=
62550 lines
2.6 MiB
Plaintext
62550 lines
2.6 MiB
Plaintext
<table border="1" class="dataframe">
|
|
<thead>
|
|
<tr style="text-align: right;">
|
|
<th>sha256</th>
|
|
<th>checkpoint</th>
|
|
<th>type</th>
|
|
<th>username</th>
|
|
<th>hostname</th>
|
|
<th>netdomain</th>
|
|
<th>filename_x</th>
|
|
<th>ppolicy</th>
|
|
<th>policyname</th>
|
|
<th>policyver</th>
|
|
<th>commandline</th>
|
|
<th>publisher_x</th>
|
|
<th>pprocess</th>
|
|
<th>gprocess</th>
|
|
<th>datetime_x</th>
|
|
<th>md5_x</th>
|
|
<th>sha128_x</th>
|
|
<th>sha384_x</th>
|
|
<th>sha512_x</th>
|
|
<th>ip</th>
|
|
<th>localip</th>
|
|
<th>num_devices</th>
|
|
<th>result</th>
|
|
<th>filename_y</th>
|
|
<th>filepath</th>
|
|
<th>description</th>
|
|
<th>filesize</th>
|
|
<th>md5_y</th>
|
|
<th>productname</th>
|
|
<th>productversion</th>
|
|
<th>publisher_y</th>
|
|
<th>createtime</th>
|
|
<th>modtime</th>
|
|
<th>sha128_y</th>
|
|
<th>sha384_y</th>
|
|
<th>sha512_y</th>
|
|
<th>datetime_y</th>
|
|
<th>applications</th>
|
|
<th>baselines</th>
|
|
<th>reputation_lastseen</th>
|
|
<th>reputation_scannercount</th>
|
|
<th>reputation_scannermatch</th>
|
|
<th>reputation_status</th>
|
|
<th>reputation_threatlevel</th>
|
|
<th>reputation_threatname</th>
|
|
<th>reputation_timestamp</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7</td>
|
|
<td>[68a15553f0288d1b4c03964a, 68a1569398248a97cb1eb444, 68a1579f43eac3933ae67f3f, 68a1579f43eac3933ae67f40, 68a15842e8bb20015b29ac4f, 68a15b12277ee4ee43d0013b, 68a15eb4c5f239a6269d41d8, 68a15eb4c5f239a6269d41d9, 68a1610cf9cfe9240990b436, 68a163659570ae1ee2d89ce0, 68a163659570ae1ee2d89ce1, 68a163659570ae1ee2d89ce2, 68a1638d6b917cef7bc97207, 68a1681586b0e7998354db07, 68a1681586b0e7998354db08, 68a1691b4bf3087d7e238afb, 68a16b9043b033c7a2eecf86, 68a171761a77ed74f831f283, 68a171761a77ed74f831f284, 68a17176bff5622a2d3696bc, 68a17176bff5622a2d3696bd, 68a173ce919298d7701753a1, 68a173ce919298d7701753a2, 68a17627f658def3f757025a, 68a17627f658def3f757025b, 68a177691d5d3f63a03c1ad5, 68a177691d5d3f63a03c1ad6, 68a17852d53457e99d2a1d44, 68a1787f67f15891c3fec87a, 68a1787f67f15891c3fec87b, 68a178de243e2bba57cc5801, 68a178de243e2bba57cc5802, 68a17942be3220ec231b3b80, 68a179c230590616f9b723b2, 68a17b9b3ddb6ec7fea0f38d, 68a17c545ff79556eb1328d6, 68a17c545ff79556eb1328d7, 68a17c545ff79556eb1328d8, 68a17ec0f67761c149804787, 68a17f8642db8d6e7f43cd8c, 68a17f8642db8d6e7f43cd8d, 68a181de59b4482fa7baec2d, 68a181de59b4482fa7baec2e, 68a1828582f7df0f80d175d1, 68a1828582f7df0f80d175d2, 68a1831bf4da161b8c87d3c6, 68a184378419081851c4e2e5, 68a184378419081851c4e2e6, 68a1843792475c708deccd10, 68a1843792475c708deccd11, 68a185db842cac218ba203f9, 68a185db842cac218ba203fa, 68a1868f1e60b44ecd8c81c4, 68a1868f1e60b44ecd8c81c5, 68a1886744607e81f6c10e5c, 68a18b91e9d77e8a81cf79a6, 68a18d24f17f0d1f3fa3eba0, 68a18e286614188113b37b2e, 68a1918cc8c8ecd3a8a99b86, 68a1947d72dace2927aba8b3, 68a194a0baf0cc2124cb25f9, 68a194a0baf0cc2124cb25fa, 68a19538d9ad5eea4becd9ec, 68a196d51e9aca8b489bff2a, 68a197f840dc363ec3e31572, 68a19808a2364c998538408a, 68a198c797ce7f7229d88e1f, 68a19b7c95cc08790b402935, 68a19b9a646ea6d5e3c65c95, 68a19b9a646ea6d5e3c65c96, 68a19eca66077dcec7d8dab6, 68a1a54209794d7ae62d7f51, 68a1a54209794d7ae62d7f52, 68a1a5d3e1fae7cd4e7285de, 68a1a768ae1ac4256aa0ab0d, 68a1a7b83d457ac9aa59fe78, 68a1a7b83d457ac9aa59fe79, 68a1a9c0d6437811458b522f, 68a1ac14c1289bb2fb90d527, 68a1ac14c1289bb2fb90d528, 68a1b65b765104ab536adc31, 68a1bc83c61b8d2fb51e62ba, 68a1bc83c61b8d2fb51e62bb, 68a1bc83c61b8d2fb51e62bc, 68a1bd190677737ff6d7893f, 68a1bed22245de719e9d7121, 68a1bed22245de719e9d7122, 68a1c9a968ecc0f1b9499954, 68a1d166a13e0e9a22029a61, 68a1d47c75a829514da35e1e, 68a1e9550f8d0d2f18aa9eea, 68a1edf2fe07403e0fd51627, 68a1ee3d0aeb6405a5b1dd0c, 68a1f045bddace5846d825bc, 68a1f62133f76e551695154e, 68a1f6ee39ad072132f9ee4f, 68a1f9477b941b62d9b602a4, 68a202fdb002892fe0988856, 68a208f2fdbf196d413a85fc, 68a20bae729bb1db1cdafce8, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, insqadhocadmin, CA_Jnt_SCCMSrvF1, GreyBeard, ellisonmea, my10040sa, CA_Jnt_FSA5, CA_Jnt_ECSA2, CA_Jnt_Talis1, CA_Jnt_ECSA11, CA_Jnt_SVA2]</td>
|
|
<td>[GCMH-VERSATRAK, AlinIQ-IMS, DP-USC, GRMC-PREM, GRMC-NIAGARA, DP-Weirton, inSQADHOC, DP-SRMC, GRMC-ECW-IF, U-NKCS-01, DP-Braxton, i-nPRNNova, i-nPaceartInt, i-vLightHouse, DP-UHC1, GRMC-SQL2, GRMC-SFTP, DP-Laundry, GRMC-ECW-DB, GRMC-FF3, WHL-DC1, GRMC-KRON, GRMC-PRINT, i-nRMHConAS01, GAC-BG5, DP-CCMC, U-HUHCNCVENT, u-vcfgsms1, i-hMeThinks, i-nleicasam01, DP-VIKING, GRMC-ECW-EBO, DP-RUBY02, DP-RUBY03, i-VTEAM2022, dp-ruby01, vm-cfgsms1, I-CAJump, DP-Warehouse1, i-hvmigration3, i-vSynthFlowGW, i-nkalani25, I-NCSMITH, VM-TalisWave, DP-UTN1, VM-CFGMGR, i-nrightfax2, WHGPHARMSERV]</td>
|
|
<td>[NT AUTHORITY, INSQADHOC, WVUHS, WVUH]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p2mgehtu.sm1.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2bdgodq.zjz.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xilw05vn.hef.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4qdrzf2f.nnh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vvhdpspp.stz.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3xdtme4b.btd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cmcqz3wu.0n3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kxpajgif.v21.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zewg4lsu.iwv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5gqoqyt0.vzl.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bre44qcl.szx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l0jttjdo.cz2.ps1, D:\Temp\__PSScriptPolicyTest_fzw0j4at.pro.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ruavklg0.b0k.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ai5551wh.rnq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5kx5ipub.cjf.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vambezrj.b42.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sdvw1yzb.cj2.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrxo4eeb.uhq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_crnzftiq.ebx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5av23sun.fld.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u4d1s1ym.3ew.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n2gkorcv.ywo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_se2h305p.yhr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1fvf5jq3.1si.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_z5iirfx4.mgq.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_emkhqolb.4ur.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_asfciozp.m2v.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bb1dcvha.qqb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lymb1wst.yhb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kgkub1od.5nh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yhc4sogi.4y2.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zs03hn03.whc.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2f2kmrzz.lzb.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vcivhpuc.pfe.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5emhy0yw.uiy.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koutdxpk.12z.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gku2zkdb.sju.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e551aivx.x5g.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f0b0uqfr.cl0.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gywjbof.xjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3yfbsrlv.bot.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sfabzeq5.m20.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0kk0vql2.uai.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tomhb00o.kxi.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pc4dgcvs.hcy.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dif1l4bf.jms.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hvj0hf3n.dba.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a12vuyfa.q3s.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_om2k3dj2.0mx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm52ae50.owt.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d12zwuyw.di4.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_marcxnku.tjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eyy4wjrt.mtw.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfcvgcgu.rjx.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_orvxy2k3.gna.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xb1bngte.gus.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etxqufed.qh5.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zx3jkhaw.z3t.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ookerucp.c2l.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ebf2gpz4.so0.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_31oo00so.4es.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cz41onu0.y3l.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zns1xpam.qyo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqiaibcy.hjp.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pxye2kcu.isw.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w5u1sssu.fqo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr5bnjcl.uly.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_crz1rcmh.zlr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y5nydfmv.n14.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gglt1rfg.2zr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i3fb144r.xgd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxikoytg.43f.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0nmjwf1.1zl.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nk22erzx.5mv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q5wh3jbm.hq3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nrjbxi2u.f1y.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5ba4xfp4.o10.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3lmr1nbt.vkg.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uzy0y4ut.qor.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vyliynfw.qto.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_k4s23gqw.tlm.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zbhlai4m.05t.ps1, C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_jqik1uzr.hs3.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae0sjvcr.iey.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_k0nk1vgx.y0p.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ak5acbr5.xoh.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vr3qd3kb.vir.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3ouwkpa0.a3k.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lxv2kkgu.bgo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d2czzg1r.w2h.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gmoo3xd4.0sd.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_siyim0jy.0mr.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ewjchuou.nbv.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pdpmjcdm.mia.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_04d4q3wx.0eo.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vwjmac.yeg.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oljmmeca.chs.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_agude4m0.kf4.ps1, C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wo1envi3.zwm.ps1, ...]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2249.850, v2250.850, v2252.851, v2258.855, v2258.856, v2259.858, v2260.859, v2260.858, v2263.860, v2264.861, v2264.862, v2267.864, v2268.865, v2270.866, v2272.867, v2272, v2273.867, v2276.869, v2276.868, v2282.875, v2283.876, v2284.877, v2286.878, v2287.880, v2287.879, v2292.885, v2300.892, v2309.897, v2310.898, v2324.911, v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe, C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe, C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Platform\10.8775.27682.1015\SenseIR.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\svchost.exe, C:\Windows\explorer.exe, E:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe]</td>
|
|
<td>[2025-08-17T03:56:29Z, 2025-08-17T04:06:44Z, 2025-08-17T04:06:38Z, 2025-08-17T04:15:33Z, 2025-08-17T04:18:38Z, 2025-08-17T04:27:09Z, 2025-08-17T04:46:06Z, 2025-08-17T04:46:27Z, 2025-08-17T04:56:00Z, 2025-08-17T04:57:23Z, 2025-08-17T05:01:52Z, 2025-08-17T05:02:23Z, 2025-08-17T05:00:02Z, 2025-08-17T05:21:04Z, 2025-08-17T05:21:42Z, 2025-08-17T05:21:06Z, 2025-08-17T05:31:34Z, 2025-08-17T05:58:08Z, 2025-08-17T06:06:23Z, 2025-08-17T06:03:05Z, 2025-08-17T06:03:30Z, 2025-08-17T06:07:22Z, 2025-08-17T06:07:55Z, 2025-08-17T06:23:02Z, 2025-08-17T06:23:31Z, 2025-08-17T06:30:00Z, 2025-08-17T06:30:07Z, 2025-08-17T06:26:48Z, 2025-08-17T06:33:00Z, 2025-08-17T06:33:24Z, 2025-08-17T06:28:21Z, 2025-08-17T06:28:58Z, 2025-08-17T06:33:33Z, 2025-08-17T06:41:51Z, 2025-08-17T06:42:09Z, 2025-08-17T06:43:05Z, 2025-08-17T06:43:37Z, 2025-08-17T06:53:02Z, 2025-08-17T06:53:27Z, 2025-08-17T06:58:00Z, 2025-08-17T06:58:29Z, 2025-08-17T07:08:04Z, 2025-08-17T07:09:40Z, 2025-08-17T07:09:31Z, 2025-08-17T07:11:22Z, 2025-08-17T07:14:36Z, 2025-08-17T07:23:08Z, 2025-08-17T07:24:30Z, 2025-08-17T07:18:11Z, 2025-08-17T07:19:43Z, 2025-08-17T07:23:44Z, 2025-08-17T07:25:25Z, 2025-08-17T07:33:04Z, 2025-08-17T07:34:40Z, 2025-08-17T07:44:29Z, 2025-08-17T07:57:59Z, 2025-08-17T07:54:50Z, 2025-08-17T08:08:16Z, 2025-08-17T08:23:31Z, 2025-08-17T08:28:03Z, 2025-08-17T08:33:14Z, 2025-08-17T08:35:47Z, 2025-08-17T08:32:23Z, 2025-08-17T08:38:20Z, 2025-08-17T08:48:50Z, 2025-08-17T08:46:19Z, 2025-08-17T08:54:25Z, 2025-08-17T08:56:16Z, 2025-08-17T08:58:45Z, 2025-08-17T09:00:34Z, 2025-08-17T09:17:35Z, 2025-08-17T09:37:43Z, 2025-08-17T09:39:26Z, 2025-08-17T09:39:58Z, 2025-08-17T09:49:38Z, 2025-08-17T09:48:17Z, 2025-08-17T09:49:51Z, 2025-08-17T09:57:00Z, 2025-08-17T10:13:14Z, 2025-08-17T10:14:39Z, 2025-08-17T10:50:32Z, 2025-08-17T11:24:39Z, 2025-08-17T11:26:01Z, 2025-08-17T11:26:56Z, 2025-08-17T11:26:50Z, 2025-08-17T11:33:14Z, 2025-08-17T11:34:34Z, 2025-08-17T12:19:02Z, 2025-08-17T12:54:04Z, 2025-08-17T12:59:02Z, 2025-08-17T14:28:46Z, 2025-08-17T14:57:44Z, 2025-08-17T14:48:55Z, 2025-08-17T15:02:13Z, 2025-08-17T15:27:17Z, 2025-08-17T15:27:26Z, 2025-08-17T15:36:31Z, 2025-08-17T16:26:11Z, 2025-08-17T16:44:04Z, 2025-08-17T16:56:11Z, ...]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.1.35.25, 172.30.33.2, 172.31.220.9, 10.1.65.26, 10.1.95.209, 172.21.20.5, 172.17.253.151, 172.31.103.150, 192.168.3.242, 172.25.23.240, 172.30.2.10, 172.17.251.159, 172.17.250.43, 172.17.30.81, 172.25.17.56, 10.1.115.124, 172.30.33.20, 172.16.233.4, 192.168.3.240, 10.1.115.136, 172.18.99.251, 192.168.2.32, 192.168.1.41, 172.17.252.158, 192.168.0.119, 172.27.107.116, 172.25.17.232, 172.25.23.183, 172.17.251.218, 172.17.251.190, 172.16.223.194, 192.168.3.241, 172.17.120.10, 172.17.120.20, 172.17.30.50, 172.17.120.11, 172.25.18.240, 172.17.252.110, 172.19.236.2, 172.17.23.32, 172.17.36.46, 172.17.23.146, 172.17.252.118, 172.17.252.194, 172.29.7.93, 172.17.21.194, 172.17.46.25, 172.24.26.89]</td>
|
|
<td>[10.1.35.25, 172.30.33.2, 172.31.220.9, 10.1.65.26, 10.1.95.209, 172.21.20.5, 172.17.253.151, 172.31.103.150, 192.168.3.242, 172.25.23.240, 172.30.2.10, 172.17.251.159, 172.17.250.43, 172.17.30.81, 172.25.17.56, 10.1.115.124, 172.30.33.20, 172.16.233.4, 192.168.3.240, 10.1.115.136, 172.18.99.251, 192.168.2.32, 192.168.1.41, 172.17.252.158, 192.168.0.119, 172.27.107.116, 172.25.17.232, 172.25.23.183, 172.17.251.218, 172.17.251.190, 172.16.223.194, 192.168.3.241, 172.17.120.10, 172.17.120.20, 172.17.30.50, 172.17.120.11, 172.25.18.240, 172.17.252.110, 172.19.236.2, 172.17.23.32, 172.17.36.46, 172.17.23.146, 172.17.252.118, 172.17.252.194, 172.29.7.93, 172.17.21.194, 172.17.46.25, 172.24.26.89]</td>
|
|
<td>48</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4cdfxukf.1ez.ps1</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-03-24 17:29:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-09 09:13:56 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 02:20:59.07 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d1d29bfdf0938484bad3df1024847c2b6cc6310c3e1f55236e1f54593094f054</td>
|
|
<td>[68a1ac1ec193963d0c0ace4e, 68a29ad1e6b70fa9edec4351, 68a2b972d6f29d8003151b81, 68a2fff19b21a43c06982f02]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCusterqs1, i-nQS, i-nMrristnnqs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\QS1\QAU\Info\SystemInfo.bat, D:\QS1\QAU\Info\SystemInfo.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe]</td>
|
|
<td>[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z]</td>
|
|
<td>[6e5cd2985085a14f0365ac9f09224978]</td>
|
|
<td>[b8c1668ef28fa7f83d9ead6d14705e95bc335e5b]</td>
|
|
<td>[eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83]</td>
|
|
<td>[dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>SystemInfo.bat</td>
|
|
<td>C:\QS1\QAU\Info\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td>6e5cd2985085a14f0365ac9f09224978</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-10-22 11:10:42 +0000 UTC</td>
|
|
<td>2019-10-22 11:10:42 +0000 UTC</td>
|
|
<td>b8c1668ef28fa7f83d9ead6d14705e95bc335e5b</td>
|
|
<td>eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83</td>
|
|
<td>dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989</td>
|
|
<td>2025-07-16 14:19:51 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1aac11b17b781bae4155142b446ee8c2a50ee6b74d487c177c219a582fc7b1fe</td>
|
|
<td>[68a61ba94647e99a42f1f95e, 68a61c2b9f20edac12c008b0, 68a61c2b9f20edac12c008b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[dp-ruby01, DP-RUBY02, DP-RUBY03]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\CCM\ScriptStore\5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2309.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\CCM\CcmExec.exe]</td>
|
|
<td>[2025-08-20T19:01:55Z, 2025-08-20T19:04:06Z, 2025-08-20T19:04:07Z]</td>
|
|
<td>[d7d030bd33393f5a761bd2d6eb2e6f51]</td>
|
|
<td>[58918d62b1b53da8534b7b47f29ad298d71b7e4e]</td>
|
|
<td>[b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d]</td>
|
|
<td>[72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847]</td>
|
|
<td>[172.17.120.11, 172.17.120.10, 172.17.120.20]</td>
|
|
<td>[172.17.120.11, 172.17.120.10, 172.17.120.20]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1</td>
|
|
<td>C:\Windows\CCM\ScriptStore\</td>
|
|
<td></td>
|
|
<td>134</td>
|
|
<td>d7d030bd33393f5a761bd2d6eb2e6f51</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-20 16:34:58 +0000 UTC</td>
|
|
<td>2025-05-20 16:34:58 +0000 UTC</td>
|
|
<td>58918d62b1b53da8534b7b47f29ad298d71b7e4e</td>
|
|
<td>b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d</td>
|
|
<td>72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847</td>
|
|
<td>2025-08-20 19:02:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>18f94c227e2d517cfb94721f65e950efbfeb23990fcf7dcbc48bbbf8ba8e3e68</td>
|
|
<td>[68a1ac1ec193963d0c0ace4f, 68a29ad1e6b70fa9edec4352, 68a2b972d6f29d8003151b82, 68a2fff19b21a43c06982f03]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCusterqs1, i-nQS, i-nMrristnnqs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\QS1\QAU\Info\SerialNumber.bat, D:\QS1\QAU\Info\SerialNumber.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe]</td>
|
|
<td>[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z]</td>
|
|
<td>[1dd0238e6d527954d3190764187d6a05]</td>
|
|
<td>[c542ac2cea1b430cf3ae7b91936b57b20a72a2a7]</td>
|
|
<td>[062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589]</td>
|
|
<td>[9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>SerialNumber.bat</td>
|
|
<td>C:\QS1\QAU\Info\</td>
|
|
<td></td>
|
|
<td>64</td>
|
|
<td>1dd0238e6d527954d3190764187d6a05</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-18 12:10:54 +0000 UTC</td>
|
|
<td>2019-12-18 12:10:54 +0000 UTC</td>
|
|
<td>c542ac2cea1b430cf3ae7b91936b57b20a72a2a7</td>
|
|
