd8deac5513, 68a6afe50e0f3bd8deac5533, 68a6afe50e0f3bd8deac555d, 68a6afe50e0f3bd8deac557d, 68a6afe50e0f3bd8deac559d, 68a6afe50e0f3bd8deac55bd, 68a6afe50e0f3bd8deac55dd, 68a6afe50e0f3bd8deac55fd, 68a6afe50e0f3bd8deac561d, 68a6afe50e0f3bd8deac5648, 68a6afe50e0f3bd8deac566c, 68a6afe50e0f3bd8deac569b, 68a6afe50e0f3bd8deac56bb, 68a6afe50e0f3bd8deac56da, 68a6afe50e0f3bd8deac56fa, 68a6afe50e0f3bd8deac5735, 68a6afe50e0f3bd8deac573b, 68a6afe50e0f3bd8deac576e, 68a6afe50e0f3bd8deac5782, 68a6afe50e0f3bd8deac57ae, 68a6afe50e0f3bd8deac57c5, 68a6afe50e0f3bd8deac57ef, 68a6afe50e0f3bd8deac5802, 68a6afe50e0f3bd8deac583f, 68a6afe50e0f3bd8deac5845, 68a6afe50e0f3bd8deac586d, 68a6afe50e0f3bd8deac5882, 68a6afe50e0f3bd8deac58b4, 68a6afe50e0f3bd8deac58c5, 68a6afe50e0f3bd8deac58f4, 68a6afe50e0f3bd8deac591e, 68a6afe50e0f3bd8deac5935, 68a6afe50e0f3bd8deac5945, 68a6afe50e0f3bd8deac5965, 68a6afe50e0f3bd8deac599c, 68a6afe50e0f3bd8deac59a4, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeFunction.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...] [8b85c5d311d19ceaafb91dddda22bd33] [df00e317fb9dc5476d831ab7609e030d421d1361] [81b30eb9574d8435d515345adbbe7981132726162991d21284392f439fd0745f4936c701d2884fe7ec7ffd27c31ddab0] [462b24f3d3702dc14a52f5fd2582af145fd7c1dae9235f42fe5c6a3d42fc93f69d7776dca062674f47336943cf1222a63c103b2bc3f46d39e73a6f072a83774b] [172.17.30.60] [172.17.30.60] 1 Success AmeFunction.dll C:\Program Files\Fujifilm\NaxisWS6\ 2462208 8b85c5d311d19ceaafb91dddda22bd33 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:00:06 +0000 UTC df00e317fb9dc5476d831ab7609e030d421d1361 81b30eb9574d8435d515345adbbe7981132726162991d21284392f439fd0745f4936c701d2884fe7ec7ffd27c31ddab0 462b24f3d3702dc14a52f5fd2582af145fd7c1dae9235f42fe5c6a3d42fc93f69d7776dca062674f47336943cf1222a63c103b2bc3f46d39e73a6f072a83774b 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
d7116e047fbcb4bf045d2268cf418e6cb6fc8102c12196f3727597e8464497dd [68a16556adb18f56bab6ec7b, 68a2b4a8c289c4a5fdc2edb1, 68a4085529d877e962e90ae7, 68a557e71e5d7a1efef2595c, 68a6a990a81c561389c37864] [2] [SYSTEM] [u-vpg1b] [NT AUTHORITY] [C:\icm\pcce\PG2B\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [ddc535922ab8443cac70e8a5a1b1ca96] [de0bed789f1c7a1ed257d4495b986eded933a71b] [3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05] [4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065] [172.25.196.36] [172.25.196.36] 1 Success purgeold.bat C:\icm\pcce\PG2B\bin\ 410 ddc535922ab8443cac70e8a5a1b1ca96 Not Signed 2021-10-07 20:04:37 +0000 UTC 2021-10-07 20:04:37 +0000 UTC de0bed789f1c7a1ed257d4495b986eded933a71b 3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05 4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
069dd4df7cdfca11d5020b7bb8c936289a03bcda8ad4ef950767612993b1e9d6 [68a4855388937a93ff144373] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.SwaggerGen.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:08:10Z] [6562329298b4bd651e96c0d044f0700c] [4323ce16c4771d31649ee2351e359aff1b8a8d3f] [c2096eb2b862692cfbae91baaa6dcdd168d104d59b7c6d86a429edb311371208f6d4e1224e67e89ce93893883e4f35da] [0f62441f28ae321d98cd0294f881380af1fe03310d12064e4a77deafe730dfad6b8ff1d1000d506397804a2e645cbf74047aa3a0ac3f3f08ec318db25ce84723] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.SwaggerGen.dll C:\ProgramData\Laurel Bridge Software\Navigator\www\ Swashbuckle.AspNetCore.SwaggerGen 90112 6562329298b4bd651e96c0d044f0700c Swashbuckle.AspNetCore.SwaggerGen 6.3.1+1bac30500de0a377405a9179710ec7bf69de3e92 Not Signed 2024-04-10 11:27:37 +0000 UTC 2022-04-22 14:09:34 +0000 UTC 4323ce16c4771d31649ee2351e359aff1b8a8d3f c2096eb2b862692cfbae91baaa6dcdd168d104d59b7c6d86a429edb311371208f6d4e1224e67e89ce93893883e4f35da 0f62441f28ae321d98cd0294f881380af1fe03310d12064e4a77deafe730dfad6b8ff1d1000d506397804a2e645cbf74047aa3a0ac3f3f08ec318db25ce84723 2025-07-16 13:33:12 +0000 UTC None None 2025-03-13 09:57:46 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-07-16 13:34:05.73 +0000 UTC
067f2728e59cecc0bef49ec59b014348c57cca42920f9afeaf55a8a79770b32e [68a46ee7124301f03a725ddb, 68a4728c1dfbce27769ea0bb] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\software\Storage Manager Client 20.1.2.14.exe] [Servers] [Servers Audit] [v2272.867, v2272] ["C:\software\Storage Manager Client 20.1.2.14.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-19T12:32:28Z, 2025-08-19T12:34:22Z] [6b05a6c9512ef97c49932eddaeb2a88b] [cea62aad2165628db719065d3cc7850da0b169c6] [7bdb94812c040a636720e3e10102b0d3b57becf859cc6351d90c13b9d32d7fc7fa7fc14fec55618bfc03daabcafeaa07] [9b7629fecb397e1961d91e08f57f348014c2903810c8e06e555c0d42f9955af11a6d1e8aca298bf8565270ad696b6f52c95114b6c1cdc5b95fe86445b2a20269] [172.17.23.146] [172.17.23.146] 1 Success Storage Manager Client 20.1.2.14.exe C:\software\ Dell Storage Manager Client 353369258 6b05a6c9512ef97c49932eddaeb2a88b Dell Storage Manager Client 20.1.2.14 Not Signed 2025-08-19 12:31:14 +0000 UTC 2022-08-17 14:31:21 +0000 UTC cea62aad2165628db719065d3cc7850da0b169c6 7bdb94812c040a636720e3e10102b0d3b57becf859cc6351d90c13b9d32d7fc7fa7fc14fec55618bfc03daabcafeaa07 9b7629fecb397e1961d91e08f57f348014c2903810c8e06e555c0d42f9955af11a6d1e8aca298bf8565270ad696b6f52c95114b6c1cdc5b95fe86445b2a20269 2025-08-19 12:32:39 +0000 UTC None None 2024-12-02 07:12:46 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-08-19 12:35:24.475 +0000 UTC
064def080c56265fe8621ad7b5f4e9a60f08b51475e7dccae02c6b86685a47b5 [68a19b31c2e510c554e3fb34] [2] [SYSTEM] [u-hintranet] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jgzkpk0j.mzq.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:04:45Z] [] [] [] [] [172.25.18.7] [172.25.18.7] 1 Success __PSScriptPolicyTest_jgzkpk0j.mzq.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:04:45 +0000 UTC 2025-08-17 09:04:45 +0000 UTC 2025-08-17 09:04:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0629fc635898b51e5d2316c8f7d34ea75b613ae34e1034bb1179374ac9de65a6 [68a471ad04130eaeee8f8d04] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:44:24Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:44:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dcfbdfdbde9cbef28c79eddee54f0c2accb67f89728b7145fe46d42cce9aa9c5 [68a19d39565cc98ae4760187] [2] [SYSTEM] [i-nCtx-SF4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qedznpgp.ga2.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:13:22Z] [] [] [] [] [172.17.246.9] [172.17.246.9] 1 Success __PSScriptPolicyTest_qedznpgp.ga2.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:13:22 +0000 UTC 2025-08-17 09:13:22 +0000 UTC 2025-08-17 09:13:29 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dcb83c4b7ea70aefe52299b701b5109ef1e0f8c9388fc04a8ed85e1425206a04 [68a3f8c69a8abcb93d00959e, 68a54a4f1d8af79f39037b08, 68a69be12de2cbdbda2d252d] [2] [svc_utn_nemoq] [I-NUHNQENG] [WVUHS] [E:\NQS\Close Nemo-Q.bat] [Servers] [Servers Audit] [v2272.867, v2284.877, v2314.900] [] [Not Signed] [E:\NQS\NQStatistics\QstartE.exe] [C:\Windows\explorer.exe] [2025-08-19T04:02:00Z, 2025-08-20T04:02:00Z, 2025-08-21T04:02:00Z] [f6d90142253043a52879717926747842] [a0e1b1f4a0cdfedc917af0a14b818e8762af92fb] [1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a] [5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e] [172.17.253.25] [172.17.253.25] 1 Success Close Nemo-Q.bat E:\NQS\ 335 f6d90142253043a52879717926747842 Not Signed 2025-04-24 14:39:37 +0000 UTC 2015-05-26 13:24:58 +0000 UTC a0e1b1f4a0cdfedc917af0a14b818e8762af92fb 1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a 5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e 2025-08-09 04:02:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dcb6f710e34a6ba8e3494bd41b1847ee91db7430f961f80d5db0ff4c4feaeae9 [68a48674c4cb2500be69263e, 68a48674c4cb2500be692650] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Common.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Common.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z] [efce77c5c92dc4a8c516d430070e7b96] [2baab49956994f6a532f589386b922aeb5ad1e6e] [b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753] [992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd] [172.17.252.226] [172.17.252.226] 1 Success Stryker.iBedServer.Common.dll C:\Stryker\iBed Server Application\Stryker.Clinical\ Stryker.iBedServer.Common 26624 efce77c5c92dc4a8c516d430070e7b96 Stryker.iBedServer.Common 1.0.0 Not Signed 2023-03-16 10:22:14 +0000 UTC 2023-03-16 10:22:14 +0000 UTC 2baab49956994f6a532f589386b922aeb5ad1e6e b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753 992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd 2025-07-15 14:08:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dc61a774db540e08caa944d187b5fe5a72904a7a67839ac49d20c67fcdf05b05 [68a245fbaa03fce1f3591138] [2] [SYSTEM] [GEEA2023] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_itgpliwy.fxx.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T21:09:58Z] [] [] [] [] [172.29.132.47] [172.29.132.47] 1 Success __PSScriptPolicyTest_itgpliwy.fxx.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 21:09:58 +0000 UTC 2025-08-17 21:09:58 +0000 UTC 2025-08-17 21:13:36 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f [68a4e8a1ad898641af98fd97, 68a4f315247c4b5c9ccb9233, 68a4fcd0011d94a251a4ef33, 68a4fcd0011d94a251a4ef3d] [2] [CA_gs10109, ReevesJoe] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\System.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\System.dll] [Servers] [Servers Audit] [v2283, v2284.877, v2284] [] [Not Signed] [C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe] [C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp] [2025-08-19T21:11:56Z, 2025-08-19T21:53:42Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:43Z] [c17103ae9072a06da581dec998343fc1] [b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d] [2f9ce9fefa9bf07a4c288422041d0a9547e3d790fb0e54941e1b757a3e77d4ea69b5b18c39e98c24dc999025884ddea5] [d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f] [172.17.23.18] [172.17.23.18] 1 Success System.dll C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\ 11264 c17103ae9072a06da581dec998343fc1 Not Signed 2025-07-01 11:54:16 +0000 UTC 2025-07-01 11:54:16 +0000 UTC b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d 2f9ce9fefa9bf07a4c288422041d0a9547e3d790fb0e54941e1b757a3e77d4ea69b5b18c39e98c24dc999025884ddea5 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f 2025-07-01 11:54:31 +0000 UTC None None 2025-06-26 02:01:50 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-07-01 02:41:38.53 +0000 UTC
dc4656d6b231fd607385735cbcd7eed759506b2415bd7a40671abe8282eb0612 [68a1755706bbf9d9f204ab88] [2] [SYSTEM] [i-hvhprod01] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kijrqnm.b1z.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:23:11Z] [a3bac681cf65fc3842b038012980eae3] [54945680ce53b32d40e084ebe34cd3d4ac330594] [dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a] [d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4] [172.17.22.182] [172.17.22.182] 1 Success __PSScriptPolicyTest_1kijrqnm.b1z.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 a3bac681cf65fc3842b038012980eae3 Not Signed 2025-08-17 06:23:11 +0000 UTC 2025-08-17 06:23:11 +0000 UTC 54945680ce53b32d40e084ebe34cd3d4ac330594 dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4 2025-08-17 06:23:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dc2d377b573c836bcfbf1885b27a262786b50fb097e7a3d6a25d8a56f2771131 [68a275a87ae917016bf0f3a9] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_w2kz3vcr.g3b.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T00:36:45Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_w2kz3vcr.g3b.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 00:36:45 +0000 UTC 2025-08-18 00:36:45 +0000 UTC 2025-08-18 00:36:56 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dc10a0514210898ed1dbd718a2c4e7b4c160d38483e64aa119d92eb55353f3bc [68a3146b5f0c41860c8c8555] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\locale.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [1924fbd93c01ce7df32aa9d6789abc1e] [5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b] [a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1] [e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c] [172.17.252.131] [172.17.252.131] 1 Success locale.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 58313 1924fbd93c01ce7df32aa9d6789abc1e Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1 e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dbf253c13892b9f6daf8aa320f04defa7aa427bb9c70c33e37c0c4c9900b75fd [68a6afe50e0f3bd8deac4cee, 68a6afe50e0f3bd8deac4d23, 68a6afe50e0f3bd8deac4d31, 68a6afe50e0f3bd8deac4d51, 68a6afe50e0f3bd8deac4d71, 68a6afe50e0f3bd8deac4d91, 68a6afe50e0f3bd8deac4db1, 68a6afe50e0f3bd8deac4dd1, 68a6afe50e0f3bd8deac4df1, 68a6afe50e0f3bd8deac4e11, 68a6afe50e0f3bd8deac4e31, 68a6afe50e0f3bd8deac4e51, 68a6afe50e0f3bd8deac4e71, 68a6afe50e0f3bd8deac4e91, 68a6afe50e0f3bd8deac4ec2, 68a6afe50e0f3bd8deac4ed1, 68a6afe50e0f3bd8deac4ef1, 68a6afe50e0f3bd8deac4f11, 68a6afe50e0f3bd8deac4f31, 68a6afe50e0f3bd8deac4f5b, 68a6afe50e0f3bd8deac4f7b, 68a6afe50e0f3bd8deac4f9b, 68a6afe50e0f3bd8deac4fbb, 68a6afe50e0f3bd8deac4fdb, 68a6afe50e0f3bd8deac4ffb, 68a6afe50e0f3bd8deac501b, 68a6afe50e0f3bd8deac503b, 68a6afe50e0f3bd8deac505b, 68a6afe50e0f3bd8deac507b, 68a6afe50e0f3bd8deac50a5, 68a6afe50e0f3bd8deac50c5, 68a6afe50e0f3bd8deac50e5, 68a6afe50e0f3bd8deac510f, 68a6afe50e0f3bd8deac512f, 68a6afe50e0f3bd8deac514f, 68a6afe50e0f3bd8deac5179, 68a6afe50e0f3bd8deac5199, 68a6afe50e0f3bd8deac51b9, 68a6afe50e0f3bd8deac51da, 68a6afe50e0f3bd8deac520c, 68a6afe50e0f3bd8deac5223, 68a6afe50e0f3bd8deac523a, 68a6afe50e0f3bd8deac525a, 68a6afe50e0f3bd8deac528e, 68a6afe50e0f3bd8deac52ae, 68a6afe50e0f3bd8deac52ce, 68a6afe50e0f3bd8deac52ee, 68a6afe50e0f3bd8deac530e, 68a6afe50e0f3bd8deac532e, 68a6afe50e0f3bd8deac534e, 68a6afe50e0f3bd8deac536e, 68a6afe50e0f3bd8deac5394, 68a6afe50e0f3bd8deac53af, 68a6afe50e0f3bd8deac53d3, 68a6afe50e0f3bd8deac53f3, 68a6afe50e0f3bd8deac5414, 68a6afe50e0f3bd8deac5438, 68a6afe50e0f3bd8deac5453, 68a6afe50e0f3bd8deac5474, 68a6afe50e0f3bd8deac5494, 68a6afe50e0f3bd8deac54b4, 68a6afe50e0f3bd8deac54d4, 68a6afe50e0f3bd8deac54f4, 68a6afe50e0f3bd8deac5514, 68a6afe50e0f3bd8deac5534, 68a6afe50e0f3bd8deac555e, 68a6afe50e0f3bd8deac557e, 68a6afe50e0f3bd8deac559e, 68a6afe50e0f3bd8deac55be, 68a6afe50e0f3bd8deac55de, 68a6afe50e0f3bd8deac55fe, 68a6afe50e0f3bd8deac561e, 68a6afe50e0f3bd8deac564b, 68a6afe50e0f3bd8deac566e, 68a6afe50e0f3bd8deac569c, 68a6afe50e0f3bd8deac56bc, 68a6afe50e0f3bd8deac56f3, 68a6afe50e0f3bd8deac56fb, 68a6afe50e0f3bd8deac5716, 68a6afe50e0f3bd8deac573c, 68a6afe50e0f3bd8deac576f, 68a6afe50e0f3bd8deac578b, 68a6afe50e0f3bd8deac57af, 68a6afe50e0f3bd8deac57c6, 68a6afe50e0f3bd8deac57f0, 68a6afe50e0f3bd8deac5805, 68a6afe50e0f3bd8deac583c, 68a6afe50e0f3bd8deac5846, 68a6afe50e0f3bd8deac586e, 68a6afe50e0f3bd8deac588a, 68a6afe50e0f3bd8deac58b5, 68a6afe50e0f3bd8deac58c6, 68a6afe50e0f3bd8deac58f5, 68a6afe50e0f3bd8deac5900, 68a6afe50e0f3bd8deac5936, 68a6afe50e0f3bd8deac5946, 68a6afe50e0f3bd8deac5966, 68a6afe50e0f3bd8deac599d, 68a6afe50e0f3bd8deac59aa, 68a6afe50e0f3bd8deac59c6, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeRegistration.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, 2025-07-16T23:20:19Z, ...] [dec31876aa64a7b08bfca9e775ab3a16] [5fb12f096849f23353132d80d6660ab448507a0b] [1f715ca7aa5b33fc8077564d8fc07552dba6c7a9e2887e583c4e1b58da17dd770acdc1dd63b4e91fee68929d18194985] [ee676366ca355ba80e933358d891d5935dabe3687ca99e0ad75f19be220017b3721d6594f1b5a45eecc10a7ac128be92cb7b8489d358bb4f30508ec7b12d4320] [172.17.30.60] [172.17.30.60] 1 Success AmeRegistration.dll C:\Program Files\Fujifilm\NaxisWS6\ 119296 dec31876aa64a7b08bfca9e775ab3a16 Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:00:08 +0000 UTC 5fb12f096849f23353132d80d6660ab448507a0b 1f715ca7aa5b33fc8077564d8fc07552dba6c7a9e2887e583c4e1b58da17dd770acdc1dd63b4e91fee68929d18194985 ee676366ca355ba80e933358d891d5935dabe3687ca99e0ad75f19be220017b3721d6594f1b5a45eecc10a7ac128be92cb7b8489d358bb4f30508ec7b12d4320 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
dbf17863020ad597586a772324b5f8a58d30e5317860ed83a8759f3fee25c2ae [68a17c6313d38093271e4d7e, 68a2cde79ef546c806451f9c, 68a4212d6d0e46c2f152938e, 68a5711ca55e4f736b7b2bfb, 68a6c2bdb866e479a63a4424] [2] [WVUHPAN] [i-NPANHS] [HS] [C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-17T06:51:03Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z, 2025-08-21T06:51:03Z] [5359fd72aed1c21485d8508751b4089a] [3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec] [191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b] [f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d] [172.17.253.167] [172.17.253.167] 1 Success no-ie.ps1 C:\Program Files\Quest Software\Management Shell for AD\ 1574 5359fd72aed1c21485d8508751b4089a Not Signed 2022-05-17 12:28:16 +0000 UTC 2022-05-17 19:02:24 +0000 UTC 3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec 191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d 2025-08-09 06:51:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dbe1be4ea777f96af8e8efc887e486012f84255f819c5bc54016fbc01c0513b5 [68a3e79bb5e28efad9fbee2b] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T02:55:20Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 02:55:23 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
db9f7bd0a28a1567fd07b17ffb7689bf2e9b03d046a94003d0c62fc2f45bd648 [68a4ccc785b914a60d739e55, 68a4ce1fc826337212f53bf2, 68a4d07753a851daf11e693d, 68a4d07753a851daf11e6954, 68a4d2d1ff2b441b84428135, 68a4d2d1ff2b441b8442814c] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\Pipe.dll] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe] [C:\Windows\System32\cmd.exe] [2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z] [33426740c0243bb202d68a135106ecb9] [7b96d6dad1ed33ea163a6650fe03599778926ab5] [7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307] [5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a] [10.36.132.49] [10.36.132.49] 1 Success Pipe.dll C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\ 20992 33426740c0243bb202d68a135106ecb9 Not Signed 2021-10-20 13:41:11 +0000 UTC 2016-12-02 07:12:48 +0000 UTC 7b96d6dad1ed33ea163a6650fe03599778926ab5 7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307 5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ddc11b0935a1257cddc61739cb1d4792f21f2152223db450e927370695688375 [68a6afe50e0f3bd8deac4d05, 68a6afe50e0f3bd8deac4d15, 68a6afe50e0f3bd8deac4d47, 68a6afe50e0f3bd8deac4d63, 68a6afe50e0f3bd8deac4d87, 68a6afe50e0f3bd8deac4da7, 68a6afe50e0f3bd8deac4dc3, 68a6afe50e0f3bd8deac4de2, 68a6afe50e0f3bd8deac4e03, 68a6afe50e0f3bd8deac4e23, 68a6afe50e0f3bd8deac4e43, 68a6afe50e0f3bd8deac4e63, 68a6afe50e0f3bd8deac4e83, 68a6afe50e0f3bd8deac4ea3, 68a6afe50e0f3bd8deac4eb3, 68a6afe50e0f3bd8deac4ee3, 68a6afe50e0f3bd8deac4f03, 68a6afe50e0f3bd8deac4f23, 68a6afe50e0f3bd8deac4f43, 68a6afe50e0f3bd8deac4f71, 68a6afe50e0f3bd8deac4f8d, 68a6afe50e0f3bd8deac4fac, 68a6afe50e0f3bd8deac4fcd, 68a6afe50e0f3bd8deac4fed, 68a6afe50e0f3bd8deac500d, 68a6afe50e0f3bd8deac502d, 68a6afe50e0f3bd8deac5050, 68a6afe50e0f3bd8deac506d, 68a6afe50e0f3bd8deac508d, 68a6afe50e0f3bd8deac50b7, 68a6afe50e0f3bd8deac50da, 68a6afe50e0f3bd8deac50f7, 68a6afe50e0f3bd8deac5120, 68a6afe50e0f3bd8deac5141, 68a6afe50e0f3bd8deac5161, 68a6afe50e0f3bd8deac518b, 68a6afe50e0f3bd8deac51ab, 68a6afe50e0f3bd8deac51cf, 68a6afe50e0f3bd8deac51f0, 68a6afe50e0f3bd8deac51fe, 68a6afe50e0f3bd8deac5215, 68a6afe50e0f3bd8deac524c, 68a6afe50e0f3bd8deac526c, 68a6afe50e0f3bd8deac5284, 68a6afe50e0f3bd8deac52a0, 68a6afe50e0f3bd8deac52c0, 68a6afe50e0f3bd8deac52e0, 68a6afe50e0f3bd8deac5300, 68a6afe50e0f3bd8deac5320, 68a6afe50e0f3bd8deac5340, 68a6afe50e0f3bd8deac5360, 68a6afe50e0f3bd8deac5380, 68a6afe50e0f3bd8deac53a5, 68a6afe50e0f3bd8deac53c1, 68a6afe50e0f3bd8deac53ea, 68a6afe50e0f3bd8deac5405, 68a6afe50e0f3bd8deac5426, 68a6afe50e0f3bd8deac5441, 68a6afe50e0f3bd8deac5466, 68a6afe50e0f3bd8deac5486, 68a6afe50e0f3bd8deac54a9, 68a6afe50e0f3bd8deac54c6, 68a6afe50e0f3bd8deac54e6, 68a6afe50e0f3bd8deac5506, 68a6afe50e0f3bd8deac5526, 68a6afe50e0f3bd8deac5546, 68a6afe50e0f3bd8deac5570, 68a6afe50e0f3bd8deac5590, 68a6afe50e0f3bd8deac55b0, 68a6afe50e0f3bd8deac55d0, 68a6afe50e0f3bd8deac55f0, 68a6afe50e0f3bd8deac5610, 68a6afe50e0f3bd8deac5630, 68a6afe50e0f3bd8deac5639, 68a6afe50e0f3bd8deac5664, 68a6afe50e0f3bd8deac5684, 68a6afe50e0f3bd8deac56ae, 68a6afe50e0f3bd8deac56ce, 68a6afe50e0f3bd8deac56e6, 68a6afe50e0f3bd8deac570d, 68a6afe50e0f3bd8deac572c, 68a6afe50e0f3bd8deac574e, 68a6afe50e0f3bd8deac5757, 68a6afe50e0f3bd8deac5796, 68a6afe50e0f3bd8deac57a2, 68a6afe50e0f3bd8deac57db, 68a6afe50e0f3bd8deac57e2, 68a6afe50e0f3bd8deac5816, 68a6afe50e0f3bd8deac582e, 68a6afe50e0f3bd8deac5858, 68a6afe50e0f3bd8deac5860, 68a6afe50e0f3bd8deac588f, 68a6afe50e0f3bd8deac58ab, 68a6afe50e0f3bd8deac58db, 68a6afe50e0f3bd8deac58e0, 68a6afe50e0f3bd8deac5916, 68a6afe50e0f3bd8deac592d, 68a6afe50e0f3bd8deac5958, 68a6afe50e0f3bd8deac5978, 68a6afe50e0f3bd8deac598e, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\libpqxx.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [9b49d5560ec12a5b94486ad83f68b716] [6675224f5d816590c6deb0fc830930e10f134891] [12838c74b5ffe7ade8b1741d614998a5ddbbbd6e484a403bff7073bbc3f557eecf08f34a760764073a38ca5af9451964] [c759b713910ddccee364a72c2e40ec3868283d55506716150d48b1c943d0bccbbc61d7c305fccdf225ffde8fce8f475a3d5a763f2129a6ffcf4c944174cf61c9] [172.17.30.60] [172.17.30.60] 1 Success libpqxx.dll C:\Program Files\Fujifilm\NaxisWS6\ 366592 9b49d5560ec12a5b94486ad83f68b716 Not Signed 2023-11-03 20:25:46 +0000 UTC 2023-03-07 00:33:42 +0000 UTC 6675224f5d816590c6deb0fc830930e10f134891 12838c74b5ffe7ade8b1741d614998a5ddbbbd6e484a403bff7073bbc3f557eecf08f34a760764073a38ca5af9451964 c759b713910ddccee364a72c2e40ec3868283d55506716150d48b1c943d0bccbbc61d7c305fccdf225ffde8fce8f475a3d5a763f2129a6ffcf4c944174cf61c9 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
ddb5478003d9e73dd5dd8700653c4556a0edc15ef9af2674058066621d20be35 [68a306a5ba5832f49fe9cf46] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2MISC.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [887be2143763b82d482004eb0c1ba6aa] [58347c4d22a8391f152f61fd64cb71ba0ad3a88f] [d16a633cdc707372d9a06e945fe43f2e8a237f16709a8344176453587db80a0db248cb27d251beffed039f13f86cd20f] [4e1e3d5d1bf29e6ab2af201c45f13cf6f5d11ce9a0dd91325fb249bdd715846a843fd71a0647c0211529dc94618b0d768c4dcdaa6aeec254a0d2023f40ee192c] [172.17.146.33] [172.17.146.33] 1 Success DI2MISC.BPL C:\DICORP\DICORP_V5\RW\APPS\ 15872 887be2143763b82d482004eb0c1ba6aa 1.01 Not Signed 2022-07-06 14:52:10 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 58347c4d22a8391f152f61fd64cb71ba0ad3a88f d16a633cdc707372d9a06e945fe43f2e8a237f16709a8344176453587db80a0db248cb27d251beffed039f13f86cd20f 4e1e3d5d1bf29e6ab2af201c45f13cf6f5d11ce9a0dd91325fb249bdd715846a843fd71a0647c0211529dc94618b0d768c4dcdaa6aeec254a0d2023f40ee192c 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:11:23 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
dd6a23c7089b29d9b9af510e2f872b5cc369c931923f5b21c9395923f098d9c1 [68a3146b5f0c41860c8c84eb, 68a3146b5f0c41860c8c851f] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z] [489c61297357b3b99fc16ea3dc1721ab] [5eae896c5218fd0730f2f34757a7d18ea262c3e4] [b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40] [b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f] [172.17.252.131] [172.17.252.131] 1 Success pywin32_bootstrap.cpython-313.pyc C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\ 1024 489c61297357b3b99fc16ea3dc1721ab Not Signed 2024-11-22 16:26:08 +0000 UTC 2024-11-22 16:26:08 +0000 UTC 5eae896c5218fd0730f2f34757a7d18ea262c3e4 b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40 b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dd57120f1f0e0134e39fc66cab1a7663decce9115a80a252ce9a5793be13137e [68a34b98a6132bf659cce5c4, 68a34df0b71eea1289980a29] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Reports.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:40Z, 2025-08-18T15:58:42Z] [5f532decc4fe7a6cc887d3a1f58b0708] [7692172ed549773ca24d98e7a532942ddc3fccc5] [356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0] [25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc] [172.17.253.114] [172.17.253.114] 1 Success RS2Technologies.AccessItUniversal.Reports.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ 264192 5f532decc4fe7a6cc887d3a1f58b0708 Access It! 10.1.0.7 Not Signed 2023-07-25 16:11:56 +0000 UTC 2023-07-25 16:11:56 +0000 UTC 7692172ed549773ca24d98e7a532942ddc3fccc5 356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0 25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc 2025-06-09 22:00:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
08b51bdd723445a16a1459d004236362881607ad0bda1cded1d8419840e45654 [68a45bd8dc6569137dd741b1] [2] [SYSTEM] [TMH-CTX-APP4] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kt0kbq03.23l.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T11:11:09Z] [] [] [] [] [172.17.246.19] [172.17.246.19] 1 Success __PSScriptPolicyTest_kt0kbq03.23l.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 11:11:09 +0000 UTC 2025-08-19 11:11:09 +0000 UTC 2025-08-19 11:11:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
087e4a37a25c5d223418e7436fb620da2355df097dc7e784d42a27eb285e705f [68a3146b5f0c41860c8c84ef, 68a3146b5f0c41860c8c8549] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\_weakrefset.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [c3a0dbdac023a9bed4a30ae4a485e887] [59ea990ad4dc88bc52852b0d7349a1512269acb2] [16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e] [e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417] [172.17.252.131] [172.17.252.131] 1 Success _weakrefset.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 12041 c3a0dbdac023a9bed4a30ae4a485e887 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 59ea990ad4dc88bc52852b0d7349a1512269acb2 16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