<td>062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589</td>
|
|
<td>9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c</td>
|
|
<td>2025-07-16 14:19:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bd7a8d07a6a3d0b10b943a17dedd5f3a23eea53b0d0babe6d6ed452c24f5710d</td>
|
|
<td>[68a178f000fcf6f09fa43ed4, 68a17c6313d38093271e4d7d, 68a17d32b8e0917a96ab5183, 68a2ca7bf1b5d070157fa50a, 68a2cde79ef546c806451f9b, 68a2cebeea2bec6dd453ddc6, 68a41c1ee32af9c7fb4f586d, 68a4205b652c2f8e7aac8983, 68a4212d6d0e46c2f152938d, 68a56dbbc331ff607b884d4b, 68a5711ca55e4f736b7b2bfa, 68a571f415ffa42bc82736b5, 68a6bd0efdc403b5bd56e6e7, 68a6c2bdb866e479a63a4423, 68a6c39760f18225f9c20c97]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[I-PANHS, i-NPANHS, U-PanHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:30:01Z, 2025-08-17T06:51:01Z, 2025-08-18T06:30:01Z, 2025-08-18T06:51:00Z, 2025-08-18T06:51:02Z, 2025-08-19T06:30:02Z, 2025-08-19T06:51:02Z, 2025-08-19T06:51:00Z, 2025-08-20T06:30:01Z, 2025-08-20T06:51:00Z, 2025-08-20T06:51:02Z, 2025-08-21T06:30:02Z, 2025-08-21T06:51:00Z, 2025-08-21T06:51:02Z]</td>
|
|
<td>[67922bcfb6b909fcf4c6066aae296c06]</td>
|
|
<td>[5cecc6335811f9bf1365738b97bd0a717a78be24]</td>
|
|
<td>[f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2]</td>
|
|
<td>[c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014]</td>
|
|
<td>[172.17.252.76, 172.17.253.167, 172.25.18.242]</td>
|
|
<td>[172.17.252.76, 172.17.253.167, 172.25.18.242]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>userlist.bat</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>238</td>
|
|
<td>67922bcfb6b909fcf4c6066aae296c06</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-17 14:35:55 +0000 UTC</td>
|
|
<td>2010-08-18 13:45:20 +0000 UTC</td>
|
|
<td>5cecc6335811f9bf1365738b97bd0a717a78be24</td>
|
|
<td>f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2</td>
|
|
<td>c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014</td>
|
|
<td>2025-08-09 04:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb39dc9b0ead7b6e038a358e3ca9faae5a39570bfaf3834bf8c75aa2912698a5</td>
|
|
<td>[68a1646609d3c08e7ea8cecc, 68a16470d97d50d8da4abf7a, 68a18f14b89992b111df5d02]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLeicaSAM03, i-nleicasam02, nt-UHCleica]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Aperio\DatabaseCheck\Check-GT450-Database-Integrity.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:11:00Z, 2025-08-17T08:11:00Z]</td>
|
|
<td>[1a72b94c58d7e7f137a18e1a0c18914a]</td>
|
|
<td>[4ba6ef15a0cd389d15ad080de945a334373c9fc6]</td>
|
|
<td>[7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c]</td>
|
|
<td>[76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee]</td>
|
|
<td>[172.17.253.15, 172.17.253.103, 172.25.17.137]</td>
|
|
<td>[172.17.253.15, 172.17.253.103, 172.25.17.137]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>Check-GT450-Database-Integrity.ps1</td>
|
|
<td>C:\Program Files (x86)\Aperio\DatabaseCheck\</td>
|
|
<td></td>
|
|
<td>1399</td>
|
|
<td>1a72b94c58d7e7f137a18e1a0c18914a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-05 16:07:43 +0000 UTC</td>
|
|
<td>2024-07-29 14:50:04 +0000 UTC</td>
|
|
<td>4ba6ef15a0cd389d15ad080de945a334373c9fc6</td>
|
|
<td>7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c</td>
|
|
<td>76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee</td>
|
|
<td>2025-08-10 05:11:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3b3e541682e48f3fd2872f85a06278da2f3e7877ee956da89b90d732a1eaa0bd</td>
|
|
<td>[68a523949cec397f02de9f60, 68a62c61512061b0a03001ea, 68a62d65c4509fd4abd51f66]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView, u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Ionic.Zip.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Ionic.Zip.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877, v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe, C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe, C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z, 2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[6ded8fcbf5f1d9e422b327ca51625e24]</td>
|
|
<td>[8a1140cebc39f6994eef7e8de4627fb7b72a2dd9]</td>
|
|
<td>[1530387215ec35e5bff13d8428c792715a9a54264b763e07c815712e423caba497f2b6ba98d1c1da6bcd0e94417d6141]</td>
|
|
<td>[bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4]</td>
|
|
<td>[172.17.22.40, 172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.17.22.40, 172.25.17.195, 172.17.253.162]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>Ionic.Zip.dll</td>
|
|
<td>C:\Program Files (x86)\Varian\ProductLine\Workspaces\VMS.IRS.Workspace\</td>
|
|
<td>Ionic's Zip Library</td>
|
|
<td>462336</td>
|
|
<td>6ded8fcbf5f1d9e422b327ca51625e24</td>
|
|
<td>DotNetZip Library</td>
|
|
<td>1.9.1.8</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-02-15 19:39:12 +0000 UTC</td>
|
|
<td>2017-02-15 19:39:12 +0000 UTC</td>
|
|
<td>8a1140cebc39f6994eef7e8de4627fb7b72a2dd9</td>
|
|
<td>1530387215ec35e5bff13d8428c792715a9a54264b763e07c815712e423caba497f2b6ba98d1c1da6bcd0e94417d6141</td>
|
|
<td>bda3a65133b7b1e2765c7d07c7da5103292b3c4c2f0673640428b3e7e8637b11539f06c330ab5d0ba6e2274bd2dcd2c50312be6579e75c4008ff5ae7dae34ce4</td>
|
|
<td>2025-03-24 18:47:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-08 15:29:36 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 18:01:47.956 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>04df00b66b4fa24bdc2db48590ac7606033c016198f74519a57486f26bfbed4c</td>
|
|
<td>[68a62c390de66b6bd84ed64e, 68a62cbbbad0c3891c05202f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[23b2ae6780127e22e426af5b5389a6eb]</td>
|
|
<td>[162a79b2993bee4878e2d1758b296e6a96e2a063]</td>
|
|
<td>[33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88]</td>
|
|
<td>[90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>23b2ae6780127e22e426af5b5389a6eb</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>162a79b2993bee4878e2d1758b296e6a96e2a063</td>
|
|
<td>33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88</td>
|
|
<td>90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>010ddff1577bb17ad0560dc7f8db16f6acdbef67f14e95ee97a642af58604a10</td>
|
|
<td>[68a62c61512061b0a03001e9, 68a62d65c4509fd4abd51f65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[9309717e9d2577ab9a3c5c958927143f]</td>
|
|
<td>[e49ddf7c7605fa186a8c8d501c9b31dd52bb359d]</td>
|
|
<td>[0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf]</td>
|
|
<td>[cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>9309717e9d2577ab9a3c5c958927143f</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>e49ddf7c7605fa186a8c8d501c9b31dd52bb359d</td>
|
|
<td>0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf</td>
|
|
<td>cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06248e206086e314f33123d3bdef9c88f986a21a8ecd43de4c41a8ec71d2a137</td>
|
|
<td>[68a62c390de66b6bd84ed651, 68a62cbbbad0c3891c052032]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[dadb08e43df4a89ea6e4afee8da42293]</td>
|
|
<td>[f561d513ca0284513c3310150988f26126b08be7]</td>
|
|
<td>[6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1]</td>
|
|
<td>[4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>dadb08e43df4a89ea6e4afee8da42293</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>f561d513ca0284513c3310150988f26126b08be7</td>
|
|
<td>6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1</td>
|
|
<td>4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e66dd4c11b9186e43f0c3d18b951ca73cbef3979c0b3bf070e5f492bd165542e</td>
|
|
<td>[68a62c390de66b6bd84ed640, 68a62c4fe0cb7d1d0b6ef997, 68a62cb1297e2a61afff0f82, 68a62dbdd3f22bde37b5f4f3, 68a62dbdd3f22bde37b5f4fd, 68a62ea8e82920a204bd4bec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Salesforce.Common.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Salesforce.Common.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Salesforce.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:38Z, 2025-08-20T20:14:47Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z]</td>
|
|
<td>[beae27cecad508f4a838cf2df424f43d]</td>
|
|
<td>[89769af6b354ae2c323aca4bf3d5392b6954ca7b]</td>
|
|
<td>[e9c424bba05f4ba5ae3721ebab123d95e2de1e28e71fab4f1970459d3e51c95291bbd5a611c68a932b1613d611168cfb]</td>
|
|
<td>[4afa7af556e74fe13feae82125e6188f8dbda38838aecd724ee7268deb56ae8b35312a8e37e1bf0c0286706bcaa56370ef1b63b93ee129df747337bc8f729f55]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Salesforce.Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Salesforce.Common</td>
|
|
<td>53760</td>
|
|
<td>beae27cecad508f4a838cf2df424f43d</td>
|
|
<td>Salesforce.Common</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2016-07-27 19:41:14 +0000 UTC</td>
|
|
<td>2016-07-27 19:41:14 +0000 UTC</td>
|
|
<td>89769af6b354ae2c323aca4bf3d5392b6954ca7b</td>
|
|
<td>e9c424bba05f4ba5ae3721ebab123d95e2de1e28e71fab4f1970459d3e51c95291bbd5a611c68a932b1613d611168cfb</td>
|
|
<td>4afa7af556e74fe13feae82125e6188f8dbda38838aecd724ee7268deb56ae8b35312a8e37e1bf0c0286706bcaa56370ef1b63b93ee129df747337bc8f729f55</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-04-18 00:35:33 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ff35bdba1d0ca12a74749adb1a07f2dda2d3fbb5a56c8fdc10908ce933f470b0</td>
|
|
<td>[68a62c390de66b6bd84ed641, 68a62c4fe0cb7d1d0b6ef998, 68a62cb1297e2a61afff0f83, 68a62dbdd3f22bde37b5f4f4, 68a62dbdd3f22bde37b5f4fe, 68a62ea8e82920a204bd4bed]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Salesforce.Force.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Salesforce.Force.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Salesforce.Force.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:38Z, 2025-08-20T20:14:47Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z]</td>
|
|
<td>[932f018f1e491ab9caa1dc40baa4aec0]</td>
|
|
<td>[61fea022aa77cf3c1e880fa2ed22bb819518cbe8]</td>
|
|
<td>[7c1b03f2a6ab846c62d02f1bb482d9113d33aeeab4f48d4b5b373bfc94a33ecc5291a3ce39072ad2ee46f569013a548c]</td>
|
|
<td>[d3d0a6a8f6b68b7d99f1c5c533ab47da149ec77a6db8e47ecd81d303df71894fc8257cacba7eb7414fc256cd9a0299d94874fc2391604de5c489fa3e18172578]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Salesforce.Force.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Salesforce.Force</td>
|
|
<td>16896</td>
|
|
<td>932f018f1e491ab9caa1dc40baa4aec0</td>
|
|
<td>Salesforce.Force</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2016-07-27 19:41:14 +0000 UTC</td>
|
|
<td>2016-07-27 19:41:14 +0000 UTC</td>
|
|
<td>61fea022aa77cf3c1e880fa2ed22bb819518cbe8</td>
|
|
<td>7c1b03f2a6ab846c62d02f1bb482d9113d33aeeab4f48d4b5b373bfc94a33ecc5291a3ce39072ad2ee46f569013a548c</td>
|
|
<td>d3d0a6a8f6b68b7d99f1c5c533ab47da149ec77a6db8e47ecd81d303df71894fc8257cacba7eb7414fc256cd9a0299d94874fc2391604de5c489fa3e18172578</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-04-17 23:25:42 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.671 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d83af03fc9dccddc0e5ea6783f1579c486253abeb05bae6e46bf127a5f8457</td>
|
|
<td>[68a62c2f20141caa2973b29a, 68a62cb1297e2a61afff0f6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[2dc49e26bee18b516bdd45649a5ae8a1]</td>
|
|
<td>[42eea7c6a302295e9f6e8076b39b52804f214d4c]</td>
|
|
<td>[4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1]</td>
|
|
<td>[2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>2dc49e26bee18b516bdd45649a5ae8a1</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>42eea7c6a302295e9f6e8076b39b52804f214d4c</td>
|
|
<td>4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1</td>
|
|
<td>2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0e00d85eb881678c720ba0a991f1e2e4d74681c5e7d1a432632434966f8a0cb</td>
|
|
<td>[68a62c61512061b0a03001e5, 68a62d65c4509fd4abd51f61]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[40ffc6345b95c232205c8536d42a1bd7]</td>
|
|
<td>[1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a]</td>
|
|
<td>[59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e]</td>
|
|
<td>[11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>40ffc6345b95c232205c8536d42a1bd7</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a</td>
|
|
<td>59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e</td>
|
|
<td>11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0ca44a1efde6d7e0ec58da88696fd02e7f9ba9c685fb67ff53401cd2bdbbc24</td>
|
|
<td>[68a62c390de66b6bd84ed63e, 68a62c4fe0cb7d1d0b6ef996, 68a62cb1297e2a61afff0f80, 68a62dbdd3f22bde37b5f4f2, 68a62dbdd3f22bde37b5f4fc, 68a62ea8e82920a204bd4beb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Oracle.ManagedDataAccess.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Oracle.ManagedDataAccess.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Oracle.ManagedDataAccess.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:12:37Z, 2025-08-20T20:14:37Z, 2025-08-20T20:14:46Z, 2025-08-20T20:17:34Z, 2025-08-20T20:13:12Z]</td>
|
|
<td>[525d30f0a2e40e35175d5b4affa10eda]</td>
|
|
<td>[867801f00320673cb8857738be0ae82764dfff34]</td>
|
|
<td>[102c6ebe6ef985253c52d9ba2565215e13946f9d2cea3c75b7ca53aee58a65e9b0cd27383896ac669e07a768b75ff25f]</td>
|
|
<td>[83c1e7cb03b17aad690eba0cad8c5462a63e754cad60ee9f344c4583d43a3fff4ebb42f4b8f6ea360d082d11af545441b65dec4a831c44340a4af9a94c7d9c04]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Oracle.ManagedDataAccess.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Oracle.ManagedDataAccess.dll</td>
|
|
<td>6530560</td>
|
|
<td>525d30f0a2e40e35175d5b4affa10eda</td>
|
|
<td>Oracle Data Provider for .NET, Managed Driver</td>
|
|
<td>4.121.1.20131211</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-24 16:40:30 +0000 UTC</td>
|
|
<td>2023-05-24 16:40:30 +0000 UTC</td>
|
|
<td>867801f00320673cb8857738be0ae82764dfff34</td>
|
|
<td>102c6ebe6ef985253c52d9ba2565215e13946f9d2cea3c75b7ca53aee58a65e9b0cd27383896ac669e07a768b75ff25f</td>
|
|
<td>83c1e7cb03b17aad690eba0cad8c5462a63e754cad60ee9f344c4583d43a3fff4ebb42f4b8f6ea360d082d11af545441b65dec4a831c44340a4af9a94c7d9c04</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-27 20:13:59 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.671 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e004a9327c38e81644b9ec7c19a2129908a6c5d68edafb175962c2d78404dc1c</td>
|
|
<td>[68a62c4d7785949c881367c5, 68a62d5b4fa1f463a5481ccf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[af34b8b1165332b262d93e879c27365e]</td>
|
|
<td>[901ce0ab1be72beb1bf8308f6bee7803a793f162]</td>
|
|
<td>[5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2]</td>
|
|
<td>[b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>af34b8b1165332b262d93e879c27365e</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>901ce0ab1be72beb1bf8308f6bee7803a793f162</td>
|
|
<td>5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2</td>
|
|
<td>b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09</td>
|
|
<td>2025-07-11 22:48:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ff9f06adf36fa5057cc3505bfcc119aaecb03fc327377c26a75042f54f61bc5b</td>
|
|
<td>[68a62c57d96ab29dcabe19ac, 68a62d65c4509fd4abd51f5b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[83cdf6c2e5d109f7345c49628f408fb6]</td>
|
|
<td>[f7921a39ae4d43b99f5aee80257c703702cd2657]</td>
|
|
<td>[d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022]</td>
|
|
<td>[734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>83cdf6c2e5d109f7345c49628f408fb6</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>f7921a39ae4d43b99f5aee80257c703702cd2657</td>
|
|
<td>d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022</td>
|
|
<td>734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eca61854f8025db6e42a44a39206869612d62eb8f71f3e479fd019118a700859</td>
|
|
<td>[68a62c2f20141caa2973b296, 68a62cb1297e2a61afff0f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:26Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[5a10414070f606d7d4713d640f2d06f2]</td>
|
|
<td>[a7d305197c8b3c311aa1b36e67c3332e132f267d]</td>
|
|
<td>[f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b]</td>
|
|
<td>[b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>5a10414070f606d7d4713d640f2d06f2</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>a7d305197c8b3c311aa1b36e67c3332e132f267d</td>
|
|
<td>f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b</td>
|
|
<td>b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da4d63e8b4184b115ac4613449ba37cbbf5c7008bc5e72a02f0e30409d164bfb</td>
|
|
<td>[68a170048fde46e0c9f34fea, 68a17149e8e8e52d3dfcb9e4, 68a2c188e888059cd5cdb356, 68a2c3c48cc751a9359e6e31, 68a4131f300a88183c09330d, 68a41545c70c05af9b9a4906, 68a564afc34030bc5e574490, 68a5660d299bfb77304b4e2d, 68a6b64bde9c88a2d9100c9e, 68a6b7b8a2f9b7d205bc199a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-APP, GRMC-ECW-IF]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\tomcat8\bin\tomcat_stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T06:00:01Z, 2025-08-20T06:00:01Z, 2025-08-21T06:00:01Z]</td>
|
|
<td>[48a2fd9d7bcaeb0a981e418befc23462]</td>
|
|
<td>[d86428726f1783a0e94f371bfef026a7ae6ce283]</td>
|
|
<td>[20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec]</td>
|
|
<td>[2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>tomcat_stop.bat</td>
|
|
<td>D:\eClinicalWorks\tomcat8\bin\</td>
|
|
<td></td>
|
|
<td>16</td>
|
|
<td>48a2fd9d7bcaeb0a981e418befc23462</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 18:02:01 +0000 UTC</td>
|
|
<td>2021-07-04 18:02:01 +0000 UTC</td>
|
|
<td>d86428726f1783a0e94f371bfef026a7ae6ce283</td>
|
|
<td>20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec</td>
|
|
<td>2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539</td>
|
|
<td>2025-08-09 06:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3f3bf5421b89863185362c6162aaa51be2e5b565c0df60ab19702cc36b483c3</td>
|
|
<td>[68a62c390de66b6bd84ed63c, 68a62cb1297e2a61afff0f7e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.WebApi.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[060d826576b501ac78da60c4985bbe71]</td>
|
|
<td>[72a41f9f93a58a38192af1c81cc25e20e1f5a6d1]</td>
|
|
<td>[0c466ecaa7cc68368ef9eabdbcb7a21a8a5ae5828fad42aa7177a242f1a9434d7e5d96b8e8f3b30c1c405830911c1743]</td>
|
|
<td>[76f20149e074ee852e3f0bff67728f31c751b861ad507b2171dc4e6b9b188417962e0321bb4303ed545cedeed658d91f6124a3598468ca38369b03972f233bd4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Ninject.Web.WebApi.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Ninject.Web.WebApi</td>
|
|
<td>26112</td>
|
|
<td>060d826576b501ac78da60c4985bbe71</td>
|
|
<td>Ninject integration for WebApi 2</td>
|
|
<td>3.3.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-10-23 13:17:34 +0000 UTC</td>
|
|
<td>2017-10-23 13:17:34 +0000 UTC</td>
|
|
<td>72a41f9f93a58a38192af1c81cc25e20e1f5a6d1</td>
|
|
<td>0c466ecaa7cc68368ef9eabdbcb7a21a8a5ae5828fad42aa7177a242f1a9434d7e5d96b8e8f3b30c1c405830911c1743</td>
|
|
<td>76f20149e074ee852e3f0bff67728f31c751b861ad507b2171dc4e6b9b188417962e0321bb4303ed545cedeed658d91f6124a3598468ca38369b03972f233bd4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-02-13 15:50:47 +0000 UTC</td>
|
|
<td>53</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-05-06 18:32:19.671 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3a49f661552f457a58a05aa08a8a2260163b0117aa88f690744d9864dad2c12</td>
|
|
<td>[68a62c2f20141caa2973b2a4, 68a62c4fe0cb7d1d0b6ef995, 68a62cb1297e2a61afff0f75, 68a62dbdd3f22bde37b5f4f1, 68a62dbdd3f22bde37b5f4fb, 68a62ea8e82920a204bd4bea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Matrixcare.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:12:35Z, 2025-08-20T20:14:36Z, 2025-08-20T20:14:45Z, 2025-08-20T20:17:33Z, 2025-08-20T20:13:11Z]</td>
|
|
<td>[63f2acff027a49b92b1c853563fa84da]</td>
|
|
<td>[08845800b27ef97fe203342f1c40e9df2d78950b]</td>
|
|
<td>[31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e]</td>
|
|