082ee54996b9d1c387dd5fba170e1b0ca068decddc056bf52d1ed770debb2743 [68a31b1aa6cbff78a3c29454] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:22:44Z] [5178c69f2009d11787441469d3cf852c] [b98a92206f5e709e937c34e092b2d601dd1408d0] [ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568] [9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2199 5178c69f2009d11787441469d3cf852c Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 12:22:40 +0000 UTC b98a92206f5e709e937c34e092b2d601dd1408d0 ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568 9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51 2025-08-18 12:22:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0804f04924c64975b554df69b97749068c8644ab6bdd250ce1302a8dbe4fb39f [68a6afe50e0f3bd8deac4cea, 68a6afe50e0f3bd8deac4cf9, 68a6afe50e0f3bd8deac4d13, 68a6afe50e0f3bd8deac4d3b, 68a6afe50e0f3bd8deac4d5b, 68a6afe50e0f3bd8deac4d81, 68a6afe50e0f3bd8deac4da1, 68a6afe50e0f3bd8deac4dc1, 68a6afe50e0f3bd8deac4de1, 68a6afe50e0f3bd8deac4e02, 68a6afe50e0f3bd8deac4e21, 68a6afe50e0f3bd8deac4e41, 68a6afe50e0f3bd8deac4e61, 68a6afe50e0f3bd8deac4e81, 68a6afe50e0f3bd8deac4ea1, 68a6afe50e0f3bd8deac4eac, 68a6afe50e0f3bd8deac4ee1, 68a6afe50e0f3bd8deac4f01, 68a6afe50e0f3bd8deac4f1b, 68a6afe50e0f3bd8deac4f41, 68a6afe50e0f3bd8deac4f6b, 68a6afe50e0f3bd8deac4f8b, 68a6afe50e0f3bd8deac4fab, 68a6afe50e0f3bd8deac4fcb, 68a6afe50e0f3bd8deac4feb, 68a6afe50e0f3bd8deac500b, 68a6afe50e0f3bd8deac502b, 68a6afe50e0f3bd8deac504b, 68a6afe50e0f3bd8deac506b, 68a6afe50e0f3bd8deac508b, 68a6afe50e0f3bd8deac50af, 68a6afe50e0f3bd8deac50d5, 68a6afe50e0f3bd8deac50f5, 68a6afe50e0f3bd8deac511f, 68a6afe50e0f3bd8deac513e, 68a6afe50e0f3bd8deac515f, 68a6afe50e0f3bd8deac5189, 68a6afe50e0f3bd8deac51a9, 68a6afe50e0f3bd8deac51c9, 68a6afe50e0f3bd8deac51eb, 68a6afe50e0f3bd8deac51fc, 68a6afe50e0f3bd8deac522d, 68a6afe50e0f3bd8deac524a, 68a6afe50e0f3bd8deac526a, 68a6afe50e0f3bd8deac5278, 68a6afe50e0f3bd8deac529e, 68a6afe50e0f3bd8deac52be, 68a6afe50e0f3bd8deac52d8, 68a6afe50e0f3bd8deac52fe, 68a6afe50e0f3bd8deac531e, 68a6afe50e0f3bd8deac533e, 68a6afe50e0f3bd8deac535e, 68a6afe50e0f3bd8deac537e, 68a6afe50e0f3bd8deac539e, 68a6afe50e0f3bd8deac53c7, 68a6afe50e0f3bd8deac53de, 68a6afe50e0f3bd8deac5403, 68a6afe50e0f3bd8deac5424, 68a6afe50e0f3bd8deac543f, 68a6afe50e0f3bd8deac545e, 68a6afe50e0f3bd8deac5485, 68a6afe50e0f3bd8deac54a4, 68a6afe50e0f3bd8deac54c4, 68a6afe50e0f3bd8deac54e4, 68a6afe50e0f3bd8deac5504, 68a6afe50e0f3bd8deac5524, 68a6afe50e0f3bd8deac5544, 68a6afe50e0f3bd8deac556e, 68a6afe50e0f3bd8deac558e, 68a6afe50e0f3bd8deac55ae, 68a6afe50e0f3bd8deac55c8, 68a6afe50e0f3bd8deac55ee, 68a6afe50e0f3bd8deac5608, 68a6afe50e0f3bd8deac562e, 68a6afe50e0f3bd8deac565e, 68a6afe50e0f3bd8deac567e, 68a6afe50e0f3bd8deac56ac, 68a6afe50e0f3bd8deac56cd, 68a6afe50e0f3bd8deac56de, 68a6afe50e0f3bd8deac5706, 68a6afe50e0f3bd8deac5720, 68a6afe50e0f3bd8deac574c, 68a6afe50e0f3bd8deac5779, 68a6afe50e0f3bd8deac578e, 68a6afe50e0f3bd8deac57a0, 68a6afe50e0f3bd8deac57d6, 68a6afe50e0f3bd8deac57ff, 68a6afe50e0f3bd8deac580e, 68a6afe50e0f3bd8deac5827, 68a6afe50e0f3bd8deac5850, 68a6afe50e0f3bd8deac587f, 68a6afe50e0f3bd8deac588e, 68a6afe50e0f3bd8deac58a6, 68a6afe50e0f3bd8deac58d6, 68a6afe50e0f3bd8deac58ff, 68a6afe50e0f3bd8deac5910, 68a6afe50e0f3bd8deac5921, 68a6afe50e0f3bd8deac5950, 68a6afe50e0f3bd8deac5970, 68a6afe50e0f3bd8deac598f, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeMesa.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [57b5e3f139c1de2cf57df7af8b2403ca] [647476be67f32160b2282f234c20f2f27495175f] [0b2a38cc0299bc198b3bf15d5c97840ffca67df3cb43562a7f94fc83a50ddc0e247655672622aebc664279ae27112652] [f69ca7368656af8daaed2770afd2cf14e7a22eb0d2e22cb60e083d4fc293c4b32e863bdb465b8d5a1678ff9743efe9363f8c5b419af6f64593d279c4d1d746ca] [172.17.30.60] [172.17.30.60] 1 Success AmeMesa.dll C:\Program Files\Fujifilm\NaxisWS6\ 2047488 57b5e3f139c1de2cf57df7af8b2403ca Not Signed 2023-11-03 20:25:43 +0000 UTC 2021-08-30 00:40:22 +0000 UTC 647476be67f32160b2282f234c20f2f27495175f 0b2a38cc0299bc198b3bf15d5c97840ffca67df3cb43562a7f94fc83a50ddc0e247655672622aebc664279ae27112652 f69ca7368656af8daaed2770afd2cf14e7a22eb0d2e22cb60e083d4fc293c4b32e863bdb465b8d5a1678ff9743efe9363f8c5b419af6f64593d279c4d1d746ca 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
07e92a00627641ee1a5bd7dd8c11fca9dc02849587920392ed696a311e270f34 [68a1a4e2395a90b784ea5df9] [2] [SYSTEM] [U-nCTX-SF1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zeppjcbv.oxo.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:45:59Z] [] [] [] [] [172.25.246.19] [172.25.246.19] 1 Success __PSScriptPolicyTest_zeppjcbv.oxo.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:45:59 +0000 UTC 2025-08-17 09:45:59 +0000 UTC 2025-08-17 09:46:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
07c5a9e87f8d1342d99a2d1d8ff7895f21fbb4d1eb322cd2420fb24fe5e51948 [68a36b1bb41b8f9dba5eed01] [2] [my10040sa] [i-hventana] [WVUHS] [D:\InterSystems\HSFoundation\bin\csystray.exe] [Servers] [Servers Audit] [v2264.862] ["D:\InterSystems\HSFoundation\bin\csystray.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-18T17:54:24Z] [fdba33aaa9751de8b7604fbf6dfb51c8] [71560cdf025fc32080b07eca0f4247a77d960368] [56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426] [18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d] [172.17.253.63] [172.17.253.63] 1 Success csystray.exe D:\InterSystems\HSFoundation\bin\ Cache' Cube 1354240 fdba33aaa9751de8b7604fbf6dfb51c8 Cache' 2017.2.2.865.3.19109 Not Signed 2019-07-16 21:11:24 +0000 UTC 2019-07-16 21:11:24 +0000 UTC 71560cdf025fc32080b07eca0f4247a77d960368 56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426 18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d 2025-06-02 14:01:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
07a30398c07f3854e1a7c3bd58c01fafe25c6a7d1bb13feea789727020a888b2 [68a17a44cb9bfce9795803bd] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tw4phzvm.nwz.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:44:12Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_tw4phzvm.nwz.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:44:12 +0000 UTC 2025-08-17 06:44:12 +0000 UTC 2025-08-17 06:44:20 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
07968177016a718ed43b2924f24461437c58d6be3aca549059e7097eb38fe4d4 [68a4b0fb13fac5171eeef0db] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.WinSocket.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:26Z] [e04f8c818fa02aab64810078da470416] [be46d5ecd87559de68ef86566904698276e28a1c] [01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755] [944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.Infrastructure.WinSocket.dll C:\Program Files (x86)\Cyrun\ADS - 17978\ Cyrun.Infrastructure.Socket 33280 e04f8c818fa02aab64810078da470416 Cyrun.Infrastructure.Socket 1.0.0.0 Not Signed 2019-09-13 08:50:20 +0000 UTC 2025-05-22 18:17:46 +0000 UTC be46d5ecd87559de68ef86566904698276e28a1c 01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755 944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081 2025-05-22 18:47:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
074ce0f504955fa14064a7193cfba318e61c1b6dc27e59b6975601e39df50845 [68a19f422de3174858366afa] [2] [SYSTEM] [GMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gra3lynm.d1r.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T09:22:04Z] [] [] [] [] [172.31.241.7] [172.31.241.7] 1 Success __PSScriptPolicyTest_gra3lynm.d1r.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 09:22:04 +0000 UTC 2025-08-17 09:22:04 +0000 UTC 2025-08-17 09:22:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
06df260c7f1ba98730dee7d60aff5ecc12aa9273592a62980464f2493eb4db25 [68a523949cec397f02de9f49] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BSSIDControl.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:26Z] [de8df8b7c6fc4502d6f9335776b32154] [850b37d6e0057b3ff641e78b7dd7f64fe1d7f109] [8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f] [9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65] [172.17.22.40] [172.17.22.40] 1 Success BSSIDControl.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ BSSIDControl 10240 de8df8b7c6fc4502d6f9335776b32154 BSSIDControl 1.0.0.0 Not Signed 2023-06-15 02:36:22 +0000 UTC 2023-06-15 02:36:22 +0000 UTC 850b37d6e0057b3ff641e78b7dd7f64fe1d7f109 8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f 9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
06d6384eaa2d1376de884f3855044df87f2e12c1b92086a6f8723dd79a85457b [68a4b0fb13fac5171eeef0d7] [2] [CA_Jnt_CyrunSrv1] [vm-cyrun] [WVUHS] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.dll] [Servers] [Servers Audit] [v2280.872] [] [Not Signed] [C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe] [C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe] [2025-08-19T17:08:08Z] [7d99492eba75b4117d502f502784bec7] [3ec8beef2e968bb0740afb894a42a4cb412370a1] [4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830] [43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b] [172.17.252.160] [172.17.252.160] 1 Success Cyrun.Infrastructure.dll C:\Program Files (x86)\Cyrun\ADS - 17978\ Cyrun.Infrastructure 125952 7d99492eba75b4117d502f502784bec7 Pegasus 7.0.4.4644 Not Signed 2019-09-13 08:50:18 +0000 UTC 2025-05-22 18:17:46 +0000 UTC 3ec8beef2e968bb0740afb894a42a4cb412370a1 4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830 43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b 2025-05-22 18:47:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
06aec840e3420e9ac5793a51e4fa034e6c50cd5ac7c77376db02fb17c10e8a4e [68a5239e621d09b2b1ed5e55] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\protobuf-net.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:37Z] [cbf0121ce9830b1e0154e009e8f8890b] [9239cf3c1d4028803976e503f617c293b6a0fa6c] [708fcbe861118f6344cc76c7d77bdefaf14e8ac67fa6f55fe96b81996280dcfcafb2df45fbf4ec01f11ba8873f46d276] [ede75d844b7a848a389dddcb610fe3f0b9767be886131dcaf2f4ff42c5c19531d7ad11538cfeaabd5b0151ae73ebd93648e1c4ef0b97de72679669caafb0bdb1] [172.17.22.40] [172.17.22.40] 1 Success protobuf-net.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ protobuf-net 188928 cbf0121ce9830b1e0154e009e8f8890b protobuf-net 2.0.0.621 Not Signed 2023-06-15 02:36:18 +0000 UTC 2023-06-15 02:36:18 +0000 UTC 9239cf3c1d4028803976e503f617c293b6a0fa6c 708fcbe861118f6344cc76c7d77bdefaf14e8ac67fa6f55fe96b81996280dcfcafb2df45fbf4ec01f11ba8873f46d276 ede75d844b7a848a389dddcb610fe3f0b9767be886131dcaf2f4ff42c5c19531d7ad11538cfeaabd5b0151ae73ebd93648e1c4ef0b97de72679669caafb0bdb1 2025-08-20 01:23:42 +0000 UTC None None 2024-04-23 02:39:51 +0000 UTC 69 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
e0c668862894797d5ef235021b63abf727ee5c656d490ee98fecd70afaef483a [68a34d6610b57c5bffc57db0] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:29Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43 [68a4e8a1ad898641af98fd92, 68a4fcd0011d94a251a4ef2e] [2] [CA_gs10109] [i-ncapsule12] [WVUHS] [C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\SimpleSC.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\SimpleSC.dll] [Servers] [Servers Audit] [v2283, v2284] [] [Not Signed] [C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp] [C:\Windows\System32\msiexec.exe] [2025-08-19T21:11:53Z, 2025-08-19T22:09:40Z] [d63975ce28f801f236c4aca5af726961] [3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9] [12329ec18fd8a4ef20e767657ebd3cd67557dfcde0f57ec77a99344d6af62315a32482f5cdc3ee6086aa5119aa2dde43] [8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810] [172.17.23.18] [172.17.23.18] 1 Success SimpleSC.dll C:\Users\mountaineer\AppData\Local\Temp\nsnA49A.tmp\ 62976 d63975ce28f801f236c4aca5af726961 Not Signed 2025-08-06 18:46:03 +0000 UTC 2025-08-06 18:46:03 +0000 UTC 3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9 12329ec18fd8a4ef20e767657ebd3cd67557dfcde0f57ec77a99344d6af62315a32482f5cdc3ee6086aa5119aa2dde43 8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810 2025-08-06 18:46:14 +0000 UTC None None 2025-08-05 01:53:54 +0000 UTC 73 1 KNOWN 0 Benign 0.20 2025-08-06 18:51:16.389 +0000 UTC
e0bec8be6fc453c6af4051e4b801303bea9c328f59b7d7ff40251c10de600125 [68a232a8e87ce966b73e852e] [2] [SYSTEM] [i-nctxddc-dev2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eiug2m5n.wwg.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:50:51Z] [] [] [] [] [172.17.146.24] [172.17.146.24] 1 Success __PSScriptPolicyTest_eiug2m5n.wwg.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:50:51 +0000 UTC 2025-08-17 19:50:51 +0000 UTC 2025-08-17 19:51:04 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e0b4a5a243fe5848fc77cefd16f94933d35229556186830f24fcf2065eec786a [68a17bc07b632e8a862c1429] [2] [SYSTEM] [i-hvhprod12] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xtfzriej.1md.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:50:36Z] [] [] [] [] [172.17.21.88] [172.17.21.88] 1 Success __PSScriptPolicyTest_xtfzriej.1md.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:50:36 +0000 UTC 2025-08-17 06:50:36 +0000 UTC 2025-08-17 06:50:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e006a3c090e787efe255b9971ccedae2e9c06e45a5651a93bad0264d16e059c5 [68a4a6605961c54c81f645ca] [2] [be10045eu] [i-nsdprodmon1] [WVUHS] [C:\scripts\SSLCertCheck.ps1] [Servers] [Servers Audit] [v2276.868] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-19T16:29:16Z] [14ef36866a2842bd51446da8d40d5cde] [1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0] [0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56] [f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1] [172.17.252.208] [172.17.252.208] 1 Success SSLCertCheck.ps1 C:\scripts\ 2636 14ef36866a2842bd51446da8d40d5cde Not Signed 2023-08-09 13:18:30 +0000 UTC 2025-07-21 19:17:19 +0000 UTC 1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0 0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56 f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1 2025-08-19 16:29:20 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
dfcf845f19db5636117dd95e7cf19c214cfb8e1e38fbff8f4bc16ca210800a3b [68a472a799ad3734d804e2dd] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-constants-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [158034089399c239063fd00ebe5a99f0] [5b29253d1cfa01e04c69e7c28bb8300feea8cc56] [80da9f87d077574696d9e0a3c7eca35f441e81a5541d17dc9b12e802296a1f6a6c7eb63729b2a47111954911b0554cde] [0bafd1005e776867c0a51970a515c7ccc0d7ed7b1543dd009c8d4e148e8d6fcd9d3241e2b52a2d272655ef46461c227e4e51029bf3070efa7e9f4afb52e10757] [172.17.23.146] [172.17.23.146] 1 Success batik-constants-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 8271 158034089399c239063fd00ebe5a99f0 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 5b29253d1cfa01e04c69e7c28bb8300feea8cc56 80da9f87d077574696d9e0a3c7eca35f441e81a5541d17dc9b12e802296a1f6a6c7eb63729b2a47111954911b0554cde 0bafd1005e776867c0a51970a515c7ccc0d7ed7b1543dd009c8d4e148e8d6fcd9d3241e2b52a2d272655ef46461c227e4e51029bf3070efa7e9f4afb52e10757 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:08:33 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
dfb65002256db6ec059ac1994861030cc37096640ef394054187e6e5df234542 [68a1b088a503d43204bbb9e4] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sszg4ffh.uu5.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:35:39Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_sszg4ffh.uu5.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:35:39 +0000 UTC 2025-08-17 10:35:39 +0000 UTC 2025-08-17 10:35:52 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
dfb45ff554590eb9467d82835099f80d0f504c203845681b55292eaab0883644 [68a164c5390404f85b716adb, 68a2b64cfd812c7de4e545b0, 68a408129f3185cbaca3c5cb, 68a559bf118aff08c8ed4944, 68a6a931f7c977ec1548fcf2] [2] [SYSTEM] [i-vroggera] [NT AUTHORITY] [C:\icm\pcce\ra\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z] [8cb39e842d0db0518f876501538e460b] [77b6e192cbf04a40b6e0e32a73cc770695495f56] [afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88] [339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600] [172.17.196.42] [172.17.196.42] 1 Success purgeold.bat C:\icm\pcce\ra\bin\ 406 8cb39e842d0db0518f876501538e460b Not Signed 2021-10-07 20:04:20 +0000 UTC 2021-10-07 20:04:20 +0000 UTC 77b6e192cbf04a40b6e0e32a73cc770695495f56 afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88 339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
df59c90ff58eea7ae95fdc5e4c77dfdf4e9131bf9d53d9a86f572e18db33c8bc [68a6afe50e0f3bd8deac4cff, 68a6afe50e0f3bd8deac4d12, 68a6afe50e0f3bd8deac4d42, 68a6afe50e0f3bd8deac4d61, 68a6afe50e0f3bd8deac4d80, 68a6afe50e0f3bd8deac4da0, 68a6afe50e0f3bd8deac4dc0, 68a6afe50e0f3bd8deac4de0, 68a6afe50e0f3bd8deac4e00, 68a6afe50e0f3bd8deac4e20, 68a6afe50e0f3bd8deac4e40, 68a6afe50e0f3bd8deac4e60, 68a6afe50e0f3bd8deac4e80, 68a6afe50e0f3bd8deac4ea0, 68a6afe50e0f3bd8deac4ebb, 68a6afe50e0f3bd8deac4ee0, 68a6afe50e0f3bd8deac4f00, 68a6afe50e0f3bd8deac4f21, 68a6afe50e0f3bd8deac4f40, 68a6afe50e0f3bd8deac4f6a, 68a6afe50e0f3bd8deac4f8a, 68a6afe50e0f3bd8deac4faa, 68a6afe50e0f3bd8deac4fca, 68a6afe50e0f3bd8deac4fea, 68a6afe50e0f3bd8deac500a, 68a6afe50e0f3bd8deac502a, 68a6afe50e0f3bd8deac504a, 68a6afe50e0f3bd8deac506a, 68a6afe50e0f3bd8deac508a, 68a6afe50e0f3bd8deac50b6, 68a6afe50e0f3bd8deac50d4, 68a6afe50e0f3bd8deac50f4, 68a6afe50e0f3bd8deac511e, 68a6afe50e0f3bd8deac513f, 68a6afe50e0f3bd8deac515e, 68a6afe50e0f3bd8deac5188, 68a6afe50e0f3bd8deac51a8, 68a6afe50e0f3bd8deac51c8, 68a6afe50e0f3bd8deac51e9, 68a6afe50e0f3bd8deac51fb, 68a6afe50e0f3bd8deac5233, 68a6afe50e0f3bd8deac5249, 68a6afe50e0f3bd8deac5269, 68a6afe50e0f3bd8deac527e, 68a6afe50e0f3bd8deac529d, 68a6afe50e0f3bd8deac52bc, 68a6afe50e0f3bd8deac52de, 68a6afe50e0f3bd8deac52fd, 68a6afe50e0f3bd8deac531d, 68a6afe50e0f3bd8deac533d, 68a6afe50e0f3bd8deac535d, 68a6afe50e0f3bd8deac537d, 68a6afe50e0f3bd8deac53a6, 68a6afe50e0f3bd8deac53c0, 68a6afe50e0f3bd8deac53e5, 68a6afe50e0f3bd8deac5402, 68a6afe50e0f3bd8deac5423, 68a6afe50e0f3bd8deac543e, 68a6afe50e0f3bd8deac5465, 68a6afe50e0f3bd8deac5483, 68a6afe50e0f3bd8deac54a3, 68a6afe50e0f3bd8deac54c3, 68a6afe50e0f3bd8deac54e3, 68a6afe50e0f3bd8deac5503, 68a6afe50e0f3bd8deac5523, 68a6afe50e0f3bd8deac5543, 68a6afe50e0f3bd8deac556d, 68a6afe50e0f3bd8deac558d, 68a6afe50e0f3bd8deac55ad, 68a6afe50e0f3bd8deac55ce, 68a6afe50e0f3bd8deac55ed, 68a6afe50e0f3bd8deac560f, 68a6afe50e0f3bd8deac562d, 68a6afe50e0f3bd8deac565d, 68a6afe50e0f3bd8deac567d, 68a6afe50e0f3bd8deac568e, 68a6afe50e0f3bd8deac56ab, 68a6afe50e0f3bd8deac56cb, 68a6afe50e0f3bd8deac56e5, 68a6afe50e0f3bd8deac570e, 68a6afe50e0f3bd8deac5726, 68a6afe50e0f3bd8deac574b, 68a6afe50e0f3bd8deac5756, 68a6afe50e0f3bd8deac5795, 68a6afe50e0f3bd8deac57bf, 68a6afe50e0f3bd8deac57d5, 68a6afe50e0f3bd8deac57e1, 68a6afe50e0f3bd8deac5815, 68a6afe50e0f3bd8deac582f, 68a6afe50e0f3bd8deac5855, 68a6afe50e0f3bd8deac587d, 68a6afe50e0f3bd8deac5895, 68a6afe50e0f3bd8deac58a5, 68a6afe50e0f3bd8deac58d5, 68a6afe50e0f3bd8deac58ee, 68a6afe50e0f3bd8deac590f, 68a6afe50e0f3bd8deac5927, 68a6afe50e0f3bd8deac5957, 68a6afe50e0f3bd8deac5976, 68a6afe50e0f3bd8deac598d, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\PrometheusWidgets.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [04f84304a7fd97a5eb0363d4531e0297] [8f181688593bac27afaa0123b5291c97699fb3c4] [f3df118553809d39653bc1d10af522fca6b756e60c59926f7cf8f9e07662d0b49d3f4591e1648ed691ea91632ea45026] [5be9e8b256ad562b93ff6a0f0af0646af836e9732c79b54cd3d323245298fe8decddfbf87ff829e639e4b1c6e4b3cb151c63e89a2adbad15097cdad5f896baf7] [172.17.30.60] [172.17.30.60] 1 Success PrometheusWidgets.dll C:\Program Files\Fujifilm\NaxisWS6\ 1012736 04f84304a7fd97a5eb0363d4531e0297 Not Signed 2023-11-03 20:25:56 +0000 UTC 2023-06-16 03:04:22 +0000 UTC 8f181688593bac27afaa0123b5291c97699fb3c4 f3df118553809d39653bc1d10af522fca6b756e60c59926f7cf8f9e07662d0b49d3f4591e1648ed691ea91632ea45026 5be9e8b256ad562b93ff6a0f0af0646af836e9732c79b54cd3d323245298fe8decddfbf87ff829e639e4b1c6e4b3cb151c63e89a2adbad15097cdad5f896baf7 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
df58757712295dbb1f70447f2200ba2ecd8a06dc9ff15290548d1b3b80fb1b83 [68a387828e5327740b40aeae] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c02y5bwl.mpb.ps1] [Servers] [Servers Audit] [v2268.865] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T20:05:19Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_c02y5bwl.mpb.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 20:05:19 +0000 UTC 2025-08-18 20:05:19 +0000 UTC 2025-08-18 20:05:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
df2e704c8013ebc148076e169fe6c5e9fcd74f25ce39e10aa1b600e19f35a643 [68a171b5b579a67a97fbd1f9] [2] [SYSTEM] [vm-belimed2] [NT AUTHORITY] [C:\Program Files (x86)\Belimed\ICS\ICSLogger.exe] [Servers] [Servers Audit] [v2248.849] ["C:\Program Files (x86)\Belimed\ICS\ICSLogger.exe"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-17T06:02:02Z] [a840b824e40da8993091320aebeb988f] [60e7d969d14e0bc0796863d03c85d7948cd90e13] [694d94fbf1f3d00454b40fa5f46cb07ef4368567d4dce705b27e76c1845ece35bb34899896a41096fce8d3bd0b79025d] [7a3dc5e5728f82fb1f53403d2c378780b9bcbae511f73c384ebeb37d4ac895a445b826893436b4f7a1dd485fc2087a1cb14cb29f1d1d6dd8fec1b709c693bfcb] [172.17.22.203] [172.17.22.203] 1 Success ICSLogger.exe C:\Program Files (x86)\Belimed\ICS\ 6743520 a840b824e40da8993091320aebeb988f R7.10.8LTeam Not Signed 2021-01-26 18:00:44 +0000 UTC 2021-01-26 18:00:44 +0000 UTC 60e7d969d14e0bc0796863d03c85d7948cd90e13 694d94fbf1f3d00454b40fa5f46cb07ef4368567d4dce705b27e76c1845ece35bb34899896a41096fce8d3bd0b79025d 7a3dc5e5728f82fb1f53403d2c378780b9bcbae511f73c384ebeb37d4ac895a445b826893436b4f7a1dd485fc2087a1cb14cb29f1d1d6dd8fec1b709c693bfcb 2025-04-27 06:05:56 +0000 UTC None None 2024-01-27 03:57:33 +0000 UTC 71 1 KNOWN 0 Benign 0.20 2025-04-27 06:06:00.166 +0000 UTC
deeeed5d028c5180fccf19db64c4d30026f7a273b58d1774209d7f54428a3049 [68a34b98a6132bf659cce5ab, 68a34df0b71eea1289980a10] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:11Z, 2025-08-18T15:58:04Z] [07d33d36b0622bb8b733eda26be49820] [68043af4b45668bd2e8612e56b764ec6e561ed42] [e4ae19accf6e5b1a212bc2ae7e4f365f731e21b74a8e94a26da96d7ad7233975fb39d41c16f29a70da87d7946398a083] [16d2374457689acbe084206777d08f42b9c811442e375d082212834a5827f365078cf75f3fab7a3e5553dfcbe88d7a9809cbf7b0337122e7a57c5ae741877125] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ Telerik.WinControls 4848128 07d33d36b0622bb8b733eda26be49820 Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-03-17 19:52:00 +0000 UTC 2023-03-17 19:52:00 +0000 UTC 68043af4b45668bd2e8612e56b764ec6e561ed42 e4ae19accf6e5b1a212bc2ae7e4f365f731e21b74a8e94a26da96d7ad7233975fb39d41c16f29a70da87d7946398a083 16d2374457689acbe084206777d08f42b9c811442e375d082212834a5827f365078cf75f3fab7a3e5553dfcbe88d7a9809cbf7b0337122e7a57c5ae741877125 2025-05-13 12:24:10 +0000 UTC None None 2025-03-08 07:48:13 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-05-13 12:26:34.203 +0000 UTC
deb0e4cd69fbed160f4d6ac325d1dcc371d784f5824a379f46573385a66bb78a [68a472a799ad3734d804e2e0] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-ext-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [a82eff915c881277c39a58de664c2fd4] [a5850a5ae69a88ee18e961f8044dcba452d26e8f] [de4767f77baa3a42db6564b04ab7b56508c29f903c229af7fe872c29f0a33246b188b722df0ff4f2226d3037acca2a14] [6c778654a3edae2002e32efe29c8be9dd829fe620114e9263e3ad0a67598ba540f1450854feef4fcbfbbfed91598029249633b29c791c1112b1a9f3b8f67d187] [172.17.23.146] [172.17.23.146] 1 Success batik-ext-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 10075 a82eff915c881277c39a58de664c2fd4 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC a5850a5ae69a88ee18e961f8044dcba452d26e8f de4767f77baa3a42db6564b04ab7b56508c29f903c229af7fe872c29f0a33246b188b722df0ff4f2226d3037acca2a14 6c778654a3edae2002e32efe29c8be9dd829fe620114e9263e3ad0a67598ba540f1450854feef4fcbfbbfed91598029249633b29c791c1112b1a9f3b8f67d187 2025-08-19 11:29:20 +0000 UTC None None 2022-10-24 04:46:03 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
dea56f31a5b1d22c57115b748b64d8166d83fe01daae5c95607bbb8a6f95e449 [68a1b5c50915c3775058adfa] [2] [SYSTEM] [u-nLanSweep1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iouipeum.4l3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:58:08Z] [] [] [] [] [172.25.17.127] [172.25.17.127] 1 Success __PSScriptPolicyTest_iouipeum.4l3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:58:08 +0000 UTC 2025-08-17 10:58:08 +0000 UTC 2025-08-17 10:58:13 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
de70a46df02c58913df13c7654d2b50ebdcfeb522118e089e9aa8d6e6ef1e166 [68a16bd60756fe54a9918f96, 68a2149cb58debea69d7c741, 68a2bd5ff793a9057f329bf7, 68a3663261f8067c48423eb2, 68a40efceddb3a9f1a71a5f6, 68a4b7cd36bc5d38057e2360] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\libcrypto-3-zm.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [a4f9cbff85279638dde688059cf9b9aa] [0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19] [84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919] [8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5] [10.20.20.68] [10.20.20.68] 1 Success libcrypto-3-zm.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ OpenSSL library 5671224 a4f9cbff85279638dde688059cf9b9aa The OpenSSL Toolkit 3.3.3 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19 84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919 8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5 2025-07-15 17:40:29 +0000 UTC None None 2025-06-12 09:14:27 +0000 UTC 64 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