<td>[7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Matrixcare.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Matrixcare</td>
|
|
<td>13312</td>
|
|
<td>63f2acff027a49b92b1c853563fa84da</td>
|
|
<td>FormFast.Matrixcare</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:20:00 +0000 UTC</td>
|
|
<td>2023-06-20 18:20:00 +0000 UTC</td>
|
|
<td>08845800b27ef97fe203342f1c40e9df2d78950b</td>
|
|
<td>31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e</td>
|
|
<td>7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d81403211a57d215a6b4be8cc38f7e459dd7335c477f4ea9cd1ead0119b54df6</td>
|
|
<td>[68a62c2f20141caa2973b29b, 68a62cb1297e2a61afff0f6b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[5c0bb4c741bcf8fcd6af3c01281eb540]</td>
|
|
<td>[bfa43d44497992ad190244c7a450d53a2b240865]</td>
|
|
<td>[68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2]</td>
|
|
<td>[638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>5c0bb4c741bcf8fcd6af3c01281eb540</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>bfa43d44497992ad190244c7a450d53a2b240865</td>
|
|
<td>68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2</td>
|
|
<td>638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9f13dd98551054ff7b68b640d3af1a44941bcccb0f50d08f7434d874bd78915</td>
|
|
<td>[68a62c390de66b6bd84ed646, 68a62cb1297e2a61afff0f86]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z]</td>
|
|
<td>[1b9ee76338d61494a62f3d2481b92c95]</td>
|
|
<td>[916303fec9d999bbad4fe203eb37a859fc08a83a]</td>
|
|
<td>[6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501]</td>
|
|
<td>[716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>1b9ee76338d61494a62f3d2481b92c95</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>916303fec9d999bbad4fe203eb37a859fc08a83a</td>
|
|
<td>6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501</td>
|
|
<td>716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f</td>
|
|
<td>2025-05-06 18:28:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3da14b92659035996cb517e0a9001093780104f6018d56894355a53cf014900</td>
|
|
<td>[68a62c390de66b6bd84ed645, 68a62cb1297e2a61afff0f85]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WebActivatorEx.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z]</td>
|
|
<td>[e6ebf27fa68c47a434c2e6ac0c08cf5a]</td>
|
|
<td>[113b4fbd946cd38a296ff07c6562a88676d7b79b]</td>
|
|
<td>[4f27a67d057c6cf7dda395a8ae193b9a369fa0c7d05e96c9d40007e2f136dbe808659ace1574a4e1e4c5866b312be5d4]</td>
|
|
<td>[2cbcdbdbe9c17a09173c36ef35ae4decac7d4ab54342e8443781e772c595caa23e2735533e1bd330c4d6da52574b3d281714514a35d988ac1e0a0bdd99948968]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WebActivatorEx.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>WebActivator</td>
|
|
<td>12288</td>
|
|
<td>e6ebf27fa68c47a434c2e6ac0c08cf5a</td>
|
|
<td>WebActivator</td>
|
|
<td>2.2.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2016-10-05 18:11:52 +0000 UTC</td>
|
|
<td>2016-10-05 18:11:52 +0000 UTC</td>
|
|
<td>113b4fbd946cd38a296ff07c6562a88676d7b79b</td>
|
|
<td>4f27a67d057c6cf7dda395a8ae193b9a369fa0c7d05e96c9d40007e2f136dbe808659ace1574a4e1e4c5866b312be5d4</td>
|
|
<td>2cbcdbdbe9c17a09173c36ef35ae4decac7d4ab54342e8443781e772c595caa23e2735533e1bd330c4d6da52574b3d281714514a35d988ac1e0a0bdd99948968</td>
|
|
<td>2025-05-06 18:28:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-23 20:18:27 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6b54e55d6c23433ecc098e1ce9f6f8d4c24ada9f4f3d6c316f54540694b4eb8</td>
|
|
<td>[68a62c57d96ab29dcabe19ad, 68a62d65c4509fd4abd51f5c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[39d6e5c350190a6ac95b0bec4525ceb3]</td>
|
|
<td>[76fb72ff68e166b6ff1d319e13b2578aabc3fe52]</td>
|
|
<td>[7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010]</td>
|
|
<td>[9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>39d6e5c350190a6ac95b0bec4525ceb3</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>76fb72ff68e166b6ff1d319e13b2578aabc3fe52</td>
|
|
<td>7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010</td>
|
|
<td>9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce5c130e19f4771691161ab4b4329a24eab18e9df3229183c020204516c6e0a1</td>
|
|
<td>[68a62c2f20141caa2973b298, 68a62c4fe0cb7d1d0b6ef991, 68a62cb1297e2a61afff0f67, 68a62dbdd3f22bde37b5f4ed, 68a62dbdd3f22bde37b5f4f6, 68a62ea8e82920a204bd4be5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.HL7.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:27Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[3f08973ce2b2dc32f33a5b4163bab9c1]</td>
|
|
<td>[b91d3a9974b84b00ac9ca8f0114db15a553ea00a]</td>
|
|
<td>[32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed]</td>
|
|
<td>[4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.HL7.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.HL7</td>
|
|
<td>120832</td>
|
|
<td>3f08973ce2b2dc32f33a5b4163bab9c1</td>
|
|
<td>FormFast.Common.HL7</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>b91d3a9974b84b00ac9ca8f0114db15a553ea00a</td>
|
|
<td>32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed</td>
|
|
<td>4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9ce850dc19c02bded048e7b5cfdd68a7cde7e0da3a172c3c598d277a29efcde</td>
|
|
<td>[68a62c390de66b6bd84ed63a, 68a62cb1297e2a61afff0f7c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[901ba5652790217d5d19c9a41d426ac6]</td>
|
|
<td>[dbebd3abe9f8aba4353a2137d7bd5a4842e2f408]</td>
|
|
<td>[a1a00e37ec5514d10f52c9795372fa2a244cecb023a8aa25477c1dfbbf6c5ad9134f6f951b53f35a037d76df6f5b37dc]</td>
|
|
<td>[d69172900aa88141ac82b28d149ec196048aa23d89643b96b42adf011f22deddbdd0c983ce56423b270e55258088d5d41741c00810e04e60c82799c54b992407]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Ninject.Web.Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Ninject.Web.Common</td>
|
|
<td>7168</td>
|
|
<td>901ba5652790217d5d19c9a41d426ac6</td>
|
|
<td>Ninject.Web.Common</td>
|
|
<td>3.3.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-10-23 12:33:26 +0000 UTC</td>
|
|
<td>2017-10-23 12:33:26 +0000 UTC</td>
|
|
<td>dbebd3abe9f8aba4353a2137d7bd5a4842e2f408</td>
|
|
<td>a1a00e37ec5514d10f52c9795372fa2a244cecb023a8aa25477c1dfbbf6c5ad9134f6f951b53f35a037d76df6f5b37dc</td>
|
|
<td>d69172900aa88141ac82b28d149ec196048aa23d89643b96b42adf011f22deddbdd0c983ce56423b270e55258088d5d41741c00810e04e60c82799c54b992407</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-06-18 00:35:48 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-05-06 18:32:19.671 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c91f5897176c15efd03ff7ed6746b9479ffc0e88ebabd6bb95c9dd4884a0ff1a</td>
|
|
<td>[68a62c4d7785949c881367c6, 68a62d5b4fa1f463a5481cd0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[d5554406e72e2f7ede8c94c492229b65]</td>
|
|
<td>[acf40e10c3844e9facc9689b8fcd1e68356c319f]</td>
|
|
<td>[05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb]</td>
|
|
<td>[1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>d5554406e72e2f7ede8c94c492229b65</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>acf40e10c3844e9facc9689b8fcd1e68356c319f</td>
|
|
<td>05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb</td>
|
|
<td>1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4</td>
|
|
<td>2025-07-11 22:49:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c073d514ca716ea106959b1452f4a594d5cea50e1c9637a93ecfe5ca0458e384</td>
|
|
<td>[68a62c61512061b0a03001e4, 68a62d65c4509fd4abd51f60]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[07794196e59ac753b490cc99593544fc]</td>
|
|
<td>[bc4d2672634d3510fd3e45de23fcef6382d85f72]</td>
|
|
<td>[4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2]</td>
|
|
<td>[9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>07794196e59ac753b490cc99593544fc</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>bc4d2672634d3510fd3e45de23fcef6382d85f72</td>
|
|
<td>4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2</td>
|
|
<td>9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc6276343bf45f469e33be988e0016326417e07d89f1d0ef20f90f18bb171119</td>
|
|
<td>[68a62c390de66b6bd84ed636, 68a62cb1297e2a61afff0f78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[8106ee1d0eca9bb361f0420e501667ac]</td>
|
|
<td>[a6030b69ab1c721f47a9d05125a374521a644475]</td>
|
|
<td>[2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0]</td>
|
|
<td>[baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>8106ee1d0eca9bb361f0420e501667ac</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>a6030b69ab1c721f47a9d05125a374521a644475</td>
|
|
<td>2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0</td>
|
|
<td>baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bbf4e828f15edae7e0009db13f67000492433690ad2245c3837b991feb89979b</td>
|
|
<td>[68a289dc0e6a21d30c5fa31e, 68a29c0c6ac1db84aa535408, 68a29c1bd1ae18ffaf5ca38c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\ns_vars.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z]</td>
|
|
<td>[8c8134e0f58626802c6448a24065cd29]</td>
|
|
<td>[5568e8662a3001bdea1e8e7f7ab93cd0a49ece48]</td>
|
|
<td>[0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db]</td>
|
|
<td>[ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>ns_vars.bat</td>
|
|
<td>C:\Kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>621</td>
|
|
<td>8c8134e0f58626802c6448a24065cd29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-08 15:15:46 +0000 UTC</td>
|
|
<td>2022-02-08 15:16:06 +0000 UTC</td>
|
|
<td>5568e8662a3001bdea1e8e7f7ab93cd0a49ece48</td>
|
|
<td>0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db</td>
|
|
<td>ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede</td>
|
|
<td>2025-08-09 02:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b40599107c267ccb76709238ef7f34abe28628eeeb22e17c12786b0c7d3477c0</td>
|
|
<td>[68a62c57d96ab29dcabe19af, 68a62d65c4509fd4abd51f5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[6a642a74192c2a589bdae7882625b4a3]</td>
|
|
<td>[0fd309336186c6eca3035fc53fe67640e0ff7dc2]</td>
|
|
<td>[0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712]</td>
|
|
<td>[894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>6a642a74192c2a589bdae7882625b4a3</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>0fd309336186c6eca3035fc53fe67640e0ff7dc2</td>
|
|
<td>0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712</td>
|
|
<td>894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddf671505404788521fda5c973af69107bc087d852d71c4b7c32aa3e196dfe48</td>
|
|
<td>[68a62c390de66b6bd84ed64d, 68a62cbbbad0c3891c05202e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[7c34e63ebc70dc9dc37dfca6d43e98cf]</td>
|
|
<td>[ae7c13b1bba6b8ea57c53b0163dca8140cd2110a]</td>
|
|
<td>[d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb]</td>
|
|
<td>[27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>7c34e63ebc70dc9dc37dfca6d43e98cf</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>ae7c13b1bba6b8ea57c53b0163dca8140cd2110a</td>
|
|
<td>d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb</td>
|
|
<td>27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dde97184b601782ae0abc3ff1cb59960f2e0c5059c5e5418c2c5e0e11e8ed943</td>
|
|
<td>[68a62c390de66b6bd84ed63b, 68a62cb1297e2a61afff0f7d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.Common.WebHost.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[37d362da0fed62d2ff86ba4f2501029f]</td>
|
|
<td>[fad81398b35795cbc63ee47f853b0a8b576a1989]</td>
|
|
<td>[13894f0ab53ff299951dac0d5b758fb35ce69745827bbbd3c58fc5af5e47d1d68e9960b31340eb3c9ab00096ff448ef3]</td>
|
|
<td>[0635163903e187588ba7e984ed543000b6a55fb7d36180646a2a0de0228e27fcda37da734476854c46e299c99895f596440a9c66d376fb7c7a2ac4905f0a14bc]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Ninject.Web.Common.WebHost.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Ninject.Web.Common.WebHost</td>
|
|
<td>9728</td>
|
|
<td>37d362da0fed62d2ff86ba4f2501029f</td>
|
|
<td>Ninject.Web.Common.WebHost</td>
|
|
<td>3.3.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-10-23 12:33:26 +0000 UTC</td>
|
|
<td>2017-10-23 12:33:26 +0000 UTC</td>
|
|
<td>fad81398b35795cbc63ee47f853b0a8b576a1989</td>
|
|
<td>13894f0ab53ff299951dac0d5b758fb35ce69745827bbbd3c58fc5af5e47d1d68e9960b31340eb3c9ab00096ff448ef3</td>
|
|
<td>0635163903e187588ba7e984ed543000b6a55fb7d36180646a2a0de0228e27fcda37da734476854c46e299c99895f596440a9c66d376fb7c7a2ac4905f0a14bc</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-08-03 13:40:49 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>015453e136abf50cbbbf808b57b7c5a00f91d91129c922c4857a95afa5a23664</td>
|
|
<td>[68a62c390de66b6bd84ed635, 68a62cb1297e2a61afff0f77]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[6b971ede90737ede2770db65b7fab0db]</td>
|
|
<td>[b754cd469ae436842b3d24bc04b4e2775b971cd6]</td>
|
|
<td>[ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e]</td>
|
|
<td>[5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>6b971ede90737ede2770db65b7fab0db</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>b754cd469ae436842b3d24bc04b4e2775b971cd6</td>
|
|
<td>ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e</td>
|
|
<td>5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>01cc80a16323f56191596013eef1de7e43271d6f991f4740b1fcc5195d8ab5bd</td>
|
|
<td>[68a62c390de66b6bd84ed639, 68a62cb1297e2a61afff0f7b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[0b2cb73855a6f9e364d4fb6393df5571]</td>
|
|
<td>[29e05fbd7a07baddf49a69ef4f7c44c3a191fb89]</td>
|
|
<td>[a1a866927a49b199d1b68bada61ab73aa935e5b0900d9eb8f7f9e807fb61f00dfb86dcfda9d16fe340ab392f2f3adee4]</td>
|
|
<td>[1cdd1aaffa0a2a52ee997d754704fd2f888916b292c670595dc9a5f4057b0c5c05ce859ea3113346afc787aa2cf2315108c1102a78d80788882d9fb3f66beb25]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Ninject.dll</td>
|
|
<td>C:\Program Files (x86)\VITEC\EZTV\Web\API\bin\</td>
|
|
<td>Ninject</td>
|
|
<td>138752</td>
|
|
<td>0b2cb73855a6f9e364d4fb6393df5571</td>
|
|
<td>Ninject: Lightweight dependency injection for .NET</td>
|
|
<td>3.3.4</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-11-13 08:01:30 +0000 UTC</td>
|
|
<td>2017-11-13 08:01:30 +0000 UTC</td>
|
|
<td>29e05fbd7a07baddf49a69ef4f7c44c3a191fb89</td>
|
|
<td>a1a866927a49b199d1b68bada61ab73aa935e5b0900d9eb8f7f9e807fb61f00dfb86dcfda9d16fe340ab392f2f3adee4</td>
|
|
<td>1cdd1aaffa0a2a52ee997d754704fd2f888916b292c670595dc9a5f4057b0c5c05ce859ea3113346afc787aa2cf2315108c1102a78d80788882d9fb3f66beb25</td>
|
|
<td>2025-05-01 01:42:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-24 14:14:55 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 06:52:42.232 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb86afd3c6fcdad7c494651481b906b004846066c0d130d10cfd1738d4b54f9e</td>
|
|
<td>[68a62c390de66b6bd84ed64f, 68a62cbbbad0c3891c052030]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[5b6aebd86fb1e8c33afe527100c348e3]</td>
|
|
<td>[696abaa1ec222d4ddf57c0b1472bff9fdcb38985]</td>
|
|
<td>[9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04]</td>
|
|
<td>[b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>5b6aebd86fb1e8c33afe527100c348e3</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:38 +0000 UTC</td>
|
|
<td>696abaa1ec222d4ddf57c0b1472bff9fdcb38985</td>
|
|
<td>9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04</td>
|
|
<td>b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad1da4f93aab239ace410b322f5ed5cfe1f5879da4d19e7ca297e24305382450</td>
|
|
<td>[68a62c390de66b6bd84ed644, 68a62cbbbad0c3891c052027]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z]</td>
|
|
<td>[c1b3cbbd457177190f1876cae07fcbbe]</td>
|
|
<td>[96715a446043a6f266410e8131710ac45574e701]</td>
|
|
<td>[23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf]</td>
|
|
<td>[11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>c1b3cbbd457177190f1876cae07fcbbe</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>96715a446043a6f266410e8131710ac45574e701</td>
|
|
<td>23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf</td>
|
|
<td>11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>af94476044666c91a75deaaad5adf85364fab6e767c1ea41617a86554b4cc15a</td>
|
|
<td>[68a62c254d354bf933e4d34f, 68a62ca798fdd4aa74a31738]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:17Z, 2025-08-20T20:14:24Z]</td>
|
|
<td>[c50b3e7c14d2f045bab6117722fee54a]</td>
|
|
<td>[efc6caa5b6bbfe187aee2f22d76872cc63922546]</td>
|
|
<td>[539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286]</td>
|
|
<td>[b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>c50b3e7c14d2f045bab6117722fee54a</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>efc6caa5b6bbfe187aee2f22d76872cc63922546</td>
|
|
<td>539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286</td>
|
|
<td>b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>098d2b84069e297d67d62296d293f624529fcbfb81d2f483841cffaaf856ee85</td>
|
|
<td>[68a17e784c66390ad0dbbcc0, 68a17f4292a8fa5a3dd2d46f, 68a2cffe3648098ea02a6aec, 68a2d0c6e967c9fedcd45bc3, 68a4226ce3b71f72263710e5, 68a42295ccb2668fe949e62f, 68a5734d56974fb8ac6f8dea, 68a574064a957a7c650fc381, 68a6c3586480a9858574cc85, 68a6c501cc0db49f15cf67e9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a, u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\bin\OPCCleanup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:57:01Z, 2025-08-17T06:57:00Z, 2025-08-18T06:57:01Z, 2025-08-18T06:57:00Z, 2025-08-19T06:57:00Z, 2025-08-19T06:57:01Z, 2025-08-20T06:57:00Z, 2025-08-21T06:57:00Z]</td>
|
|
<td>[70a3df06b9af27c0169a5f2e57fe0910]</td>
|
|
<td>[3fb2825a5131ce29da291a67d1bdda2e095d4bf5]</td>
|
|
<td>[345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a]</td>
|
|
<td>[27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf]</td>
|
|
<td>[172.17.196.43, 172.25.196.36]</td>
|
|
<td>[172.17.196.43, 172.25.196.36]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>OPCCleanup.bat</td>
|
|
<td>C:\icm\bin\</td>
|
|
<td></td>
|
|
<td>309</td>
|
|
<td>70a3df06b9af27c0169a5f2e57fe0910</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-19 12:48:26 +0000 UTC</td>
|
|
<td>2021-08-18 16:13:21 +0000 UTC</td>
|
|
<td>3fb2825a5131ce29da291a67d1bdda2e095d4bf5</td>
|
|
<td>345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a</td>
|
|
<td>27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf</td>
|
|
<td>2025-08-09 06:57:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b09d4426042b1b0b92920640077a0cb0437448dbd4e2ad6362a5db8c19a48396</td>
|
|
<td>[68a62c390de66b6bd84ed63f, 68a62cb1297e2a61afff0f81]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z]</td>
|
|
<td>[0a479cfa691848f8093f23dee318a0f8]</td>
|
|
<td>[2452e732580e910c62edc42cb7e7f5664b7af275]</td>
|
|
<td>[304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54]</td>
|
|
<td>[1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>0a479cfa691848f8093f23dee318a0f8</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2452e732580e910c62edc42cb7e7f5664b7af275</td>
|
|
<td>304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54</td>
|
|
<td>1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b27c79dea15afcb5dca60df8c3f118935313871b837bc3fcceeec1e90607bca6</td>
|
|
<td>[68a3b9a777cc2b5ee11bb210, 68a6d73e9344841503a5d97b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-natus1, u-hctx-natus1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\NeuroWorks\RunWebService_js.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272, v2314]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\NeuroWorks\XLSyncServer.exe]</td>
|
|
<td>[2025-08-18T23:30:43Z, 2025-08-21T08:12:38Z]</td>
|
|
<td>[bfa13690b9a80188a2417893d78b5ee3]</td>
|
|
<td>[4308a880433c30d9790233ee58b23328b7164bad]</td>
|
|
<td>[904d96f71ae98d8e4c1c37495ce4ebb3a17f4a7ba96d0ff29d05b11e46d5cf1cdd63f0e8e7004d87a3c3523025725ade]</td>
|
|
<td>[654fc00d36676b16987f3ece5426b72271d321185d9528d61bb8873abe1967e0c1e0f5e3cf3e9e48af2cec50bcefe5f88baf1cf327949185f73ce2168ff3d264]</td>
|
|
<td>[172.17.147.114, 172.25.15.217]</td>
|
|