ddc733167b0596778d6e16240e331d1bb2883d883e36d7f1dfdc3776581914bb [68a3146b5f0c41860c8c84e8, 68a3146b5f0c41860c8c851b] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\encodings\__pycache__\utf_8.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z] [0dc440c9e1c9be2baf0810e74c9235fd] [deefe130f31490b275806f838ec6646ef01515a3] [31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089] [0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc] [172.17.252.131] [172.17.252.131] 1 Success utf_8.cpython-313.pyc C:\Program Files\Python\Lib\encodings\__pycache__\ 2292 0dc440c9e1c9be2baf0810e74c9235fd Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC deefe130f31490b275806f838ec6646ef01515a3 31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089 0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3c2629e3abf692e7083da7cf5fd646f4daa808b6c508101eb41967f95b21b79 [68a5239e621d09b2b1ed5e4b] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBTagDiagPlugIn.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:34Z] [bd3f6d1a4e44a151f39dfbc24eaa84d3] [d1b0ba350c91996b8911a34f503200aa28213ff7] [c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435] [8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d] [172.17.22.40] [172.17.22.40] 1 Success PBTagDiagPlugIn.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ PBTagDiagPlugIn 29184 bd3f6d1a4e44a151f39dfbc24eaa84d3 PBTagDiagPlugIn 1.0.0.0 Not Signed 2023-06-15 02:38:06 +0000 UTC 2023-06-15 02:38:06 +0000 UTC d1b0ba350c91996b8911a34f503200aa28213ff7 c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435 8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3a2d912935cae9b54dfd538ee7eb7135947506037f46e5cd9b0bc84d16147a0 [68a195c4355950638b4c627b] [2] [SYSTEM] [i-nLanSweep2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1npvq1ae.jnp.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:41:36Z] [] [] [] [] [172.17.251.238] [172.17.251.238] 1 Success __PSScriptPolicyTest_1npvq1ae.jnp.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:41:36 +0000 UTC 2025-08-17 08:41:36 +0000 UTC 2025-08-17 08:41:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3896d85ff8aa537b728287b2594a76cca9651906b355a74d52b6a730daf0a2e [68a37149a825b435e1c8aac0] [2] [sf10228] [GRMC-NVR] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.MobileServer.TrayController.exe] [Servers] [Servers Audit] [v2264.860] ["C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.MobileServer.TrayController.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-18T18:28:40Z] [880facc6f6a0973dd69362cfe4716db1] [fb385b47c764ca6da1ea9060069942aa9c6b73f7] [6fb422acb0ab4cf1a64e75889ae11629e5cf8a8e88427bd774cfc26ab9ff5b2a5712b86580ee7c72cb5ebefdb4822aba] [fe168027c75c7e8404aa7475023dc2170fc233574f608e916c17e67a83ea63a7ed62c042e336553a9a52b0fb2210788fa32a0b28ada00208bbac98632f4ca43c] [172.30.33.7] [172.30.33.7] 1 Success VideoOS.MobileServer.TrayController.exe C:\Program Files\Milestone\XProtect Mobile Server\ Mobile Server Manager 306176 880facc6f6a0973dd69362cfe4716db1 Mobile server service manager (Tray controller) 23.3.43.1 Not Signed 2023-11-10 20:52:42 +0000 UTC 2023-11-10 20:52:42 +0000 UTC fb385b47c764ca6da1ea9060069942aa9c6b73f7 6fb422acb0ab4cf1a64e75889ae11629e5cf8a8e88427bd774cfc26ab9ff5b2a5712b86580ee7c72cb5ebefdb4822aba fe168027c75c7e8404aa7475023dc2170fc233574f608e916c17e67a83ea63a7ed62c042e336553a9a52b0fb2210788fa32a0b28ada00208bbac98632f4ca43c 2025-05-30 14:06:13 +0000 UTC None None 2024-03-26 00:17:02 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-05-30 14:10:39.404 +0000 UTC
e35da10e61ba5f23b80e1a32f8babfe31a2770ec68b09b9f53192e88042b8568 [68a28bda3bdcd0703f76f645, 68a28bda3bdcd0703f76f646, 68a3dfd9dd64bcf44b32b6df, 68a3dfd9dd64bcf44b32b6e0, 68a533cd7c33c0fb7b88c887, 68a533cd7c33c0fb7b88c888, 68a6857e0fd019c48ec633dc, 68a6857e0fd019c48ec633dd] [2] [xpressions] [vm-vmail] [WVUH] [C:\Program Files\Unify\RSPsshServer\bin\rm.exe] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [rm -f C:\Users\xpressions\SnmpTrapGen.exe , rm -f C:\Users\xpressions\UnixTime.vbs, rm -f C:\Users\Default\SnmpTrapGen.exe , rm -f C:\Users\Default\UnixTime.vbs] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe] [2025-08-18T02:10:14Z, 2025-08-18T02:10:18Z, 2025-08-19T02:18:07Z, 2025-08-19T02:18:10Z, 2025-08-20T02:28:39Z, 2025-08-20T02:28:43Z, 2025-08-21T02:33:07Z, 2025-08-21T02:33:11Z] [414dc024d7fd437d5efc06663e4b184b] [c56f28d148f7ad8bba565beb8786ce3352289be0] [5c3e0ab1824b61f53a794faefb374caf57b6c6497d12644d6e1234a890735be9b305d4f15af38539be914ae7f9b0053f] [3a330db5941f4afdf081469a5d4bc7b6c4852861117e12233d98137ec373601db5b3d1481ece7b72ceea8312d8398593646dedcf08077ce04115c95333396cb0] [172.17.252.80] [172.17.252.80] 1 Success rm.exe C:\Program Files\Unify\RSPsshServer\bin\ 65536 414dc024d7fd437d5efc06663e4b184b Not Signed 2019-09-16 13:44:54 +0000 UTC 2019-09-16 13:44:54 +0000 UTC c56f28d148f7ad8bba565beb8786ce3352289be0 5c3e0ab1824b61f53a794faefb374caf57b6c6497d12644d6e1234a890735be9b305d4f15af38539be914ae7f9b0053f 3a330db5941f4afdf081469a5d4bc7b6c4852861117e12233d98137ec373601db5b3d1481ece7b72ceea8312d8398593646dedcf08077ce04115c95333396cb0 2025-08-16 02:26:24 +0000 UTC None None 2025-07-22 15:57:23 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-16 02:27:03.497 +0000 UTC
e33e6856e8edeae2c5890cc751457fb4e4cdc45d8ca536e16f4a16395c52a29c [68a5cc2091727380a40e2b0e] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_temp\b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T13:22:32Z] [3ed2304bef9e68e2fb6a30c735a1859c] [16a7c5690e080a97e8c9cd6df223db64b6493010] [d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795] [9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394] [172.17.252.194] [172.17.252.194] 1 Success b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1 C:\_work_devops_mdi\_temp\ 936 3ed2304bef9e68e2fb6a30c735a1859c Not Signed 2025-08-20 13:22:32 +0000 UTC 2025-08-20 13:22:32 +0000 UTC 16a7c5690e080a97e8c9cd6df223db64b6493010 d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795 9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394 2025-08-20 13:22:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3155f4c18e0f01cd09af5fcbdfb7f841db769e1df5e24dbd013f688beac7327 [68a25fb2e970d941642e7edb, 68a25fb2e970d941642e7ee8, 68a3b2cf09045b56b2a707b3, 68a3b2cf09045b56b2a707c0, 68a502e12ae1a61fbf4caf11, 68a502e12ae1a61fbf4caf1e, 68a65489c4cae84feadc5711, 68a65489c4cae84feadc571e] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\LumenWorks.Framework.IO.dll] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:05Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:05Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:05Z, 2025-08-20T23:00:15Z] [5d44925a2cc697a34066331935d1f7f9] [a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026] [c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d] [124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d] [172.17.252.12] [172.17.252.12] 1 Success LumenWorks.Framework.IO.dll C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\ LumenWorks.Framework.IO 46080 5d44925a2cc697a34066331935d1f7f9 LumenWorks.Framework.IO 4.0.0 e6be48 Not Signed 2024-03-28 18:35:30 +0000 UTC 2018-03-24 18:18:16 +0000 UTC a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026 c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d 124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d 2025-05-10 23:00:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e306fe88cf422e654f8288933e3e3a31f27ad79e50a4b97c34cd9c7c3fd64130 [68a306a5ba5832f49fe9cf50] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\EQTLD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [c894b0d3fa03dfb74d11bc6f930a2cce] [2d6b20ad44c3708ebcf6c682a2dc5d998f91760a] [1203c7d40aa1e975bf09b7bb21870d3b99d651775119a1360c59fff146c5bae14720947785768d485f1bbd21f06e5781] [88f5a035211dafa9cad03844744168f48eb101f4d89e5371fc04e79d610aa3659a3f6da98fc3ad6cb1a0a33194dd9c79e62ad99ac1eb01ca3502f28fa35e3edb] [172.17.146.33] [172.17.146.33] 1 Success EQTLD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express QuantumTreeList Components 588800 c894b0d3fa03dfb74d11bc6f930a2cce ExpressQuantumGrid 3.2 Not Signed 2022-07-06 14:52:12 +0000 UTC 2024-09-14 04:02:50 +0000 UTC 2d6b20ad44c3708ebcf6c682a2dc5d998f91760a 1203c7d40aa1e975bf09b7bb21870d3b99d651775119a1360c59fff146c5bae14720947785768d485f1bbd21f06e5781 88f5a035211dafa9cad03844744168f48eb101f4d89e5371fc04e79d610aa3659a3f6da98fc3ad6cb1a0a33194dd9c79e62ad99ac1eb01ca3502f28fa35e3edb 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:13:19 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
e2ee86365c2d7a10dc3e77887dcf7ad93c94f5d00128d0d3cb86d3501001a602 [68a354fa71d9fa85319f10b7] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Program Files\RS2 Technologies\Access It! Universal.NET\SCPWrap64.dll] [Servers] [Servers Audit] [v2259.858] [] [HID Global Corporation] [C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe] [C:\Windows\explorer.exe] [2025-08-18T16:28:49Z] [199606fefa62618ab57440cf5e5cd511] [3336a6a1aef2da51079da4f3166813bc777dc269] [af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470] [7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3] [172.17.253.114] [172.17.253.114] 1 Success SCPWrap64.dll C:\Program Files\RS2 Technologies\Access It! Universal.NET\ SCPWrap 121752 199606fefa62618ab57440cf5e5cd511 SCPWrap 4.7.1.28 HID Global Corporation 2023-03-17 19:52:06 +0000 UTC 2023-03-17 19:52:06 +0000 UTC 3336a6a1aef2da51079da4f3166813bc777dc269 af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470 7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3 2025-05-13 05:13:29 +0000 UTC None None 2023-05-15 12:39:24 +0000 UTC 70 0 KNOWN 0 Benign 0.00 2025-05-13 05:20:32.095 +0000 UTC
e28c7ee6c3458c61330546eddf643de294705d96fb0d6188f19cd83bb07f75e8 [68a42a0830e7648dae66944e] [2] [SYSTEM] [uvOSCCN2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iax0wn2e.gzu.ps1] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T07:38:39Z] [] [] [] [] [172.25.18.157] [172.25.18.157] 1 Success __PSScriptPolicyTest_iax0wn2e.gzu.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-19 07:38:39 +0000 UTC 2025-08-19 07:38:39 +0000 UTC 2025-08-19 07:38:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e271a75dc1df53d0d0fdde966cbff22c973fbea56e4052783256f02c46c5cec4 [68a6537cecc6b6878d6687f7] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\hsntghov.dll] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-20T23:00:04Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success hsntghov.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-20 23:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e268fff64bd3b94a42537ecfae979fee397891e60cababe178a6564760931a0f [68a472b1b022648922e2358d] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jfreechart-1.0.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [e0ac6e8ecb858f946200b326209fe639] [fa67c798b0ae80b84f3854d69e341abacd3867c5] [008ac75aaeceb613b13e607e0144b92d0575f1fb6530bd79171629aa01fb1b173ac7631e9c453806799c31de15375bde] [540911774565019bf18f15913dc699063c2bf25b57543d5b63eb14d7a1d4f9a8a7e44061c494a8285cae255ad9a654454dd5ff0af2e163ac2db3a54eef3ba95b] [172.17.23.146] [172.17.23.146] 1 Success jfreechart-1.0.14.jar C:\Program Files\DeploymentService\Tomcat\webapps\DeploymentService\WEB-INF\lib\ 1461633 e0ac6e8ecb858f946200b326209fe639 Not Signed 2020-06-29 19:27:52 +0000 UTC 2020-06-29 19:27:52 +0000 UTC fa67c798b0ae80b84f3854d69e341abacd3867c5 008ac75aaeceb613b13e607e0144b92d0575f1fb6530bd79171629aa01fb1b173ac7631e9c453806799c31de15375bde 540911774565019bf18f15913dc699063c2bf25b57543d5b63eb14d7a1d4f9a8a7e44061c494a8285cae255ad9a654454dd5ff0af2e163ac2db3a54eef3ba95b 2025-08-14 05:11:49 +0000 UTC None None 2024-11-25 13:28:08 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-08-14 05:30:47.389 +0000 UTC
e1ff597b34a621df3054f1feff304913055fd02bd0d002b5c5f2d01aedf6351a [68a2f9ca170585b222da8a8a] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-18T10:00:28Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 10:00:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e1c8c3702bc0abbf1b5ae61cc29d04c80a8a2bbd8d1fcbf0d11cc86ae6eaf444 [68a18e6597a47909aebcd988, 68a2ddd944d60e582ffc0d18, 68a42f7e81de93c2600b6ec4, 68a581188343e5a09486e03d, 68a6d2c66dc12cc4f77bd4a6] [2] [SYSTEM] [vm-UHCcbord] [NT AUTHORITY] [C:\cbordwin\NSI_Restart.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T08:00:12Z, 2025-08-18T08:00:11Z, 2025-08-19T08:00:11Z, 2025-08-20T08:00:11Z, 2025-08-21T08:00:11Z] [643b85dab211d67f2a377645205e031b] [a34d7f6dc0c990ae6dafaf6719be7f835dd6e680] [218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0] [851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f] [172.17.252.44] [172.17.252.44] 1 Success NSI_Restart.bat C:\cbordwin\ 239 643b85dab211d67f2a377645205e031b Not Signed 2021-02-18 16:14:38 +0000 UTC 2021-02-18 16:14:38 +0000 UTC a34d7f6dc0c990ae6dafaf6719be7f835dd6e680 218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0 851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f 2025-08-09 08:00:19 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e1ab53d75389187daefc4bc4afd07e5141ad01466e78bb43298a6eff447a4a5c [68a523949cec397f02de9f43] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AltovaXML.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:25Z] [6b3377712cc5ee2a837b01bb18fe290e] [825203351fd9728e58a152c61042505a359daad8] [91716685edd96a9e15564ab8d03ab92126b506a6a13428c5007df974f5219b15ea55799cb5da43c35fe9b87e0313de62] [6679793183a7063b857863900b56bf32b45e8b8f913b007dce6ea88bde646ccf26229e3c60d28a4d20e5687ededd25112ba64b764e62b85826aa9f53f2c5ef2a] [172.17.22.40] [172.17.22.40] 1 Success AltovaXML.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 45056 6b3377712cc5ee2a837b01bb18fe290e 1.0.3483.28697 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC 825203351fd9728e58a152c61042505a359daad8 91716685edd96a9e15564ab8d03ab92126b506a6a13428c5007df974f5219b15ea55799cb5da43c35fe9b87e0313de62 6679793183a7063b857863900b56bf32b45e8b8f913b007dce6ea88bde646ccf26229e3c60d28a4d20e5687ededd25112ba64b764e62b85826aa9f53f2c5ef2a 2025-08-20 01:23:32 +0000 UTC None None 2017-01-01 20:47:20 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
e15020453fd5682d980b735a7e1cfd739ff733d258644f24b48093d67b50f36d [68a3146b5f0c41860c8c8532, 68a3146b5f0c41860c8c856f] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\_encoded_words.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z] [862e39ae2a4dad0447fb922787ad011b] [059fdab715b03cf4f835efa17f6c2bfad339872c] [a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718] [4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60] [172.17.252.131] [172.17.252.131] 1 Success _encoded_words.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 8291 862e39ae2a4dad0447fb922787ad011b Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC 059fdab715b03cf4f835efa17f6c2bfad339872c a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718 4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e114d4f4cf4261ab76d144c49d6ee1d75ddcfbb7c195260d1a782ebe0c34cb87 [68a472b1b022648922e23593] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\management-api-3.0.0-b012.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [428636427bb6d92484320a9565f67394] [707686d845faede060b79bdf018a25a469a611b4] [ebbf1c28119dafa7da8ad0f02b2837347b6863a0603ed9fb464936c436cfa3490423ace2b08c8dcb76292124a12f0649] [7639ae9d6c8d0171a293c3854dbe80da662d9d06c569b9e06b863ea9c985c898f52122270b4aabfcab9a3b71b68846ba4657011427f4957b7ab91fa0a313c27e] [172.17.23.146] [172.17.23.146] 1 Success management-api-3.0.0-b012.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\management-api-3.0.0-b012.jar-799a2ea4f54b13c3\ 42212 428636427bb6d92484320a9565f67394 Not Signed 2025-03-28 16:06:14 +0000 UTC 2025-03-28 16:06:14 +0000 UTC 707686d845faede060b79bdf018a25a469a611b4 ebbf1c28119dafa7da8ad0f02b2837347b6863a0603ed9fb464936c436cfa3490423ace2b08c8dcb76292124a12f0649 7639ae9d6c8d0171a293c3854dbe80da662d9d06c569b9e06b863ea9c985c898f52122270b4aabfcab9a3b71b68846ba4657011427f4957b7ab91fa0a313c27e 2025-03-28 16:06:36 +0000 UTC None None 2024-08-01 18:36:08 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
e5e1f80535f5e0039465a7979f19dadcda3adbe7da288496f16a55add5657b14 [68a472a799ad3734d804e2e5] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-parser-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [06b83866799d9c983525b28fde4ebefc] [90bfc41579c890d543acdb99b2b6390b09298b85] [ec8333d72426fabc5f25d2798c75353759d4298125382098e1860253897dcf844f2e32335f557f525875e32db98a673d] [0ee4427d49d79305c7d54c8ae0a602d1e334be58e53812c2b066aa66a6b1ee5eee58f10f51e1220df17c0f4af89de19c89322153fe8eea2229a688f129c0a7c2] [172.17.23.146] [172.17.23.146] 1 Success batik-parser-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 76504 06b83866799d9c983525b28fde4ebefc Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 90bfc41579c890d543acdb99b2b6390b09298b85 ec8333d72426fabc5f25d2798c75353759d4298125382098e1860253897dcf844f2e32335f557f525875e32db98a673d 0ee4427d49d79305c7d54c8ae0a602d1e334be58e53812c2b066aa66a6b1ee5eee58f10f51e1220df17c0f4af89de19c89322153fe8eea2229a688f129c0a7c2 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:27:55 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
e5b3d8c0cd787842469c3af1ecaa7fd338557ade687feda815ea46665f17bd2b [68a34b98a6132bf659cce5c0, 68a34df0b71eea1289980a25] [2] [SVC_SL_NewTech] [i-nWHLBadge] [WVUHS] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Windows8.dll] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe] [C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe] [2025-08-18T15:47:18Z, 2025-08-18T15:58:07Z] [152d886b60e07adfadd3864dda9198ce] [ba76d202813f5039c8e639799ce9e35383feb595] [929b6d279fd17c6252822129f5289494ce45b8b8f1916043051a605c9db5359dba5521a23ff7f81ce3b3d6e5ac016475] [8b7324f67adda2d6fca966756d3ad54cea1481795ca244caf7e4b35bebc03cef2bd5dfd097fb4e0d8c39850b25567445dcd7b60ffc4667a7f87f89c07b32f790] [172.17.253.114] [172.17.253.114] 1 Success Telerik.WinControls.Themes.Windows8.dll C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\ Telerik.WinControls.Themes.Windows8 265216 152d886b60e07adfadd3864dda9198ce Progress® Telerik® UI for WinForms 2021.3.914.40 Not Signed 2023-07-25 16:12:01 +0000 UTC 2023-07-25 16:12:01 +0000 UTC ba76d202813f5039c8e639799ce9e35383feb595 929b6d279fd17c6252822129f5289494ce45b8b8f1916043051a605c9db5359dba5521a23ff7f81ce3b3d6e5ac016475 8b7324f67adda2d6fca966756d3ad54cea1481795ca244caf7e4b35bebc03cef2bd5dfd097fb4e0d8c39850b25567445dcd7b60ffc4667a7f87f89c07b32f790 2025-06-09 21:59:01 +0000 UTC None None 2022-04-22 07:51:14 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-06-09 22:01:23.067 +0000 UTC
e5a63ba0b19e8a7a85ac7e9cbe80e31f55ad01e4dc9b74d3f1b3c52c17373ad9 [68a25fb2e970d941642e7edf, 68a25fb2e970d941642e7eec, 68a3b2cf09045b56b2a707b7, 68a3b2cf09045b56b2a707c4, 68a502e12ae1a61fbf4caf15, 68a502e12ae1a61fbf4caf22, 68a65489c4cae84feadc5715, 68a65489c4cae84feadc5722] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\insertTepp.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:10Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:10Z, 2025-08-20T23:00:17Z] [469a883bd4abdb8c110fe012194d82db] [98442ad59dc0301977c2b0293b042ea784038527] [85e28962ad6e8823300aed8ba0a141295bc1adf80f44cd314acea441fdac2ee49a6cbb718b79a26bad95dd2d65920433] [2b520dae1ab1ae020f239f05b18eee7b4f2bc2924e660186d9b3d6e0283e9e3e73661c1b5fc55836de84d94df8c160a7e6c67a569bd9c6551e95d17dcb1c56d3] [172.17.252.12] [172.17.252.12] 1 Success insertTepp.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\ 8424 469a883bd4abdb8c110fe012194d82db Not Signed 2024-03-28 19:42:26 +0000 UTC 2023-04-10 15:39:06 +0000 UTC 98442ad59dc0301977c2b0293b042ea784038527 85e28962ad6e8823300aed8ba0a141295bc1adf80f44cd314acea441fdac2ee49a6cbb718b79a26bad95dd2d65920433 2b520dae1ab1ae020f239f05b18eee7b4f2bc2924e660186d9b3d6e0283e9e3e73661c1b5fc55836de84d94df8c160a7e6c67a569bd9c6551e95d17dcb1c56d3 2025-08-08 23:00:16 +0000 UTC None None 2024-07-30 12:50:08 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
e58dfbc97ed3d3e3f47a55daa5aeb6493ea557ba779a31c9529a3f2c3118ec3e [68a472b1b022648922e2356b] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmChargebackApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [659ae9a317e0c485c402665810b92738] [38760886fe5bca483988b5bf5ad7c51561778c37] [dbe2fc017bc703d5b4f1252b1760ad3e3df61aa1f043d52ffb4c310b678395fc59606da9a597c9272ce9251708f27f0d] [1f6b289cb2e2b5fef9ee2868d8fa28de11d2ce401313dfa3d5411cc9302cadb241398b34d5e3ef4b2bd60e583dc1c5d957ba8818c0819cdc31038a3649a4304f] [172.17.23.146] [172.17.23.146] 1 Success DsmChargebackApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 119369 659ae9a317e0c485c402665810b92738 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 38760886fe5bca483988b5bf5ad7c51561778c37 dbe2fc017bc703d5b4f1252b1760ad3e3df61aa1f043d52ffb4c310b678395fc59606da9a597c9272ce9251708f27f0d 1f6b289cb2e2b5fef9ee2868d8fa28de11d2ce401313dfa3d5411cc9302cadb241398b34d5e3ef4b2bd60e583dc1c5d957ba8818c0819cdc31038a3649a4304f 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:51 +0000 UTC 59 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
e575875c544fb1727f9016d19415241e94a0bafc82b05eaabb842c2b8e1bceec [68a233fd88f628d5134f0d73] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3o4q5llx.mi5.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:56:33Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_3o4q5llx.mi5.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:56:33 +0000 UTC 2025-08-17 19:56:33 +0000 UTC 2025-08-17 19:56:45 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e546c1ecd425ed469638ea9c8cd091f861f912c74e5d7afcfee51219c7a3c66f [68a15602d61ba01a4f22a4fb, 68a2a78cc07c7d9334c20f46] [2] [sunrisebackup] [CI1BEFS3] [WHI] [D:\adminscripts\SCMNightlyAdminRebuildOnly.bat] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T04:05:00Z, 2025-08-18T04:05:00Z] [c7ee3db23e15ef7844db279f1a285530] [1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82] [b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066] [752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4] [172.18.112.86] [172.18.112.86] 1 Success SCMNightlyAdminRebuildOnly.bat D:\adminscripts\ 85 c7ee3db23e15ef7844db279f1a285530 Not Signed 2019-09-17 15:10:50 +0000 UTC 2015-02-26 19:14:36 +0000 UTC 1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82 b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066 752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4 2025-08-09 04:05:07 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e536224c37c5601c639f163c66e4e2fec171992032474677c415056f891512cb [68a306a5ba5832f49fe9cf48] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RZ251N40.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [80e72ac8a829db2a006b406077c9dedf] [29d0a82da12b6bca9cfcef4b5cf03eecfc1099ff] [dfae8c6999992ecadeb4fb33d7b39d6cc3cd4173f1425faac31218effdc5f4d0c6553e135d564a149aa4a58a8122ae1a] [fc632c2be61f5faca8675771ed769eed12113f6cc3fdd56e703eadd7e8a44c3c7d12948da0300f3ccc3af49c731fb685b008e63abd70d151cdf4da96b704a951] [172.17.146.33] [172.17.146.33] 1 Success RZ251N40.BPL C:\DICORP\DICORP_V5\RW\APPS\ Runtime package for Raize Components 795648 80e72ac8a829db2a006b406077c9dedf Raize Components 2.51 Not Signed 2022-07-06 14:52:35 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 29d0a82da12b6bca9cfcef4b5cf03eecfc1099ff dfae8c6999992ecadeb4fb33d7b39d6cc3cd4173f1425faac31218effdc5f4d0c6553e135d564a149aa4a58a8122ae1a fc632c2be61f5faca8675771ed769eed12113f6cc3fdd56e703eadd7e8a44c3c7d12948da0300f3ccc3af49c731fb685b008e63abd70d151cdf4da96b704a951 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:35:53 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
e4f54569da175d2616aa1309a70f0d34cd6a812e20b7b126c4f76197c1024174 [68a306a5ba5832f49fe9cf5c] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXMDSD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [d11cb584c96ee3e29a4cf12fb1e68f41] [c59ace4592fcb1b488e0bf204ed5e872881b24b5] [9a5364d268dadcf9fceaa572027c44d8ea524fcd546c2c0831674f6664d52da37c32dd32e6c3aa725da533269f9513dd] [1f1cb1d600014c5f69146a3deff7d3d0b733eb66af9c3f61e59e574a8d0c06d01324e73c9cc8a84ff58fd2d5b7ca7c3ee9521a360b95d8aafb43ebe07fd359df] [172.17.146.33] [172.17.146.33] 1 Success DXMDSD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express MemData Components 82432 d11cb584c96ee3e29a4cf12fb1e68f41 ExpressMemData 1.8 Not Signed 2022-07-06 14:52:11 +0000 UTC 2024-09-14 04:02:50 +0000 UTC c59ace4592fcb1b488e0bf204ed5e872881b24b5 9a5364d268dadcf9fceaa572027c44d8ea524fcd546c2c0831674f6664d52da37c32dd32e6c3aa725da533269f9513dd 1f1cb1d600014c5f69146a3deff7d3d0b733eb66af9c3f61e59e574a8d0c06d01324e73c9cc8a84ff58fd2d5b7ca7c3ee9521a360b95d8aafb43ebe07fd359df 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:33:08 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
e4dfdec293eb96ef212bcee5f794cf1ade434517929c37d21a4f41ca37a79b5e [68a5cc2091727380a40e2b0f] [2] [SYSTEM] [VM-TalisWave] [NT AUTHORITY] [C:\_work_devops_mdi\_tasks\unzip_f3256ce0-a7ba-11e5-9412-1587795ee05c\0.1.14\unzip.ps1] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\DevOps_Agent_MDI\externals\vstshost\LegacyVSTSPowerShellHost.exe] [C:\DevOps_Agent_MDI\bin\Agent.Worker.exe] [2025-08-20T13:22:37Z] [d0a84cb87165412df6673807fda0ecc3] [51212f269409b5a4859ba9fe1b31410f3229cf28] [4b040c8675893d5c8ea46389bbd322e329c22ab35d6b5044364445cd3a9f29e3106491e5828b4906c091267233f96d85] [61469298a56ed025523f0f77ac4f800eb04ee975570d73afc1a7072e746b23f352e89206e584c762cd5c7321049206d6222b5532a9d4d7a9f2e3a6a26499b86b] [172.17.252.194] [172.17.252.194] 1 Success unzip.ps1 C:\_work_devops_mdi\_tasks\unzip_f3256ce0-a7ba-11e5-9412-1587795ee05c\0.1.14\ 489 d0a84cb87165412df6673807fda0ecc3 Not Signed 2025-08-20 13:08:44 +0000 UTC 2025-04-25 19:46:34 +0000 UTC 51212f269409b5a4859ba9fe1b31410f3229cf28 4b040c8675893d5c8ea46389bbd322e329c22ab35d6b5044364445cd3a9f29e3106491e5828b4906c091267233f96d85 61469298a56ed025523f0f77ac4f800eb04ee975570d73afc1a7072e746b23f352e89206e584c762cd5c7321049206d6222b5532a9d4d7a9f2e3a6a26499b86b 2025-08-20 13:22:40 +0000 UTC None None 2019-11-05 02:35:47 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-08-20 13:31:01.758 +0000 UTC