<td>[172.17.147.114, 172.25.15.217]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>RunWebService_js.cmd</td>
|
|
<td>C:\NeuroWorks\</td>
|
|
<td></td>
|
|
<td>1231</td>
|
|
<td>bfa13690b9a80188a2417893d78b5ee3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-20 20:01:41 +0000 UTC</td>
|
|
<td>2021-08-20 20:56:00 +0000 UTC</td>
|
|
<td>4308a880433c30d9790233ee58b23328b7164bad</td>
|
|
<td>904d96f71ae98d8e4c1c37495ce4ebb3a17f4a7ba96d0ff29d05b11e46d5cf1cdd63f0e8e7004d87a3c3523025725ade</td>
|
|
<td>654fc00d36676b16987f3ece5426b72271d321185d9528d61bb8873abe1967e0c1e0f5e3cf3e9e48af2cec50bcefe5f88baf1cf327949185f73ce2168ff3d264</td>
|
|
<td>2025-08-13 05:01:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-02-29 07:04:12 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-13 05:05:20.127 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ace6da9bf8d445dc8ee37e2c53ba887f4240eac639c26f1f636181978105dce7</td>
|
|
<td>[68a2933c9ec71f04ddbda157, 68a293873b7ed38a0e67d317]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\jboss\bin\jboss-cli.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-18T02:40:09Z, 2025-08-18T02:40:10Z]</td>
|
|
<td>[1f936af4f88c0e516f5e9bdc04702262]</td>
|
|
<td>[4e085411a943887521afa6b3478c4765c53ee977]</td>
|
|
<td>[75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4]</td>
|
|
<td>[a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>jboss-cli.bat</td>
|
|
<td>E:\kronos\jboss\bin\</td>
|
|
<td></td>
|
|
<td>2879</td>
|
|
<td>1f936af4f88c0e516f5e9bdc04702262</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-12-16 21:22:13 +0000 UTC</td>
|
|
<td>2017-12-17 03:33:40 +0000 UTC</td>
|
|
<td>4e085411a943887521afa6b3478c4765c53ee977</td>
|
|
<td>75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4</td>
|
|
<td>a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4</td>
|
|
<td>2025-07-22 23:34:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a7e24a20b68c9fcce3cd15293e17c137fc6b4dd216ed7a769aee2ba388b36662</td>
|
|
<td>[68a62c2f20141caa2973b29d, 68a62c4fe0cb7d1d0b6ef994, 68a62cb1297e2a61afff0f6d, 68a62dbdd3f22bde37b5f4f0, 68a62dbdd3f22bde37b5f4f9, 68a62ea8e82920a204bd4be8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[a8d6363363dc6e25c38bae4ed0a8bdf0]</td>
|
|
<td>[468c211b8cea0c4282358993a6f84072ca3d46d4]</td>
|
|
<td>[4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a]</td>
|
|
<td>[ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.SharePoint.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>20992</td>
|
|
<td>a8d6363363dc6e25c38bae4ed0a8bdf0</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>468c211b8cea0c4282358993a6f84072ca3d46d4</td>
|
|
<td>4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a</td>
|
|
<td>ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a9c2e0aac424785820d2e99836bdc15a30fd6116221f24a538988654f8e50f2a</td>
|
|
<td>[68a62c2f20141caa2973b29f, 68a62cb1297e2a61afff0f70]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[3a5259b82d4d5545ff8ce39e8340ee51]</td>
|
|
<td>[ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7]</td>
|
|
<td>[f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771]</td>
|
|
<td>[fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>3a5259b82d4d5545ff8ce39e8340ee51</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7</td>
|
|
<td>f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771</td>
|
|
<td>fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>99e1e93e732b9d4f6c47c0867eb8a5aff40d857d9ff409874a10e1389fd58c22</td>
|
|
<td>[68a62c4d7785949c881367c4, 68a62d5b4fa1f463a5481cce]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\AjaxControlToolkit.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:58Z, 2025-08-20T20:17:20Z]</td>
|
|
<td>[ab8c75ab1dcaafe94c35dc4d12efcd28]</td>
|
|
<td>[47887b7c0587cc2298c8e4896f146df77b3dab8f]</td>
|
|
<td>[eda717a5a78a8c4cc0077d22036047ad45f3251fc9c350e56d75eea1d947c83e97ffc21f1c935d8a2ed59ab8bd307c3b]</td>
|
|
<td>[64b45409f8ea932309b88579b143577a76547e0db99c3b4f0b47163c5deddb236c719b2fec61f3c025249799d25d270e9fe910c61159e46ceb2185bcbf4d8b27]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>AjaxControlToolkit.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>Ajax Control Toolkit</td>
|
|
<td>6410240</td>
|
|
<td>ab8c75ab1dcaafe94c35dc4d12efcd28</td>
|
|
<td>AjaxControlToolkit</td>
|
|
<td>4.1.51116</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-24 16:40:10 +0000 UTC</td>
|
|
<td>2023-05-24 16:40:10 +0000 UTC</td>
|
|
<td>47887b7c0587cc2298c8e4896f146df77b3dab8f</td>
|
|
<td>eda717a5a78a8c4cc0077d22036047ad45f3251fc9c350e56d75eea1d947c83e97ffc21f1c935d8a2ed59ab8bd307c3b</td>
|
|
<td>64b45409f8ea932309b88579b143577a76547e0db99c3b4f0b47163c5deddb236c719b2fec61f3c025249799d25d270e9fe910c61159e46ceb2185bcbf4d8b27</td>
|
|
<td>2025-07-11 22:48:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-02-14 04:49:51 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-11 22:50:48.445 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9024b6f1218d19b2a6595dc3b8dc69cacd733a0c47f2a1007e7b02ca98351e8b</td>
|
|
<td>[68a62c254d354bf933e4d351, 68a62ca798fdd4aa74a3173a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:18Z, 2025-08-20T20:14:25Z]</td>
|
|
<td>[234e5d848debfd7b2b962ddc610b9d62]</td>
|
|
<td>[8bce91910db4e551f1aa9dc7e83d61440b721a6b]</td>
|
|
<td>[14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96]</td>
|
|
<td>[d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>234e5d848debfd7b2b962ddc610b9d62</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>8bce91910db4e551f1aa9dc7e83d61440b721a6b</td>
|
|
<td>14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96</td>
|
|
<td>d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f17acea63db67d665c4b9619cfd2176782e029c7bf9fd81ddf8743066878009</td>
|
|
<td>[68a62c61512061b0a03001e8, 68a62d65c4509fd4abd51f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[2af245a0a0a6739073b1c35f9c086273]</td>
|
|
<td>[f27e97961d0910317696386cff2cd3af5756f953]</td>
|
|
<td>[c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5]</td>
|
|
<td>[24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>2af245a0a0a6739073b1c35f9c086273</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>f27e97961d0910317696386cff2cd3af5756f953</td>
|
|
<td>c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5</td>
|
|
<td>24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8da0a73d9bfc04ac9994386d8e5abaeb6e79fadf60f8a1be36557bc03c2a3dbd</td>
|
|
<td>[68a62c390de66b6bd84ed647, 68a62cbbbad0c3891c052028]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z]</td>
|
|
<td>[1e7d19b84f70194728281751f39aab86]</td>
|
|
<td>[815de6c698bc8f7a4a54fe69256d4cbb98b39295]</td>
|
|
<td>[0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16]</td>
|
|
<td>[bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>1e7d19b84f70194728281751f39aab86</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>815de6c698bc8f7a4a54fe69256d4cbb98b39295</td>
|
|
<td>0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16</td>
|
|
<td>bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4259a8145dbe0502a700f2a97d2e5a52f0056025d172e71add9d97fb0c2d443</td>
|
|
<td>[68a62c390de66b6bd84ed655, 68a62cbbbad0c3891c052036]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:38Z, 2025-08-20T20:14:47Z]</td>
|
|
<td>[5a89d1ae29d44aafd5e0a06cb65f5568]</td>
|
|
<td>[139d9e403eb754b10b9952f92710977087d60141]</td>
|
|
<td>[be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a]</td>
|
|
<td>[d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>5a89d1ae29d44aafd5e0a06cb65f5568</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>139d9e403eb754b10b9952f92710977087d60141</td>
|
|
<td>be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a</td>
|
|
<td>d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a1238aeac72ed3f322173557f5170fad5f79de5799f743c96a1e8b87fde11473</td>
|
|
<td>[68a62c2f20141caa2973b2a1, 68a62cb1297e2a61afff0f72]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[3135e62c687f74b43f94c66b49445cb7]</td>
|
|
<td>[e38bf716c7802960ad937b1551580b2f1f788ea6]</td>
|
|
<td>[eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24]</td>
|
|
<td>[204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>3135e62c687f74b43f94c66b49445cb7</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>e38bf716c7802960ad937b1551580b2f1f788ea6</td>
|
|
<td>eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24</td>
|
|
<td>204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b8eeb58ae7a747a0afb91393f6aa4da945d3909322a45d047001eac42ccfe0b</td>
|
|
<td>[68a62c390de66b6bd84ed643, 68a62cbbbad0c3891c052026]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z]</td>
|
|
<td>[3263475c89ab7ec1df01983fb99cc8ad]</td>
|
|
<td>[5348eb8c358aa68c767096de74065ae4e64221ab]</td>
|
|
<td>[a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2]</td>
|
|
<td>[4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>3263475c89ab7ec1df01983fb99cc8ad</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>5348eb8c358aa68c767096de74065ae4e64221ab</td>
|
|
<td>a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2</td>
|
|
<td>4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a469e94319ca4a5068eba7c584bb648cef964b39247eafbf36274c2739b53bf8</td>
|
|
<td>[68a62c57d96ab29dcabe19aa, 68a62d5b4fa1f463a5481cd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Dashboard.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[40c09d5c6e3c3ee86e34db4babde939a]</td>
|
|
<td>[4fdf90e25d0025f59348b401f06b743be653f3cb]</td>
|
|
<td>[c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b]</td>
|
|
<td>[0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Dashboard.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Dashboard</td>
|
|
<td>34304</td>
|
|
<td>40c09d5c6e3c3ee86e34db4babde939a</td>
|
|
<td>FormFast.Common.Dashboard</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>4fdf90e25d0025f59348b401f06b743be653f3cb</td>
|
|
<td>c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b</td>
|
|
<td>0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87379fa2a359ec5d48330bd8b11792b871c516654cb9531bf55cf9d7f986d24d</td>
|
|
<td>[68a62c390de66b6bd84ed64c, 68a62cbbbad0c3891c05202d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[7d73e6851a1c8517ee4350a6202f6543]</td>
|
|
<td>[25be8b71b22fcc8f23dabda16a5ef5a483554aed]</td>
|
|
<td>[7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3]</td>
|
|
<td>[8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>7d73e6851a1c8517ee4350a6202f6543</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>25be8b71b22fcc8f23dabda16a5ef5a483554aed</td>
|
|
<td>7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3</td>
|
|
<td>8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85cedd9e1d502085b0bfef0698aef44d947faa8e389593cd33626a696d6f748c</td>
|
|
<td>[68a62c390de66b6bd84ed652, 68a62cbbbad0c3891c052033]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z]</td>
|
|
<td>[42fa62608696fa72558ae86415e6f201]</td>
|
|
<td>[30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9]</td>
|
|
<td>[21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29]</td>
|
|
<td>[d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>42fa62608696fa72558ae86415e6f201</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9</td>
|
|
<td>21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29</td>
|
|
<td>d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>81151bd7410efbbd5e12a433990f411b387d65dac6d015d82ba8214539435d31</td>
|
|
<td>[68a4730f28df70c6fde369ea, 68a720db49ea7210cfdd661c]</td>
|
|
<td>[2]</td>
|
|
<td>[shke0124]</td>
|
|
<td>[Uniontown-DC-01, uniontown-dc-03]</td>
|
|
<td>[UTWNNET]</td>
|
|
<td>[C:\temp\test-pendingreboot.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2322.909]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:40:22Z, 2025-08-21T13:27:35Z]</td>
|
|
<td>[f3d03d56da1294ef5032ad5902a255d3]</td>
|
|
<td>[672d173b6c306d3c809c5409854c838452d10e25]</td>
|
|
<td>[2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b]</td>
|
|
<td>[7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804]</td>
|
|
<td>[10.144.17.62, 10.144.17.121]</td>
|
|
<td>[10.144.17.62, 10.144.17.121]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>test-pendingreboot.ps1</td>
|
|
<td>C:\temp\</td>
|
|
<td></td>
|
|
<td>762</td>
|
|
<td>f3d03d56da1294ef5032ad5902a255d3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-09 12:54:01 +0000 UTC</td>
|
|
<td>2025-07-09 12:54:01 +0000 UTC</td>
|
|
<td>672d173b6c306d3c809c5409854c838452d10e25</td>
|
|
<td>2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b</td>
|
|
<td>7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804</td>
|
|
<td>2025-08-11 12:43:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7a24f9165e658de3b76bb3c04653d32520677becca5d4e5b05016792b61cfb7a</td>
|
|
<td>[68a62c390de66b6bd84ed642, 68a62cb1297e2a61afff0f84]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Swashbuckle.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z]</td>
|
|
<td>[c24d9327a4c6a33705c1b1b5519b287f]</td>
|
|
<td>[a57b25899280bbbf1797864c6dad2abcca11a9ba]</td>
|
|
<td>[3c9ceabdbe6073746a9e73223c980d7b4c8a2eddb33cc713d2bea6039b0ddf66876ce38de3ea56e5c01929ecc5f63cb8]</td>
|
|
<td>[1acae46da2b2e7469258d3627fb9e1bace52bf66abaaaae2a173e1fec653ff7df7a5d6264a178da05a33e20e58b127a7c45c77cf8fad8e7b25f045e07f1d5a63]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.Core.dll</td>
|
|
<td>C:\Program Files (x86)\Varian\ARIA Connect\3.0\EDF\</td>
|
|
<td>Swashbuckle.Core</td>
|
|
<td>4129280</td>
|
|
<td>c24d9327a4c6a33705c1b1b5519b287f</td>
|
|
<td>Swashbuckle.Core</td>
|
|
<td>5.6.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-07-08 06:30:56 +0000 UTC</td>
|
|
<td>2017-07-08 06:30:56 +0000 UTC</td>
|
|
<td>a57b25899280bbbf1797864c6dad2abcca11a9ba</td>
|
|
<td>3c9ceabdbe6073746a9e73223c980d7b4c8a2eddb33cc713d2bea6039b0ddf66876ce38de3ea56e5c01929ecc5f63cb8</td>
|
|
<td>1acae46da2b2e7469258d3627fb9e1bace52bf66abaaaae2a173e1fec653ff7df7a5d6264a178da05a33e20e58b127a7c45c77cf8fad8e7b25f045e07f1d5a63</td>
|
|
<td>2025-03-21 07:59:19 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-17 10:18:54 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 05:03:19.958 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7905b1830cbf4890381a3415372e109eeb1ece7c02936a220ac1f166e74b0ed8</td>
|
|
<td>[68a2933c9ec71f04ddbda158, 68a293873b7ed38a0e67d318]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\jboss\bin\standalone.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Kronos\wfc\bin\jbossService.exe]</td>
|
|
<td>[2025-08-18T02:41:45Z, 2025-08-18T02:41:33Z]</td>
|
|
<td>[48b73b080adb3ce41b4947d5775eb4bc]</td>
|
|
<td>[e1ffc19ea0e7993d37c3119a49c1c0c068624284]</td>
|
|
<td>[155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401]</td>
|
|
<td>[7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>standalone.bat</td>
|
|
<td>E:\Kronos\jboss\bin\</td>
|
|
<td></td>
|
|
<td>9260</td>
|
|
<td>48b73b080adb3ce41b4947d5775eb4bc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-12-12 23:23:31 +0000 UTC</td>
|
|
<td>2017-12-17 03:33:40 +0000 UTC</td>
|
|
<td>e1ffc19ea0e7993d37c3119a49c1c0c068624284</td>
|
|
<td>155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401</td>
|
|
<td>7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a</td>
|
|
<td>2025-07-22 23:35:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>77fe0f26dccc5c24f74c01715f8ee961dcbf89d097ba3e6d98a8affeea40f8c6</td>
|
|
<td>[68a62c2f20141caa2973b2a3, 68a62cb1297e2a61afff0f74]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[c8d59a3d0d900b0a8897e19beb7aa313]</td>
|
|
<td>[6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a]</td>
|
|
<td>[be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119]</td>
|
|
<td>[d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>c8d59a3d0d900b0a8897e19beb7aa313</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a</td>
|
|
<td>be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119</td>
|
|
<td>d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7558691333b70391fb91d26b9260507de1e56c472fcc9e2c404ce60cda87ebc5</td>
|
|
<td>[68a62c390de66b6bd84ed648, 68a62cbbbad0c3891c052029]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z]</td>
|
|
<td>[b0f7ae9b56111a45892fb5d4876413a7]</td>
|
|
<td>[499944bef9b82dfef97ae702d7d6618b9f2ffe97]</td>
|
|
<td>[ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6]</td>
|
|
<td>[995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>b0f7ae9b56111a45892fb5d4876413a7</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>499944bef9b82dfef97ae702d7d6618b9f2ffe97</td>
|
|
<td>ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6</td>
|
|
<td>995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7495b8a6f9abb329896bc4b33c9995705069703ff2930e80f09e449a87c57517</td>
|
|
<td>[68a62c2f20141caa2973b299, 68a62c4fe0cb7d1d0b6ef992, 68a62cb1297e2a61afff0f69, 68a62dbdd3f22bde37b5f4ee, 68a62dbdd3f22bde37b5f4f7, 68a62ea8e82920a204bd4be6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Models.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[57df9c39430df2249924c520a3bd5795]</td>
|
|
<td>[0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec]</td>
|
|
<td>[5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367]</td>
|
|
<td>[39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Models.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Models</td>
|
|
<td>15360</td>
|
|
<td>57df9c39430df2249924c520a3bd5795</td>
|
|
<td>FormFast.Common.Models</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec</td>
|
|
<td>5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367</td>
|
|
<td>39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7253595091c17a19a2384c7268d936222f6b316f28fcfe2e83933231e9d9f3be</td>
|
|
<td>[68a62c390de66b6bd84ed63d, 68a62cb1297e2a61afff0f7f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Ninject.Web.WebApi.WebHost.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[23f9cf7a32ab286415d1bf959cccc4d3]</td>
|
|
<td>[8cda9006802347203a48f3841a098f219c711cf2]</td>
|
|
<td>[f630a509f84f6127b2c6432ec93ef66369433415c8d256f240663063f08c1b2d45d87805d58944349608a58885a7b38a]</td>
|
|
<td>[9c25dada1dbfc52c8ef7b20054caf4eb206fb11375642c444d6b2ab540dd1cfe6cf7b3676d65184c8b8395eab7b0aa3e3341a1cdd45b137a9c12c84662c43aa4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Ninject.Web.WebApi.WebHost.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Ninject.Web.WebApi.WebHost</td>
|
|
<td>6144</td>
|
|
<td>23f9cf7a32ab286415d1bf959cccc4d3</td>
|
|
<td>Ninject integration for WebApi 2 web host</td>
|
|
<td>3.3.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2017-10-23 13:17:36 +0000 UTC</td>
|
|
<td>2017-10-23 13:17:36 +0000 UTC</td>
|
|
<td>8cda9006802347203a48f3841a098f219c711cf2</td>
|
|
<td>f630a509f84f6127b2c6432ec93ef66369433415c8d256f240663063f08c1b2d45d87805d58944349608a58885a7b38a</td>
|
|
<td>9c25dada1dbfc52c8ef7b20054caf4eb206fb11375642c444d6b2ab540dd1cfe6cf7b3676d65184c8b8395eab7b0aa3e3341a1cdd45b137a9c12c84662c43aa4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-02-04 09:38:59 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6f30e0e23ce47898752d2c51fe0bf30691c48bb35818bb4d8e75c6fe5db142dd</td>
|
|
<td>[68a3b9a777cc2b5ee11bb211, 68a6d73e9344841503a5d97c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-natus1, u-hctx-natus1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\NeuroWorks\DynamicFields\WS\npm\ws.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272, v2314]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\NeuroWorks\XLSyncServer.exe]</td>
|
|
<td>[2025-08-18T23:30:44Z, 2025-08-21T08:12:39Z]</td>
|
|
<td>[9eaf7a8371a51fdabe1bc1120ded09ac]</td>
|
|
<td>[737379e4db0e374c08a427b0ceb496733fe40de6]</td>
|
|
<td>[53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a]</td>
|
|
<td>[68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be]</td>