e4a5eaff1f0000536fa3658ecd4cab4da69e1cf7a8a5477fbcbd1c04d12031d2 [68a3146b5f0c41860c8c850c, 68a3146b5f0c41860c8c855f] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\html\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z] [07992cf118f6f4289bfbbd047fd6fb0d] [8c8a01f4ffe2e1a05358d1016f61e1fdb432736e] [11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036] [dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\html\__pycache__\ 4387 07992cf118f6f4289bfbbd047fd6fb0d Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 8c8a01f4ffe2e1a05358d1016f61e1fdb432736e 11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036 dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e46e3f2b0c9ed8d7ecbd79530b3054260eb6b284f52d8bf8f2927034c9786d06 [68a34d6610b57c5bffc57dac] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:28Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e464c83307f9ee3bccc2f8e58a1a5cf19cff4dd16f52501a21ce7467107113e4 [68a311cdc2d0d6e3eb77f20f] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindAccountLockouts.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [853693ccd74c3f9f1604548dd9906f01] [ecbf76fe70056921b16d45cadb9a4e09bc8054c7] [941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f] [3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c] [172.25.17.86] [172.25.17.86] 1 Success FindAccountLockouts.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 6800 853693ccd74c3f9f1604548dd9906f01 Not Signed 2022-01-12 15:17:36 +0000 UTC 2025-06-25 15:19:58 +0000 UTC ecbf76fe70056921b16d45cadb9a4e09bc8054c7 941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f 3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e43742082134ff5d4d915ca172e8590e4514b785ec5e8502628ddd4a56928978 [68a17e2d75b9eb54d66b3e31] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\tmpEXO_dh1mrpen.jqt.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:00:50Z] [ac7f8b7a05ad9ddcea083c53d571d542] [6940392b4e96610355da57e6a1bbefa939d9c4a6] [91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537] [b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_dh1mrpen.jqt.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\ 2290479 ac7f8b7a05ad9ddcea083c53d571d542 Not Signed 2025-08-17 07:00:48 +0000 UTC 2025-08-17 07:00:48 +0000 UTC 6940392b4e96610355da57e6a1bbefa939d9c4a6 91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537 b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4 2025-08-17 07:01:01 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e41c25b2cddca5e49140732debc1cecb6d24310050cd2d4751df81d7bff5dd70 [68a1a9b1552c0717cd81b68c] [2] [SYSTEM] [i-nctxddc-dev1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aa3qsaw5.zqk.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T10:06:35Z] [] [] [] [] [172.17.146.23] [172.17.146.23] 1 Success __PSScriptPolicyTest_aa3qsaw5.zqk.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 10:06:35 +0000 UTC 2025-08-17 10:06:35 +0000 UTC 2025-08-17 10:06:41 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e3cee06479b6a97741b4a073f38b4d625530ce5fc7d5b6017ec03520a59f92cf [68a24592503474046d560030, 68a6643ac834a71c320c303e] [2] [SYSTEM] [IMAGENOW73-PROD] [NT AUTHORITY] [C:\Program Files\erl8.3\erts-8.3\bin\inet_gethost.exe] [Servers] [Servers Audit] [v2248, v2314] ["C:\Program Files\erl8.3\erts-8.3\bin\inet_gethost.exe" 4 ] [Not Signed] [C:\Program Files\erl8.3\erts-8.3\bin\erl.exe] [C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe] [2025-08-17T21:02:45Z, 2025-08-21T00:02:25Z] [b323eb8ea66d680a0822c9272ec9667b] [4ea3c3558f2f4b1fb8bc665095c03ed0e2f5d193] [3a6f381b797e8608adb072844e396330581a17a0c15594ef79dce6b0973ce5ef1ae766ab78f4c05d17967f1af69641b0] [9e8f62870d4022ff3cf7b311de2c3ee60381d7f54d628384e5ea54b8dd0148c011b41d480e561db5e55db8f2701af08689477d4204aafcbcefcb73d61964edb6] [10.101.100.216] [10.101.100.216] 1 Success inet_gethost.exe C:\Program Files\erl8.3\erts-8.3\bin\ 45568 b323eb8ea66d680a0822c9272ec9667b Not Signed 2017-03-14 21:37:04 +0000 UTC 2017-03-14 21:37:04 +0000 UTC 4ea3c3558f2f4b1fb8bc665095c03ed0e2f5d193 3a6f381b797e8608adb072844e396330581a17a0c15594ef79dce6b0973ce5ef1ae766ab78f4c05d17967f1af69641b0 9e8f62870d4022ff3cf7b311de2c3ee60381d7f54d628384e5ea54b8dd0148c011b41d480e561db5e55db8f2701af08689477d4204aafcbcefcb73d61964edb6 2025-07-17 00:02:51 +0000 UTC None None 2021-09-15 08:02:50 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-07-17 00:06:14.119 +0000 UTC
e3c950092f766a680c42fedf935f167077aa38a8a8f4296537a95af623f0ecef [68a48674c4cb2500be692636, 68a48674c4cb2500be692648] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Settings.Configuration.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Settings.Configuration.dll] [Servers] [Servers Audit] [v2273] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z] [04cc7245d80d1968583727b9ba884904] [b3a8f8d587366dbb60a269398ebc0272036f2f98] [51d8a279e9bde8efdf7e6a44f2d14401f530a565b788d57d4a251d6ac6398aba8713590d7c9859129b7aec97def0eff5] [6ee5deb06671d30da27e4c194bf91dfa6dd4ac4cf6f2023697bf37c6d51a4ac55e569fb30052c6ceeb04d6abd08fca4c31e739d88ba0f56db628d2f5504f8e03] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Settings.Configuration.dll C:\Program Files\acr-connect-apps\ConnectExpress\services\acrconnect-ai-lab-service\ Serilog.Settings.Configuration 64512 04cc7245d80d1968583727b9ba884904 Serilog.Settings.Configuration 3.3.0+651449dd4277217838b9224ba13acf66f5f95351 Not Signed 2024-01-29 20:05:20 +0000 UTC 2021-10-07 12:46:44 +0000 UTC b3a8f8d587366dbb60a269398ebc0272036f2f98 51d8a279e9bde8efdf7e6a44f2d14401f530a565b788d57d4a251d6ac6398aba8713590d7c9859129b7aec97def0eff5 6ee5deb06671d30da27e4c194bf91dfa6dd4ac4cf6f2023697bf37c6d51a4ac55e569fb30052c6ceeb04d6abd08fca4c31e739d88ba0f56db628d2f5504f8e03 2025-05-12 05:22:19 +0000 UTC None None 2024-08-08 18:52:22 +0000 UTC 75 0 KNOWN 0 Benign 0.00 2025-05-11 07:45:57.189 +0000 UTC
e8f5b4340d3b12a0cfa44ac2db4be4e0639e479ae847df04c4ed8b521734bb4a [68a472b1b022648922e2359f] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\serializer-2.7.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [e8325763fd4235f174ab7b72ed815db1] [24247f3bb052ee068971393bdb83e04512bb1c3c] [9cc49e92c8f9c68db5caec6e9e550e880c7a3c73da01e958a023794ec8a8ce19a3561344b9a313444e15a5765403660d] [884d865865858a46306a3680df69f3f0efa0df1313706b54e6900d36af21e17cb6828f5a6bac551c59f7f80bdd1cb64c3fdbde44e213519c4af87969e9e70774] [172.17.23.146] [172.17.23.146] 1 Success serializer-2.7.2.jar C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\ 276420 e8325763fd4235f174ab7b72ed815db1 Not Signed 2022-05-18 18:38:25 +0000 UTC 2021-02-09 20:57:00 +0000 UTC 24247f3bb052ee068971393bdb83e04512bb1c3c 9cc49e92c8f9c68db5caec6e9e550e880c7a3c73da01e958a023794ec8a8ce19a3561344b9a313444e15a5765403660d 884d865865858a46306a3680df69f3f0efa0df1313706b54e6900d36af21e17cb6828f5a6bac551c59f7f80bdd1cb64c3fdbde44e213519c4af87969e9e70774 2025-08-08 17:07:24 +0000 UTC None None 2025-03-21 10:42:54 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-08-08 17:16:07.228 +0000 UTC
e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7 [68a472b1b022648922e235a5] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax-api-1.0-2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [7d18b63063580284c3f5734081fdc99f] [d6337b0de8b25e53e81b922352fbea9f9f57ba0b] [005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c] [a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5] [172.17.23.146] [172.17.23.146] 1 Success stax-api-1.0-2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\stax-api-1.0-2.jar-1822c001758a163f\ 23346 7d18b63063580284c3f5734081fdc99f Not Signed 2025-03-28 16:06:12 +0000 UTC 2025-03-28 16:06:12 +0000 UTC d6337b0de8b25e53e81b922352fbea9f9f57ba0b 005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5 2025-03-28 16:06:36 +0000 UTC None None 2024-07-16 00:46:28 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
e8c4c72afa24137920d6b8d2238f93b831de6fd96a6c1042d429f6ffaadf6c7f [68a306a5ba5832f49fe9cf51] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXEDTRD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [7305181cdaf8b190b9badc84e3dff5ae] [ad4cb486d36aa60ac16520b52231bc334b7ad3d4] [01359fa140e8e0a435eec1c5452938b8cd492441c59dc4fb4f5ca9a46d261b72f8870a42f570a6a830d40ae698bc9d6e] [38529f8773a22129028811112392d31569ce6f652b80b5e56031fd9f5f26f11e67e8b13df6546a43301f0e661f600e383ec18b7360426f72de0170247f0bc50c] [172.17.146.33] [172.17.146.33] 1 Success DXEDTRD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ Express Inplace Editors 415744 7305181cdaf8b190b9badc84e3dff5ae ExpressEditors 3.2 Not Signed 2022-07-06 14:52:11 +0000 UTC 2024-09-14 04:02:50 +0000 UTC ad4cb486d36aa60ac16520b52231bc334b7ad3d4 01359fa140e8e0a435eec1c5452938b8cd492441c59dc4fb4f5ca9a46d261b72f8870a42f570a6a830d40ae698bc9d6e 38529f8773a22129028811112392d31569ce6f652b80b5e56031fd9f5f26f11e67e8b13df6546a43301f0e661f600e383ec18b7360426f72de0170247f0bc50c 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:35:41 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
e8ade266edf46aa33f834a0cfce4dd7cb03c133394f8e795a495694d2dcf51dd [68a6afe50e0f3bd8deac4d09, 68a6afe50e0f3bd8deac4d1d, 68a6afe50e0f3bd8deac4d2b, 68a6afe50e0f3bd8deac4d4b, 68a6afe50e0f3bd8deac4d6b, 68a6afe50e0f3bd8deac4d8b, 68a6afe50e0f3bd8deac4dab, 68a6afe50e0f3bd8deac4dcb, 68a6afe50e0f3bd8deac4deb, 68a6afe50e0f3bd8deac4e0b, 68a6afe50e0f3bd8deac4e2b, 68a6afe50e0f3bd8deac4e4b, 68a6afe50e0f3bd8deac4e6b, 68a6afe50e0f3bd8deac4e8b, 68a6afe50e0f3bd8deac4ebc, 68a6afe50e0f3bd8deac4ecb, 68a6afe50e0f3bd8deac4eeb, 68a6afe50e0f3bd8deac4f0b, 68a6afe50e0f3bd8deac4f2b, 68a6afe50e0f3bd8deac4f55, 68a6afe50e0f3bd8deac4f75, 68a6afe50e0f3bd8deac4f95, 68a6afe50e0f3bd8deac4fb5, 68a6afe50e0f3bd8deac4fd5, 68a6afe50e0f3bd8deac4ff5, 68a6afe50e0f3bd8deac5015, 68a6afe50e0f3bd8deac5035, 68a6afe50e0f3bd8deac5055, 68a6afe50e0f3bd8deac5075, 68a6afe50e0f3bd8deac509f, 68a6afe50e0f3bd8deac50bf, 68a6afe50e0f3bd8deac50df, 68a6afe50e0f3bd8deac5109, 68a6afe50e0f3bd8deac5129, 68a6afe50e0f3bd8deac5149, 68a6afe50e0f3bd8deac5173, 68a6afe50e0f3bd8deac5193, 68a6afe50e0f3bd8deac51b3, 68a6afe50e0f3bd8deac51d3, 68a6afe50e0f3bd8deac51d4, 68a6afe50e0f3bd8deac5206, 68a6afe50e0f3bd8deac521d, 68a6afe50e0f3bd8deac5234, 68a6afe50e0f3bd8deac5254, 68a6afe50e0f3bd8deac5288, 68a6afe50e0f3bd8deac52a8, 68a6afe50e0f3bd8deac52c8, 68a6afe50e0f3bd8deac52e8, 68a6afe50e0f3bd8deac5308, 68a6afe50e0f3bd8deac5328, 68a6afe50e0f3bd8deac5348, 68a6afe50e0f3bd8deac5368, 68a6afe50e0f3bd8deac5388, 68a6afe50e0f3bd8deac538e, 68a6afe50e0f3bd8deac53ca, 68a6afe50e0f3bd8deac53ce, 68a6afe50e0f3bd8deac540d, 68a6afe50e0f3bd8deac540e, 68a6afe50e0f3bd8deac5449, 68a6afe50e0f3bd8deac544e, 68a6afe50e0f3bd8deac546e, 68a6afe50e0f3bd8deac548e, 68a6afe50e0f3bd8deac54ae, 68a6afe50e0f3bd8deac54ce, 68a6afe50e0f3bd8deac54ee, 68a6afe50e0f3bd8deac550e, 68a6afe50e0f3bd8deac552e, 68a6afe50e0f3bd8deac5557, 68a6afe50e0f3bd8deac5578, 68a6afe50e0f3bd8deac5598, 68a6afe50e0f3bd8deac55b8, 68a6afe50e0f3bd8deac55d8, 68a6afe50e0f3bd8deac55f8, 68a6afe50e0f3bd8deac5618, 68a6afe50e0f3bd8deac563e, 68a6afe50e0f3bd8deac5668, 68a6afe50e0f3bd8deac5696, 68a6afe50e0f3bd8deac56b6, 68a6afe50e0f3bd8deac56ee, 68a6afe50e0f3bd8deac56f6, 68a6afe50e0f3bd8deac5730, 68a6afe50e0f3bd8deac5736, 68a6afe50e0f3bd8deac5769, 68a6afe50e0f3bd8deac579e, 68a6afe50e0f3bd8deac57aa, 68a6afe50e0f3bd8deac57c0, 68a6afe50e0f3bd8deac57ea, 68a6afe50e0f3bd8deac581e, 68a6afe50e0f3bd8deac5837, 68a6afe50e0f3bd8deac5840, 68a6afe50e0f3bd8deac5868, 68a6afe50e0f3bd8deac589e, 68a6afe50e0f3bd8deac58b0, 68a6afe50e0f3bd8deac58c0, 68a6afe50e0f3bd8deac58ef, 68a6afe50e0f3bd8deac591a, 68a6afe50e0f3bd8deac5931, 68a6afe50e0f3bd8deac5940, 68a6afe50e0f3bd8deac5960, 68a6afe50e0f3bd8deac5997, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [Servers] [Servers Audit] [v1617] ["C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "hXo1Zf6VLky_KmPbieDmPg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_4oagNq1uYkKW.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "l2dJdgmO0EKEcy3lbHO_DA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jMt802uamk-A.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "5yBV8M5ZKky8QVa2XjKXIQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OsWMQ5evTUao.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "bbKBJMhor0qSPjKEmObozg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_lWzCDbuYjECB.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "RWZCrGTxJEukWin4Cn6gpA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_fs8NQy_Tb0SC.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "H-_r9AR_9k2AFj8_pxAHOQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_qQ1l-5F7WU2y.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "h4tUC5Z8GUiDkvqup2gAyg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_rZAPvI9X7UW5.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "iRZ8oZpaD0ycmaV2_DF5xQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_PARt57I_A0OF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "ftbr4b3wiUaZv1QSU_XIpw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_yz0cIffcQkad.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ui5_HQcUKkKR0NPRbsBqRA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_wyzfHeXRaECP.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ljcm8wWPdU-P5tbZGS4dWQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1CORTouGuUO-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bWxeWBGgAkG3Sc_2EYl_ng" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_4HbpBje2ikyU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "BC9tIblMi0apUREbdamHmA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Fmwp3OvtikuG.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "JHE9EUCP702ZQsrxHHL-2Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9ezVqt1iP0Kd.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "MQEGqJpXjk-eXz9BoVa4dA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_3LIQ8VoYaESi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "LcHHyoJor0S9dU2IZKk1jA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UpEKXtFqjECQ.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "ZM2zLT4ir0u77PTtFCxUWA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_yyfNSynvNEKK.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "X_atkrV8OkO-XeijqfA07A" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bwPw7uL6xEWk.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "F9oLcjporEiseLAV33dlYw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OlOrZcRVvk-T.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "IvpBnNK01EWNfadRgDosSg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_22aGWAtXpEea.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "dXlIcX3rIUu7n7AXF-rJsA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9pPQvGhAj02k.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bupn0H0EOUqOuxBUx3YcsQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_KYSQnjMPb0Ol.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "3CNB0QVPq0qqFy_yVpSoJw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_hWDmOK-CM0CV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "w983Amzq_ka7MkqxzP9lfg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IRxumhnxm06r.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "A51sp4XK3kSaheRXHkT3JA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_FOmv3zSPVECh.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "R3b6QL6KfEWy6IitOCf1sg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_S9YOU6UzeEeA.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "7GgWxtr9ZEilieZrNbz7lw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_6v6GB9f50UCa.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "RKzT9sQBckm4s5hCT7pAow" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IQxXYxp0BUWr.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "CqucY4VIBEabezf8rYEYGg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UboXsl-UyEW4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Bjp0ExMR4E2TXhqMS1MWIg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_V0-AR7SijUCa.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "PWvsDFr3IUWoTLeNBCsY9g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_7FUYSVXUQkig.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "MoGFLl9i0US_6cPrmJO2kw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_oV4rNGkoC0GU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "nt1VpqgF6UmdRXHehzG2Cw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_CgoYZdXZVEG3.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "lYZp8PaBbkW17Kx2bbc_sw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_ffz8SCY_hUSb.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ksm2_bRrDEKPaJae-ke4Rw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jajHpoVQQU-i.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1jXxwtIon0uHo_s_iYITiQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OUPYvATd4kGR.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "_OhOW5ZkZ0yZ0RvHdWqaHA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R4HAiBhiuUWF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "fdYdQp6-ikOO2yE9ckNqgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_6DRa3JzV10GT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "tkirIlsUq06HFxKCoGY_2Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Agbge0zK8UW0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "E3_MmXLH00ieT3Qu2Suc3g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_QCUb_G4FpUyi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "zUr4uzTuHk-I1hXuG9Ewdg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Jt45iQm6NE2O.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "OF2dKcf00U2W9hP7DirqHg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Q2Xs9GHvc0ud.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "y1Qrhlcdj0mxAqe903g3DQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IEykJ_dZmkij.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "XLP1Fo82p06YWS9ZmoacNw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bca0g6KNhka7.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "gG8SuQ25WUOWLAgtm4pSYA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_XA3-8t6CCkum.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "vPy8YM7zSkir3oeN8tHSkw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_hz5A3jDpMUGU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "B-ygLnt54Umj3e1qnn34AQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Ikt1RidAQkKb.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "BxZC8LBYokSAwwqzyXIjAg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R1Lltthh4kSt.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "-O1md1lCoEqaMgLjPTTpTA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R5CN4hAI2kmi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "5-XUCRrGZ0S0tuhYdEOMOQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_iFCXLj_CNkCU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "jm8LTArV1Ui0H4ks_LS4HQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_YugK_VLS5Eme.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "WJWpUqAiAkqSzeUBZ0Bxmg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UiQQltyqu0C-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "osmipY6M4kS2dTV-RMkqxA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jHX16n7VuEex.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "r2x-12eePkGRIzQGLJSOOA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_xlMZsaf0_0a0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "SWR6NGVdik2wF54uNbUbmQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_oI4IFvrYMESu.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "9eY0gDEkt0uk2b7d9piP1w" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_L2ZZg8TNOkS9.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "3cNfhC0Hik-ZZKfDt4lyeQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_QbpgelKHJUuP.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "2ymdysd_bkK0kX6xA81Cgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jRiHs2w1Okuh.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1_JUxYk_JEWZ7NdgQcRwEQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_t5_yVJ_V0UKf.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "_ZQxDF9K1Uu_eAEU8kH8wg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_XGL03zTQUUuU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "L4cjkrCzkEe-uE9vPywMAg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_nIO9hWmFC0e4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "L6kjzZZ3h0iH8Z4VFXreGA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_q1CJ6y4aWkKU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "U5fopcKXBkiqBM90Utk-RQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_MP3IGGz-YEyr.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "hTHFcP30wE6fXX7s1RGL-g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_SrBdiJpnB0qV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "GPns6pzJw0KaikwV8NcnLA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JInLjbLfvkmT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "iUU4XAAuWUOv7E_oBV1NCQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_3EpbNBjVtU6B.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bcGxtz6NVkmaTXuFdEpiqA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_tuXYrzaXHE6G.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1BLTyk2p6kW6-Je6E5Whew" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_qeKSmn3s9UOI.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "aRDz4XeP40G4oTfzW1ZHwQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_C-DoNL9OWUGL.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bdMHCccUikW_yJjV_yuUYA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_wajHBPKezEmc.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "giEdEkTcnEasjPN42s2XvA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_AV0DYdg0mkCH.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "70ZVJ8PDZEmeGNHdexmu8Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IeTqNw2IDEWq.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "TUG22X17lUiZdZY7KKNaBQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JBPD4Np3PUGT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "lajUKWcXx0SHGlgMAVrh_A" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1xclxMgXWku4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "X_s-FIkN-kaT5K7uNUKBmw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_YD7_lywog0a_.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "u75jZleQ0kmYsZDOGAi2iQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_pwjUiF-m0EiO.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "N-HXEcSp7US-Or-3BqGkRA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1N3BZ-NyiEie.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "LOuaQBM69EiCYJb9tvZ_MA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_cMhwFpcIfUWo.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HzBdEpwMHkmpgqJ_v33dnw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_MoRoM5i2CkSX.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "Hd3N1jrWXUKRMfmWnEtkHQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_NojHU-UBWUyY.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "WShVbkAWx0-4h5_5OHMduw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_edN-WjHdQECC.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "CLxvFJ_IDkabXL_fXJzUDg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_nJBDeLgjFkSg.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "-Q1c_0gkhUKe9UY8wX9oMQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_5fPXzXQoeU2d.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ju8K_3cshEOfOuL4eiXyeQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9wnNXXirxU2K.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "m-sR4xZ4dEewxYb8YqUiVQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JtHf66uyykK-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "MW_PHmBvckigUXapl5UlRQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_cYZ5a70A0Um0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "8y-Mr3Dy8US7HWr6gzeTug" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_guwSxBfyj0GQ.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "xUIdpD5Y1EC3oqSUvONMxQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Ke7eulOk-EqV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "KkYxvG7OjEOlrVvCejsr6w" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_a_0j9x_Xbkym.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "nF6HnXED0U26A1bBNJLswg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_c5zF2EtrWUic.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "KjBWtJZHVkuJ52EEv3vW6Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1MuLB7WLr0qO.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "1VoiBcYmhUe4bey_QN9GDg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_pA0n5Ga04kO5.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "P6okzftwgUaD_L9Z6Qlfrg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_VyYgaGgkWEOF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "ZG0kzvi9S0mxvTMjw3mAWA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bxNA-Z0bpkyp.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HzXnPbUSY0SjdRPkCgW40Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Z0OK01EBj02Z.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "6D-aF7ax8UyDMGbJGZ3AtA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_p-TqTrPMNkif.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "lXULjJQvXU64tZrQZkRAgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_mvsd7__IEUyL.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "edtt1e8alEOtHZolL9lfGw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_kPoWiQ7_0kiW.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HWYLPMtJiU2nab3JqUhsiw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_TDfgAgGcSEuj.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "QBPl5GPUD0CIj0K02HogGA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_clsvyRJmcUi3.tmp"}, ...] [Not Signed] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [C:\Windows\System32\services.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:18Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [8bc414b5be933b0b478bc2caf4c3022c] [f0732fd67e451ac305fc45e4fc86ec4a6a30488f] [6f5642f7845e9c1a2afe1f778f939b34a5936ea0fd2feddceab674a8bd6b8b5cb4e6e2291bf9d97dad8541fa7b071c07] [927ffd49b9fef74ec57aca82f9c9e518993dc193df4692e508ca0791529e86b5a4dc58ecb018bc7d72b571c03f777abd846cf988e7e506184d734d0f4bfca4b8] [172.17.30.60] [172.17.30.60] 1 Success AmeWorkstation.exe C:\Program Files\Fujifilm\NaxisWS6\ 974848 8bc414b5be933b0b478bc2caf4c3022c Not Signed 2023-11-03 20:25:43 +0000 UTC 2023-06-16 03:15:07 +0000 UTC f0732fd67e451ac305fc45e4fc86ec4a6a30488f 6f5642f7845e9c1a2afe1f778f939b34a5936ea0fd2feddceab674a8bd6b8b5cb4e6e2291bf9d97dad8541fa7b071c07 927ffd49b9fef74ec57aca82f9c9e518993dc193df4692e508ca0791529e86b5a4dc58ecb018bc7d72b571c03f777abd846cf988e7e506184d734d0f4bfca4b8 2025-05-07 14:27:21 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