|
|
<td>[172.17.147.114, 172.25.15.217]</td>
|
|
<td>[172.17.147.114, 172.25.15.217]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>ws.cmd</td>
|
|
<td>C:\NeuroWorks\DynamicFields\WS\npm\</td>
|
|
<td></td>
|
|
<td>297</td>
|
|
<td>9eaf7a8371a51fdabe1bc1120ded09ac</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-04-06 21:04:16 +0000 UTC</td>
|
|
<td>2021-04-06 21:04:16 +0000 UTC</td>
|
|
<td>737379e4db0e374c08a427b0ceb496733fe40de6</td>
|
|
<td>53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a</td>
|
|
<td>68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be</td>
|
|
<td>2025-08-13 05:01:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6b6ad431214d0c4ef21f0b10cd6acde62b800a16dc3ed22310b742d149523e71</td>
|
|
<td>[68a62c390de66b6bd84ed64a, 68a62cbbbad0c3891c05202b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common_Rest.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[c604a070e63e2e6585164307edf7dbf2]</td>
|
|
<td>[45233bb7eb48124f6c3606b6a13925954b985b33]</td>
|
|
<td>[2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1]</td>
|
|
<td>[b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common_Rest.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common_Rest</td>
|
|
<td>86016</td>
|
|
<td>c604a070e63e2e6585164307edf7dbf2</td>
|
|
<td>FormFast.Common_Rest</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>45233bb7eb48124f6c3606b6a13925954b985b33</td>
|
|
<td>2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1</td>
|
|
<td>b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a709cd50fa7d3826662bfd0b27b1b9f80f3a2a57092655c17e33238cc13e764</td>
|
|
<td>[68a178f000fcf6f09fa43ed5, 68a17d32b8e0917a96ab5184, 68a2ca7bf1b5d070157fa50b, 68a2cebeea2bec6dd453ddc7, 68a41c1ee32af9c7fb4f586e, 68a4205b652c2f8e7aac8984, 68a56dbbc331ff607b884d4c, 68a571f415ffa42bc82736b6, 68a6bd0efdc403b5bd56e6e8, 68a6c39760f18225f9c20c98]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[I-PANHS, U-PanHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:30:02Z, 2025-08-17T06:51:02Z, 2025-08-18T06:30:02Z, 2025-08-18T06:51:03Z, 2025-08-19T06:30:03Z, 2025-08-19T06:51:02Z, 2025-08-20T06:30:03Z, 2025-08-20T06:51:02Z, 2025-08-21T06:30:03Z, 2025-08-21T06:51:03Z]</td>
|
|
<td>[93fa6789028ba05bc8aacc943b54eddd]</td>
|
|
<td>[f17fa2522392628272a587caf103c1fd0c7732f8]</td>
|
|
<td>[e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea]</td>
|
|
<td>[609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c]</td>
|
|
<td>[172.17.252.76, 172.25.18.242]</td>
|
|
<td>[172.17.252.76, 172.25.18.242]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1831</td>
|
|
<td>93fa6789028ba05bc8aacc943b54eddd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-11-06 12:14:18 +0000 UTC</td>
|
|
<td>2020-04-17 12:37:22 +0000 UTC</td>
|
|
<td>f17fa2522392628272a587caf103c1fd0c7732f8</td>
|
|
<td>e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea</td>
|
|
<td>609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c</td>
|
|
<td>2025-08-09 06:30:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c03d4295496789ededcf8a9c8ebebbd4e236ff4517bc62338dd521a3134e1b9</td>
|
|
<td>[68a289dc0e6a21d30c5fa31f, 68a29c0c6ac1db84aa535409, 68a29c0c6ac1db84aa53540a, 68a29c1bd1ae18ffaf5ca38d, 68a29c1bd1ae18ffaf5ca38e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\configuration\boms\bin\Shortcut.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cscript.exe]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:36Z, 2025-08-18T03:20:47Z, 2025-08-18T03:20:48Z]</td>
|
|
<td>[01ee07f3ce06569e0aa0e51727e6b2f4]</td>
|
|
<td>[7d87d946d1e38e9a6926b1a44e33e6bdf85ac876]</td>
|
|
<td>[3fb743cf32f485f8511da85d9eeb79902b2420fd719465d2c00213722b3a3957f012baa51a5c55358a158ad4f8fbca5b]</td>
|
|
<td>[75993f88ef170861dc2e3d9a96c8000f16e5f24607cd03d14bedef14a4c5a0a5afcd8f7b3987e3cb9f540a1db554f152462128f1bd4d0cc3e5f0eec410eafdf8]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Shortcut.vbs</td>
|
|
<td>E:\kronos\configuration\boms\bin\</td>
|
|
<td></td>
|
|
<td>4411</td>
|
|
<td>01ee07f3ce06569e0aa0e51727e6b2f4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-12-16 21:19:39 +0000 UTC</td>
|
|
<td>2021-07-02 12:32:55 +0000 UTC</td>
|
|
<td>7d87d946d1e38e9a6926b1a44e33e6bdf85ac876</td>
|
|
<td>3fb743cf32f485f8511da85d9eeb79902b2420fd719465d2c00213722b3a3957f012baa51a5c55358a158ad4f8fbca5b</td>
|
|
<td>75993f88ef170861dc2e3d9a96c8000f16e5f24607cd03d14bedef14a4c5a0a5afcd8f7b3987e3cb9f540a1db554f152462128f1bd4d0cc3e5f0eec410eafdf8</td>
|
|
<td>2025-07-22 23:34:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-15 11:11:08 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-22 23:37:32.926 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8aa6f2c4876469b14c284845015127a526963e464fc909961c4d57eb565a978b</td>
|
|
<td>[68a62c2f20141caa2973b2a5, 68a62cb1297e2a61afff0f76]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Services.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[27e1dbc8bc6cca4fc36c2012705294a2]</td>
|
|
<td>[6514a2bbf32e5e805a3355ad21d367a98bdb6a49]</td>
|
|
<td>[88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac]</td>
|
|
<td>[9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Services.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Services</td>
|
|
<td>47104</td>
|
|
<td>27e1dbc8bc6cca4fc36c2012705294a2</td>
|
|
<td>FormFast.Services</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>6514a2bbf32e5e805a3355ad21d367a98bdb6a49</td>
|
|
<td>88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac</td>
|
|
<td>9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e6bd78b294419e4fdf53637463eddfa92e91aebcb08308aab0d1825c8abb76b</td>
|
|
<td>[68a62dbdd3f22bde37b5f4fa, 68a62ea8e82920a204bd4be9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-NFP1, u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:17:32Z, 2025-08-20T20:13:10Z]</td>
|
|
<td>[54d640613f50c4c6d4dfac35bcd2e3dc]</td>
|
|
<td>[57a19917f194791d4039d9254d6f0cbda27b7b16]</td>
|
|
<td>[dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1]</td>
|
|
<td>[0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a]</td>
|
|
<td>[172.17.253.162, 172.25.17.195]</td>
|
|
<td>[172.17.253.162, 172.25.17.195]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\Program Files (x86)\FormFast\PrintManagerClient\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>54d640613f50c4c6d4dfac35bcd2e3dc</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24000</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 17:20:02 +0000 UTC</td>
|
|
<td>2023-06-20 17:20:02 +0000 UTC</td>
|
|
<td>57a19917f194791d4039d9254d6f0cbda27b7b16</td>
|
|
<td>dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1</td>
|
|
<td>0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a</td>
|
|
<td>2025-05-01 17:27:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e28827fcc1512a275ce68b1fb018b2ce93612d87ec4abe10ff1fec81f926c3f</td>
|
|
<td>[68a289dc0e6a21d30c5fa320, 68a29c0c6ac1db84aa535407, 68a29c1bd1ae18ffaf5ca38b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfire.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:01Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z]</td>
|
|
<td>[ab64c8787040b08d683005966e018ee4]</td>
|
|
<td>[f9da413179bee525e399f586c1afe270a2de061b]</td>
|
|
<td>[6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd]</td>
|
|
<td>[8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>openfire.bat</td>
|
|
<td>C:\Kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>1163</td>
|
|
<td>ab64c8787040b08d683005966e018ee4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-08 15:15:46 +0000 UTC</td>
|
|
<td>2021-12-20 08:03:28 +0000 UTC</td>
|
|
<td>f9da413179bee525e399f586c1afe270a2de061b</td>
|
|
<td>6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd</td>
|
|
<td>8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9</td>
|
|
<td>2025-08-09 02:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6054d028e63b2ba38b02379beaebdd1bbf8ee123f706a9c36caeb6a2de43b333</td>
|
|
<td>[68a62c390de66b6bd84ed64b, 68a62cbbbad0c3891c05202c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[8b3adcbf2a0f7a606fce9c03b8c9732a]</td>
|
|
<td>[b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8]</td>
|
|
<td>[f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff]</td>
|
|
<td>[1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>8b3adcbf2a0f7a606fce9c03b8c9732a</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24231</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8</td>
|
|
<td>f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff</td>
|
|
<td>1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>618e4a759878701f6e2fa437073f84a4928b28e2f5ad2cdd177d582b9a4d7809</td>
|
|
<td>[68a62c390de66b6bd84ed649, 68a62cbbbad0c3891c05202a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[cd453ae2d81abb01c3672138e3c684b9]</td>
|
|
<td>[fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7]</td>
|
|
<td>[7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8]</td>
|
|
<td>[3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>cd453ae2d81abb01c3672138e3c684b9</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7</td>
|
|
<td>7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8</td>
|
|
<td>3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>670ddf1e8c8d970ff2d18e82ac1ebb0f9838d2d0af4359428bc630bd21a85ee2</td>
|
|
<td>[68a31e9eca7b7527f86c6ca9, 68a325d712844ae893875a09, 68a5ffc9536a7a985c76561d, 68a605e24d31d8fb8241a71c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCCMCPyxCCEP, i-nCCMCPyxCCET]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\cp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2253.852, v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[BeyondTrust Corporation]</td>
|
|
<td>[C:\Windows\System32\LogonUI.exe]</td>
|
|
<td>[C:\Windows\System32\winlogon.exe]</td>
|
|
<td>[2025-08-18T12:37:48Z, 2025-08-18T13:02:33Z, 2025-08-20T16:53:05Z, 2025-08-20T17:27:13Z]</td>
|
|
<td>[672aff5f06e5ac0ac9259768c54498d5]</td>
|
|
<td>[deb676605b5883a1afcefaadb06d2feba1959a5e]</td>
|
|
<td>[40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a]</td>
|
|
<td>[5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>cp.dll</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\68761134022\</td>
|
|
<td>ACH Credential Provider</td>
|
|
<td>1174696</td>
|
|
<td>672aff5f06e5ac0ac9259768c54498d5</td>
|
|
<td>Automated Credential Handling</td>
|
|
<td>24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6)</td>
|
|
<td>BeyondTrust Corporation</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>deb676605b5883a1afcefaadb06d2feba1959a5e</td>
|
|
<td>40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a</td>
|
|
<td>5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85</td>
|
|
<td>2025-07-15 08:28:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>68e27e7a76de394402eb3d25ba0772f4b0192293f4d969fedfb793697583a122</td>
|
|
<td>[68a62c390de66b6bd84ed650, 68a62cbbbad0c3891c052031]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.ImageProcessor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[40e9672f5104713cd10b2d229a4711f4]</td>
|
|
<td>[102515d3b0a510b9a18bb4752d73022ec2b0b398]</td>
|
|
<td>[7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95]</td>
|
|
<td>[7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.ImageProcessor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility.ImageProcessor</td>
|
|
<td>11776</td>
|
|
<td>40e9672f5104713cd10b2d229a4711f4</td>
|
|
<td>FormFast.Utility.ImageProcessor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>102515d3b0a510b9a18bb4752d73022ec2b0b398</td>
|
|
<td>7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95</td>
|
|
<td>7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5ff0922ec426c97cdafae576ce456d5db7ca1113c50c94aba499afeff0a52daa</td>
|
|
<td>[68a162ca5b8354c34e8aa922, 68a172395f4b12ae90c10d00, 68a2b4553b82e453c561f8da, 68a2c2ce81a308ec5f3f61a6, 68a40605126890019f479267, 68a41470bba721704ee37de4, 68a557a64e41d80738b8079c, 68a5660d5c30e7a0a3efd4cf, 68a6a954914f15cd51f7eac0, 68a6b7b6b67e8645d1d7e374]</td>
|
|
<td>[2]</td>
|
|
<td>[ldapuser]</td>
|
|
<td>[I-PANWVUHS, U-PanWVUHS]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\NoIE.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-17T06:00:01Z, 2025-08-18T05:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T05:00:02Z, 2025-08-19T06:00:02Z, 2025-08-20T05:00:01Z, 2025-08-20T06:00:02Z, 2025-08-21T05:00:02Z, 2025-08-21T06:00:01Z]</td>
|
|
<td>[1777d70e7e9b66f797bc70bad2f58a4e]</td>
|
|
<td>[29e5acaff6e761a8bb35434d5be41b4655ffd81c]</td>
|
|
<td>[96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a]</td>
|
|
<td>[f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255]</td>
|
|
<td>[172.17.252.77, 172.25.18.244]</td>
|
|
<td>[172.17.252.77, 172.25.18.244]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>NoIE.bat</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>186</td>
|
|
<td>1777d70e7e9b66f797bc70bad2f58a4e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-18 01:52:16 +0000 UTC</td>
|
|
<td>2015-10-08 19:24:30 +0000 UTC</td>
|
|
<td>29e5acaff6e761a8bb35434d5be41b4655ffd81c</td>
|
|
<td>96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a</td>
|
|
<td>f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f68908d42bc24d1f7a4917064be3dfed6ec4b072ab253e556a448d413428e66</td>
|
|
<td>[68a62c2f20141caa2973b29c, 68a62c4fe0cb7d1d0b6ef993, 68a62cb1297e2a61afff0f6c, 68a62dbdd3f22bde37b5f4ef, 68a62dbdd3f22bde37b5f4f8, 68a62ea8e82920a204bd4be7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[c3e5479f47487756de025353487272a1]</td>
|
|
<td>[acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e]</td>
|
|
<td>[7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a]</td>
|
|
<td>[8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.SharePoint.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.SharePoint</td>
|
|
<td>16384</td>
|
|
<td>c3e5479f47487756de025353487272a1</td>
|
|
<td>FormFast.Common.SharePoint</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e</td>
|
|
<td>7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a</td>
|
|
<td>8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5aa21712477223afaa29abd43e991240704025ec113d55483a1b6b9332a4bc29</td>
|
|
<td>[68a62c2f20141caa2973b29e, 68a62cb1297e2a61afff0f6f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebApis.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[f3e2b470701f45a53147e0a6d0da5b28]</td>
|
|
<td>[097e220f5d49b3be195408c35eaff96c131ea7db]</td>
|
|
<td>[33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8]</td>
|
|
<td>[a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebApis.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.WebApis</td>
|
|
<td>101376</td>
|
|
<td>f3e2b470701f45a53147e0a6d0da5b28</td>
|
|
<td>FormFast.Common.WebApis</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:14 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:14 +0000 UTC</td>
|
|
<td>097e220f5d49b3be195408c35eaff96c131ea7db</td>
|
|
<td>33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8</td>
|
|
<td>a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55b4937fa698d440b91765926a8686076067011c091b47d990de13a2101f050d</td>
|
|
<td>[68a2620f3d370ccdd5f6a21e, 68a2620f3d370ccdd5f6a21f, 68a2620f3d370ccdd5f6a220, 68a2620f3d370ccdd5f6a221, 68a2620f3d370ccdd5f6a222, 68a2620f3d370ccdd5f6a223, 68a2620f3d370ccdd5f6a224, 68a2620f3d370ccdd5f6a225, 68a2620f3d370ccdd5f6a226, 68a2620f3d370ccdd5f6a227, 68a2620f3d370ccdd5f6a228, 68a2620f3d370ccdd5f6a229, 68a2620f3d370ccdd5f6a22a, 68a2620f3d370ccdd5f6a22b, 68a2620f3d370ccdd5f6a22c, 68a2620f3d370ccdd5f6a22d, 68a2620f3d370ccdd5f6a22e, 68a2620f3d370ccdd5f6a22f, 68a2620fc7a43de1b4392b1d, 68a2620fc7a43de1b4392b1e, 68a2620fc7a43de1b4392b1f, 68a2620fc7a43de1b4392b20, 68a2620fc7a43de1b4392b21, 68a2620fc7a43de1b4392b22, 68a2620fc7a43de1b4392b23, 68a2620fc7a43de1b4392b24, 68a2620fc7a43de1b4392b25, 68a2620fc7a43de1b4392b26, 68a2620fc7a43de1b4392b27, 68a2620fc7a43de1b4392b28, 68a2620fc7a43de1b4392b29, 68a2620fc7a43de1b4392b2a, 68a2620fc7a43de1b4392b2b, 68a2620fc7a43de1b4392b2c, 68a3b15eb4f6bc6c55ecf84d, 68a3b15eb4f6bc6c55ecf84e, 68a3b15eb4f6bc6c55ecf84f, 68a3b15eb4f6bc6c55ecf850, 68a3b15eb4f6bc6c55ecf851, 68a3b15eb4f6bc6c55ecf852, 68a3b15eb4f6bc6c55ecf853, 68a3b15eb4f6bc6c55ecf854, 68a3b34e2075304ed4fd60a7, 68a3b34e2075304ed4fd60a8, 68a3b34e2075304ed4fd60a9, 68a3b34e2075304ed4fd60aa, 68a3b34e2075304ed4fd60ab, 68a3b34e2075304ed4fd60ac, 68a3b34e2075304ed4fd60ad, 68a3b34e2075304ed4fd60ae, 68a3b34e2075304ed4fd60af, 68a3b34e2075304ed4fd60b0, 68a3b34e2075304ed4fd60b1, 68a3b34e2075304ed4fd60b2, 68a3b34e2075304ed4fd60b3, 68a3b34e2075304ed4fd60b4, 68a3b34e2075304ed4fd60b5, 68a3b34e2075304ed4fd60b6, 68a3b34e2075304ed4fd60b7, 68a3b3b72c5fa0efe17df9ce, 68a3b3b72c5fa0efe17df9cf, 68a3b3b72c5fa0efe17df9d0, 68a3b3b72c5fa0efe17df9d1, 68a3b3b72c5fa0efe17df9d2, 68a3b3b72c5fa0efe17df9d3, 68a3b3b72c5fa0efe17df9d4, 68a3b3b72c5fa0efe17df9d5, 68a3b3b72c5fa0efe17df9d6, 68a502fd6e086e0dc1367514, 68a502fd6e086e0dc1367515, 68a502fd6e086e0dc1367516, 68a502fd6e086e0dc1367517, 68a502fd6e086e0dc1367518, 68a502fd6e086e0dc1367519, 68a502fd6e086e0dc136751a, 68a502fd6e086e0dc136751b, 68a502fd6e086e0dc136751c, 68a502fd6e086e0dc136751d, 68a502fd6e086e0dc136751e, 68a502fd6e086e0dc136751f, 68a502ff61a62c94a5dd231e, 68a502ff61a62c94a5dd231f, 68a502ff61a62c94a5dd2320, 68a502ff61a62c94a5dd2321, 68a502ff61a62c94a5dd2322, 68a502ff61a62c94a5dd2323, 68a502ff61a62c94a5dd2324, 68a502ff61a62c94a5dd2325, 68a502ff61a62c94a5dd2326, 68a502ff61a62c94a5dd2327, 68a502ff61a62c94a5dd2328, 68a50555504093853cdbd2eb, 68a50555504093853cdbd2ec, 68a50555504093853cdbd2ed, 68a50555504093853cdbd2ee, 68a50555504093853cdbd2ef, 68a505573598c9ecc0b6ba83, 68a505573598c9ecc0b6ba84, 68a505573598c9ecc0b6ba85, 68a505573598c9ecc0b6ba86, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CIAS2D1, CIAS2D2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Veeam\Backup Transport\x64\NtfsLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Veeam\Backup Transport\x64\VeeamAgent.exe]</td>
|
|
<td>[C:\Program Files (x86)\Veeam\Backup Transport\VeeamTransportSvc.exe]</td>
|
|
<td>[2025-08-17T23:04:49Z, 2025-08-17T23:04:53Z, 2025-08-17T23:05:39Z, 2025-08-17T23:05:46Z, 2025-08-17T23:06:09Z, 2025-08-17T23:06:13Z, 2025-08-17T23:06:40Z, 2025-08-17T23:06:42Z, 2025-08-17T23:06:47Z, 2025-08-17T23:07:17Z, 2025-08-17T23:07:50Z, 2025-08-17T23:07:55Z, 2025-08-17T23:08:16Z, 2025-08-17T23:08:46Z, 2025-08-17T23:12:30Z, 2025-08-17T23:12:40Z, 2025-08-17T23:12:42Z, 2025-08-17T23:12:47Z, 2025-08-17T23:04:47Z, 2025-08-17T23:04:56Z, 2025-08-17T23:05:06Z, 2025-08-17T23:05:41Z, 2025-08-17T23:05:54Z, 2025-08-17T23:06:05Z, 2025-08-17T23:06:10Z, 2025-08-17T23:06:32Z, 2025-08-17T23:06:38Z, 2025-08-17T23:07:04Z, 2025-08-17T23:07:07Z, 2025-08-17T23:07:53Z, 2025-08-17T23:08:06Z, 2025-08-17T23:12:36Z, 2025-08-17T23:13:13Z, 2025-08-18T23:02:14Z, 2025-08-18T23:02:15Z, 2025-08-18T23:02:20Z, 2025-08-18T23:02:30Z, 2025-08-18T23:03:08Z, 2025-08-18T23:03:13Z, 2025-08-18T23:03:19Z, 2025-08-18T23:03:29Z, 2025-08-18T23:02:10Z, 2025-08-18T23:02:11Z, 2025-08-18T23:02:22Z, 2025-08-18T23:02:26Z, 2025-08-18T23:03:14Z, 2025-08-18T23:03:18Z, 2025-08-18T23:03:28Z, 2025-08-18T23:03:30Z, 2025-08-18T23:04:05Z, 2025-08-18T23:04:11Z, 2025-08-18T23:04:25Z, 2025-08-18T23:04:30Z, 2025-08-18T23:04:31Z, 2025-08-18T23:05:10Z, 2025-08-18T23:05:35Z, 2025-08-18T23:04:07Z, 2025-08-18T23:04:14Z, 2025-08-18T23:04:28Z, 2025-08-18T23:05:11Z, 2025-08-18T23:05:24Z, 2025-08-18T23:06:12Z, 2025-08-18T23:06:13Z, 2025-08-19T23:02:03Z, 2025-08-19T23:02:09Z, 2025-08-19T23:02:19Z, 2025-08-19T23:02:52Z, 2025-08-19T23:02:58Z, 2025-08-19T23:03:11Z, 2025-08-19T23:03:14Z, 2025-08-19T23:03:18Z, 2025-08-19T23:03:49Z, 2025-08-19T23:03:53Z, 2025-08-19T23:04:13Z, 2025-08-19T23:04:23Z, 2025-08-19T23:02:01Z, 2025-08-19T23:02:04Z, 2025-08-19T23:02:05Z, 2025-08-19T23:02:53Z, 2025-08-19T23:02:56Z, 2025-08-19T23:03:12Z, 2025-08-19T23:03:16Z, 2025-08-19T23:03:56Z, 2025-08-19T23:04:08Z, 2025-08-19T23:04:15Z, 2025-08-19T23:04:39Z, 2025-08-19T23:04:40Z, 2025-08-19T23:04:42Z, 2025-08-19T23:05:43Z, 2025-08-19T23:05:46Z, 2025-08-19T23:04:53Z, 2025-08-19T23:04:58Z, 2025-08-19T23:05:16Z, 2025-08-19T23:05:21Z, 2025-08-19T23:06:10Z, 2025-08-20T23:02:20Z, 2025-08-20T23:02:26Z, 2025-08-20T23:02:37Z, 2025-08-20T23:03:21Z, 2025-08-20T23:03:23Z, ...]</td>