e8871edd5a81b3ec00c8bd3a62c5151c8b07efe347a250f9962f96c82272052b [68a5239e621d09b2b1ed5e54] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PositioningServerInterface.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:36Z] [3365edfac602c0aab571c97489df3f5a] [f2a108f5b854cdf677b13fdf57d02f0452c8983d] [fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af] [6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c] [172.17.22.40] [172.17.22.40] 1 Success PositioningServerInterface.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ PositioningServerInterface 295424 3365edfac602c0aab571c97489df3f5a PositioningServerInterface 1.0.0.0 Not Signed 2023-06-15 02:36:16 +0000 UTC 2023-06-15 02:36:16 +0000 UTC f2a108f5b854cdf677b13fdf57d02f0452c8983d fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af 6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e84cb02c1ab3298ff285dcd0295bd943457ba976193591a8f0577f1d2a017b56 [68a2529a2a645cc96ea797be] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_woxkkhvu.n5y.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:07:13Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_woxkkhvu.n5y.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:07:13 +0000 UTC 2025-08-17 22:07:13 +0000 UTC 2025-08-17 22:07:22 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e825341353a932e915a4b47d42c60affc517e96299f8fd8175dc82c7b20fda91 [68a306a5ba5832f49fe9cf3e] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LIBCURL.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [cadb6482026d8d6faa091535e30ca20c] [20fdf645983636ee5a77401d524d7cec45f2aafc] [5afa2ec4d646a382de881999bd7911e0cfa61a0599424453dbc5afd6cda0ad251991b0abc5f6890ba6cd5718c9c108b7] [8191d3bacb121d6e7d08f2209a3843273f73172c0ff55a6fede6f8aff083fd727cd78e0fa7c2a080658877f81519648d8ea71212b3f429cf3874e07633274939] [172.17.146.33] [172.17.146.33] 1 Success LIBCURL.DLL C:\DICORP\DICORP_V5\SDL\APPS\ libcurl Shared Library 368128 cadb6482026d8d6faa091535e30ca20c The cURL library 7.28.0 Not Signed 2024-12-13 21:18:02 +0000 UTC 2024-12-13 21:18:02 +0000 UTC 20fdf645983636ee5a77401d524d7cec45f2aafc 5afa2ec4d646a382de881999bd7911e0cfa61a0599424453dbc5afd6cda0ad251991b0abc5f6890ba6cd5718c9c108b7 8191d3bacb121d6e7d08f2209a3843273f73172c0ff55a6fede6f8aff083fd727cd78e0fa7c2a080658877f81519648d8ea71212b3f429cf3874e07633274939 2025-05-01 08:09:58 +0000 UTC None None 2016-12-27 00:48:27 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-05-01 08:11:29.212 +0000 UTC
e7cd8951956d349b568b7ccfd4f5b2529a8c113e67c32b028f52ffda371259d9 [68a472a799ad3734d804e2f7] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-cli-1.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [bfdcae1ff93f0c07d733f03bdce28c9e] [2bf96b7aa8b611c177d329452af1dc933e14501c] [3e39c2926a3d022280dc6a706f0be11d073541500b641dfe485c7b054469a8a01902cbc8692e38ff976bc69fd974174f] [0b8f4610d3a05a589026b1af605cf976f73e6fecb9b9cce9f572e5883ce0a78e8a9cfe48e06257bb68cb8eea080ffe84a2b0b73682036f85dbbb3c03cfdedfaa] [172.17.23.146] [172.17.23.146] 1 Success commons-cli-1.2.jar C:\B.Braun\OnlineSuite\wildfly\modules\system\layers\base\org\apache\commons\cli\main\ 41123 bfdcae1ff93f0c07d733f03bdce28c9e Not Signed 2016-08-18 17:12:48 +0000 UTC 2016-08-18 17:12:48 +0000 UTC 2bf96b7aa8b611c177d329452af1dc933e14501c 3e39c2926a3d022280dc6a706f0be11d073541500b641dfe485c7b054469a8a01902cbc8692e38ff976bc69fd974174f 0b8f4610d3a05a589026b1af605cf976f73e6fecb9b9cce9f572e5883ce0a78e8a9cfe48e06257bb68cb8eea080ffe84a2b0b73682036f85dbbb3c03cfdedfaa 2025-08-12 05:03:39 +0000 UTC None None 2024-12-11 00:31:17 +0000 UTC 65 0 KNOWN 0 Microsoft attested file 2025-08-12 04:37:58.32 +0000 UTC
e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf [68a717935475f1153dfd395b] [2] [ca_tsk_pacs1] [NT-COMPASS4] [WVUHS] [C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f65db027-aff3-4070-886a-0d87064aabb1}\.ba1\wixstdba.dll] [Servers] [Servers Audit] [v2317.903] [] [Not Signed] [C:\ProgramData\Package Cache\DF7F0A73BFA077E483E51BFB97F5E2ECEEDFB6A3\2013\vcredist_x86.exe] [C:\ProgramData\Package Cache\DF7F0A73BFA077E483E51BFB97F5E2ECEEDFB6A3\2013\vcredist_x86.exe] [2025-08-21T12:56:42Z] [a52e5220efb60813b31a82d101a97dcb] [56e16e4df0944cb07e73a01301886644f062d79b] [6919265d0d3175e6b44b660ed9db34778ad9ab5d28c6b5d5d408788e161d7153f686665fca382cc4d9833b85d419e88c] [d6565ba18b5b9795d6bde3ef94d8f7cd77bf8bb69ba3fe7adefb80fc7c5d888cdfdc79238d86a0839846aea4a1e51fc0caed3d62f7054885e8b15fad9f6c654e] [172.17.37.230] [172.17.36.114] 1 Success wixstdba.dll C:\Users\lillyr\AppData\Local\Temp\{f65db027-aff3-4070-886a-0d87064aabb1}\.ba1\ WiX Standard Bootstrapper Application 120320 a52e5220efb60813b31a82d101a97dcb Windows Installer XML 3.7.2514.0 Not Signed 2014-01-14 19:38:42 +0000 UTC 2014-01-14 19:38:42 +0000 UTC 56e16e4df0944cb07e73a01301886644f062d79b 6919265d0d3175e6b44b660ed9db34778ad9ab5d28c6b5d5d408788e161d7153f686665fca382cc4d9833b85d419e88c d6565ba18b5b9795d6bde3ef94d8f7cd77bf8bb69ba3fe7adefb80fc7c5d888cdfdc79238d86a0839846aea4a1e51fc0caed3d62f7054885e8b15fad9f6c654e 2025-05-12 13:22:38 +0000 UTC None None 2025-03-31 13:22:55 +0000 UTC 74 0 KNOWN 0 Microsoft attested file 2025-05-12 01:13:46.618 +0000 UTC
e7c553ff1a507979ea54919f4443f196c968882b087280f0e1d45dfe08f84b9f [68a3146b5f0c41860c8c8517, 68a3146b5f0c41860c8c856a] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\base64.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] [ff71871ad5f9fc74456c58065b29b949] [d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd] [05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc] [2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea] [172.17.252.131] [172.17.252.131] 1 Success base64.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 25797 ff71871ad5f9fc74456c58065b29b949 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd 05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc 2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e7c26f470749e005a957ceca6832cec2745e6c227dc8cde71bd07239ddb904f1 [68a16bd60756fe54a9918f95, 68a2149cb58debea69d7c73d, 68a2bd5ff793a9057f329bfe, 68a3663261f8067c48423eaa, 68a40efceddb3a9f1a71a5fa, 68a4b7cd36bc5d38057e2358] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zCrashReport64.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [28fae224af5f7dbee89946acea3675f8] [768587a2e2a33aa921b8b6cc2f94eca00928d414] [d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b] [3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4] [10.20.20.68] [10.20.20.68] 1 Success zCrashReport64.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Crash Handling Module 260408 28fae224af5f7dbee89946acea3675f8 CrashRpt 1.0.0.2230 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 768587a2e2a33aa921b8b6cc2f94eca00928d414 d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b 3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:00:22 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
e7a68bf65d100ee688ccbd5bc3ae56686f7242c452236e20b3694cf8ed799bc8 [68a18e00ac9837c6e03c8389, 68a2df7d66d5c17a898e511e, 68a431051f4ef020faf2a7a9, 68a5828bc061ac4c45b0fd35, 68a6d41de3c533b4c1c96fa6] [2] [SYSTEM] [I-NUHNQENG] [NT AUTHORITY] [E:\NQS\NQEngine\Engine2000S.exe] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [E:\NQS\NQEngine\Engine2000S.exe] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-17T08:00:01Z, 2025-08-18T08:00:04Z, 2025-08-19T08:00:06Z, 2025-08-20T08:00:08Z, 2025-08-21T08:00:10Z] [7ffb1ce555b054984ec466e3d928178c] [9bbbe25bfedb1c4b4d5c61d441025d0ae882567c] [3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8] [e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b] [172.17.253.25] [172.17.253.25] 1 Success Engine2000S.exe E:\NQS\NQEngine\ NQ 2000 2737152 7ffb1ce555b054984ec466e3d928178c 1.0.0.0 Not Signed 2025-04-24 14:39:41 +0000 UTC 2016-02-12 20:07:11 +0000 UTC 9bbbe25bfedb1c4b4d5c61d441025d0ae882567c 3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8 e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b 2025-07-17 08:00:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e74ce1799cb48cfd0822a610cf41a101f6b996f6246aac0ff28d21902a2df002 [68a2a5b5b3e0e8853da851bb] [2] [SYSTEM] [i-nctx-pvs3] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tgxzzgk2.4mz.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T04:01:54Z] [] [] [] [] [172.17.146.6] [172.17.146.6] 1 Success __PSScriptPolicyTest_tgxzzgk2.4mz.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 81 Not Signed 2025-08-18 04:01:54 +0000 UTC 2025-08-18 04:01:54 +0000 UTC 2025-08-18 04:01:57 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e743f27f9e846bf66fec2e26d574dc11f7d1a16530aed8bf687fe1786a7c2ec6 [68a472b1b022648922e2357d] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\hsqldb-2.3.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [c4cd9109348152a367192818f4e4fc11] [970fd7b8f635e2c19305160459649569655b843c] [53de0a78b761e59e058e65e8102ed4afa7e3eb3453040eb73bea2918b533724a21f54d1306d8b76c48a52f02a49860df] [880647f17f67f97023078e003db822c5e42a3488a3148048b623664c6062841816cf132dabfc546937de79f980bc35686f14568e095d4ebf9f676f83f00db1cf] [172.17.23.146] [172.17.23.146] 1 Success hsqldb-2.3.2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 1473091 c4cd9109348152a367192818f4e4fc11 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 970fd7b8f635e2c19305160459649569655b843c 53de0a78b761e59e058e65e8102ed4afa7e3eb3453040eb73bea2918b533724a21f54d1306d8b76c48a52f02a49860df 880647f17f67f97023078e003db822c5e42a3488a3148048b623664c6062841816cf132dabfc546937de79f980bc35686f14568e095d4ebf9f676f83f00db1cf 2025-03-28 16:04:26 +0000 UTC None None 2022-12-06 17:17:56 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
e642ba38c1b80ccb926e5d13c06a8ba9b700308edd6764b20b1d72973f1f7a3b [68a3146b5f0c41860c8c8515, 68a3146b5f0c41860c8c8568] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\string.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [566c8c7cc2e8b6a0d8c56c8e9ecbaa3a] [0034fdaf7b975f232e54048ebfde010287bb30bb] [99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef] [de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1] [172.17.252.131] [172.17.252.131] 1 Success string.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 11659 566c8c7cc2e8b6a0d8c56c8e9ecbaa3a Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 0034fdaf7b975f232e54048ebfde010287bb30bb 99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
e5f565e47b516aa1f41e0b4bcadf07d2dff275abedf5bb8409b01aafec982af2 [68a472b1b022648922e2356e] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmFluidFsApi-6.0.0.94.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:38Z] [1d3ab9e93f735a8f6b207e8f6fa5604f] [5cac81386f94ca106b2337743d581a1de21cb742] [5b86d2dbf4b4f9eda44d590822e55a203370adee7c9fd44999fdfb06b152271c67ffe0b1196597d55c4c332098ba3690] [8ddad70f20c4ea9074d40344f04d37a919b3f87c10cd217970f345c15f20b68a3dd7b552eedd17cb5fe23ab8941aa44294a6058ffa863a892e3d12f88142fec2] [172.17.23.146] [172.17.23.146] 1 Success DsmFluidFsApi-6.0.0.94.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 1944037 1d3ab9e93f735a8f6b207e8f6fa5604f Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 5cac81386f94ca106b2337743d581a1de21cb742 5b86d2dbf4b4f9eda44d590822e55a203370adee7c9fd44999fdfb06b152271c67ffe0b1196597d55c4c332098ba3690 8ddad70f20c4ea9074d40344f04d37a919b3f87c10cd217970f345c15f20b68a3dd7b552eedd17cb5fe23ab8941aa44294a6058ffa863a892e3d12f88142fec2 2025-03-28 16:04:26 +0000 UTC None None 2022-03-17 18:11:49 +0000 UTC 52 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
ed550633d5d9cca7b426dac56666ec9a076a0fd328a3578465617c705b9b7abf [68a55bd959b5c4211a08ec3b] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mc0sxuun.dbv.ps1] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-20T05:23:31Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_mc0sxuun.dbv.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-20 05:23:31 +0000 UTC 2025-08-20 05:23:31 +0000 UTC 2025-08-20 05:23:37 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ed40ecd60e4ade1ed57b3949d0beb19565a6fbc9e9238e7d60ae5de0e431abea [68a311cdc2d0d6e3eb77f20d] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\LastReboot.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [fd0d3b6d86dba9dcf7ae484c4f0ee02e] [a5c9075875cc116e1c0251652af618da238c7fe4] [ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc] [aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9] [172.25.17.86] [172.25.17.86] 1 Success LastReboot.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 3398 fd0d3b6d86dba9dcf7ae484c4f0ee02e Not Signed 2022-05-10 13:26:50 +0000 UTC 2024-12-05 19:56:50 +0000 UTC a5c9075875cc116e1c0251652af618da238c7fe4 ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ec71b467028b6db965ff8ab64c235215c598f54d4a63cad113024dd8fc771dc3 [68a3146b5f0c41860c8c853a, 68a3146b5f0c41860c8c8572] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\mimetypes.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z] [7603dbb91271b3fdb5f1bc8cb3ca1d91] [570e0305f2409135f29de45c38bdcdb053c14bf0] [1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d] [8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3] [172.17.252.131] [172.17.252.131] 1 Success mimetypes.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 24884 7603dbb91271b3fdb5f1bc8cb3ca1d91 Not Signed 2024-11-22 16:23:39 +0000 UTC 2024-11-22 16:23:39 +0000 UTC 570e0305f2409135f29de45c38bdcdb053c14bf0 1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d 8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ec11abdeb642ae755f7c7b4d017e7c78b5da4e2b575c721f71eb4d57f3e7a88d [68a469504fb71ee844e91321] [2] [SYSTEM] [i-nimmulink] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_5a52494c1f07448092c118c8e656989b.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:08:41Z] [] [] [] [] [172.17.253.89] [172.17.253.89] 1 Success expression_host_5a52494c1f07448092c118c8e656989b.dll C:\Windows\SystemTemp\ 0 12.2.3452.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 12:08:48 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ebed11e668287d54fa7671ec27caba844bc77d51026d96ba55b9223b02a274ed [68a182e48913a6156189a448] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b10tnrr1.e0s.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T07:21:03Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_b10tnrr1.e0s.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 07:21:03 +0000 UTC 2025-08-17 07:21:03 +0000 UTC 2025-08-17 07:21:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ebb5ece0ff3bd72bb6cacd015548e2e5f470d1385d1aa9eb8bb26a949cbf2bb6 [68a472b1b022648922e2357a] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\flying-saucer-pdf-9.0.5.D2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:40Z] [66aa48373671380d81c3d726f1b7ee73] [53e8c4f02c3e7b8ef200dd579ede80300b3f3a76] [70f37b8cf5b06f5a3f519c6978457cbf9d6243df26e8d0707c5c21c12e0cbe2c803482f6dbe6d4c817b64d5c16175e7f] [bff0d28930c3e9555601d1abc88a9c645054b123b4c882d9a49f799548263d0330da9bfa798bc68b35d76883ab23c696af7c051cefe362de6eef8b00531a117f] [172.17.23.146] [172.17.23.146] 1 Success flying-saucer-pdf-9.0.5.D2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 109069 66aa48373671380d81c3d726f1b7ee73 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 53e8c4f02c3e7b8ef200dd579ede80300b3f3a76 70f37b8cf5b06f5a3f519c6978457cbf9d6243df26e8d0707c5c21c12e0cbe2c803482f6dbe6d4c817b64d5c16175e7f bff0d28930c3e9555601d1abc88a9c645054b123b4c882d9a49f799548263d0330da9bfa798bc68b35d76883ab23c696af7c051cefe362de6eef8b00531a117f 2025-03-28 16:04:26 +0000 UTC None None 2022-03-11 12:21:15 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-04-11 01:32:53.896 +0000 UTC
ebb33e93bf4aa5605d294227a8093dc28a5320c6933101c7c95dbdabd8dd1256 [68a4709fa6c6568ae291d431] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\_isuser_0x0409.dll] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\software\Storage Manager Data Collector 20.1.2.14.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T12:39:58Z] [fd437e74f172ce8c5f247b12a3e5925a] [4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc] [fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5] [753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae] [172.17.23.146] [172.17.23.146] 1 Success _isuser_0x0409.dll C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\ 86016 fd437e74f172ce8c5f247b12a3e5925a Not Signed 2025-08-19 12:39:55 +0000 UTC 2025-08-19 12:39:55 +0000 UTC 4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5 753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae 2025-08-19 12:39:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
eb842cd2ff4752c9c0be6f318f85fef85bf1a20766aa33afa806180fa4c4a68b [68a171b5b579a67a97fbd1f8] [2] [SYSTEM] [vm-belimed2] [NT AUTHORITY] [C:\Program Files (x86)\Unify\SQLBase115\dbntsrv.exe] [Servers] [Servers Audit] [v2248.849] ["C:\Program Files (x86)\Unify\SQLBase115\dbntsrv.exe" "SERVICE=Unify SQLBase srvICS" "INI=C:\Program Files (x86)\Unify\SQLBase115\sql.ini"] [Not Signed] [C:\Windows\System32\services.exe] [C:\Windows\System32\wininit.exe] [2025-08-17T06:02:01Z] [7ab7af097fccb82a4c7ff9351ca7e72e] [fa81bb1ecb1a6c818aab63b64c679bff5086f5a4] [c907cf979401fe7b166b39d03edb72b5dbefe20e8f8de650e304d6c6e72b41e56f69de08396d5acfc12a784e5ca176ea] [b3e2b1b81e36d5e17f00473c01a3f79dce90edb0a4f403a12ca6ffa3d9dec9eaf424b1849612602e6c2d802a46d550251d1de0b82c2debac871a09ae86581502] [172.17.22.203] [172.17.22.203] 1 Success dbntsrv.exe C:\Program Files (x86)\Unify\SQLBase115\ DBNTSRV 1241088 7ab7af097fccb82a4c7ff9351ca7e72e Unify SQLBase 11.5.4 Not Signed 2021-01-26 18:00:57 +0000 UTC 2021-01-26 18:00:57 +0000 UTC fa81bb1ecb1a6c818aab63b64c679bff5086f5a4 c907cf979401fe7b166b39d03edb72b5dbefe20e8f8de650e304d6c6e72b41e56f69de08396d5acfc12a784e5ca176ea b3e2b1b81e36d5e17f00473c01a3f79dce90edb0a4f403a12ca6ffa3d9dec9eaf424b1849612602e6c2d802a46d550251d1de0b82c2debac871a09ae86581502 2025-04-27 06:05:56 +0000 UTC None None 2021-08-13 16:28:22 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-27 06:06:00.166 +0000 UTC
eb7cb84c7f42b1080a828abf703d8c27e932b9d7e81a9975be379c513020d6fa [68a6afe50e0f3bd8deac4f54, 68a6afe50e0f3bd8deac509e, 68a6afe50e0f3bd8deac5108, 68a6afe50e0f3bd8deac5172, 68a6afe50e0f3bd8deac5559, 68a6afe50e0f3bd8deac5657, 68a6afe50e0f3bd8deac5768, 68a6afe50e0f3bd8deac5d35, 68a6afe50e0f3bd8deac5db3, 68a6afe50e0f3bd8deac5ef6] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\lib\pg_stat_statements.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [565bddb6bc8cb2aca853a506d4dc2927] [1f8996f7e8ab5a1bb5fadb19854b6b19dcd07e52] [efc2c1fdb47ad5f88748766e2ee32acb7936d0039ccb303ddd048942ecd9e5a6d20b8ed7acbb4b26ba261b14e3a0271c] [ab85c4036c9cdcf60972944ee9d4e20b8869c4201c22267206dc58093bc8e61ada71b565e4a0988a5d2982fb2f5fda55ebcaedf6bd6c94fae231d6aa5f2e017b] [172.17.30.60] [172.17.30.60] 1 Success pg_stat_statements.dll C:\Program Files\PostgreSQL\12\lib\ pg_stat_statements - execution statistics of SQL statements 36864 565bddb6bc8cb2aca853a506d4dc2927 PostgreSQL 12.1 Not Signed 2023-10-19 18:02:07 +0000 UTC 2019-12-13 12:43:37 +0000 UTC 1f8996f7e8ab5a1bb5fadb19854b6b19dcd07e52 efc2c1fdb47ad5f88748766e2ee32acb7936d0039ccb303ddd048942ecd9e5a6d20b8ed7acbb4b26ba261b14e3a0271c ab85c4036c9cdcf60972944ee9d4e20b8869c4201c22267206dc58093bc8e61ada71b565e4a0988a5d2982fb2f5fda55ebcaedf6bd6c94fae231d6aa5f2e017b 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2021-10-31 11:34:06 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-04-30 20:01:04.066 +0000 UTC
eb74c255ef2059b0e4a07ec54eab6d24dd9807c9da0e695f343911b4001b62a8 [68a16bd60756fe54a9918fa3, 68a2149cb58debea69d7c74e, 68a2bd5ff793a9057f329c09, 68a3663261f8067c48423ebc, 68a40efceddb3a9f1a71a605, 68a4b7cd36bc5d38057e236a] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\zData.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] [5507945c8429858e9e88070ce5a42f1e] [780c5bab6f9d26a9b0c213f0048ecf231c1404cb] [bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a] [2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d] [10.20.20.68] [10.20.20.68] 1 Success zData.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 3605816 5507945c8429858e9e88070ce5a42f1e Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 780c5bab6f9d26a9b0c213f0048ecf231c1404cb bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a 2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:27 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
eb717bf9e34c43fef95539bdc98c8c54edf0644f618f88734975d128c4818304 [68a16bd60756fe54a9918f92, 68a2149cb58debea69d7c73e, 68a2bd5ff793a9057f329bf8, 68a3663261f8067c48423eab, 68a40efceddb3a9f1a71a5f5, 68a4b7cd36bc5d38057e2359] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\util.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [996efd9d4e57041ce02ca6e95a59bda6] [ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d] [c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a] [d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea] [10.20.20.68] [10.20.20.68] 1 Success util.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 467256 996efd9d4e57041ce02ca6e95a59bda6 Zoom 1, 0, 2012, 1222 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:18 +0000 UTC ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 05:59:59 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
ead29daa0ec823d30c55d4ffe8236287216c32b6ff4534b1e99dbe8bcb18ffbf [68a472b1b022648922e23598] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\org.mozilla.javascript-1.7.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [ec441f8787033e99da1eb599e021dc78] [b520e18bd357a47deb2e902ce49533564236219b] [f407bd7d2e82ea58842a822543e96dde41d4d782ec0f40ca99fb9587255c2896646b1177833cceb3e26890afcea155e7] [6d1bc4538bbe9874218b3c74d62a13979791f19b3e7ef2de0d15a4928fba2bcd1e5237ca51fcdcd4f52ef9c6c7e728127507f3c97573756ea829dc978e320761] [172.17.23.146] [172.17.23.146] 1 Success org.mozilla.javascript-1.7.2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\eclipse\birt\main\ 899742 ec441f8787033e99da1eb599e021dc78 Not Signed 2024-04-05 21:55:24 +0000 UTC 1980-02-01 05:00:00 +0000 UTC b520e18bd357a47deb2e902ce49533564236219b f407bd7d2e82ea58842a822543e96dde41d4d782ec0f40ca99fb9587255c2896646b1177833cceb3e26890afcea155e7 6d1bc4538bbe9874218b3c74d62a13979791f19b3e7ef2de0d15a4928fba2bcd1e5237ca51fcdcd4f52ef9c6c7e728127507f3c97573756ea829dc978e320761 2025-03-28 16:06:16 +0000 UTC None None 2021-06-07 04:17:20 +0000 UTC 61 0 KNOWN 0 Benign 0.00 2025-04-11 01:58:11.933 +0000 UTC
ea8ebc2434881a8707d0b7745bb45b216a93fc17cb44f7989e884986d3042ed4 [68a26d9b01bfd350e1216692] [2] [SYSTEM] [UH-APPS] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_plvpuyxw.2rp.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T00:02:27Z] [e27a0a2d3577c6ec112ce253a21fd3da] [3045a8bf5fe3e3e2ca9307923d50e98829725c76] [c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9] [c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1] [172.17.253.46] [172.17.253.46] 1 Success __PSScriptPolicyTest_plvpuyxw.2rp.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 e27a0a2d3577c6ec112ce253a21fd3da Not Signed 2025-08-18 00:02:27 +0000 UTC 2025-08-18 00:02:27 +0000 UTC 3045a8bf5fe3e3e2ca9307923d50e98829725c76 c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9 c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1 2025-08-18 00:02:35 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ea5de5f33b465433568ded888ad461e8cd74ae8297fe3e2fd6c8e9c9cf703715 [68a306a5ba5832f49fe9cf5d] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\pbfldrdlg.bpl] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [89af5a41cc0cddf1698a2f44c7df4668] [250f2f9900e16fe53a94db1d1b01f7c6791fb023] [b1715f0f5c6bcd515ca157346f192f8225461c6c9763bc0571131028fe37e6d67926701c73127f099e105490c97769a1] [5a323a729e9369af907574ecd7c788f0f60a32b0da0ebb8a0550d9287f9ccb40398d4bdfcca992002d034247ace53792dcc0aa8588f3f0ee6fdb619dee828101] [172.17.146.33] [172.17.146.33] 1 Success pbfldrdlg.bpl C:\DICORP\DICORP_V5\RW\APPS\ 35328 89af5a41cc0cddf1698a2f44c7df4668 1.0.0.0 Not Signed 2022-07-06 14:52:24 +0000 UTC 2024-09-14 04:02:58 +0000 UTC 250f2f9900e16fe53a94db1d1b01f7c6791fb023 b1715f0f5c6bcd515ca157346f192f8225461c6c9763bc0571131028fe37e6d67926701c73127f099e105490c97769a1 5a323a729e9369af907574ecd7c788f0f60a32b0da0ebb8a0550d9287f9ccb40398d4bdfcca992002d034247ace53792dcc0aa8588f3f0ee6fdb619dee828101 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:33:06 +0000 UTC 56 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
ea32bf08b24aa8101bacc2c780dcbd2a24ed18c63eee00f5543ca055d0c30477 [68a306a5ba5832f49fe9cf54] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\ECQDBCD4.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [4e46b346a6ced129018e6f0ce0e2ca1a] [f295b22d136636a700bbc6a294470782ccd41525] [4add4bc293959198bd27f132e42d2c75ba332adcd25ffd078307c76fbf84ce9389f380c61817457d12d52569cd882f9d] [c42c24a608032509d2f70f0fca2d17b1478c0122e5f9c75921ce3368d875bc9d96c18bc60f8d706f2c8eeb781d71218d450faed31a4f978f996a6ca5ef2dd1e1] [172.17.146.33] [172.17.146.33] 1 Success ECQDBCD4.BPL C:\DICORP\DICORP_V5\RW\APPS\ ExpressQuantumDBControl 322048 4e46b346a6ced129018e6f0ce0e2ca1a ExpressQuantumGrid & ExpressQuantumTreeList 3.2 Not Signed 2022-07-06 14:52:11 +0000 UTC 2024-09-14 04:02:50 +0000 UTC f295b22d136636a700bbc6a294470782ccd41525 4add4bc293959198bd27f132e42d2c75ba332adcd25ffd078307c76fbf84ce9389f380c61817457d12d52569cd882f9d c42c24a608032509d2f70f0fca2d17b1478c0122e5f9c75921ce3368d875bc9d96c18bc60f8d706f2c8eeb781d71218d450faed31a4f978f996a6ca5ef2dd1e1 2025-04-30 20:02:53 +0000 UTC None None 2015-09-11 03:41:54 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
e9fcae336dc75d1cb657622eeaa2ab81083a02b7daedf904f8ba15267c64c8d3 [68a1dc843e3eb3bfafb56906] [2] [SYSTEM] [u-nOSCCAPP2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr4qf3zl.d0p.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:43:24Z] [] [] [] [] [172.25.17.231] [172.25.17.231] 1 Success __PSScriptPolicyTest_tr4qf3zl.d0p.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:43:24 +0000 UTC 2025-08-17 13:43:24 +0000 UTC 2025-08-17 13:43:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