|
|
<td>[523c117e044e5e7be912541ce9af9ad0]</td>
|
|
<td>[51f43090d465594dd9ef6085bfc28ef5fbc30b04]</td>
|
|
<td>[91c7870ae326e6a054ff210271bd9a8d1ef395c7db6f42312cbbd17f0a40cca6b00e725d9b4692e1756a10bc83cd3355]</td>
|
|
<td>[3f3cc69ecda66a0ab6df78386b1d35ecafdb3ef02cec61975e8f844851e9d1981942868dfe09bb7ef6cf1035535a8dea7d1c088eccd549b32753c02393ebf63f]</td>
|
|
<td>[172.18.114.69, 172.18.114.70]</td>
|
|
<td>[172.18.114.69, 172.18.114.70]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>NtfsLib.dll</td>
|
|
<td>C:\Program Files (x86)\Veeam\Backup Transport\x64\</td>
|
|
<td>NtfsLib</td>
|
|
<td>510976</td>
|
|
<td>523c117e044e5e7be912541ce9af9ad0</td>
|
|
<td>Veeam Backup and Replication</td>
|
|
<td>9.5.4.2866</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-06-29 09:50:12 +0000 UTC</td>
|
|
<td>2019-06-29 09:50:12 +0000 UTC</td>
|
|
<td>51f43090d465594dd9ef6085bfc28ef5fbc30b04</td>
|
|
<td>91c7870ae326e6a054ff210271bd9a8d1ef395c7db6f42312cbbd17f0a40cca6b00e725d9b4692e1756a10bc83cd3355</td>
|
|
<td>3f3cc69ecda66a0ab6df78386b1d35ecafdb3ef02cec61975e8f844851e9d1981942868dfe09bb7ef6cf1035535a8dea7d1c088eccd549b32753c02393ebf63f</td>
|
|
<td>2025-07-16 23:02:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-06-19 17:51:17 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 23:06:06.673 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>476a8c77b72ac987cf971d96f3cd4d06a1097b69c15b00dd8558bd0eb0d291b8</td>
|
|
<td>[68a62c57d96ab29dcabe19a9, 68a62d5b4fa1f463a5481cd1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FFAdminPanel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:07Z, 2025-08-20T20:17:29Z]</td>
|
|
<td>[7e3986d0b83be86c9bd73da60ac9c757]</td>
|
|
<td>[a9d2fb1648bf369ac3c49b19cfe88229428bf05a]</td>
|
|
<td>[02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45]</td>
|
|
<td>[600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FFAdminPanel.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>ffAdminPanel</td>
|
|
<td>642048</td>
|
|
<td>7e3986d0b83be86c9bd73da60ac9c757</td>
|
|
<td>ffAdminPanel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:16 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:16 +0000 UTC</td>
|
|
<td>a9d2fb1648bf369ac3c49b19cfe88229428bf05a</td>
|
|
<td>02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45</td>
|
|
<td>600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4608826d15c9b0013ef43372373ac5c1c3d4a93c7b39658115e0f6568bfcf9ad</td>
|
|
<td>[68a62c2f20141caa2973b297, 68a62cb1297e2a61afff0f66]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:27Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[b1a9f00e7f16af894f7d762f31f04103]</td>
|
|
<td>[aea24bcf206640f8e3fe8d855ee4a105dea5a326]</td>
|
|
<td>[6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474]</td>
|
|
<td>[f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>b1a9f00e7f16af894f7d762f31f04103</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>aea24bcf206640f8e3fe8d855ee4a105dea5a326</td>
|
|
<td>6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474</td>
|
|
<td>f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>458ea525c7c23be64712ffb0c5e92f2f76912d0b22c9a3ce8abcbc4b798154c6</td>
|
|
<td>[68a62c2f20141caa2973b2a2, 68a62cb1297e2a61afff0f73]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[4585c873644131690c95ff47f4e97a26]</td>
|
|
<td>[2f6fc084641cf96435b0521abab90b4be05e9954]</td>
|
|
<td>[52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f]</td>
|
|
<td>[9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>4585c873644131690c95ff47f4e97a26</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2f6fc084641cf96435b0521abab90b4be05e9954</td>
|
|
<td>52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f</td>
|
|
<td>9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>451e993a076564310629300dceda6e38d0749f6cf590a9e49882d033deca879b</td>
|
|
<td>[68a62c2f20141caa2973b2a0, 68a62cb1297e2a61afff0f71]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[83d1c497cddbb8bd7c89d0f58850d8cb]</td>
|
|
<td>[ab2968ee9868bbc6603b705c27963003a68b942e]</td>
|
|
<td>[414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b]</td>
|
|
<td>[e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>83d1c497cddbb8bd7c89d0f58850d8cb</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24236</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>ab2968ee9868bbc6603b705c27963003a68b942e</td>
|
|
<td>414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b</td>
|
|
<td>e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4a0c6fdffe4a3fcc7eb5b53b90645cd60b01e50ca640413f3f6c4810a44b667a</td>
|
|
<td>[68a2a2b145e54eb8011b598d, 68a3f3b82b0ad9191f472695, 68a545ad1588ee149e3e4b08, 68a6a04ba1132f2e5ae457dc, 68a6fd7ba1e81760c2a03b4e]</td>
|
|
<td>[2]</td>
|
|
<td>[jskwv]</td>
|
|
<td>[I-nMoveItXfer, I-nMoveItAuto]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\Program Files\MOVEit\MOVEitTransfer\MOVEitCrypto.dll, C:\Program Files\MOVEit\MOVEitAutomation\MOVEitCrypto.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\Program Files\MOVEit\MOVEitTransfer\ExportCerts.exe, C:\Program Files\MOVEit\MOVEitAutomation\MICentralCfg.exe]</td>
|
|
<td>[E:\MOVEitTransfer\Scheduler\DMZBackup.exe, C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T03:39:13Z, 2025-08-19T03:39:18Z, 2025-08-20T03:39:17Z, 2025-08-21T04:20:27Z, 2025-08-21T11:05:28Z]</td>
|
|
<td>[1f54e36616d3a07d546b7e5ef7bc7e36]</td>
|
|
<td>[a65cc714e1490b5498ddecafb67f979f5bbc7990]</td>
|
|
<td>[52d8000c0c7bc0db578095f7b31bd6e6d0c6d51e98fea87c375e27f41491d03aee5730002248331d21d7fd309464a29e]</td>
|
|
<td>[a3a6efa4151aa2fee89b7438a13c15487d82c2cfa58b54ca00a1c76ec13f0e9ab603bdcc5eb5193759904b552959d9f940c7652733f49a5df2a7ce917223c127]</td>
|
|
<td>[172.17.253.253, 172.17.253.254]</td>
|
|
<td>[172.17.253.253, 172.17.253.254]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>MOVEitCrypto.dll</td>
|
|
<td>E:\Program Files\MOVEit\MOVEitTransfer\</td>
|
|
<td>MOVEitCrypto - Library of cryptographic routines</td>
|
|
<td>154112</td>
|
|
<td>1f54e36616d3a07d546b7e5ef7bc7e36</td>
|
|
<td>MOVEitCrypto</td>
|
|
<td>1.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-06-26 17:10:43 +0000 UTC</td>
|
|
<td>2024-06-08 01:58:58 +0000 UTC</td>
|
|
<td>a65cc714e1490b5498ddecafb67f979f5bbc7990</td>
|
|
<td>52d8000c0c7bc0db578095f7b31bd6e6d0c6d51e98fea87c375e27f41491d03aee5730002248331d21d7fd309464a29e</td>
|
|
<td>a3a6efa4151aa2fee89b7438a13c15487d82c2cfa58b54ca00a1c76ec13f0e9ab603bdcc5eb5193759904b552959d9f940c7652733f49a5df2a7ce917223c127</td>
|
|
<td>2025-05-01 04:19:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-07-28 02:47:05 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 04:20:30.057 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>490a7505dee3e81999a414fcce3d198b21bbd62ff60d35dfdf1d6618552fb20e</td>
|
|
<td>[68a62c61512061b0a03001e6, 68a62d65c4509fd4abd51f62]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[d1da2ba18a45195587ac85e4c452ca09]</td>
|
|
<td>[15b8ff50b85e3c93821ace49b827d283d81b0d51]</td>
|
|
<td>[bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77]</td>
|
|
<td>[3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>d1da2ba18a45195587ac85e4c452ca09</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>15b8ff50b85e3c93821ace49b827d283d81b0d51</td>
|
|
<td>bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77</td>
|
|
<td>3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48c00f0cf8e81b7136ae6aad795978d4d6bbe8959aa93c8c88002439b65c35e0</td>
|
|
<td>[68a62c2f20141caa2973b295, 68a62cb1297e2a61afff0f6e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common_WebService.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:24Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[6cc80ab6d1e337607c99b7836f897b7a]</td>
|
|
<td>[b7769363d5ece7b0a8d827223972357eabf93698]</td>
|
|
<td>[ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19]</td>
|
|
<td>[cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common_WebService.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Common_WebService</td>
|
|
<td>116224</td>
|
|
<td>6cc80ab6d1e337607c99b7836f897b7a</td>
|
|
<td>Common_WebService</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:20 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:20 +0000 UTC</td>
|
|
<td>b7769363d5ece7b0a8d827223972357eabf93698</td>
|
|
<td>ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19</td>
|
|
<td>cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47c150187166b4399b815710fdd231c7060bfb92b005876b25f730e7facfbe53</td>
|
|
<td>[68a62c2f20141caa2973b294, 68a62cb1297e2a61afff0f68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:23Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[5d8c166bc8f04a2e850cf9de89166d2c]</td>
|
|
<td>[11da266542a9b64f4e75f6edda8287f6efbf56f9]</td>
|
|
<td>[03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7]</td>
|
|
<td>[f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>5d8c166bc8f04a2e850cf9de89166d2c</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>11da266542a9b64f4e75f6edda8287f6efbf56f9</td>
|
|
<td>03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7</td>
|
|
<td>f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c18a9fccb3204a7c75bfcb401aefbe3887d079ae5e77d862c1a71f1c7ccddad</td>
|
|
<td>[68a1630bf6e8920a96bd8fb8, 68a164cdde38c806f081815e, 68a2b48ff48ce007dac7acfd, 68a2b651d3e43b5dd374f131, 68a40646d9f12aef1f9954e2, 68a4082197086979fc9ed945, 68a557f1b2b6b5c32c84a885, 68a559cc6ef9d803fa606147, 68a6a9a35e87f5dda332a736, 68a6ab563120dcdd6b9736f4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-VAWHDSB, I-VAWHDSA]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\aw\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:01Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[93f3e8fb47c860b1e51e77c4c8a113cd]</td>
|
|
<td>[e01d84238ee1050f10c3199ecd00cc8918c6cc3b]</td>
|
|
<td>[ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3]</td>
|
|
<td>[ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\aw\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>93f3e8fb47c860b1e51e77c4c8a113cd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>e01d84238ee1050f10c3199ecd00cc8918c6cc3b</td>
|
|
<td>ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3</td>
|
|
<td>ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>435e925a046549dc8d69886dc9a6e2cb57abf5910eb50d36d783fd3dd804196e</td>
|
|
<td>[68a62c390de66b6bd84ed654, 68a62cbbbad0c3891c052035]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:37Z, 2025-08-20T20:14:47Z]</td>
|
|
<td>[85f88b003ea039bdaf0d0a20b7ec8baa]</td>
|
|
<td>[09a37d44fc1c5879d9fa372a1c8f83720273e0da]</td>
|
|
<td>[3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49]</td>
|
|
<td>[70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>85f88b003ea039bdaf0d0a20b7ec8baa</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>09a37d44fc1c5879d9fa372a1c8f83720273e0da</td>
|
|
<td>3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49</td>
|
|
<td>70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4398f7df96dfec614731513fdb359fd1a7d2716a23b6375bcdc770db8d4dda79</td>
|
|
<td>[68a62c390de66b6bd84ed637, 68a62cb1297e2a61afff0f79]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[46c2b221fd3e580477fb246dd2281781]</td>
|
|
<td>[1b657b8af04151127213b220c217ebcec01ebf45]</td>
|
|
<td>[28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b]</td>
|
|
<td>[cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>46c2b221fd3e580477fb246dd2281781</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>1b657b8af04151127213b220c217ebcec01ebf45</td>
|
|
<td>28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b</td>
|
|
<td>cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43fb47284a0923c6f526905acaf6ed471ce98dc12e90ead9b1f6caaafd07a6c9</td>
|
|
<td>[68a1630bf6e8920a96bd8fb7, 68a164cdde38c806f081815d, 68a2b48ff48ce007dac7acfe, 68a2b651d3e43b5dd374f130, 68a40646d9f12aef1f9954e1, 68a4082197086979fc9ed946, 68a557f1b2b6b5c32c84a884, 68a559cc6ef9d803fa606146, 68a6a9a35e87f5dda332a735, 68a6ab563120dcdd6b9736f5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-VAWHDSB, I-VAWHDSA]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\aw\bin\purgedist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:01Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[3cbc298ab5d529bf52f94797407148d9]</td>
|
|
<td>[2d26db4453bb3314c5785876f9b54fd8c21f74cb]</td>
|
|
<td>[ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774]</td>
|
|
<td>[ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>purgedist.bat</td>
|
|
<td>C:\icm\pcce\aw\bin\</td>
|
|
<td></td>
|
|
<td>408</td>
|
|
<td>3cbc298ab5d529bf52f94797407148d9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2d26db4453bb3314c5785876f9b54fd8c21f74cb</td>
|
|
<td>ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774</td>
|
|
<td>ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ea93e5d1e2693678dc2163c15548f9ba23b053efe5e52fffad3f4ee0c7c20c0</td>
|
|
<td>[68a62c61512061b0a03001ec, 68a62d65c4509fd4abd51f68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[656f58217faf83ea2207b1aabc3b938c]</td>
|
|
<td>[810871eb710d1cf89c23775cd24d6b72587118a7]</td>
|
|
<td>[c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54]</td>
|
|
<td>[bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>656f58217faf83ea2207b1aabc3b938c</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>810871eb710d1cf89c23775cd24d6b72587118a7</td>
|
|
<td>c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54</td>
|
|
<td>bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce</td>
|
|
<td>2025-07-11 22:49:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2f1ab6bfc8904fb057a0b212fc8180d8b2d9eddef225312b93bc83d0dd5838d0</td>
|
|
<td>[68a62c61512061b0a03001e7, 68a62d65c4509fd4abd51f63]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[cd91d4125d2d7ea93bd38165e12a535f]</td>
|
|
<td>[dd21e13ba0794addd890f89f5640cac6376722e6]</td>
|
|
<td>[7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326]</td>
|
|
<td>[739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>cd91d4125d2d7ea93bd38165e12a535f</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>dd21e13ba0794addd890f89f5640cac6376722e6</td>
|
|
<td>7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326</td>
|
|
<td>739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>268f47905bc543b8f4470c34eed1c7e5dabf07bb05c82b60fa57a92eb0b2c613</td>
|
|
<td>[68a62c57d96ab29dcabe19b0, 68a62d65c4509fd4abd51f5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Fastflow.Migration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[bcbe340f0385ed5826017df20efa6eb4]</td>
|
|
<td>[59625c822c0d5e524694a47fbf1286a3f41b0ec2]</td>
|
|
<td>[5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7]</td>
|
|
<td>[9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Fastflow.Migration.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Migration</td>
|
|
<td>135168</td>
|
|
<td>bcbe340f0385ed5826017df20efa6eb4</td>
|
|
<td>FormFast.Common.Migration</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:44 +0000 UTC</td>
|
|
<td>59625c822c0d5e524694a47fbf1286a3f41b0ec2</td>
|
|
<td>5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7</td>
|
|
<td>9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3a803dda1b5f33d0de97556e1cab952f0f97bb16bdff3657617328d29d35f3e5</td>
|
|
<td>[68a62c390de66b6bd84ed653, 68a62cbbbad0c3891c052034]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Magick.NET-Q16-AnyCPU.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[ImageMagick Studio LLC]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z]</td>
|
|
<td>[2eb1441d4b71f974045d417bf0d83244]</td>
|
|
<td>[19eb935d5c140f87e225a72d084e32a65302eca3]</td>
|
|
<td>[f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6]</td>
|
|
<td>[ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Magick.NET-Q16-AnyCPU.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Magick.NET Q16 AnyCPU net40</td>
|
|
<td>12438072</td>
|
|
<td>2eb1441d4b71f974045d417bf0d83244</td>
|
|
<td>Magick.NET-Q16-AnyCPU</td>
|
|
<td>7.4.3.0</td>
|
|
<td>ImageMagick Studio LLC</td>
|
|
<td>2018-03-12 04:16:00 +0000 UTC</td>
|
|
<td>2018-03-12 04:16:00 +0000 UTC</td>
|
|
<td>19eb935d5c140f87e225a72d084e32a65302eca3</td>
|
|
<td>f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6</td>
|
|
<td>ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-06-21 13:00:33 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2d9e507ea0396ee9d5c53adb9c9779afdd27a7640b28727be4db46148af51998</td>
|
|
<td>[68a62c61512061b0a03001eb, 68a62d65c4509fd4abd51f67]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[52e620fb3543935b9751f35b299fdc9a]</td>
|
|
<td>[03375654731e846fb0937dd67f3ae03d553f8a01]</td>
|
|
<td>[832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323]</td>
|
|
<td>[63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>52e620fb3543935b9751f35b299fdc9a</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>03375654731e846fb0937dd67f3ae03d553f8a01</td>
|
|
<td>832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323</td>
|
|
<td>63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1694645d5e73d2175861326fa89194dc2a82c7e21d1dcd894800714772c170a8</td>
|
|
<td>[68a62c254d354bf933e4d350, 68a62c4fe0cb7d1d0b6ef990, 68a62c4fe0cb7d1d0b6ef999, 68a62ca798fdd4aa74a31739, 68a62dbdd3f22bde37b5f4ec, 68a62dbdd3f22bde37b5f4f5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ceTe.DynamicPDF.40.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:17Z, 2025-08-20T20:12:23Z, 2025-08-20T20:12:59Z, 2025-08-20T20:14:25Z, 2025-08-20T20:14:33Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[998fde807ceac8f3bbd4916ff954fb8c]</td>
|
|
<td>[53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520]</td>
|
|
<td>[18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7]</td>
|
|
<td>[68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>ceTe.DynamicPDF.40.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>DynamicPDF for .NET (Framework 4.0)</td>
|
|
<td>4350464</td>
|
|
<td>998fde807ceac8f3bbd4916ff954fb8c</td>
|
|
<td>DynamicPDF for .NET</td>
|
|
<td>6.0.3.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-24 16:40:28 +0000 UTC</td>
|
|
<td>2023-05-24 16:40:28 +0000 UTC</td>
|
|
<td>53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520</td>
|
|
<td>18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7</td>
|
|
<td>68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>164935501a9f5781b5ebf62e5a27fbd6ea0cbacc0d64190c8aaea9f3d3b83720</td>
|
|
<td>[68a62c390de66b6bd84ed638, 68a62cb1297e2a61afff0f7a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\JsonDiffPatchDotNet.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:31Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[003939520fecd04ebdfde04df06300c6]</td>
|
|
<td>[0f64c193284ff1282af07d564d6a77a439b6c5a1]</td>
|
|
<td>[f374b5f6d6a6e671d05a83959575adff70da16013c31c7a5fb9932e6cc6ba597221f889368f87079581bfefa69aade74]</td>
|
|
<td>[b8ee22d95029d4a20edc2fa83c9f32856871c306bd42a00cdb7dcddc77ffea2893663621cac18a11b07a1acea09a0d70f3b9883b11078ecf821e5c4512428e6c]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>JsonDiffPatchDotNet.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>JsonDiffPatchDotNet</td>
|
|
<td>36352</td>
|
|
<td>003939520fecd04ebdfde04df06300c6</td>
|
|
<td>JsonDiffPatchDotNet</td>
|
|
<td>2.1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2018-03-03 19:34:18 +0000 UTC</td>
|
|
<td>2018-03-03 19:34:18 +0000 UTC</td>
|
|
<td>0f64c193284ff1282af07d564d6a77a439b6c5a1</td>
|
|
<td>f374b5f6d6a6e671d05a83959575adff70da16013c31c7a5fb9932e6cc6ba597221f889368f87079581bfefa69aade74</td>
|
|
<td>b8ee22d95029d4a20edc2fa83c9f32856871c306bd42a00cdb7dcddc77ffea2893663621cac18a11b07a1acea09a0d70f3b9883b11078ecf821e5c4512428e6c</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-09-15 03:34:58 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>14ca60e7625341579b1a31b4434c90b105cc67d697b6437ff26d9763228e9eea</td>
|
|
<td>[68a62c2f20141caa2973b293, 68a62cb1297e2a61afff0f65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:22Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[677d91239489ea7691c5d9bda03dc3ec]</td>
|
|
<td>[83fbd4375983c2ccc048304d475521e933e55a7e]</td>
|
|
<td>[654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b]</td>
|
|
<td>[c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>677d91239489ea7691c5d9bda03dc3ec</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>83fbd4375983c2ccc048304d475521e933e55a7e</td>
|
|
<td>654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b</td>
|
|
<td>c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fa3402afae16af05fbba53d005803e74825eb1a222d135ed8b0f2009514bf45d</td>
|
|
<td>[68a62c57d96ab29dcabe19ab, 68a62d5b4fa1f463a5481cd3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[80cbeb9ab7ad2d7f01f2a53273bf59a6]</td>
|
|
<td>[9db1f88469a23adaabce2f09c7b0acc618bb174f]</td>
|
|
<td>[0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9]</td>
|
|
<td>[19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>80cbeb9ab7ad2d7f01f2a53273bf59a6</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>9db1f88469a23adaabce2f09c7b0acc618bb174f</td>
|
|
<td>0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9</td>
|
|
<td>19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>004cd2403dd39a5b0f37521d49d96e6aa5dc4cec3c497c18fb3e2ca7251f1839</td>
|
|
<td>[68a31e9eca7b7527f86c6ca8, 68a31fe23d59934069ead436, 68a31fe23d59934069ead437, 68a31fe23d59934069ead438, 68a31fe23d59934069ead439, 68a322138bd13b5696d44fb0, 68a325d712844ae893875a07, 68a325d712844ae893875a08, 68a325d712844ae893875a0a, 68a3282fff5407347547ca9e, 68a33191ac64423ea16822ee, 68a33191ac64423ea16822ef, 68a5fd7014523931e7db330f, 68a5ffc9536a7a985c76561c, 68a5ffc9536a7a985c76561e, 68a5ffc9536a7a985c76561f, 68a5ffc9536a7a985c765620, 68a605e24d31d8fb8241a71d, 68a6083bfcc918b33d1bbc03]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, CFNAdmin]</td>
|
|
<td>[i-nCCMCPyxCCEP, i-nCCMCPyxCCET]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2250.850, v2253.852, v2255.853, v2307.897]</td>
|
|
<td>["C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\scc-ui;qm=1;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\ui-stream-server-2931303782688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-7bafb86c-77a0-425c-9aba-05e07f22a813.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" -execfunc enum_cp 632515080, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic1.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-5b3e7749-b40a-4dd4-9d9f-d7ab08f7e111.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" -execfunc enum_cp 1854494281, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --kill-image-processes --kill-image-processes-exclude 7980, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-493f53c1-5930-4a24-87e2-28e204cfa4e3.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040619106, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040621110, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2042633891, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --uninstall]</td>
|
|
<td>[BeyondTrust Corporation]</td>
|
|
<td>[C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe, C:\Windows\System32\services.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[C:\Program Files (x86)\CareFusion\RSS Remote Access Agent\RemoteAccess.Service.exe, C:\Windows\System32\wininit.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[2025-08-18T12:37:44Z, 2025-08-18T12:37:45Z, 2025-08-18T12:41:44Z, 2025-08-18T12:41:45Z, 2025-08-18T12:42:11Z, 2025-08-18T12:45:40Z, 2025-08-18T13:02:31Z, 2025-08-18T13:02:32Z, 2025-08-18T13:03:11Z, 2025-08-18T13:11:54Z, 2025-08-18T13:55:17Z, 2025-08-18T13:55:18Z, 2025-08-20T16:53:03Z, 2025-08-20T16:53:04Z, 2025-08-20T16:53:09Z, 2025-08-20T16:53:44Z, 2025-08-20T16:53:46Z, 2025-08-20T17:27:19Z, 2025-08-20T17:29:51Z]</td>
|
|
<td>[8447ea171cfef99d48c36cd3fe58e75e]</td>
|
|
<td>[277e7c83686ce8b1d840cd8b10b952121f8dddcb]</td>
|
|
<td>[cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab]</td>
|
|
<td>[a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>bomgar-scc.exe</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\68761134022\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>22436520</td>
|
|
<td>8447ea171cfef99d48c36cd3fe58e75e</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6)</td>
|
|
<td>BeyondTrust Corporation</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>277e7c83686ce8b1d840cd8b10b952121f8dddcb</td>
|
|
<td>cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab</td>
|
|
<td>a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c</td>
|
|
<td>2025-07-15 08:28:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00c6b318328222b31bd155f24d07548e0ba90568823b8df5840d4b0971eab969</td>
|
|
<td>[68a1770dd3846084cd8926c4, 68a17852d53457e99d2a1d45, 68a2c891ae6692437dac4713, 68a2c9d68407e99239d86f04, 68a41a2804359c03b93864eb, 68a41c4ef3fe2c4d2e402021, 68a56bb8e11ed76bf9fec9d5, 68a56d164742aa172d2a956b, 68a6bd5381a74eaece016383, 68a6bec159c9feaca86c6593]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-APP, GRMC-ECW-IF]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\tomcat8\bin\tomcat_start.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:30:01Z, 2025-08-18T06:30:01Z, 2025-08-19T06:30:01Z, 2025-08-20T06:30:01Z, 2025-08-21T06:30:01Z]</td>
|
|
<td>[df88c440808e6359a60eef459a5ceb07]</td>
|
|
<td>[d47b6b7f51ae26794af8a564e9603ca6be804212]</td>
|
|
<td>[9be6b6accf362a5c503599a9762f36ebe15decd0d0836b98a637bb445f6fdd48eb4634c921b1ec4a7fc5ec97408a012e]</td>
|
|
<td>[974674f52c0c7ac875c2829605944a9ef1b8cc3720af02d368f09e18b2cc888ad16c53738e005d0da5f4b1642cb6cbcd60443e1be47cefab1a0b824ce8b9d91a]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>tomcat_start.bat</td>
|
|
<td>D:\eClinicalWorks\tomcat8\bin\</td>
|
|
<td></td>
|
|
<td>17</td>
|
|
<td>df88c440808e6359a60eef459a5ceb07</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 18:01:24 +0000 UTC</td>
|
|
<td>2021-07-04 18:01:24 +0000 UTC</td>
|
|
<td>d47b6b7f51ae26794af8a564e9603ca6be804212</td>
|
|
<td>9be6b6accf362a5c503599a9762f36ebe15decd0d0836b98a637bb445f6fdd48eb4634c921b1ec4a7fc5ec97408a012e</td>
|
|
<td>974674f52c0c7ac875c2829605944a9ef1b8cc3720af02d368f09e18b2cc888ad16c53738e005d0da5f4b1642cb6cbcd60443e1be47cefab1a0b824ce8b9d91a</td>
|
|
<td>2025-08-09 06:30:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-06-17 12:06:39 +0000 UTC</td>
|
|
<td>55</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-09 06:31:04.225 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00e3c6e87750065c6bf4ac8e05b77166dbd90c677c933984055f0db56dbf13c9</td>
|
|
<td>[68a62c57d96ab29dcabe19ae, 68a62d65c4509fd4abd51f5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[b49cce3d89159feea34f0a8c83dec7f9]</td>
|
|
<td>[4f11eb48337e1c91f298f0288db6ef5c6fc43b54]</td>
|
|
<td>[86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705]</td>
|
|
<td>[c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>b49cce3d89159feea34f0a8c83dec7f9</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>4f11eb48337e1c91f298f0288db6ef5c6fc43b54</td>
|
|
<td>86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705</td>
|
|
<td>c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00cfdd2c637c38676581b9cf2cdb647024cb185f4ef32d3f89b1d9f0b8d26848</td>
|
|
<td>[68a4d180b5900ae066920597]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6f2c2ee898da74b0dae817a69b5674e23eea37d19051be446e361736afbc9b6</td>
|
|
<td>[68a5cc349d52e7a8b7af63d6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:50Z]</td>
|
|
<td>[2b188a65d88d897daf549bee406d1735]</td>
|
|
<td>[e24730bac7f5091db0bf3b218b2d38ee31e53464]</td>
|
|
<td>[8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d]</td>
|
|
<td>[548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>374</td>
|
|
<td>2b188a65d88d897daf549bee406d1735</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>e24730bac7f5091db0bf3b218b2d38ee31e53464</td>
|
|
<td>8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d</td>
|
|
<td>548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6cc0c6e39a3862e6454569877b09be485ad28a2887a38d735ba8d3f2ee0a41e</td>
|
|
<td>[68a6ffbfa2394f9c2d72c8ec]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_peak]</td>
|
|
<td>[i-npeak01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\EGScript1.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T11:15:02Z]</td>
|
|
<td>[527a2bb6babe9bcc3ec59cd82c163982]</td>
|
|
<td>[cf293589bef5ebac58879fcce2b88be84af94943]</td>
|
|
<td>[d290ad896981482bbfa201cb1670798f5de84ce1d7db21b6278ae149bd7a790150b5e620f0d83a3c2b3e71b34212292a]</td>
|
|
<td>[5563b3fa19f232d6ca560abb628aa0996987564b45865745d65af8b0d23bc60672461da99a6dff95e5210fb5eb09c248558055fe65b8c07d31868cf04691eea8]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EGScript1.vbs</td>
|
|
<td>\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\</td>
|
|
<td></td>
|
|
<td>1747</td>
|
|
<td>527a2bb6babe9bcc3ec59cd82c163982</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-19 18:26:11 +0000 UTC</td>
|
|
<td>2025-06-19 18:26:11 +0000 UTC</td>
|
|
<td>cf293589bef5ebac58879fcce2b88be84af94943</td>
|
|
<td>d290ad896981482bbfa201cb1670798f5de84ce1d7db21b6278ae149bd7a790150b5e620f0d83a3c2b3e71b34212292a</td>
|
|
<td>5563b3fa19f232d6ca560abb628aa0996987564b45865745d65af8b0d23bc60672461da99a6dff95e5210fb5eb09c248558055fe65b8c07d31868cf04691eea8</td>
|
|
<td>2025-08-21 11:15:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0623b5670b57e995db06e8dba8e8ec36c7879f0d12dfd3f1c21f0aec1da7ef49</td>
|
|
<td>[68a226e5ea27d2f962eac02e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\tmpEXO_pugsznk4.2dj.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T19:00:49Z]</td>
|
|
<td>[037fb6f1dc934749df5f6ce3c6c612c4]</td>
|
|
<td>[f803186e516651994aa74b575f9814d93d526eea]</td>
|
|
<td>[3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59]</td>
|
|
<td>[cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_pugsznk4.2dj.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>037fb6f1dc934749df5f6ce3c6c612c4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:00:48 +0000 UTC</td>
|
|
<td>2025-08-17 19:00:48 +0000 UTC</td>
|
|
<td>f803186e516651994aa74b575f9814d93d526eea</td>
|
|
<td>3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59</td>
|
|
<td>cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75</td>
|
|
<td>2025-08-17 19:00:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>05d621eeca2e4255114d141aa7d6c5ccf117856e38d20d40678858873ba58e24</td>
|
|
<td>[68a50205736560052fcd1831]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_wlmxcr2s.rhk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wlmxcr2s.rhk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:00:14 +0000 UTC</td>
|
|
<td>2025-08-19 23:00:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>05b40542c9d286b4f585f15fbeaf5aecac45a37eb286e2547b08aac26bbdb40b</td>
|
|
<td>[68a15ba378816d499880391d, 68a2ad22384f426252d8416c, 68a3feaf3cf52344d4e64238, 68a5516fbc962067806d3c43, 68a6a4665f03c27de6a15471]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hnocmon]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Java\jre1.8.0_311\lib\rt.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_729318203\java.exe]</td>
|
|
<td>[E:\nessus\nessusd.exe]</td>
|
|
<td>[2025-08-17T04:27:09Z, 2025-08-18T04:29:38Z, 2025-08-19T04:29:07Z, 2025-08-20T04:29:08Z, 2025-08-21T04:35:25Z]</td>
|
|
<td>[0690b67a96e0d254baf7ab4934884cbe]</td>
|
|
<td>[62fdb53b85395e0d1e0fc0e528d822a419764f8d]</td>
|
|
<td>[408daab016672fd13f517b2a443651ebb2ae06779115370013d530a1309d64749cab35b8b653116e69fade9fab32ed4d]</td>
|
|
<td>[3d7ed7b26258084d04325d5890f0b80777ef1b2da7327ed4974669543fcc0511c780201f258325f25601c4a276746a2f1414b3aec46090413bd98ddf150db1f4]</td>
|
|
<td>[172.18.0.10]</td>
|
|
<td>[172.18.0.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rt.jar</td>
|
|
<td>C:\Program Files (x86)\Java\jre1.8.0_311\lib\</td>
|
|
<td></td>
|
|
<td>55695854</td>
|
|
<td>0690b67a96e0d254baf7ab4934884cbe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 15:43:07 +0000 UTC</td>
|
|
<td>2021-10-20 15:43:12 +0000 UTC</td>
|
|
<td>62fdb53b85395e0d1e0fc0e528d822a419764f8d</td>
|
|
<td>408daab016672fd13f517b2a443651ebb2ae06779115370013d530a1309d64749cab35b8b653116e69fade9fab32ed4d</td>
|
|
<td>3d7ed7b26258084d04325d5890f0b80777ef1b2da7327ed4974669543fcc0511c780201f258325f25601c4a276746a2f1414b3aec46090413bd98ddf150db1f4</td>
|
|
<td>2025-08-09 04:29:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-01-15 08:34:47 +0000 UTC</td>
|
|
<td>43</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-09 04:30:26.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>05483be54fb184ec487226ec2f966cb470c73998877ae425b560dffb5fca531d</td>
|
|
<td>[68a35c84047df79ddfd2415c]</td>
|
|
<td>[2]</td>
|
|
<td>[ghermanc]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\tmpEXO_evkptwwz.wjs.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T17:01:20Z]</td>
|
|
<td>[42fefd8b7428fc4f9aa0c97458e55c4f]</td>
|
|
<td>[59be0f0decf9173c38d32fd5716316788fc77ad5]</td>
|
|
<td>[94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e]</td>
|
|
<td>[0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_evkptwwz.wjs.psm1</td>
|
|
<td>C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\</td>
|
|
<td></td>
|
|
<td>2308296</td>
|
|
<td>42fefd8b7428fc4f9aa0c97458e55c4f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 17:01:20 +0000 UTC</td>
|
|
<td>2025-08-18 17:01:20 +0000 UTC</td>
|
|
<td>59be0f0decf9173c38d32fd5716316788fc77ad5</td>
|
|
<td>94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e</td>
|
|
<td>0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c</td>
|
|
<td>2025-08-18 17:01:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0444971c7c19df0c4e5f8ad75c12ac277638470460eb7747122539960ed5e99f</td>
|
|
<td>[68a5c64d54e5003d1abde4c4, 68a5c77e05aa879ada66b41f, 68a5c77e05aa879ada66b425, 68a5c77e05aa879ada66b42a, 68a5c77e05aa879ada66b42f, 68a5c77e05aa879ada66b433, 68a5c9d7599432010e418bd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech, SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS, NT AUTHORITY]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe, C:\Windows\Temp\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{58A25255-3CB8-4A17-A3C9-25023F29F7DC}, C:\Users\SVC_SL~1\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B8671B6F-617B-4826-9178-B43475CF91A7}, C:\Users\SVC_SL~1\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{5E032894-5063-4E54-A90B-D897D40099F5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D1371EF7-61B8-4622-BE96-DFE6C3D3E0A5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{8AD7745A-E0F4-41FE-8319-EFF8019D00DB}, C:\Users\SVC_SL~1\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{A3368B19-6720-427C-9D69-260D34BE8359}, C:\Windows\TEMP\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FBE48F2E-1398-48BF-8AE6-2A235E268844}]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE, D:\QS1\QIA\03050201002QiaInst.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe, D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z, 2025-08-20T13:12:45Z]</td>
|
|
<td>[4b56c021299344676f123fcb48f53c1e]</td>
|
|
<td>[cbef3152c477c9176120030b164a4a807b527d8e]</td>
|
|
<td>[949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c]</td>
|
|
<td>[097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISBEW64.exe</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\</td>
|
|
<td>InstallShield (R) 64-bit Setup Engine</td>
|
|
<td>70064</td>
|
|
<td>4b56c021299344676f123fcb48f53c1e</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2006-05-17 14:21:40 +0000 UTC</td>
|
|
<td>cbef3152c477c9176120030b164a4a807b527d8e</td>
|
|
<td>949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c</td>
|
|
<td>097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-23 01:43:21 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>03f227d3eda403e620c45f4986ee30554111c0ce60910e7d6858e3d887a40a7b</td>
|
|
<td>[68a16f23887230bce1ef3f8c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hBMCCure]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxignfvp.mzk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:56:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nxignfvp.mzk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:56:39 +0000 UTC</td>
|
|
<td>2025-08-17 05:56:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:56:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>039c0bb5ecd416b639ddc4a4241d8d92bc8ae366000d1bfbc3e845f33f76cda2</td>
|
|
<td>[68a306a5ba5832f49fe9cf53]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXDBEDD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[a3020f38300be8ce99da0f3296b30a4f]</td>
|
|
<td>[4f5628a4960050691f65909266940185f174702a]</td>
|
|
<td>[adc9b664acb1a9eec9370f3696771086aed69f60eaf7383f9a7807f4ac3157ddcb5edb62504479f53076b5865d190de7]</td>
|
|
<td>[12a704c000d93439dab373772b26b41407caae50cded32ae9907b34922fb18430471112a0cc926a0b523d021c649cd7fe987cda3249e57e9f3e569b8c664dfb3]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DXDBEDD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express DB Inplace Editors</td>
|
|
<td>49664</td>
|
|
<td>a3020f38300be8ce99da0f3296b30a4f</td>
|
|
<td>ExpressEditors</td>
|
|
<td>3.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:10 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>4f5628a4960050691f65909266940185f174702a</td>
|
|
<td>adc9b664acb1a9eec9370f3696771086aed69f60eaf7383f9a7807f4ac3157ddcb5edb62504479f53076b5865d190de7</td>
|
|
<td>12a704c000d93439dab373772b26b41407caae50cded32ae9907b34922fb18430471112a0cc926a0b523d021c649cd7fe987cda3249e57e9f3e569b8c664dfb3</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:22:26 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>038390889beb53877bcb82beff610051215f0d7773f5452fbb150d45afe4594b</td>
|
|
<td>[68a46f87474e4ad446dca4d9, 68a4728c1dfbce27769ea0bc]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa, SYSTEM]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS, NT AUTHORITY]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\_isuser_0x0409.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Client 20.1.2.14.exe, C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe, C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T12:35:14Z, 2025-08-19T12:35:29Z]</td>
|
|
<td>[92698c5a6197382994093641c6a72d29]</td>
|
|
<td>[f535aab772d9bf505b48124f8e076e830c4af33b]</td>
|
|
<td>[3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0]</td>
|
|
<td>[addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_isuser_0x0409.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\</td>
|
|
<td></td>
|
|
<td>24576</td>
|
|
<td>92698c5a6197382994093641c6a72d29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:35:02 +0000 UTC</td>
|
|
<td>2025-08-19 12:35:02 +0000 UTC</td>
|
|
<td>f535aab772d9bf505b48124f8e076e830c4af33b</td>
|
|
<td>3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0</td>
|
|
<td>addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24</td>
|
|
<td>2025-08-19 12:35:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>037dca15295313174f3f88cc9631db4896d8726a3be3e0cd65e6c2534ad22ed3</td>