eff71ebfb31f1822e569edc81990a969cf42a402a6a6f42cf4d1227e6ea0d1a7 [68a23457310f884f1ff6772d] [2] [SYSTEM] [i-hPRNRemisol] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rgmk0of0.40c.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:58:05Z] [] [] [] [] [172.17.23.88] [172.17.23.88] 1 Success __PSScriptPolicyTest_rgmk0of0.40c.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:58:05 +0000 UTC 2025-08-17 19:58:05 +0000 UTC 2025-08-17 19:58:15 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
efe3198f94732357b04ee6a7e13a5c0914d0db372c7b8889bff1ea2a925da1b8 [68a16bd60756fe54a9918f8f, 68a2149cb58debea69d7c73a, 68a2bd5ff793a9057f329bf5, 68a3663261f8067c48423ea8, 68a40efceddb3a9f1a71a5f2, 68a4b7cd36bc5d38057e2357] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\cmmbiz.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z] [41a96aedf2095d6e5e88c39173a010ac] [e97e89687d29d309d2b56b2487276352e60ba184] [f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f] [f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3] [10.20.20.68] [10.20.20.68] 1 Success cmmbiz.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 786232 41a96aedf2095d6e5e88c39173a010ac Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC e97e89687d29d309d2b56b2487276352e60ba184 f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3 2025-07-15 17:40:19 +0000 UTC None None 2025-07-03 06:00:03 +0000 UTC 71 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 11:38:01.347 +0000 UTC
efdd8526ee90a02300ee6859ff21d3c192df2760b14c92d78e3f40657602b7f0 [68a5239e621d09b2b1ed5e4a] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBDeviceDiagPlugIn.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:33Z] [fccd46d7671843dc7a4835197d775094] [ece368dcb0767f9917a8d3afc0ed9082d6700894] [f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1] [b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e] [172.17.22.40] [172.17.22.40] 1 Success PBDeviceDiagPlugIn.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ PBDeviceDiagPlugIn 27648 fccd46d7671843dc7a4835197d775094 PBDeviceDiagPlugIn 1.0.0.0 Not Signed 2023-06-15 02:38:04 +0000 UTC 2023-06-15 02:38:04 +0000 UTC ece368dcb0767f9917a8d3afc0ed9082d6700894 f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1 b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
efd67df7b6676e33189b4db8c65a8ca9c094d012f2458d417ba39815fba176c9 [68a5239e621d09b2b1ed5e60] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.MVVM.Behaviors.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:38Z] [1f0a30782b0e92f4b0fc04d35cec0b37] [e2ae44be93aaef47cf3b452997f278480e2ae488] [cbb48b4aefa283eedcd5e5ae90800d1cfa7c9192124446c1f9ee474e4505c10337c320bc665a3de1ad708a806f881c0b] [acf93a61014c82a7d80c19dad19ec8a0e271045034fc09e5fa3ea10763e2c2ab48b3b0e9b14c9f2f777a95eff4231cf009dd637c5416b534d22eda160b01f947] [172.17.22.40] [172.17.22.40] 1 Success Stanley.Infra.MVVM.Behaviors.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.Infra.MVVM.Behaviors 17920 1f0a30782b0e92f4b0fc04d35cec0b37 Stanley.Infra.MVVM.Behaviors 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC e2ae44be93aaef47cf3b452997f278480e2ae488 cbb48b4aefa283eedcd5e5ae90800d1cfa7c9192124446c1f9ee474e4505c10337c320bc665a3de1ad708a806f881c0b acf93a61014c82a7d80c19dad19ec8a0e271045034fc09e5fa3ea10763e2c2ab48b3b0e9b14c9f2f777a95eff4231cf009dd637c5416b534d22eda160b01f947 2025-08-20 01:23:42 +0000 UTC None None 2022-12-19 17:25:21 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
ef49fec713592f7784a3b04386a09ac7d743545acad8e07ffda9c94495eb4474 [68a306a5ba5832f49fe9cf60] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMAI.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:38Z] [b4593102f10c694c94424facfdf1fcf8] [947d3c36975c6d70be3a88ea6e1818c931da13f5] [c6a0ea3b47351edcee99f284585f66750f580bff1369d64b7084f3698b7211186a8f52b4148f64a1b50e405fe088fd57] [ce61d29f9512a2b457b4ab94e2dc8adb0051f93d772ebb56bef390d7123f6978e6ef277bf47a56d024ba15e3e978d25077d9d272c455ac8f70127268ff97864e] [172.17.146.33] [172.17.146.33] 1 Success SCHEMAI.DLL C:\DICORP\DICORP_V5\RW\APPS\ 46592 b4593102f10c694c94424facfdf1fcf8 Not Signed 2022-07-06 14:52:36 +0000 UTC 2024-09-14 04:02:56 +0000 UTC 947d3c36975c6d70be3a88ea6e1818c931da13f5 c6a0ea3b47351edcee99f284585f66750f580bff1369d64b7084f3698b7211186a8f52b4148f64a1b50e405fe088fd57 ce61d29f9512a2b457b4ab94e2dc8adb0051f93d772ebb56bef390d7123f6978e6ef277bf47a56d024ba15e3e978d25077d9d272c455ac8f70127268ff97864e 2025-04-30 20:03:13 +0000 UTC None None 2025-03-04 18:06:43 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:11:11.217 +0000 UTC
ef3c515399e7ff43836d58e76baa1e876cfdd27c358baab12a96a7e0032c30a3 [68a472b1b022648922e2357c] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ha-api-3.1.9.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:40Z] [c347dede33d4a25276c7d6a4af22b8ff] [c68b600634d4d4bae3fc54575ae850e734dc1af5] [a90e507d1bf5d49ad7a779445ef4a6ec3f2a25247660a525b7f28b613787d4027c7f570edd9a08f3792f75268901a54e] [ba5558d832cbc4b8b387ce2bdaae97ef2e56ed0e5eb1ba06c6e3510e28b3bc8b74bc2df443900ce140d2be56faad30b57e7bfb1ca0918552f793e4ea6ab4203f] [172.17.23.146] [172.17.23.146] 1 Success ha-api-3.1.9.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\ha-api-3.1.9.jar-4456d6bc718d3490\ 36383 c347dede33d4a25276c7d6a4af22b8ff Not Signed 2025-03-28 16:06:17 +0000 UTC 2025-03-28 16:06:17 +0000 UTC c68b600634d4d4bae3fc54575ae850e734dc1af5 a90e507d1bf5d49ad7a779445ef4a6ec3f2a25247660a525b7f28b613787d4027c7f570edd9a08f3792f75268901a54e ba5558d832cbc4b8b387ce2bdaae97ef2e56ed0e5eb1ba06c6e3510e28b3bc8b74bc2df443900ce140d2be56faad30b57e7bfb1ca0918552f793e4ea6ab4203f 2025-03-28 16:06:36 +0000 UTC None None 2024-09-17 15:37:26 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
ee4054fd2936ad6c0c3eec4328e9018272e8e3790e2c6ad97ef88cd7982f06ce [68a311cdc2d0d6e3eb77f211] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GetForestDCInfo.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [f365fc9dfa1de8d074ba768da6120a73] [82ec0308883dd686ab4009e644bf5cc0b1710f80] [3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e] [b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb] [172.25.17.86] [172.25.17.86] 1 Success GetForestDCInfo.ps1 C:\Users\georgemag\Documents\MAG\FromHV-Datsun\ 4362 f365fc9dfa1de8d074ba768da6120a73 Not Signed 2021-11-18 18:17:21 +0000 UTC 2025-03-06 21:51:56 +0000 UTC 82ec0308883dd686ab4009e644bf5cc0b1710f80 3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ee3cc7db22713da029361eb122a24463f48437a6e404852e50a494ffc1d1de56 [68a5239e621d09b2b1ed5e66] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\StatusbarMechanism.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:40Z] [1a5715a26857fd5d1e91a011de5b5c8b] [5d84c1c6eee8a6c260438cbcc5a1c387e51aa715] [c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87] [c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a] [172.17.22.40] [172.17.22.40] 1 Success StatusbarMechanism.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 9728 1a5715a26857fd5d1e91a011de5b5c8b 1.0.8565.40737 Not Signed 2023-06-15 02:37:56 +0000 UTC 2023-06-15 02:37:56 +0000 UTC 5d84c1c6eee8a6c260438cbcc5a1c387e51aa715 c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87 c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ede283f1a0bfd2ba1d9bedbda056808d0212b16b063a96054c5410c4185b75a9 [68a6b5eadda894c091fd5431] [2] [SQLSERVERAGENT] [SUNR1MSD] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_ozpshkal.tuj.ps1] [Servers] [Servers Audit] [v2314.901] [] [Not Signed] [D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe] [D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE] [2025-08-21T06:00:00Z] [] [] [] [] [172.24.20.7] [172.24.20.7] 1 Success __PSScriptPolicyTest_ozpshkal.tuj.ps1 C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\ 80 Not Signed 2025-08-21 06:00:00 +0000 UTC 2025-08-21 06:00:00 +0000 UTC 2025-08-21 06:00:10 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ede24c40e2a7bb0b0143ac595073abf7055867b9f35425d41dee9d3c8ad546ca [68a16bd60756fe54a9918fa4, 68a2149cb58debea69d7c74f, 68a2bd5ff793a9057f329c0a, 68a3663261f8067c48423ebd, 68a40efceddb3a9f1a71a606, 68a4b7cd36bc5d38057e236b] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTelemetry.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z] [6773863edb1abd984c61ad490a95e2a0] [a497082bdb7108c86a21700754553550185474cf] [56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67] [2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48] [10.20.20.68] [10.20.20.68] 1 Success ZoomTelemetry.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 4784440 6773863edb1abd984c61ad490a95e2a0 Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:37 +0000 UTC 2025-07-07 01:28:19 +0000 UTC a497082bdb7108c86a21700754553550185474cf 56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67 2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:03:31 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-14 22:31:10.091 +0000 UTC
edd691fc6ad7c7f3167e1a6833372367bedf6f4f2a4b8230df444a59bb3718b1 [68a472b1b022648922e23589] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-impl-2.3.0.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:42Z] [5d6b1dc4f9ba545681a10b11090dde3e] [3a3c6a62719d967175b76b63925f1fb495f11437] [1c547bac0752716582b7c95091ce91343d033d4405f8bdaade622ebb47e26526d6de1c247071c3bae3a1cb58bb7cd053] [c8808d7309fc6404cb23aebe9c3a65247e9d177a9e1d02aeb9bec09b717ced15a63d06f7ea037ce1b11ad8823b05d46f596c98e93e538e437154d4db4ea160bc] [172.17.23.146] [172.17.23.146] 1 Success jaxb-impl-2.3.0.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxb-impl-2.3.0.jar-36109ad0f6e25152\ 963660 5d6b1dc4f9ba545681a10b11090dde3e Not Signed 2025-03-28 16:06:09 +0000 UTC 2025-03-28 16:06:09 +0000 UTC 3a3c6a62719d967175b76b63925f1fb495f11437 1c547bac0752716582b7c95091ce91343d033d4405f8bdaade622ebb47e26526d6de1c247071c3bae3a1cb58bb7cd053 c8808d7309fc6404cb23aebe9c3a65247e9d177a9e1d02aeb9bec09b717ced15a63d06f7ea037ce1b11ad8823b05d46f596c98e93e538e437154d4db4ea160bc 2025-03-28 16:06:26 +0000 UTC None None 2024-08-06 23:15:13 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-04-10 12:45:43.084 +0000 UTC
ed8404ca8de2d42007eb59ba5c0404491b6eb7daeefeda349d13935753b126d8 [68a1d19347b05a9454215684, 68a322aceb4930c1ec69c2bb, 68a4746a6d77d97c70e006c6, 68a5c3cdc942eaeb78c702a0, 68a7159a30ca3ea9ba7fb514] [2] [jessie.pennington] [PCH-DR001] [PCH-DOMAIN] [D:\HRG\HrgRun.bat] [Servers] [Servers Audit] [v2248.849, v2251.851, v2272.867, v2287.879, v2317.903] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T12:43:21Z, 2025-08-18T12:43:21Z, 2025-08-19T12:43:21Z, 2025-08-20T12:43:21Z, 2025-08-21T12:43:22Z] [7fcaa24a7148c75338c0bacced15af5b] [30c8b042cf900a9cf906b1c755d5d1d25b32cacf] [4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff] [cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335] [10.20.22.43] [10.20.22.43] 1 Success HrgRun.bat D:\HRG\ 1416 7fcaa24a7148c75338c0bacced15af5b Not Signed 2023-05-22 14:08:08 +0000 UTC 2023-09-19 12:47:54 +0000 UTC 30c8b042cf900a9cf906b1c755d5d1d25b32cacf 4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335 2025-08-09 12:46:51 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
ed7f0c624fbdcf4020d4e80f6baf68134ed79f0fc414c9c57c225247b62bc875 [68a5d47cc6760b09dc6a843f, 68a5d5c523f474b5ba76fd33] [2] [CA_Jnt_SVA12] [I-CA-PSM] [WVUHS] [C:\MDE2016\install.ps1] [Servers] [Servers Audit] [v2293.885] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T13:58:13Z, 2025-08-20T14:01:29Z] [15d5a2e4c9399180703644f6cec95845] [ef5ac362659dfeacbfd6c52814339a25e653b7bc] [f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a] [b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947] [172.17.252.63] [172.17.252.63] 1 Success install.ps1 C:\MDE2016\ 99053 15d5a2e4c9399180703644f6cec95845 Not Signed 2025-07-15 17:19:00 +0000 UTC 2025-01-28 14:53:54 +0000 UTC ef5ac362659dfeacbfd6c52814339a25e653b7bc f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947 2025-07-15 17:19:21 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
ed773640ab6238e82a8b581f64b7be6fef438e081d84fca14b6dc8aaaff468c9 [68a5c81947601aee5f76e914, 68a5c9d7599432010e418bcf] [2] [SVC_SL_RedSailTech] [i-nQS1mgtn] [WVUHS] [D:\QS1\ltimg12n.dll] [Servers] [Servers Audit] [v2287.880] [] [Not Signed] [C:\Windows\SysWOW64\regsvr32.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe] [2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z] [bb535cf2602ee57acfc07a15f61a3a88] [9f26f91a2e67f41798f1b551923d6cdaf576bfd0] [440ef9d268ac6600c74fd8eb014869bab2d39231a5a0e0edca026de1dff6fb4fc56da800e731273474a124ad63024c9e] [731ccc509e8cb13e244f51669a229315f986d2c59d8a7f5b043061d1211aacd7dfe7e2bb426e07e67a4e4dd49f02a985fcb7f2bc70414cddb1445ff58f260930] [172.17.20.104] [172.17.20.104] 1 Success ltimg12n.dll E:\QS1\ LEADTOOLS(r) DLL for Win32 166400 bb535cf2602ee57acfc07a15f61a3a88 LEADTOOLS(r) DLL for Win32 12.1.0.020 Not Signed 2025-04-14 13:01:47 +0000 UTC 2001-04-30 20:52:56 +0000 UTC 9f26f91a2e67f41798f1b551923d6cdaf576bfd0 440ef9d268ac6600c74fd8eb014869bab2d39231a5a0e0edca026de1dff6fb4fc56da800e731273474a124ad63024c9e 731ccc509e8cb13e244f51669a229315f986d2c59d8a7f5b043061d1211aacd7dfe7e2bb426e07e67a4e4dd49f02a985fcb7f2bc70414cddb1445ff58f260930 2025-07-17 16:15:22 +0000 UTC None None 2022-09-01 06:16:04 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-07-17 16:17:46.576 +0000 UTC
ed728dd8ff1738114e51955b8a8e18e26bfd61f721db5aae1bd2639d01035b5c [68a1642ad1ecd8b85d19b5b0, 68a2b3a6e6ca2bd5ba2a7ac0, 68a4054c9ee88c99993abccd, 68a556e8217e3b11fe5ae34c, 68a6a894e86d16536c59918b] [2] [SYSTEM] [vm-UHCcbord] [NT AUTHORITY] [C:\cbordwin\RestartDataService.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:00:01Z, 2025-08-18T05:00:02Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:01Z, 2025-08-21T05:00:01Z] [84ca3a5b98517c455870e62ca343e1a8] [3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8] [e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549] [67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf] [172.17.252.44] [172.17.252.44] 1 Success RestartDataService.bat C:\cbordwin\ 1168 84ca3a5b98517c455870e62ca343e1a8 Not Signed 2018-08-07 19:53:41 +0000 UTC 2018-08-07 19:55:10 +0000 UTC 3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8 e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549 67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf 2025-08-09 05:00:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
ed6a94369257cf5aeacc1717ba2325547c74f196b10586c90d35e25dbe1032a1 [68a523949cec397f02de9f5d] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GUIUtils.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [e69064234c54b30c82038104ca321e12] [1a8fe23753edb0a3136a87dc35a492fef353f2ca] [96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69] [38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736] [172.17.22.40] [172.17.22.40] 1 Success GUIUtils.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 69632 e69064234c54b30c82038104ca321e12 1.0.8565.40691 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC 1a8fe23753edb0a3136a87dc35a492fef353f2ca 96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69 38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f3a4af65d68e66f116133795437228c5942fba8f339a37fe2a0cee89c7143489 [68a25fb2e970d941642e7ee1, 68a25fb2e970d941642e7eee, 68a3b2cf09045b56b2a707b9, 68a3b2cf09045b56b2a707c6, 68a502e12ae1a61fbf4caf17, 68a502e12ae1a61fbf4caf24, 68a65489c4cae84feadc5717, 68a65489c4cae84feadc5724] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\logfilescript.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z] [596da6f850c65ab8be34900752cffce5] [d483748ef566843d55587b68232ff609be9bc468] [5b37bfe7647fcee9b7621b92d1d4f4998b4e9bf2895284fe4d49d175fc3e7c724660d80f25bbe877a27a7b0c8fb441ca] [69825fbf0924754ceb2c637adea128238b54f3a0e4130ce125ef1df5723046d85c6fb957f862ac7b9bfad2e6171960fceca01ed7eb5671b90415633918b34de8] [172.17.252.12] [172.17.252.12] 1 Success logfilescript.ps1 C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\ 5902 596da6f850c65ab8be34900752cffce5 Not Signed 2024-03-28 19:42:26 +0000 UTC 2023-03-06 16:58:14 +0000 UTC d483748ef566843d55587b68232ff609be9bc468 5b37bfe7647fcee9b7621b92d1d4f4998b4e9bf2895284fe4d49d175fc3e7c724660d80f25bbe877a27a7b0c8fb441ca 69825fbf0924754ceb2c637adea128238b54f3a0e4130ce125ef1df5723046d85c6fb957f862ac7b9bfad2e6171960fceca01ed7eb5671b90415633918b34de8 2025-08-08 23:00:16 +0000 UTC None None 2024-04-10 17:44:47 +0000 UTC 60 0 KNOWN 0 Benign 0.00 2025-08-08 23:01:52.488 +0000 UTC
f39a93d4ec3f32e339b3a6cbf96208f8e057ee7483ae8d857b0a03848aacd045 [68a48674c4cb2500be69261a, 68a48674c4cb2500be692630] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.Swagger.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z] [ec116545a1a3e9c526cab69658fe0500] [754ebdc6c68455197432fc9cc8617ca28c227372] [3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d] [8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6] [172.17.252.226] [172.17.252.226] 1 Success Swashbuckle.AspNetCore.Swagger.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Swashbuckle.AspNetCore.Swagger 27408 ec116545a1a3e9c526cab69658fe0500 Swashbuckle.AspNetCore.Swagger 6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3 Stryker Corporation 2023-01-11 11:48:20 +0000 UTC 2024-02-15 18:02:06 +0000 UTC 754ebdc6c68455197432fc9cc8617ca28c227372 3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d 8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f389e16e78bc34be5aa9bd3ce9fd6539ffc61387d71c29f8c5cb4fa989727f6d [68a16bd60756fe54a9918fa0, 68a2149cb58debea69d7c74b, 68a2bd5ff793a9057f329c06, 68a3663261f8067c48423eb9, 68a40efceddb3a9f1a71a602, 68a4b7cd36bc5d38057e2367] [2] [Teknicor] [Teknicor] [PCH-DOMAIN] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\LibphoneWrapper.dll] [Servers] [Servers Audit] [v2248.849, v2264.862, v2272.867, v2282.875] [] [Zoom Video Communications, Inc.] [C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z] [6b15ab371446e9308f6c7760dac4485c] [230e1cdc4416240c11e78e0f54b50e441858e2cb] [f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9] [a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a] [10.20.20.68] [10.20.20.68] 1 Success LibphoneWrapper.dll C:\Users\teknicor\AppData\Roaming\Zoom\bin\ Zoom 846136 6b15ab371446e9308f6c7760dac4485c Zoom 6,4,12,64384 Zoom Video Communications, Inc. 2025-07-07 01:28:36 +0000 UTC 2025-07-07 01:28:18 +0000 UTC 230e1cdc4416240c11e78e0f54b50e441858e2cb f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9 a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a 2025-07-15 17:40:29 +0000 UTC None None 2025-07-03 06:00:27 +0000 UTC 72 0 KNOWN 0 Signature Verified (DigiCert) 2025-07-15 14:43:31.3 +0000 UTC
f2a56d8f2246e6174f8df6ca2eafd67db543951fa68c243fc30e948863fd63e6 [68a523a99ba7c92b34976f9f] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.Controls.v7.0.XmlSerializers.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:44Z] [31f8c82d5822b89ed6c6acea1715d744] [96479ad5a70f75b20e19d2d7fcce8b60d8f49215] [7cfbe3503f4f9846864f2c67c8c37df43fbfd9054abd985d8e127338f6c8b6f061fa0c0d557941489a090e99e117427a] [f893b9c33b787f3146ad11b1559b0c3e56dd96a6172f0023a3858faca749423367f947b3e9127432b322ec60f812d32653137e445f84fc2b9b52a325a4c41d97] [172.17.22.40] [172.17.22.40] 1 Success Xceed.Wpf.Controls.v7.0.XmlSerializers.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 16384 31f8c82d5822b89ed6c6acea1715d744 7.0.20452.13100 Not Signed 2023-06-15 02:37:34 +0000 UTC 2023-06-15 02:37:34 +0000 UTC 96479ad5a70f75b20e19d2d7fcce8b60d8f49215 7cfbe3503f4f9846864f2c67c8c37df43fbfd9054abd985d8e127338f6c8b6f061fa0c0d557941489a090e99e117427a f893b9c33b787f3146ad11b1559b0c3e56dd96a6172f0023a3858faca749423367f947b3e9127432b322ec60f812d32653137e445f84fc2b9b52a325a4c41d97 2025-08-20 01:23:53 +0000 UTC None None 2023-12-28 16:32:19 +0000 UTC 71 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
f2782880edc138832f75cd69dc0c6828c60da4a688c8890c5b0ffc48923ee4e5 [68a5239e621d09b2b1ed5e64] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Jms.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:39Z] [a9718f9d3fe1e994d65410cbb3247fe7] [07de5a6d30f9c398bdd133d45d866ab31b110436] [4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c] [d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6] [172.17.22.40] [172.17.22.40] 1 Success Stanley.PeCommServices.Jms.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Stanley.PeCommServices.Jms 12800 a9718f9d3fe1e994d65410cbb3247fe7 Stanley.PeCommServices.Jms 1.0.0.0 Not Signed 2023-06-15 02:36:24 +0000 UTC 2023-06-15 02:36:24 +0000 UTC 07de5a6d30f9c398bdd133d45d866ab31b110436 4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f233a5d2bc2e0d7ee62f6b8cd56f3aff7a23e26da415e956b388d307cd07da48 [68a24592503474046d56002e, 68a6643ac834a71c320c303c] [2] [SYSTEM] [IMAGENOW73-PROD] [NT AUTHORITY] [C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\crypto.dll] [Servers] [Servers Audit] [v2248, v2314] [] [Not Signed] [C:\Program Files\erl8.3\erts-8.3\bin\erl.exe] [C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe] [2025-08-17T21:02:23Z, 2025-08-21T00:02:18Z] [b22ec974693b97a3a59f63997e5c0637] [91b3ee580bc9075191e9732cf6238709f81a7b22] [140e202c46c8315a1c412b6d8c7edbd1a8813e30d1cde1ae3969b83fd0e81f03f77dacbde999de84a41312447ad096e1] [9454100bf3f326e5ecd63b9aa4307d85430ec6c3a8fef70e0b19f3eee1d166f82d2f631aff6e4088ec44914adeacac60f9ce89bdd0c77a2112aa7018040032e1] [10.101.100.216] [10.101.100.216] 1 Success crypto.dll C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\ 1518592 b22ec974693b97a3a59f63997e5c0637 Not Signed 2017-03-14 21:32:04 +0000 UTC 2017-03-14 21:32:04 +0000 UTC 91b3ee580bc9075191e9732cf6238709f81a7b22 140e202c46c8315a1c412b6d8c7edbd1a8813e30d1cde1ae3969b83fd0e81f03f77dacbde999de84a41312447ad096e1 9454100bf3f326e5ecd63b9aa4307d85430ec6c3a8fef70e0b19f3eee1d166f82d2f631aff6e4088ec44914adeacac60f9ce89bdd0c77a2112aa7018040032e1 2025-07-17 00:02:31 +0000 UTC None None 2024-09-29 23:26:19 +0000 UTC 71 1 KNOWN 0 Benign 0.20 2025-07-17 00:06:14.119 +0000 UTC
f22fa52b2c27e95cd2a6cac5cfa0f131563e6a977b30d71196f1162fe4a5688b [68a330781adb06bf567189ac] [2] [be10045] [i-nsdprint1] [WVUHS] [D:\scripts\WorkdaySearch.ps1] [Servers] [Servers Audit] [v2255.853] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T13:53:53Z] [f9d67ab54445d23d6c36da84993679bc] [dbf31330f49f312513c003971506ed9206865011] [62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7] [bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e] [172.17.252.10] [172.17.252.10] 1 Success WorkdaySearch.ps1 D:\scripts\ 2202 f9d67ab54445d23d6c36da84993679bc Not Signed 2023-10-30 13:43:35 +0000 UTC 2025-08-18 13:53:45 +0000 UTC dbf31330f49f312513c003971506ed9206865011 62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7 bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e 2025-08-18 13:54:00 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
f1ac711cb8491e226815bb95418502d495f41482bed0240646feb118260cfdbe [68a48674c4cb2500be692610, 68a48674c4cb2500be692626] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Debug.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z] [e7e39224cd91face931f14064a638698] [2e2c1e01a10fdddc7d9a842413484e407191f92e] [af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb] [0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.Debug.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Sinks.Debug 19192 e7e39224cd91face931f14064a638698 Serilog.Sinks.Debug 2.0.0-master-68cc513 Stryker Corporation 2021-02-14 12:47:26 +0000 UTC 2024-02-15 18:02:04 +0000 UTC 2e2c1e01a10fdddc7d9a842413484e407191f92e af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb 0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f143981b39642060db0d79ca61d54d93831de9f62af0b4958067fecf1e483a55 [68a156984663bd83db8ebc96] [2] [SYSTEM] [WHL-STOREFRONT1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wse2sex4.g1x.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:12:01Z] [] [] [] [] [172.18.112.145] [172.18.112.145] 1 Success __PSScriptPolicyTest_wse2sex4.g1x.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:12:01 +0000 UTC 2025-08-17 04:12:01 +0000 UTC 2025-08-17 04:12:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f1191cabd6ae91f32bb606241c4010e039a595fecc2c6921f09504c88a431774 [68a472b1b022648922e235a3] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\sqlite-jdbc-3.7.2.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [1a6796add6898d6a17923d35fc539fd6] [7a3d67f00508d3881650579f7f228c61bfc1b196] [3876096f82674fefc1da152abe61abef0a39bc4bff2833d3d2b7bf57db6ca62c330d2ad29c9b7759858375580efd9482] [08aaa094fdd0b4a31e667f24c4d58c6d7337dfa9791f6c2b26015ffcc87173072affde6d6bd4492c9bb1247b0ac95e4d7a3776126a97deafdfc0f4e3fddf69f6] [172.17.23.146] [172.17.23.146] 1 Success sqlite-jdbc-3.7.2.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 3201133 1a6796add6898d6a17923d35fc539fd6 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 7a3d67f00508d3881650579f7f228c61bfc1b196 3876096f82674fefc1da152abe61abef0a39bc4bff2833d3d2b7bf57db6ca62c330d2ad29c9b7759858375580efd9482 08aaa094fdd0b4a31e667f24c4d58c6d7337dfa9791f6c2b26015ffcc87173072affde6d6bd4492c9bb1247b0ac95e4d7a3776126a97deafdfc0f4e3fddf69f6 2025-03-28 16:04:36 +0000 UTC None None 2023-07-21 21:36:33 +0000 UTC 63 1 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
f0d4b9c238d24b510f54549e58b65ca771cec784837dcce1afed90b9fa76aeb0 [68a311cdc2d0d6e3eb77f205] [2] [georgemag] [U-CAJump] [WVUHS] [C:\Users\georgemag\Documents\MAG\UScripts\RestoreMailboxToOtherMailbox-U.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T11:38:48Z] [1aceb94194ecbedc4297e2942461bb42] [fff9c984488a363dede782841598d4a7d6ea65c9] [cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7] [f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288] [172.25.17.86] [172.25.17.86] 1 Success RestoreMailboxToOtherMailbox-U.ps1 C:\Users\georgemag\Documents\MAG\UScripts\ 25506 1aceb94194ecbedc4297e2942461bb42 Not Signed 2025-02-28 16:55:32 +0000 UTC 2025-07-02 12:22:49 +0000 UTC fff9c984488a363dede782841598d4a7d6ea65c9 cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7 f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288 2025-08-12 11:48:49 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f0d097448b58a879149fea8c0fd5bfd34b72db3a858fb2f371e8438dbb8717c7 [68a233e95f55f21b103cd9c5] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vvd1ao.f0e.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T19:56:13Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_h3vvd1ao.f0e.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 19:56:13 +0000 UTC 2025-08-17 19:56:13 +0000 UTC 2025-08-17 19:56:25 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f0beb78ece32bce4af1a1d371df7681e3f9d57e54b0caa0d6f833f391218432c [68a472b1b022648922e23597] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mimepull-1.9.7.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:43Z] [c40355c6207b1a32fd0ad0eaff96dbbe] [3085dfe507b6ce43c1fcc60f228d65a7731b8e7d] [4c4f54f324e681140a2e805f4eef8bf92cf15ea5346c4427504286cb231dff683f34f557b8776fc481e72237034c161c] [fa27d069c4e8f0f0cfee0609e06d99e8b4406c07b008ca23504b57730b38ea7111d54899495e68ee05cd1637217845293b31ef64484dc021b0a54eaadf2cb672] [172.17.23.146] [172.17.23.146] 1 Success mimepull-1.9.7.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\mimepull-1.9.7.jar-de84824ebfd8ed8a\ 63985 c40355c6207b1a32fd0ad0eaff96dbbe Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC 3085dfe507b6ce43c1fcc60f228d65a7731b8e7d 4c4f54f324e681140a2e805f4eef8bf92cf15ea5346c4427504286cb231dff683f34f557b8776fc481e72237034c161c fa27d069c4e8f0f0cfee0609e06d99e8b4406c07b008ca23504b57730b38ea7111d54899495e68ee05cd1637217845293b31ef64484dc021b0a54eaadf2cb672 2025-03-28 16:06:36 +0000 UTC None None 2025-02-05 22:12:41 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
f0901d66025505ba75703951e37a08b7079d7077fb98a506057fe8fc141e06ef [68a242b8fcb6ba0be2122339] [2] [SYSTEM] [i-nCTX-SessRec] [NT AUTHORITY] [C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_kiw23hmo.z5k.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T20:59:23Z] [] [] [] [] [172.17.146.20] [172.17.146.20] 1 Success __PSScriptPolicyTest_kiw23hmo.z5k.ps1 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 20:59:23 +0000 UTC 2025-08-17 20:59:23 +0000 UTC 2025-08-17 20:59:36 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f057202970b8bf95c8a587bd6c4e319eb753010daaeea4944e1ec5e269b3e120 [68a4dda823653165b0c6ea27] [2] [CA_Jnt_DAWS3] [i-hMSFT-ODA] [WVUHS] [C:\Assessments\ADSecurityAssessment\run.cmd] [Servers] [Servers Audit] [v2283.876] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T20:20:40Z] [8bd1e8d9b600a129656078512f623ff0] [5745c02ec0e1eae0b43b16753beb8e1ccb8081a6] [14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c] [c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094] [172.17.23.172] [172.17.23.172] 1 Success run.cmd C:\Assessments\ADSecurityAssessment\ 215 8bd1e8d9b600a129656078512f623ff0 Not Signed 2024-10-29 19:20:40 +0000 UTC 2024-10-29 19:20:40 +0000 UTC 5745c02ec0e1eae0b43b16753beb8e1ccb8081a6 14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094 2025-08-12 20:20:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f01539ab85e7769cbf9e046fc9f87e3c6abd74bebff765b77a9c48972f0da67f [68a48674c4cb2500be692609, 68a48674c4cb2500be69261f] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Console.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z] [f2c3352f41741807403c460ed4759bb7] [a23e5c02ab076c8c8dab1a2bd2c7306541de034e] [57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592] [7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8] [172.17.252.226] [172.17.252.226] 1 Success Serilog.Sinks.Console.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Serilog.Sinks.Console 46336 f2c3352f41741807403c460ed4759bb7 Serilog.Sinks.Console 4.0.1-main-37f02f5 Stryker Corporation 2021-11-19 05:04:50 +0000 UTC 2024-02-15 18:02:04 +0000 UTC a23e5c02ab076c8c8dab1a2bd2c7306541de034e 57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592 7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8 2025-07-15 14:07:33 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f6885c6338d93c57a296003ea20f58cacf2a4b610f3031d4b64135cfa9eb00b2 [68a472b1b022648922e235a0] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ServerAgentApi-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:44Z] [b7ee60c4bb333bfae6dcf018d9dd05c9] [0d5ba16f8359167f17a827ab7b2b46ada9c30293] [f18bb1caf1de663c98afd18de92b40b8902d4520ca291cef00bdd9df056c2c554890fc2c2e528dea52960e92456e67ad] [bfce31fdd14e43f5f0efff4953d3652016c76ffdba9155ab16490505c40cc58f3a562a7cadfa6e996c978bc4ece63451ea934de7a18b9c3c32a40fa53e2f0053] [172.17.23.146] [172.17.23.146] 1 Success ServerAgentApi-20.1.2.14.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\ 466475 b7ee60c4bb333bfae6dcf018d9dd05c9 Not Signed 2021-12-22 05:20:54 +0000 UTC 2021-12-22 05:20:54 +0000 UTC 0d5ba16f8359167f17a827ab7b2b46ada9c30293 f18bb1caf1de663c98afd18de92b40b8902d4520ca291cef00bdd9df056c2c554890fc2c2e528dea52960e92456e67ad bfce31fdd14e43f5f0efff4953d3652016c76ffdba9155ab16490505c40cc58f3a562a7cadfa6e996c978bc4ece63451ea934de7a18b9c3c32a40fa53e2f0053 2025-03-28 16:04:36 +0000 UTC None None 2022-03-17 18:11:48 +0000 UTC 57 0 KNOWN 0 Benign 0.00 2025-04-11 01:37:57.011 +0000 UTC
f654c9b2dceafe4f15f3510da91c3339020918a5f8bdf3a7e3f4f90aaf6c5919 [68a6afe50e0f3bd8deac4f4d, 68a6afe50e0f3bd8deac5096, 68a6afe50e0f3bd8deac5102, 68a6afe50e0f3bd8deac516b, 68a6afe50e0f3bd8deac5550, 68a6afe50e0f3bd8deac5642, 68a6afe50e0f3bd8deac5762, 68a6afe50e0f3bd8deac5d2b, 68a6afe50e0f3bd8deac5dad, 68a6afe50e0f3bd8deac5eeb] [2] [postgres] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\PostgreSQL\12\bin\libcrypto-1_1-x64.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [C:\Program Files\PostgreSQL\12\bin\postgres.exe] [2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z] [1495f1326e12d1a1adc4c12d6aa02ebe] [acc6e01929787add69ad6e13b549cac4d9d91829] [cbf9fccb5df344160c8348943cfa18cd8dea0b4673279de9dfcb02e5a5248bb9153c692515b3c643058ce98d15b14414] [e1175b30f30f49ee81a7e612bf79f9471c11136d6e7c635b9cede2e81f5c266d423e9e274780a4371009d8a87b7994d80231714cddbc45c22040d957a1820cbc] [172.17.30.60] [172.17.30.60] 1 Success libcrypto-1_1-x64.dll C:\Program Files\PostgreSQL\12\bin\ OpenSSL library 2842112 1495f1326e12d1a1adc4c12d6aa02ebe The OpenSSL Toolkit 1.1.1d Not Signed 2023-10-19 17:59:22 +0000 UTC 2019-12-13 12:43:49 +0000 UTC acc6e01929787add69ad6e13b549cac4d9d91829 cbf9fccb5df344160c8348943cfa18cd8dea0b4673279de9dfcb02e5a5248bb9153c692515b3c643058ce98d15b14414 e1175b30f30f49ee81a7e612bf79f9471c11136d6e7c635b9cede2e81f5c266d423e9e274780a4371009d8a87b7994d80231714cddbc45c22040d957a1820cbc 2025-04-30 19:59:33 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None 2025-03-20 16:00:51 +0000 UTC 74 0 KNOWN 0 Benign 0.00 2025-04-30 20:01:04.066 +0000 UTC
f6485e39c6fa29ecdba34ef2f1f186c0f4440027c9b0b0a32af03a7cdcea0866 [68a6afe50e0f3bd8deac4cfa, 68a6afe50e0f3bd8deac4d0d, 68a6afe50e0f3bd8deac4d3c, 68a6afe50e0f3bd8deac4d5c, 68a6afe50e0f3bd8deac4d7b, 68a6afe50e0f3bd8deac4d9b, 68a6afe50e0f3bd8deac4dbb, 68a6afe50e0f3bd8deac4ddb, 68a6afe50e0f3bd8deac4dfb, 68a6afe50e0f3bd8deac4e1b, 68a6afe50e0f3bd8deac4e3b, 68a6afe50e0f3bd8deac4e5b, 68a6afe50e0f3bd8deac4e7b, 68a6afe50e0f3bd8deac4e9b, 68a6afe50e0f3bd8deac4ead, 68a6afe50e0f3bd8deac4edb, 68a6afe50e0f3bd8deac4efb, 68a6afe50e0f3bd8deac4f1e, 68a6afe50e0f3bd8deac4f3b, 68a6afe50e0f3bd8deac4f65, 68a6afe50e0f3bd8deac4f85, 68a6afe50e0f3bd8deac4fa5, 68a6afe50e0f3bd8deac4fc5, 68a6afe50e0f3bd8deac4fe5, 68a6afe50e0f3bd8deac5005, 68a6afe50e0f3bd8deac5025, 68a6afe50e0f3bd8deac5045, 68a6afe50e0f3bd8deac5065, 68a6afe50e0f3bd8deac5085, 68a6afe50e0f3bd8deac50b0, 68a6afe50e0f3bd8deac50cf, 68a6afe50e0f3bd8deac50ef, 68a6afe50e0f3bd8deac5119, 68a6afe50e0f3bd8deac5139, 68a6afe50e0f3bd8deac5159, 68a6afe50e0f3bd8deac5183, 68a6afe50e0f3bd8deac51a3, 68a6afe50e0f3bd8deac51c3, 68a6afe50e0f3bd8deac51e4, 68a6afe50e0f3bd8deac51f6, 68a6afe50e0f3bd8deac522e, 68a6afe50e0f3bd8deac5244, 68a6afe50e0f3bd8deac5264, 68a6afe50e0f3bd8deac5279, 68a6afe50e0f3bd8deac5298, 68a6afe50e0f3bd8deac52b8, 68a6afe50e0f3bd8deac52d9, 68a6afe50e0f3bd8deac52f8, 68a6afe50e0f3bd8deac5318, 68a6afe50e0f3bd8deac5338, 68a6afe50e0f3bd8deac5358, 68a6afe50e0f3bd8deac5378, 68a6afe50e0f3bd8deac539f, 68a6afe50e0f3bd8deac53ba, 68a6afe50e0f3bd8deac53df, 68a6afe50e0f3bd8deac53fd, 68a6afe50e0f3bd8deac541e, 68a6afe50e0f3bd8deac5439, 68a6afe50e0f3bd8deac545f, 68a6afe50e0f3bd8deac547e, 68a6afe50e0f3bd8deac549e, 68a6afe50e0f3bd8deac54be, 68a6afe50e0f3bd8deac54de, 68a6afe50e0f3bd8deac54fe, 68a6afe50e0f3bd8deac551e, 68a6afe50e0f3bd8deac553e, 68a6afe50e0f3bd8deac5568, 68a6afe50e0f3bd8deac5588, 68a6afe50e0f3bd8deac55a8, 68a6afe50e0f3bd8deac55c9, 68a6afe50e0f3bd8deac55e8, 68a6afe50e0f3bd8deac5609, 68a6afe50e0f3bd8deac5628, 68a6afe50e0f3bd8deac5658, 68a6afe50e0f3bd8deac5679, 68a6afe50e0f3bd8deac5689, 68a6afe50e0f3bd8deac56a6, 68a6afe50e0f3bd8deac56c6, 68a6afe50e0f3bd8deac56df, 68a6afe50e0f3bd8deac5707, 68a6afe50e0f3bd8deac5721, 68a6afe50e0f3bd8deac5746, 68a6afe50e0f3bd8deac577a, 68a6afe50e0f3bd8deac578f, 68a6afe50e0f3bd8deac57ba, 68a6afe50e0f3bd8deac57d0, 68a6afe50e0f3bd8deac57fa, 68a6afe50e0f3bd8deac580f, 68a6afe50e0f3bd8deac5828, 68a6afe50e0f3bd8deac5851, 68a6afe50e0f3bd8deac5878, 68a6afe50e0f3bd8deac5892, 68a6afe50e0f3bd8deac58a0, 68a6afe50e0f3bd8deac58d0, 68a6afe50e0f3bd8deac58e4, 68a6afe50e0f3bd8deac590a, 68a6afe50e0f3bd8deac5922, 68a6afe50e0f3bd8deac5951, 68a6afe50e0f3bd8deac5971, 68a6afe50e0f3bd8deac5987, ...] [2] [naxis] [i-vsyn3d] [I-VSYN3D] [C:\Program Files\Fujifilm\NaxisWS6\turbojpeg.dll] [Servers] [Servers Audit] [v1617] [] [Not Signed] [C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe] [C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe] [2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...] [36f8aece55749b696a3a5ea37551966a] [7f6ba6012858519ed64838b29d4162e9e9b9eed0] [8d494127f8afb632320bc1b0f95a1bf981e902cd0cbb3cd6ada9a3d962093c09d32125f4850ac0028f3ddb2537ce03ec] [b08930ba0999f84f17033c6705c77efeacac58f378182fa11db170089e22fa75b2955005dc69005f2ec20a007ae122a5432a04cdf01e570b87dcca011a179f92] [172.17.30.60] [172.17.30.60] 1 Success turbojpeg.dll C:\Program Files\Fujifilm\NaxisWS6\ 259584 36f8aece55749b696a3a5ea37551966a Not Signed 2023-11-03 20:25:56 +0000 UTC 2021-08-30 00:40:28 +0000 UTC 7f6ba6012858519ed64838b29d4162e9e9b9eed0 8d494127f8afb632320bc1b0f95a1bf981e902cd0cbb3cd6ada9a3d962093c09d32125f4850ac0028f3ddb2537ce03ec b08930ba0999f84f17033c6705c77efeacac58f378182fa11db170089e22fa75b2955005dc69005f2ec20a007ae122a5432a04cdf01e570b87dcca011a179f92 2025-05-07 14:27:31 +0000 UTC [{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}] None Never N/A N/A UNKNOWN N/A N/A N/A
f6136e0ffb0c22bc0011234c50eaa14f7b30b94b0fc3607b11b566a0d1886d61 [68a26ea46e6b6ee6bc972e27, 68a3c03623c2934753962dcb, 68a511ca8c3c7fce901b5863, 68a6636795891065d1c7cc47] [2] [SYSTEM] [i-nGRNTBaxterDB] [NT AUTHORITY] [F:\app\oracle\fast_recovery_area\CEDB0601\rman_backup.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.900] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T00:00:01Z, 2025-08-19T00:00:01Z, 2025-08-20T00:00:01Z, 2025-08-21T00:00:01Z] [608b8e09fac55079d60755d6fdbe776f] [611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd] [fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8] [5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c] [172.17.20.124] [172.17.20.124] 1 Success rman_backup.bat F:\app\oracle\fast_recovery_area\CEDB0601\ 141 608b8e09fac55079d60755d6fdbe776f Not Signed 2025-05-07 13:44:13 +0000 UTC 2025-05-07 13:45:30 +0000 UTC 611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8 5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c 2025-08-09 00:00:08 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f612f6b0afdb39d4572bc89b2ebb6a01dd88f1828c98808590def513221921eb [68a6ee3f37e900aa18bf637e] [2] [SYSTEM] [i-hccmctracer] [NT AUTHORITY] [C:\Windows\SystemTemp\expression_host_00a56212d69048fa97059041b89400e2.dll] [Servers] [Servers Audit] [v2314.902] [] [Not Signed] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe] [C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe] [2025-08-21T10:00:29Z] [] [] [] [] [172.17.252.28] [172.17.252.28] 1 Success expression_host_00a56212d69048fa97059041b89400e2.dll C:\Windows\SystemTemp\ 0 12.2.3366.16 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-21 10:00:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f5db951701b43d9e065c4d5548acbf9b2e8dc765caaccf137d33c2df17e42915 [68a31a5c2c2fd909a9789515] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yot1w4e0.sl3.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:19:33Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_yot1w4e0.sl3.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:19:33 +0000 UTC 2025-08-18 12:19:33 +0000 UTC 2025-08-18 12:19:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f5730988fcea216c2807c08c31f0f047cd77bfa91f500368883ab178cea72b05 [68a1dee6de61d9c2d3f810de] [2] [SYSTEM] [u-nOSCCAPP2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_404hqnm2.awk.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T13:53:30Z] [] [] [] [] [172.25.17.231] [172.25.17.231] 1 Success __PSScriptPolicyTest_404hqnm2.awk.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 13:53:30 +0000 UTC 2025-08-17 13:53:30 +0000 UTC 2025-08-17 13:53:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f559c9fe76d2df0b25758225c303c7f4f9d5e01ef2cd59428decbc100fa54260 [68a71d98771132224a617f85] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.SDK.Portable.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:40Z] [5a74fdf42288a4a712e241e39f1a3b5d] [059cd0634b1e3feb553241f73a2682cabe5e2c06] [d4d6378752fb4effb753e444dea7cad9816ffe81ef0eeb159dbef4941404028a81d4abf40bd9f48c12dca5f32c4fd772] [6ad010dc22552b1dd05f42052613249064e8ce785a4ae43608434018f069461ed2db902bb0c9e7c75312b8584abca53348ebb93f8edbc502c5be0bb504ce279b] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.SDK.Portable.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.SDK.Portable.dll 223744 5a74fdf42288a4a712e241e39f1a3b5d Mobile SDK portable library assembly 20.2.2516.1 Not Signed 2020-05-11 15:01:58 +0000 UTC 2020-05-11 15:01:58 +0000 UTC 059cd0634b1e3feb553241f73a2682cabe5e2c06 d4d6378752fb4effb753e444dea7cad9816ffe81ef0eeb159dbef4941404028a81d4abf40bd9f48c12dca5f32c4fd772 6ad010dc22552b1dd05f42052613249064e8ce785a4ae43608434018f069461ed2db902bb0c9e7c75312b8584abca53348ebb93f8edbc502c5be0bb504ce279b 2025-07-16 19:27:14 +0000 UTC None None 2021-05-18 05:49:08 +0000 UTC 66 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
f530fa19af4b883e5fa5cded7db4d38f87828b68adda565f42a9f47dcb237d0e [68a2b38b161afab772184bd4] [2] [CA_Jnt_ExchAuto] [U-CAJump] [WVUHS] [C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\tmpEXO_iibpe4mm.2kz.psm1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T05:00:48Z] [beb8c90fe57930da08c3e3ceeeefca0d] [c983a10d79f3df73d3413c98e661499bb2163e0b] [fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb] [be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b] [172.25.17.86] [172.25.17.86] 1 Success tmpEXO_iibpe4mm.2kz.psm1 C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\ 2290479 beb8c90fe57930da08c3e3ceeeefca0d Not Signed 2025-08-18 05:00:47 +0000 UTC 2025-08-18 05:00:47 +0000 UTC c983a10d79f3df73d3413c98e661499bb2163e0b fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b 2025-08-18 05:00:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f529e182b51d5b8921bc0134e5e6fab317321babe9fb10ba92da457f46c53793 [68a5239e621d09b2b1ed5e45] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Module.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:32Z] [dc2407a1a6409b2c68fb0cb6e69ec180] [40155aeb60dffe49e6461c76fa66dc89b8ea9437] [e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73] [495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc] [172.17.22.40] [172.17.22.40] 1 Success Module.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ 126976 dc2407a1a6409b2c68fb0cb6e69ec180 1.0.8565.40727 Not Signed 2023-06-15 02:37:36 +0000 UTC 2023-06-15 02:37:36 +0000 UTC 40155aeb60dffe49e6461c76fa66dc89b8ea9437 e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73 495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc 2025-08-20 01:23:42 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f4d78ec3aacc15e34bbcacd91f643ed1824f2dc7bd50ab1002f2e01e95456a4d [68a17e9d450b6af860b2a048, 68a2d02202d2333d8d83417e, 68a421c7cf2d938484290f3b, 68a5735c4174cee301f60528, 68a6c50b0f01f5b632e5224b] [2] [svc_Iatric] [i-nSamDB1] [WVUHS] [G:\SAMImports\Provation\ExtractYesterday.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z, 2025-08-21T07:00:00Z] [e2132d40c92ea49fc2ba6f5a48a4e5e1] [9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db] [b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56] [3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213] [172.17.21.136] [172.17.21.136] 1 Success ExtractYesterday.bat G:\SAMImports\Provation\ 128 e2132d40c92ea49fc2ba6f5a48a4e5e1 Not Signed 2023-03-06 16:35:20 +0000 UTC 2023-12-13 12:57:26 +0000 UTC 9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56 3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213 2025-08-09 07:00:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f4d0d3de3348731c003a4021605d4d86a38d8d915555494bde85645d748ffc4f [68a15a1322e6ea61a3496d50] [2] [SYSTEM] [TMH-CTX-APP1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1opx1ngt.s4i.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T04:26:52Z] [] [] [] [] [172.17.246.16] [172.17.246.16] 1 Success __PSScriptPolicyTest_1opx1ngt.s4i.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 81 Not Signed 2025-08-17 04:26:52 +0000 UTC 2025-08-17 04:26:52 +0000 UTC 2025-08-17 04:26:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f49dccf8c52375ecf81ee59c608154723828fc7c43863dba72e19ce5cb9e289d [68a70bf158372bc3075d1d4c] [2] [SVC_SL_ControlSystem] [vm-bmcntx-bas1] [WVUHS] [C:\Program Files\Yabe\Plugins\GlobalCommander.dll] [Servers] [Servers Audit] [v2314.900] [] [Not Signed] [C:\Program Files\Yabe\Yabe.exe] [C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp] [2025-08-21T12:07:06Z] [d6d15d149241c88879eee3836d31ad03] [6eff88fe42731a9e15e40bdf728c07242587a17c] [7d2c325ef0487c9b9aacf9b94450fd9ea5cd66163cc377475173141a6da67e275202887f96828bd5b9a064c3f8330b3f] [0865b9351d87763f421095d4323d58fe3668218dcc3da8f62a34513019e2867cca7a32d4a07cbc430ec5df8e1ee355f9529cb7ff005497bb874a786bb2b6e3e2] [172.17.20.75] [172.17.20.75] 1 Success GlobalCommander.dll C:\Program Files\Yabe\Plugins\ GlobalCommander 779776 d6d15d149241c88879eee3836d31ad03 GlobalCommander 1.3.4.0 Not Signed 2025-08-21 12:07:01 +0000 UTC 2025-01-17 11:17:44 +0000 UTC 6eff88fe42731a9e15e40bdf728c07242587a17c 7d2c325ef0487c9b9aacf9b94450fd9ea5cd66163cc377475173141a6da67e275202887f96828bd5b9a064c3f8330b3f 0865b9351d87763f421095d4323d58fe3668218dcc3da8f62a34513019e2867cca7a32d4a07cbc430ec5df8e1ee355f9529cb7ff005497bb874a786bb2b6e3e2 2025-08-21 12:07:13 +0000 UTC None None 2025-02-25 18:29:06 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-21 12:10:27.595 +0000 UTC
f484f3a80aa0ae9108b1876a147263a9fb5e87ec1065deadc3cb93ff70492723 [68a36b076a7f8fce5714f797] [2] [my10040sa] [i-hventana] [WVUHS] [D:\InterSystems\HSFoundation\bin\CTerm.exe] [Servers] [Servers Audit] [v2264.862] ["d:\intersystems\hsfoundation\bin\cterm.exe" /console=cn_ap:HSFOUNDATION2017[]:] [Not Signed] [D:\InterSystems\HSFoundation\bin\Ccontrol.exe] [D:\InterSystems\HSFoundation\bin\csystray.exe] [2025-08-18T18:03:45Z] [d1b5aeda78111abc1b7b6a79a00626e3] [91005476734d54bd9b933eb07d058f9cd4d57132] [bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17] [f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc] [172.17.253.63] [172.17.253.63] 1 Success CTerm.exe D:\InterSystems\HSFoundation\bin\ Cache' Terminal 286208 d1b5aeda78111abc1b7b6a79a00626e3 Cache' 2017.2.2.865.3.19109 Not Signed 2019-07-16 21:11:30 +0000 UTC 2019-07-16 21:11:30 +0000 UTC 91005476734d54bd9b933eb07d058f9cd4d57132 bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17 f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc 2025-08-18 18:03:51 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f43f8ca10941606fb675785286981c166be1393f584020ffd965c6863f62232c [68a472b1b022648922e23583] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.annotation-api-1.3.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:41Z] [707336a61fa1a548342bc793362bd9da] [67747496d8b5c1f300ed3cde4ba69d6f453ba984] [b0d1d17647746f6a165246a8753215f98c67dde3a7f38aef8974a44f420f5eb992eca2ac138ae228143c53aebcc23c5b] [fe9337099610158f51866502304fd72213e4ac65358ca0e5ede1c09771cc636da306ef23a9ecf096ae8f994cdbe2b797e746748177b6f2d7ba073ce43a1737b9] [172.17.23.146] [172.17.23.146] 1 Success javax.annotation-api-1.3.jar E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\javax.annotation-api-1.3.jar-3d93462ae1776342\ 26430 707336a61fa1a548342bc793362bd9da Not Signed 2025-03-28 16:06:16 +0000 UTC 2025-03-28 16:06:16 +0000 UTC 67747496d8b5c1f300ed3cde4ba69d6f453ba984 b0d1d17647746f6a165246a8753215f98c67dde3a7f38aef8974a44f420f5eb992eca2ac138ae228143c53aebcc23c5b fe9337099610158f51866502304fd72213e4ac65358ca0e5ede1c09771cc636da306ef23a9ecf096ae8f994cdbe2b797e746748177b6f2d7ba073ce43a1737b9 2025-03-28 16:06:36 +0000 UTC None None 2024-12-30 09:45:40 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-04-11 02:08:19.668 +0000 UTC
f40681b66d49369219f31f15fe7a0e73a787651ce357f5e86e2d6bddb49c0c97 [68a48674c4cb2500be69261c, 68a48674c4cb2500be692632] [2] [NETWORK SERVICE, SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\Polly.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:03:22Z, 2025-08-19T14:05:04Z] [1d281597aef8d59107117c53584acc44] [38e2d5449d89bb84e313d080e7969a5261a459a6] [a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db] [3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a] [172.17.252.226] [172.17.252.226] 1 Success Polly.dll C:\Stryker\iBed Server Application\Stryker.IOT\ Polly 287456 1d281597aef8d59107117c53584acc44 Polly 7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d Stryker Corporation 2022-01-17 18:25:08 +0000 UTC 2024-02-15 18:02:03 +0000 UTC 38e2d5449d89bb84e313d080e7969a5261a459a6 a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db 3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a 2025-07-15 14:07:43 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f838f549fd861f3358e3264cad8927bdb217d2cc84945325a8f4952f516023b7 [68a3146b5f0c41860c8c8502, 68a3146b5f0c41860c8c8526] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\re\__pycache__\__init__.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z] [abb6e699fbac4a89b4b96a0923590806] [3f0314f1612edc949568cb9863516b712df68f2f] [546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968] [846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25] [172.17.252.131] [172.17.252.131] 1 Success __init__.cpython-313.pyc C:\Program Files\Python\Lib\re\__pycache__\ 19374 abb6e699fbac4a89b4b96a0923590806 Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 3f0314f1612edc949568cb9863516b712df68f2f 546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968 846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fbc7fdf61a20576e09a33947853cc2024cd0249137e7db6b4674632ccacde896 [68a3146b5f0c41860c8c850d, 68a3146b5f0c41860c8c8560] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\html\__pycache__\entities.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [41e82f02e4f6d79a79511257656da6c4] [7643352f9bd86afb0c0981f14b6ec2e360f9805f] [bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b] [f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72] [172.17.252.131] [172.17.252.131] 1 Success entities.cpython-313.pyc C:\Program Files\Python\Lib\html\__pycache__\ 97677 41e82f02e4f6d79a79511257656da6c4 Not Signed 2024-11-22 16:23:37 +0000 UTC 2024-11-22 16:23:37 +0000 UTC 7643352f9bd86afb0c0981f14b6ec2e360f9805f bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fb8e16e14064e438e124ed8bf8a1cf7723be42adc5d8c9a04c728aefc4211c02 [68a71d98771132224a617f82] [2] [my10040sa] [UHC-XPROTECT] [WVUHS] [C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.TrayController.Common.dll] [Servers] [Servers Audit] [v2321.907] [] [Not Signed] [C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE] [C:\Windows\explorer.exe] [2025-08-21T13:14:39Z] [58741ea77e2b8684d07e79434e301323] [d253c7c1b6b3049c576ad7d67f240eb821e7e02a] [15e59189d657083f523f19aaad87b4ad73249d89ee9a4f051a3d3dcee7d5f1e282b9415e43a48d0a07a75803f317ba44] [c1b91a6769991287df8fe2e6b7d0caea2f9beac819f2aa9635b8a4e4f0746700858dcf12c6d85029b333a554f3fb6b98b8b707222680dbde10be8a4016604830] [172.25.19.12] [172.25.19.12] 1 Success VideoOS.Mobile.TrayController.Common.dll C:\Program Files\Milestone\XProtect Mobile Server\ VideoOS.Mobile.TrayController.Common 451072 58741ea77e2b8684d07e79434e301323 Mobile library assembly 20.2.2516.1 Not Signed 2020-05-11 15:02:16 +0000 UTC 2020-05-11 15:02:16 +0000 UTC d253c7c1b6b3049c576ad7d67f240eb821e7e02a 15e59189d657083f523f19aaad87b4ad73249d89ee9a4f051a3d3dcee7d5f1e282b9415e43a48d0a07a75803f317ba44 c1b91a6769991287df8fe2e6b7d0caea2f9beac819f2aa9635b8a4e4f0746700858dcf12c6d85029b333a554f3fb6b98b8b707222680dbde10be8a4016604830 2025-07-16 19:27:14 +0000 UTC None None 2021-08-13 08:28:18 +0000 UTC 67 0 KNOWN 0 Benign 0.00 2025-07-16 19:30:32.656 +0000 UTC
00d51b889a3889f2b5a293eba542001db0bb43f7728f60a860265a7d9b81f0d5 [68a3146b5f0c41860c8c8520, 68a3146b5f0c41860c8c856c] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\encoders.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z] [629e2a9c50daf9538c8417fc8dcf7c14] [f298e5565bd87637c224fad6b00e79e7376caed6] [f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b] [e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd] [172.17.252.131] [172.17.252.131] 1 Success encoders.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 2061 629e2a9c50daf9538c8417fc8dcf7c14 Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC f298e5565bd87637c224fad6b00e79e7376caed6 f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fb65774774f37bf9b61dfd39c7fc27ec58ecedc6cc2d6c9bedee2b6054b0711f [68a36b076a7f8fce5714f796] [2] [my10040sa] [i-hventana] [WVUHS] [D:\InterSystems\HSFoundation\bin\Ccontrol.exe] [Servers] [Servers Audit] [v2264.862] ["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CCONTROL.EXE" cterminal HSFOUNDATION2017] [Not Signed] [D:\InterSystems\HSFoundation\bin\csystray.exe] [C:\Windows\explorer.exe] [2025-08-18T18:03:45Z] [becf6336d139fb201df8f0c25344fa85] [83aaab5f7fe72010d6f1b45366fad34568ea330d] [8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f] [66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634] [172.17.253.63] [172.17.253.63] 1 Success Ccontrol.exe D:\InterSystems\HSFoundation\bin\ Cache' Control Program 25600 becf6336d139fb201df8f0c25344fa85 Cache' 2017.2.2.865.3.19109 Not Signed 2019-07-16 21:09:26 +0000 UTC 2019-07-16 21:09:26 +0000 UTC 83aaab5f7fe72010d6f1b45366fad34568ea330d 8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f 66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634 2025-08-12 13:26:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
02887edb4e2a570dca14f9262e9c5574ca92cf067895889e6e38691990a61fd3 [68a48674c4cb2500be692634] [2] [SYSTEM] [i-niBedW_Prod] [NT AUTHORITY] [C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.Utilities.dll] [Servers] [Servers Audit] [v2273] [] [Stryker Corporation] [C:\Windows\System32\inetsrv\w3wp.exe] [C:\Windows\System32\svchost.exe] [2025-08-19T14:05:15Z] [7eaac1bd4e2e852dee8286407c142ade] [a2cd6b02e50e058fd187534faf01d9a321be6ed1] [b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8] [d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf] [172.17.252.226] [172.17.252.226] 1 Success SEWSI.Utilities.dll C:\Stryker\iBed Server Application\Stryker.IOT\ SEWSI.Utilities 28912 7eaac1bd4e2e852dee8286407c142ade Connected Hospital 1.0.0.0 Stryker Corporation 2023-03-16 10:22:36 +0000 UTC 2024-02-15 18:02:05 +0000 UTC a2cd6b02e50e058fd187534faf01d9a321be6ed1 b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8 d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf 2025-07-15 14:07:53 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0241e737daa4255049e24dc3271c297bd1bde6963d7c3f990ec60ecdb59b616f [68a25a433ab41f2de26688e3] [2] [SYSTEM] [U-NCTXEHH-001] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tquqr5iv.tb1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T22:39:58Z] [] [] [] [] [172.25.10.14] [172.25.10.14] 1 Success __PSScriptPolicyTest_tquqr5iv.tb1.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 22:39:58 +0000 UTC 2025-08-17 22:39:58 +0000 UTC 2025-08-17 22:40:03 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0240c288a723d59ab3c098c2479928dad48ac1f5ba1bb5180056ef7d24c84c68 [68a17c189d49ad1bd9c4b8c9, 68a2cfae9ae51e4be825c7e4, 68a41f348cf879e8d23db674, 68a572add36d57a95b891e68, 68a6c42dc23cc368090acfb3] [2] [WVUHPAN] [U-NPANHS] [HS] [C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\cmd.exe] [2025-08-17T06:51:02Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z, 2025-08-21T06:51:03Z] [1d1e0f45227d3a637e81d25a2a508187] [61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a] [27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776] [7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f] [172.25.17.205] [172.25.17.205] 1 Success no-ie.ps1 C:\Program Files\Quest Software\Management Shell for AD\ 1456 1d1e0f45227d3a637e81d25a2a508187 Not Signed 2022-05-16 20:03:59 +0000 UTC 2022-05-17 19:04:29 +0000 UTC 61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a 27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776 7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f 2025-08-09 06:51:12 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
020f21b1a2944cc57671cc061c101cab4786e324fd6ccc4003184002a4b8f5b3 [68a28bda3bdcd0703f76f644, 68a3dfd9dd64bcf44b32b6de, 68a533cd7c33c0fb7b88c886, 68a6857e0fd019c48ec633db] [2] [xpressions] [vm-vmail] [WVUH] [C:\Users\xpressions\SnmpTrapGen.exe, C:\Users\Default\SnmpTrapGen.exe] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.901] [C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755482987009, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755569859435, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755656891824, C:\Users\Default\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755743559464] [SnmpSoft Company (Invalid Certificate Chain)] [C:\Windows\System32\cmd.exe] [C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe] [2025-08-18T02:10:02Z, 2025-08-19T02:17:54Z, 2025-08-20T02:28:27Z, 2025-08-21T02:32:55Z] [14a8db10bf75b483c14cd1a649fffbf1] [4de404c9b6058e7d67cd437b96c0eb4e553dbfdd] [5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5] [97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a] [172.17.252.80] [172.17.252.80] 1 Success SnmpTrapGen.exe C:\Users\xpressions\ SnmpTrapGen 154872 14a8db10bf75b483c14cd1a649fffbf1 SnmpTrapGen 1.1 SnmpSoft Company (Invalid Certificate Chain) 2025-08-16 02:25:56 +0000 UTC 2025-08-16 02:25:57 +0000 UTC 4de404c9b6058e7d67cd437b96c0eb4e553dbfdd 5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5 97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a 2025-08-16 02:26:14 +0000 UTC None None 2024-04-14 04:26:11 +0000 UTC 65 0 KNOWN 0 Benign 0.00 2025-08-16 02:27:03.497 +0000 UTC
0193bed6287dff0234554d9d0b50949e96abf8acaca8a301f02332a7349276cf [68a164af314711b37247c0a1, 68a2b633bc43c5800255e65e, 68a408552c9c833f6d66b3fb, 68a559867a66111383e972e3, 68a6ab388907e10b3b3c7b0b] [2] [SYSTEM] [i-vpg1a] [NT AUTHORITY] [C:\icm\pcce\PG2A\bin\purgeold.bat] [Servers] [Servers Audit] [v2248.849, v2272.867, v2284.877, v2314.902] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\svchost.exe] [2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z] [592b171e23708bb8d19631cab6bd3ea6] [256cda95b6960107ebebdb31310acd3adee827b1] [a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae] [f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3] [172.17.196.43] [172.17.196.43] 1 Success purgeold.bat C:\icm\pcce\PG2A\bin\ 410 592b171e23708bb8d19631cab6bd3ea6 Not Signed 2021-10-07 20:04:38 +0000 UTC 2021-10-07 20:04:38 +0000 UTC 256cda95b6960107ebebdb31310acd3adee827b1 a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3 2025-08-09 05:05:09 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
013824dd98d654ae6fa35cbb46d29d79ca49f6f084fef8b95f4abff4fe4ce2f7 [68a36b2f814a7aa0d93290c9] [2] [my10040sa] [i-hventana] [WVUHS] [D:\InterSystems\HSFoundation\bin\CStudio.exe] [Servers] [Servers Audit] [v2264.862] ["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CSTUDIO.EXE" /servername="HSFOUNDATION2017"] [Not Signed] [D:\InterSystems\HSFoundation\bin\csystray.exe] [C:\Windows\explorer.exe] [2025-08-18T18:04:27Z] [b41afb09655750e9caf2bd657d3e3d8c] [2b26fa2dc7200223a73563e63392f3caf4cb9440] [034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a] [27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5] [172.17.253.63] [172.17.253.63] 1 Success CStudio.exe D:\InterSystems\HSFoundation\bin\ Cache' Studio 3734016 b41afb09655750e9caf2bd657d3e3d8c Cache' 2017.2.2.865.3.19109 Not Signed 2019-07-16 21:09:56 +0000 UTC 2019-07-16 21:09:56 +0000 UTC 2b26fa2dc7200223a73563e63392f3caf4cb9440 034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a 27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5 2025-08-18 18:04:31 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0120c65751377d7c151d92059b5b01184b00e9a6579a8c1099d5fb7c54fd1276 [68a3146b5f0c41860c8c8547] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\__pycache__\bisect.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:19Z] [f29725aff50c74333893a8c32d856e5e] [506feae5c909e2b9651a60062b9ce938a685f18f] [80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee] [823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352] [172.17.252.131] [172.17.252.131] 1 Success bisect.cpython-313.pyc C:\Program Files\Python\Lib\__pycache__\ 3505 f29725aff50c74333893a8c32d856e5e Not Signed 2024-11-22 16:23:36 +0000 UTC 2024-11-22 16:23:36 +0000 UTC 506feae5c909e2b9651a60062b9ce938a685f18f 80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee 823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0116f69207083393f3afc16c63a0a7fbfdedb8a22034bf8c2cf8081f851ff4dd [68a472a799ad3734d804e2e4] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-i18n-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [7ea1d725fb3b508b99af33fac5ba38bd] [06044c6026b1178c078371e271222455671b5bd7] [07dea9f24f4e2a64fc5f861f267694a1161cf4eb6f9a9353f85c9cb983b8ed956683ed4ee8e486a89e42bcdb4aa964ee] [669ef3672d75b17b2b86491fd6f5c9d321e469baf74d63f6e63045f6c2f84ec7c9283b26dfc81f2bddb181c0f66faf5965eba4022269be8ed3ac6a56c91cee16] [172.17.23.146] [172.17.23.146] 1 Success batik-i18n-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 11263 7ea1d725fb3b508b99af33fac5ba38bd Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 06044c6026b1178c078371e271222455671b5bd7 07dea9f24f4e2a64fc5f861f267694a1161cf4eb6f9a9353f85c9cb983b8ed956683ed4ee8e486a89e42bcdb4aa964ee 669ef3672d75b17b2b86491fd6f5c9d321e469baf74d63f6e63045f6c2f84ec7c9283b26dfc81f2bddb181c0f66faf5965eba4022269be8ed3ac6a56c91cee16 2025-08-19 11:29:20 +0000 UTC None None 2022-12-26 03:22:36 +0000 UTC 64 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
f75b13c1a5390c281129aec20b64eda82ecdebfccf050514ad487a5979c44eea [68a3b085a65533c1207e5253] [2] [SQLAgent$KRONOS] [i-nSQL] [NT SERVICE] [C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\s4wkumbz.dll] [Servers] [Servers Audit] [v2272.867] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe] [2025-08-18T23:00:15Z] [] [] [] [] [172.17.252.12] [172.17.252.12] 1 Success s4wkumbz.dll C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\ 0 0.0.0.0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-18 23:00:21 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
f743dd1cf384c304dbafa96084aa9bc85be8ca4988f640af0d4f0ec468d82f55 [68a5caea367f7de967f1ebcb, 68a5d0ddcffcb4e65b3a935b] [2] [CA_Jnt_SVA10, seawolfajb] [i-nQS1mgtn] [WVUHS] [D:\QS1\QDirect\QDirectMgr.exe] [Servers] [Servers Audit] [v2287.880] ["D:\QS1\QDirect\QDirectMgr.exe" ] [Not Signed] [C:\Windows\explorer.exe] [C:\Windows\System32\userinit.exe] [2025-08-20T13:17:24Z, 2025-08-20T13:33:46Z] [0308c4855f6303697434a385aad01de5] [f280f28af8e39dca5b8d00927e2dc6e84ef9a0a9] [a47e10f5d7e8700b3879df0efbdaba6f91c0368da5f18f563f892fa307a4b07fcb4254041f3d4b6ceb55cd46edfa6772] [5615a91bc2f009d82741dec8dc9d1a72f33aafa0260d58f67769d1df237a275e86b966bab40cf06edc33323932b4972f797304d125cdbd8901afa0586133d6ee] [172.17.20.104] [172.17.20.104] 1 Success QDirectMgr.exe D:\QS1\QDirect\ QDirectServiceManager 417792 0308c4855f6303697434a385aad01de5 QDirectServiceManager 1.0.0.7 Not Signed 2025-08-20 12:07:33 +0000 UTC 2012-08-21 17:41:44 +0000 UTC f280f28af8e39dca5b8d00927e2dc6e84ef9a0a9 a47e10f5d7e8700b3879df0efbdaba6f91c0368da5f18f563f892fa307a4b07fcb4254041f3d4b6ceb55cd46edfa6772 5615a91bc2f009d82741dec8dc9d1a72f33aafa0260d58f67769d1df237a275e86b966bab40cf06edc33323932b4972f797304d125cdbd8901afa0586133d6ee 2025-08-20 13:17:30 +0000 UTC None None 2020-12-07 07:40:00 +0000 UTC 71 1 KNOWN 0 Benign 0.00 2025-08-20 13:20:55.36 +0000 UTC
f70d6adc3e13a9bc178a81276700632d870a559aa4b2aa3c45c162cf6a1e7333 [68a306a5ba5832f49fe9cf5a] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LMD45.BPL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:37Z] [f881e04538dd4335068b2362a87aa05a] [41084264242baafaddfd51f2a262f54ed339d916] [542a7a03b9625c6e4f9bc0530708b165966fc21fafc1626cfd6fce2adee9c38276b0a0ed20d9977ecb83e9fb3ac2eaf1] [f377a1e3139afcf93334d474f87fd4746504e42ddbcb70adf446419c7060624d7f4ccd96176d8347f75da62abcef3f399c5d27c928f5a4c521a673525540000d] [172.17.146.33] [172.17.146.33] 1 Success LMD45.BPL C:\DICORP\DICORP_V5\RW\APPS\ LMD-Tools Components 1612800 f881e04538dd4335068b2362a87aa05a LMD-Tools 4.0 Not Signed 2022-07-06 14:52:21 +0000 UTC 2024-09-14 04:02:52 +0000 UTC 41084264242baafaddfd51f2a262f54ed339d916 542a7a03b9625c6e4f9bc0530708b165966fc21fafc1626cfd6fce2adee9c38276b0a0ed20d9977ecb83e9fb3ac2eaf1 f377a1e3139afcf93334d474f87fd4746504e42ddbcb70adf446419c7060624d7f4ccd96176d8347f75da62abcef3f399c5d27c928f5a4c521a673525540000d 2025-04-30 20:02:53 +0000 UTC None None 2025-03-04 17:17:17 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-04-30 20:06:08.08 +0000 UTC
02e08f7294deeca480e69bbabfbf8ecefddad28db941fcac0ff3c6f577a28425 [68a306a5ba5832f49fe9cf3d] [2] [nc10100] [i-nWHLAPP01] [WVUHS] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STDFRMS1.DLL] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe] [C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE] [2025-08-18T10:46:36Z] [67dbeba4fa41581a157fd2f2386c5e00] [5e55bc43907a915d84de80b9ddc6498b8612083b] [1c05d2390986b9feebd66542195934bd4fcf8fcf5de5ab41e7e7a0f7fe4dac99f537f01f1ef5e7b85c81e14866f3bfbf] [c71b9db29d8bd0afffce15dd5fea06ce4e3ac465e19da9857c2c90259bcf9d64571767cb73955b62c1375fd9896e1b11aaa71ca79aec970947af466117c037ab] [172.17.146.33] [172.17.146.33] 1 Success STDFRMS1.DLL C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\ 36352 67dbeba4fa41581a157fd2f2386c5e00 Not Signed 2022-07-06 14:45:26 +0000 UTC 2024-10-23 17:06:46 +0000 UTC 5e55bc43907a915d84de80b9ddc6498b8612083b 1c05d2390986b9feebd66542195934bd4fcf8fcf5de5ab41e7e7a0f7fe4dac99f537f01f1ef5e7b85c81e14866f3bfbf c71b9db29d8bd0afffce15dd5fea06ce4e3ac465e19da9857c2c90259bcf9d64571767cb73955b62c1375fd9896e1b11aaa71ca79aec970947af466117c037ab 2025-05-19 12:23:40 +0000 UTC None None 2025-03-04 18:07:10 +0000 UTC 72 1 KNOWN 0 Benign 0.20 2025-05-19 12:26:16.193 +0000 UTC
029979e088bcb493e4582579eac4ec99faa48c615fe5ab74737fa8746b820228 [68a31fecb457e7ec963d10ec] [2] [GreyBeard] [I-CAJump] [WVUHS] [C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\explorer.exe] [2025-08-18T12:42:24Z] [] [] [] [] [172.17.252.110] [172.17.252.110] 1 Success AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1 C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-13 14:15:46 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
028bd42e9714e87b218317f756774037dbaedaacd8db68165a92932cefbd09f4 [68a5239e621d09b2b1ed5e4e] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PieChart.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:34Z] [e9db2d046f26b953b99f1b33b8f21fa7] [e7042e01111ede7bb14467f24d57048a748b890a] [6482b74f2378dc53cac8d0965b5332d90d0728ffb7b5942ea93b38a996280269f1a2e14863a0377a23d19e51871de211] [347dd5161b3312b045beec02562cb86291c1466036a28250e6e5c7e5832228edc440d011ee3306fcc82cac9f66ac9fd2188afc47259079bf30c5a1f168e55a61] [172.17.22.40] [172.17.22.40] 1 Success PieChart.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ Pie Chart 40960 e9db2d046f26b953b99f1b33b8f21fa7 1.3.0.6 Not Signed 2023-06-15 02:35:58 +0000 UTC 2023-06-15 02:35:58 +0000 UTC e7042e01111ede7bb14467f24d57048a748b890a 6482b74f2378dc53cac8d0965b5332d90d0728ffb7b5942ea93b38a996280269f1a2e14863a0377a23d19e51871de211 347dd5161b3312b045beec02562cb86291c1466036a28250e6e5c7e5832228edc440d011ee3306fcc82cac9f66ac9fd2188afc47259079bf30c5a1f168e55a61 2025-08-20 01:23:42 +0000 UTC None None 2024-01-14 09:21:33 +0000 UTC 68 0 KNOWN 0 Benign 0.00 2025-08-20 01:26:27.286 +0000 UTC
fe09daf4764de2e4439e7c9c58316f63bd9403f1d0d40691f4110a920efdf9de [68a472b1b022648922e235a8] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\StorageCenterExplorerAPI-20.1.2.14.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:45Z] [243d8e82c5b4e540915323a72a956690] [55e91470c4595f17e3693728e2790ad06b68dc79] [b43956810e2efe1a64be931807e2a4dd2c325286653b69b2dbbe1d160ab6e544cccc9ffd1dbde7ffa94615016a2a1f1b] [f36eacc0ddea38d7cf8efaca8bb73c3425af4273a1d4ce34a4ca2c98e297087f176bc8aa374ce53ef16466e476d3d39488e1381f046a8f09723d6c9268203aa6] [172.17.23.146] [172.17.23.146] 1 Success StorageCenterExplorerAPI-20.1.2.14.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 19936 243d8e82c5b4e540915323a72a956690 Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 55e91470c4595f17e3693728e2790ad06b68dc79 b43956810e2efe1a64be931807e2a4dd2c325286653b69b2dbbe1d160ab6e544cccc9ffd1dbde7ffa94615016a2a1f1b f36eacc0ddea38d7cf8efaca8bb73c3425af4273a1d4ce34a4ca2c98e297087f176bc8aa374ce53ef16466e476d3d39488e1381f046a8f09723d6c9268203aa6 2025-08-19 11:29:31 +0000 UTC None None 2022-03-17 18:11:51 +0000 UTC 58 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
fe090ee4cb6244f48dbe88ad3cd1e54500b54e8a040571bc0cc02a8bcbc437d0 [68a472a799ad3734d804e2df] [2] [my10040sa] [i-nkalani25] [WVUHS] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-dom-1.12.jar] [Servers] [Servers Audit] [v2272] [] [Not Signed] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe] [C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe] [2025-08-19T12:48:36Z] [0aa02df1ee76506d46839e10acf687fd] [1f7a51f02419a5b20333ec8116382fd7bca78bd5] [03870aa1b114fd042ccd154500511fc43fe7c2d2f9be58b5389bf39ec645f7904594e9914bfb27c64f4c49ed5f4c6708] [4a6012a1279fbe3584d7c92c3ac3acbcdbc2a4b135e8673722ab406a5f63ed620a0ff0e7a93692cdb11ee2038a9687dc2bc89a403148bd18f45e9fe88674c8bb] [172.17.23.146] [172.17.23.146] 1 Success batik-dom-1.12.jar C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ 182590 0aa02df1ee76506d46839e10acf687fd Not Signed 2021-12-22 04:48:40 +0000 UTC 2021-12-22 04:48:40 +0000 UTC 1f7a51f02419a5b20333ec8116382fd7bca78bd5 03870aa1b114fd042ccd154500511fc43fe7c2d2f9be58b5389bf39ec645f7904594e9914bfb27c64f4c49ed5f4c6708 4a6012a1279fbe3584d7c92c3ac3acbcdbc2a4b135e8673722ab406a5f63ed620a0ff0e7a93692cdb11ee2038a9687dc2bc89a403148bd18f45e9fe88674c8bb 2025-08-19 11:29:20 +0000 UTC None None 2023-09-26 13:09:53 +0000 UTC 63 0 KNOWN 0 Benign 0.00 2025-08-19 11:30:19.65 +0000 UTC
fdb926e2256cde49c147fd8d3d59d73598ba9d09c498c6d52cfbe6285cc6048e [68a3146b5f0c41860c8c8511, 68a3146b5f0c41860c8c8564] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\email\__pycache__\errors.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z] [49174a480c734fd1a4b7c0b4f048d18b] [f134bd12839067b16c719dcddd7feb54e228645f] [26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e] [c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e] [172.17.252.131] [172.17.252.131] 1 Success errors.cpython-313.pyc C:\Program Files\Python\Lib\email\__pycache__\ 7588 49174a480c734fd1a4b7c0b4f048d18b Not Signed 2024-11-22 16:23:38 +0000 UTC 2024-11-22 16:23:38 +0000 UTC f134bd12839067b16c719dcddd7feb54e228645f 26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fda97f6ec8bc3a28270dd0d5800b6e1309e711a0fef9ec6984819c59092fd1f2 [68a17b3ec86486ccb41646c3] [2] [SYSTEM] [i-v3MAppTest] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tzzqoamc.4zw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:48:25Z] [] [] [] [] [172.17.23.50] [172.17.23.50] 1 Success __PSScriptPolicyTest_tzzqoamc.4zw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:48:25 +0000 UTC 2025-08-17 06:48:25 +0000 UTC 2025-08-17 06:48:30 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fda37cbb903f43d9b3649e44db493160207ccaaa1f24542ffa035682ac8a8e07 [68a4ccc785b914a60d739e4a] [2] [SYSTEM] [ccwtest] [NT AUTHORITY] [C:\Windows\Temp\setroot_1.cmd] [Servers] [Servers Audit] [v2283] [] [Not Signed] [C:\Windows\System32\cmd.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-19T19:13:06Z] [] [] [] [] [10.36.132.49] [10.36.132.49] 1 Success setroot_1.cmd C:\Windows\Temp\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-19 19:13:11 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fd451e5b061a4b3db0872c23ae17414ac8815eee11cce644fe1d63abc8c122b0 [68a3146b5f0c41860c8c84fb, 68a3146b5f0c41860c8c8558] [2] [SYSTEM] [i-nSASva] [NT AUTHORITY] [C:\Program Files\Python\Lib\http\__pycache__\server.cpython-313.pyc] [Servers] [Servers Audit] [v2248] [] [Not Signed] [C:\Program Files\Python\python.exe] [C:\Program Files\Python\python.exe] [2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z] [eeb247742b582d6575eb73a83ad57a68] [683d7c49128654f5cb1609e957808e12e1b16dcf] [a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf] [f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2] [172.17.252.131] [172.17.252.131] 1 Success server.cpython-313.pyc C:\Program Files\Python\Lib\http\__pycache__\ 55819 eeb247742b582d6575eb73a83ad57a68 Not Signed 2024-11-22 22:08:48 +0000 UTC 2024-11-22 22:08:48 +0000 UTC 683d7c49128654f5cb1609e957808e12e1b16dcf a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2 2025-08-09 05:02:59 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fd3e9c6e0f45f9430b1a3062cc405d0be931c2d09a930b4ca60f52cb324fa5fb [68a738e862adf0b4a306f92c, 68a73b27c33d19c40473afe0] [2] [SYSTEM] [UH-VAS-01] [NT AUTHORITY] [C:\Windows\System32\spool\drivers\x64\3\cioum64.msi] [Servers] [Servers Audit] [v2324.911] [] [Microsoft Windows Hardware Compatibility Publisher (Invalid Signature)] [C:\Windows\System32\msiexec.exe] [C:\Windows\System32\PrintIsolationHost.exe] [2025-08-21T15:18:52Z, 2025-08-21T15:19:04Z] [1f6a7580f0cacf27d5c4b204ff7cbd1e] [5ed279ca75eb42a4208cfa3f1c432de633d0bd9a] [5c01054ad178e98af5a5633714eab8f9ae040234f0b7e45017b00e9701c4a12497dbefd3b32d55e4e550b5d900a761c7] [8462a55ac6febab0e68e4efb7b4aa064e020fb23816b91d7deba2b58de3ec8509bb7694431e4b26fb4627caa73202c1e6f5e132c1ef582c1b6007b56b83a612c] [10.21.0.116] [10.21.0.116] 1 Success cioum64.msi C:\Windows\System32\spool\drivers\x64\3\ 532480 1f6a7580f0cacf27d5c4b204ff7cbd1e Microsoft Windows Hardware Compatibility Publisher (Invalid Signature) 2013-08-02 09:33:36 +0000 UTC 2014-06-17 08:58:22 +0000 UTC 5ed279ca75eb42a4208cfa3f1c432de633d0bd9a 5c01054ad178e98af5a5633714eab8f9ae040234f0b7e45017b00e9701c4a12497dbefd3b32d55e4e550b5d900a761c7 8462a55ac6febab0e68e4efb7b4aa064e020fb23816b91d7deba2b58de3ec8509bb7694431e4b26fb4627caa73202c1e6f5e132c1ef582c1b6007b56b83a612c 2025-08-21 15:19:04 +0000 UTC None None 2025-01-23 15:23:54 +0000 UTC 46 0 KNOWN 0 Benign 0.00 2025-08-21 15:20:44.067 +0000 UTC
fcae2074a7a5deea742cb25c4efb09ae63fa3367e2f17c2d0e5487fa26500914 [68a31c78c8293406e9c76873] [2] [SYSTEM] [i-nCtx-SF2] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gxd1sdoj.agw.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-18T12:28:37Z] [] [] [] [] [172.17.146.10] [172.17.146.10] 1 Success __PSScriptPolicyTest_gxd1sdoj.agw.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-18 12:28:37 +0000 UTC 2025-08-18 12:28:37 +0000 UTC 2025-08-18 12:28:40 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fc4523c52329ec0e4c6c37175aa7dce0ce9ca97709430cda952ebc5c33f45af7 [68a177ff5edefd4d66a3be1f] [2] [SYSTEM] [U-CBPRO] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bkndjlvo.aen.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T06:34:29Z] [] [] [] [] [172.25.17.173] [172.25.17.173] 1 Success __PSScriptPolicyTest_bkndjlvo.aen.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 06:34:29 +0000 UTC 2025-08-17 06:34:29 +0000 UTC 2025-08-17 06:34:39 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fc331eb357b655d600c2d206e7ecfc70febb0f298b81a190f1c7444258d15d48 [68a34d6610b57c5bffc57dad] [2] [CA_Jnt_SVAsp] [i-hadfs-1] [WVUHS] [C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1] [Servers] [Servers Audit] [v2258.855] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe] [C:\Windows\System32\svchost.exe] [2025-08-18T15:55:28Z] [] [] [] [] [172.17.253.100] [172.17.253.100] 1 Success AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1 C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\ 0 Not Signed 1970-01-01 00:00:00 +0000 UTC 1970-01-01 00:00:00 +0000 UTC 2025-08-11 14:07:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fbdd4672faf5ce1f6d58b336dd2cba9cab2624ea92c91371f8ca26c47c06adc4 [68a1933a637eb74a714c329b] [2] [SYSTEM] [WHL-STOREFRONT1] [NT AUTHORITY] [C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ic5gp5jg.stn.ps1] [Servers] [Servers Audit] [v2248.849] [] [Not Signed] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe] [2025-08-17T08:30:43Z] [] [] [] [] [172.18.112.145] [172.18.112.145] 1 Success __PSScriptPolicyTest_ic5gp5jg.stn.ps1 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ 80 Not Signed 2025-08-17 08:30:43 +0000 UTC 2025-08-17 08:30:43 +0000 UTC 2025-08-17 08:30:50 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
fc110f30f53ee8362931a98ed1af4c37dadcf79a8dc5f09b4070eaa4a758698d [68a523949cec397f02de9f59] [2] [SYSTEM] [i-nMobileView] [NT AUTHORITY] [C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GenConfigDiagPlugIn.dll] [Servers] [Servers Audit] [v2284.877] [] [Not Signed] [C:\Windows\System32\CompatTelRunner.exe] [C:\Windows\System32\CompatTelRunner.exe] [2025-08-20T01:23:30Z] [a4540f55360e91330d7228e9b59bc092] [5500674149e61c84977326de17b4029f1ee8f286] [e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197] [4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1] [172.17.22.40] [172.17.22.40] 1 Success GenConfigDiagPlugIn.dll C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ GenConfigDiagPlugIn 22016 a4540f55360e91330d7228e9b59bc092 GenConfigDiagPlugIn 1.0.0.0 Not Signed 2023-06-15 02:38:02 +0000 UTC 2023-06-15 02:38:02 +0000 UTC 5500674149e61c84977326de17b4029f1ee8f286 e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197 4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1 2025-08-20 01:23:32 +0000 UTC None None Never N/A N/A UNKNOWN N/A N/A N/A
0364119f9cdcaa5b1db6e501277878666ef6c4cb230447705d8f48eb271fe13f [68a5df780cc0a5ff8577d94b] [2] [NETWORK SERVICE] [PCH-PRINTER003] [NT AUTHORITY] [C:\Program Files\Seagull\Printer Drivers\Packages\2018.3\Seagull_ConfigModule_ZPL.dll] [Servers] [Servers Audit] [v2295.887] [] [Not Signed] [C:\Windows\System32\wbem\WmiPrvSE.exe] [C:\Windows\System32\svchost.exe] [2025-08-20T14:41:35Z] [1668b0610022f2c1e46479a0150c8b8e] [aa77f71d96c5a94109ac38d9887601c380a01432] [750f7e058136241bcac20e8ca59bcef624d5384f35e07508653c8e2f363dab276ccf3c9adc149aa62ecdd04591f96f60] [e117568a32b001a654b41746829aa07f3633782bcb48eceea840aa5e5af48acdbe728c6922250ff991255dd44f6244bd943a93f3d7f3ec347a4905738b33b82e] [10.20.22.81] [10.20.22.81] 1 Success Seagull_ConfigModule_ZPL.dll C:\Program Files\Seagull\Printer Drivers\Packages\2018.3\ ZPL Configuration Module 455168 1668b0610022f2c1e46479a0150c8b8e ALL Driver Driver (UI) 2018.3 Not Signed 2019-02-26 18:32:32 +0000 UTC 2018-09-27 06:08:56 +0000 UTC aa77f71d96c5a94109ac38d9887601c380a01432 750f7e058136241bcac20e8ca59bcef624d5384f35e07508653c8e2f363dab276ccf3c9adc149aa62ecdd04591f96f60 e117568a32b001a654b41746829aa07f3633782bcb48eceea840aa5e5af48acdbe728c6922250ff991255dd44f6244bd943a93f3d7f3ec347a4905738b33b82e 2025-08-20 14:45:12 +0000 UTC [{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}] None 2025-05-22 21:38:59 +0000 UTC 73 0 KNOWN 0 Benign 0.00 2025-08-20 14:46:06.568 +0000 UTC