|
|
<td>[68a472a799ad3734d804e2ef]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcpkix-jdk15on-1.50.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[4947238c5ab9942f299cc15ffb368da9]</td>
|
|
<td>[f82f869cbf31fdb3419487dd58f4189c33ec9acd]</td>
|
|
<td>[f055f7eaee4153e071820e0462f729c8ab17e95b111b773e2e724b6202b2066ebdca8074dc18402a5d7102b1a1db56a4]</td>
|
|
<td>[7ad806bf1d1897b45fd9677bd6ae8ee3646967cdf6fbb29ab919b0840689368ec040a9aa6efd91a48b18475e949cff19264570c54a25a452e9a62c71fe97e7ff]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bcpkix-jdk15on-1.50.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>598674</td>
|
|
<td>4947238c5ab9942f299cc15ffb368da9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>f82f869cbf31fdb3419487dd58f4189c33ec9acd</td>
|
|
<td>f055f7eaee4153e071820e0462f729c8ab17e95b111b773e2e724b6202b2066ebdca8074dc18402a5d7102b1a1db56a4</td>
|
|
<td>7ad806bf1d1897b45fd9677bd6ae8ee3646967cdf6fbb29ab919b0840689368ec040a9aa6efd91a48b18475e949cff19264570c54a25a452e9a62c71fe97e7ff</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-11-27 06:21:46 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ffe3124098b0563b1e14d197acb10ddebf2e80a6fb27e7946acbd9b171bb62b2</td>
|
|
<td>[68a4b0fb13fac5171eeef0d6]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Helper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[0dddb86c5714681c7ed39d2bd59b1753]</td>
|
|
<td>[994abcb6dbb3dee2ba51f2e0b530dbdf640c0857]</td>
|
|
<td>[fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24]</td>
|
|
<td>[6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.Helper.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.Helper</td>
|
|
<td>76800</td>
|
|
<td>0dddb86c5714681c7ed39d2bd59b1753</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:01 +0000 UTC</td>
|
|
<td>994abcb6dbb3dee2ba51f2e0b530dbdf640c0857</td>
|
|
<td>fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24</td>
|
|
<td>6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ff28639f74d693212ee201bb3eb552ea3aa6e485d828399380883531b6915fad</td>
|
|
<td>[68a3146b5f0c41860c8c8514, 68a3146b5f0c41860c8c8567]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\quoprimime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[e8fe369f2c3111f2db22b808a1388e10]</td>
|
|
<td>[01bff92af9b094657904ccf3844f4017b6dd0883]</td>
|
|
<td>[070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe]</td>
|
|
<td>[178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>quoprimime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>9911</td>
|
|
<td>e8fe369f2c3111f2db22b808a1388e10</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>01bff92af9b094657904ccf3844f4017b6dd0883</td>
|
|
<td>070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe</td>
|
|
<td>178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fee3b9415fb905520bbd31be902e8cc2ce253e0d150539392e33846564d2644a</td>
|
|
<td>[68a6afe50e0f3bd8deac4d06, 68a6afe50e0f3bd8deac4d1a, 68a6afe50e0f3bd8deac4d48, 68a6afe50e0f3bd8deac4d68, 68a6afe50e0f3bd8deac4d88, 68a6afe50e0f3bd8deac4da8, 68a6afe50e0f3bd8deac4dc8, 68a6afe50e0f3bd8deac4de7, 68a6afe50e0f3bd8deac4e08, 68a6afe50e0f3bd8deac4e28, 68a6afe50e0f3bd8deac4e48, 68a6afe50e0f3bd8deac4e68, 68a6afe50e0f3bd8deac4e88, 68a6afe50e0f3bd8deac4ea7, 68a6afe50e0f3bd8deac4eb5, 68a6afe50e0f3bd8deac4ee8, 68a6afe50e0f3bd8deac4f08, 68a6afe50e0f3bd8deac4f28, 68a6afe50e0f3bd8deac4f48, 68a6afe50e0f3bd8deac4f72, 68a6afe50e0f3bd8deac4f91, 68a6afe50e0f3bd8deac4fb1, 68a6afe50e0f3bd8deac4fd2, 68a6afe50e0f3bd8deac4ff2, 68a6afe50e0f3bd8deac5012, 68a6afe50e0f3bd8deac5032, 68a6afe50e0f3bd8deac5052, 68a6afe50e0f3bd8deac5072, 68a6afe50e0f3bd8deac5092, 68a6afe50e0f3bd8deac50bc, 68a6afe50e0f3bd8deac50db, 68a6afe50e0f3bd8deac50fc, 68a6afe50e0f3bd8deac5125, 68a6afe50e0f3bd8deac5143, 68a6afe50e0f3bd8deac5166, 68a6afe50e0f3bd8deac5190, 68a6afe50e0f3bd8deac51b0, 68a6afe50e0f3bd8deac51d0, 68a6afe50e0f3bd8deac51f1, 68a6afe50e0f3bd8deac5203, 68a6afe50e0f3bd8deac521a, 68a6afe50e0f3bd8deac5251, 68a6afe50e0f3bd8deac5271, 68a6afe50e0f3bd8deac5285, 68a6afe50e0f3bd8deac52a5, 68a6afe50e0f3bd8deac52c5, 68a6afe50e0f3bd8deac52e5, 68a6afe50e0f3bd8deac5305, 68a6afe50e0f3bd8deac5325, 68a6afe50e0f3bd8deac5345, 68a6afe50e0f3bd8deac5365, 68a6afe50e0f3bd8deac5385, 68a6afe50e0f3bd8deac53ab, 68a6afe50e0f3bd8deac53c6, 68a6afe50e0f3bd8deac53eb, 68a6afe50e0f3bd8deac5409, 68a6afe50e0f3bd8deac542b, 68a6afe50e0f3bd8deac5445, 68a6afe50e0f3bd8deac546b, 68a6afe50e0f3bd8deac548b, 68a6afe50e0f3bd8deac54ab, 68a6afe50e0f3bd8deac54cb, 68a6afe50e0f3bd8deac54eb, 68a6afe50e0f3bd8deac550b, 68a6afe50e0f3bd8deac552b, 68a6afe50e0f3bd8deac554b, 68a6afe50e0f3bd8deac5575, 68a6afe50e0f3bd8deac5595, 68a6afe50e0f3bd8deac55b5, 68a6afe50e0f3bd8deac55d5, 68a6afe50e0f3bd8deac55f5, 68a6afe50e0f3bd8deac5615, 68a6afe50e0f3bd8deac5635, 68a6afe50e0f3bd8deac5665, 68a6afe50e0f3bd8deac5685, 68a6afe50e0f3bd8deac5693, 68a6afe50e0f3bd8deac56b3, 68a6afe50e0f3bd8deac56d3, 68a6afe50e0f3bd8deac56eb, 68a6afe50e0f3bd8deac5713, 68a6afe50e0f3bd8deac572d, 68a6afe50e0f3bd8deac5753, 68a6afe50e0f3bd8deac575c, 68a6afe50e0f3bd8deac579b, 68a6afe50e0f3bd8deac57a7, 68a6afe50e0f3bd8deac57dc, 68a6afe50e0f3bd8deac57e7, 68a6afe50e0f3bd8deac581b, 68a6afe50e0f3bd8deac5834, 68a6afe50e0f3bd8deac585d, 68a6afe50e0f3bd8deac5865, 68a6afe50e0f3bd8deac5896, 68a6afe50e0f3bd8deac58ad, 68a6afe50e0f3bd8deac58dd, 68a6afe50e0f3bd8deac58e3, 68a6afe50e0f3bd8deac5917, 68a6afe50e0f3bd8deac592e, 68a6afe50e0f3bd8deac595c, 68a6afe50e0f3bd8deac597d, 68a6afe50e0f3bd8deac5993, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\libpq.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[9302c185e48ff078a06dbd745e2df5e7]</td>
|
|
<td>[ebd2ebd39286a18831509874db0a8bc7498e524f]</td>
|
|
<td>[1f8090d1c23a8a427928446b3dc1adbe449bb0ecf1bba4e04556282a29b22c0c4d94cee3fbc6ea10248523cfea39c093]</td>
|
|
<td>[13cac90780593f653f9be3c3ea03e6cfb02b2c47c11414f64af310a85f0b3e98bdbdf51d1aa44f69ba927ac7af8534791e33ae3e7ffab7d89eaa45e1f983d062]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libpq.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>PostgreSQL Access Library</td>
|
|
<td>290816</td>
|
|
<td>9302c185e48ff078a06dbd745e2df5e7</td>
|
|
<td>PostgreSQL</td>
|
|
<td>12.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:46 +0000 UTC</td>
|
|
<td>2023-03-07 00:33:42 +0000 UTC</td>
|
|
<td>ebd2ebd39286a18831509874db0a8bc7498e524f</td>
|
|
<td>1f8090d1c23a8a427928446b3dc1adbe449bb0ecf1bba4e04556282a29b22c0c4d94cee3fbc6ea10248523cfea39c093</td>
|
|
<td>13cac90780593f653f9be3c3ea03e6cfb02b2c47c11414f64af310a85f0b3e98bdbdf51d1aa44f69ba927ac7af8534791e33ae3e7ffab7d89eaa45e1f983d062</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6b501b9214e63a29c2c4568350f7b6b145946c144d9b014300fbcc0784f7c60</td>
|
|
<td>[68a5f159551ff431c0c2f46a]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_b2yelpqr.qj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2306.895]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T16:01:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b2yelpqr.qj0.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 16:01:26 +0000 UTC</td>
|
|
<td>2025-08-20 16:01:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 16:01:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6a6c9f6b882d5870f8663518d1227f52605393e27eedf1dfbd79b2a5f4d8859</td>
|
|
<td>[68a3146b5f0c41860c8c8552, 68a3146b5f0c41860c8c8578]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\tokenize.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d4f62a3f3588da7cf8adaae6570edf2b]</td>
|
|
<td>[ebda299175433b27ac007f69f74952d20ae5202b]</td>
|
|
<td>[4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5]</td>
|
|
<td>[7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tokenize.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>24812</td>
|
|
<td>d4f62a3f3588da7cf8adaae6570edf2b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>ebda299175433b27ac007f69f74952d20ae5202b</td>
|
|
<td>4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5</td>
|
|
<td>7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e</td>
|
|
<td>[68a4e8a1ad898641af98fd98, 68a4f315247c4b5c9ccb9234, 68a4fcd0011d94a251a4ef34, 68a4fcd0011d94a251a4ef3e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109, ReevesJoe]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\nsExec.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\nsExec.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z]</td>
|
|
<td>[acc2b699edfea5bf5aae45aba3a41e96]</td>
|
|
<td>[d2accf4d494e43ceb2cff69abe4dd17147d29cc2]</td>
|
|
<td>[1aeca18ee2f81d26577411ac88cab27728055b9d915f4854f6695ca39b714df808c4ea69ed206829b5b17059c4df1cf9]</td>
|
|
<td>[e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>nsExec.dll</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\</td>
|
|
<td></td>
|
|
<td>6656</td>
|
|
<td>acc2b699edfea5bf5aae45aba3a41e96</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>d2accf4d494e43ceb2cff69abe4dd17147d29cc2</td>
|
|
<td>1aeca18ee2f81d26577411ac88cab27728055b9d915f4854f6695ca39b714df808c4ea69ed206829b5b17059c4df1cf9</td>
|
|
<td>e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 13:55:21 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 20:31:43.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>160cfc3154da71d4c8ed0e7c4dd19174f32559494376e201ed965cefd9dc435d</td>
|
|
<td>[68a4ccc785b914a60d739e50, 68a4ce1fc826337212f53bed, 68a4d07753a851daf11e6938, 68a4d07753a851daf11e694e, 68a4d2d1ff2b441b84428130, 68a4d2d1ff2b441b84428146]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\Socket.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[ee721e727ce3d694cd3c11559b0b0401]</td>
|
|
<td>[ec40590cc3d3c54522340b50199a2eaff31c991a]</td>
|
|
<td>[576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799]</td>
|
|
<td>[6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Socket.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\</td>
|
|
<td></td>
|
|
<td>26624</td>
|
|
<td>ee721e727ce3d694cd3c11559b0b0401</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:44 +0000 UTC</td>
|
|
<td>ec40590cc3d3c54522340b50199a2eaff31c991a</td>
|
|
<td>576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799</td>
|
|
<td>6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>15e55b7cc63532d4cab6dbff900c648ae8606b33cea00b22ed88f71bbfeb192e</td>
|
|
<td>[68a5cd8dca130478244c7a07]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-talisint]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>["C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T13:24:13Z]</td>
|
|
<td>[d3e1b261bff7f95d7bc1d8188b9f99bf]</td>
|
|
<td>[91e0d15152db9868e6fd7f89305b43da341048ee]</td>
|
|
<td>[6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652]</td>
|
|
<td>[f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2]</td>
|
|
<td>[172.17.252.192]</td>
|
|
<td>[172.17.252.192]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HL7TCPIPInbound.exe</td>
|
|
<td>C:\TalisClinical\Applications\HL7TCPIPInbound\ADT01_Service\</td>
|
|
<td>Talis Clinical ACG HL7 TCP/IP Inbound Service</td>
|
|
<td>46592</td>
|
|
<td>d3e1b261bff7f95d7bc1d8188b9f99bf</td>
|
|
<td>HL7TCPIPInbound</td>
|
|
<td>2.0.0.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-20 19:58:05 +0000 UTC</td>
|
|
<td>2018-02-19 21:25:50 +0000 UTC</td>
|
|
<td>91e0d15152db9868e6fd7f89305b43da341048ee</td>
|
|
<td>6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652</td>
|
|
<td>f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2</td>
|
|
<td>2025-04-28 02:12:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>154aa488e0abd508880818e2049df9c1c2cbaca6669dfa5bd5a69dd6e007c0e8</td>
|
|
<td>[68a4ccd13efa8341e1766c87, 68a4d07753a851daf11e694a, 68a4d2d1ff2b441b84428140]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcienginerun.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[e0dddf23a7f7275657349542c5a78a26]</td>
|
|
<td>[c31d3a860abf2ff1f28233268f1267acb4399351]</td>
|
|
<td>[9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd]</td>
|
|
<td>[a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hcienginerun.bat</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>135</td>
|
|
<td>e0dddf23a7f7275657349542c5a78a26</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>c31d3a860abf2ff1f28233268f1267acb4399351</td>
|
|
<td>9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd</td>
|
|
<td>a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd</td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>14cff831fedb21345ae1e9d261be91db71cade583ee95eee142b420fa7f14bc6</td>
|
|
<td>[68a48674c4cb2500be692619, 68a48674c4cb2500be69262f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.BusinessEntities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[673377d67ea0e4d61e412e2511cdd987]</td>
|
|
<td>[62f1432c45e44d92fad2645de312136f6c729af3]</td>
|
|
<td>[7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228]</td>
|
|
<td>[6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.BusinessEntities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.BusinessEntities</td>
|
|
<td>139520</td>
|
|
<td>673377d67ea0e4d61e412e2511cdd987</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>62f1432c45e44d92fad2645de312136f6c729af3</td>
|
|
<td>7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228</td>
|
|
<td>6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>14b60a12a6bc23c91c98e91b22169f7f0d9c5aec4243a93fc6d12ed0943b9b6b</td>
|
|
<td>[68a5088cd058c7d42b5da44e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CI1TFS1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\Program Files\Microsoft Team Foundation Server 2018\Application Tier\Web Services\bin\Plugins\DotNetOpenAuth.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T23:28:07Z]</td>
|
|
<td>[0ce5b2b873c076ceb47234716e9e30d1]</td>
|
|
<td>[065d28d05c351d6a5cda4438cddbccd944b3441a]</td>
|
|
<td>[a65626b3241b29ed79c375ae1bba55a4588eda4b492a058f99cc54f6fda558512397f04963fd681df9586aeaae02c94b]</td>
|
|
<td>[8f32aa9e94947c91344a4e90e162d32c624a4a7c4a2fd2e97c147a6758903f2b935475b505850efeccc313bcf55a56af5a64f8fb378398549edaf3e6bdd2ad71]</td>
|
|
<td>[172.18.112.46]</td>
|
|
<td>[172.18.112.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DotNetOpenAuth.dll</td>
|
|
<td>D:\Program Files\Microsoft Team Foundation Server 2018\Application Tier\Web Services\bin\Plugins\</td>
|
|
<td>DotNetOpenAuth</td>
|
|
<td>1145344</td>
|
|
<td>0ce5b2b873c076ceb47234716e9e30d1</td>
|
|
<td>DotNetOpenAuth</td>
|
|
<td>4.2.2+build.13055.e555d8a766</td>
|
|
<td>Not Signed</td>
|
|
<td>2016-10-18 18:06:36 +0000 UTC</td>
|
|
<td>2016-10-18 18:06:36 +0000 UTC</td>
|
|
<td>065d28d05c351d6a5cda4438cddbccd944b3441a</td>
|
|
<td>a65626b3241b29ed79c375ae1bba55a4588eda4b492a058f99cc54f6fda558512397f04963fd681df9586aeaae02c94b</td>
|
|
<td>8f32aa9e94947c91344a4e90e162d32c624a4a7c4a2fd2e97c147a6758903f2b935475b505850efeccc313bcf55a56af5a64f8fb378398549edaf3e6bdd2ad71</td>
|
|
<td>2025-08-19 23:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-03-02 13:01:02 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-19 23:31:12.471 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb13efdab407d25197c99859a87c75991096ea4d59d6424e5bcd07160100eb32</td>
|
|
<td>[68a472b1b022648922e2359a]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\pdf-transcoder-1.0beta2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[43a6ef2246d90909244f73238d3fa6b2]</td>
|
|
<td>[41d206ee233c3a653fb22be74128f637a5ec262f]</td>
|
|
<td>[a33e0a4c97e853016e5b5188f74bcbcabbe2d66fdb9ba5fc341df63ce2b8090bf9f7b212c75f6154e03d28ebc4a8f303]</td>
|
|
<td>[86129c3f1b687c469e331d0cdddc5371a00ceb82f19379963f18f473e6ceba11102b1a5abf7610c88232bcd942cdfc78d17fce104cc27d0765c06dea40227986]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pdf-transcoder-1.0beta2.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>749716</td>
|
|
<td>43a6ef2246d90909244f73238d3fa6b2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>41d206ee233c3a653fb22be74128f637a5ec262f</td>
|
|
<td>a33e0a4c97e853016e5b5188f74bcbcabbe2d66fdb9ba5fc341df63ce2b8090bf9f7b212c75f6154e03d28ebc4a8f303</td>
|
|
<td>86129c3f1b687c469e331d0cdddc5371a00ceb82f19379963f18f473e6ceba11102b1a5abf7610c88232bcd942cdfc78d17fce104cc27d0765c06dea40227986</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-06-16 17:42:12 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb058ffbceee4ef274dfbe4e7b134597e54597bc39b59abbf0cee9e6809e7902</td>
|
|
<td>[68a306a5ba5832f49fe9cf35]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\TXTPRINT.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[6782e21ee633cab053444241e4431f50]</td>
|
|
<td>[0154511ffb4d9954e96fd5119f319c0413a5fbaf]</td>
|
|
<td>[304772274c1bb364c3fd4d86d750fbc13931e9c623378df7a93d7ba33bdedc069530f6d665c0be6b3880d8c5c2ed6049]</td>
|
|
<td>[ec5df62c98b891431dfadb5bdf8c72ceb05959f953a8606084a7f0ae083af4480ac94a65fd74797de7c6213b71e439a963bd776540922815ce48953b517c2e69]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>TXTPRINT.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>29184</td>
|
|
<td>6782e21ee633cab053444241e4431f50</td>
|
|
<td></td>
|
|
<td>1.4.0.3</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:39 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>0154511ffb4d9954e96fd5119f319c0413a5fbaf</td>
|
|
<td>304772274c1bb364c3fd4d86d750fbc13931e9c623378df7a93d7ba33bdedc069530f6d665c0be6b3880d8c5c2ed6049</td>
|
|
<td>ec5df62c98b891431dfadb5bdf8c72ceb05959f953a8606084a7f0ae083af4480ac94a65fd74797de7c6213b71e439a963bd776540922815ce48953b517c2e69</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:07:34 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fa86ea9326765d5be075d1129e08150246ac0bd2f394d97c39cafae921f0e1ff</td>
|
|
<td>[68a16bd60756fe54a9918fab, 68a2149cb58debea69d7c756, 68a2bd5ff793a9057f329c11, 68a3663261f8067c48423ec4, 68a40efceddb3a9f1a71a60d, 68a4b7cd36bc5d38057e2372]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zTelemetryBiz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:03Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[74980fb5a35295d4c1aace7f401a721a]</td>
|
|
<td>[0dfbd25d4b0994b137a2f914752804d5edba75b3]</td>
|
|
<td>[bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c]</td>
|
|
<td>[dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zTelemetryBiz.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>134968</td>
|
|
<td>74980fb5a35295d4c1aace7f401a721a</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0dfbd25d4b0994b137a2f914752804d5edba75b3</td>
|
|
<td>bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c</td>
|
|
<td>dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:41 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f9dbf373a0c9dbd2cfec0b8b93b75f7dde92efd616102a060db5d7371caefb01</td>
|
|
<td>[68a71d98771132224a617f83]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Helpers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[0ca0bae638a84068500ed831c223e25e]</td>
|
|
<td>[36f9b5820a6c989289c679a2be1a35b30a3d9b00]</td>
|
|
<td>[54bc75e3430870a206df30856c9e3f4ae8438f6dbdc94c825a82e0f92594a096c2118081e785fe4d7bee28027ae16708]</td>
|
|
<td>[e0b4e2e70c27349ac54a97f2c5d462fbc40fc77e4c91ba56a1ba2625fee1b210bfb75b27807c267655ef357f7dbf8e9e7727d55bde3114adcacdacf5dd74b871]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.Helpers.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOs.Mobile.Helpers</td>
|
|
<td>67072</td>
|
|
<td>0ca0bae638a84068500ed831c223e25e</td>
|
|
<td>VideoOs.Mobile.Helpers</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:01:56 +0000 UTC</td>
|
|
<td>2020-05-11 15:01:56 +0000 UTC</td>
|
|
<td>36f9b5820a6c989289c679a2be1a35b30a3d9b00</td>
|
|
<td>54bc75e3430870a206df30856c9e3f4ae8438f6dbdc94c825a82e0f92594a096c2118081e785fe4d7bee28027ae16708</td>
|
|
<td>e0b4e2e70c27349ac54a97f2c5d462fbc40fc77e4c91ba56a1ba2625fee1b210bfb75b27807c267655ef357f7dbf8e9e7727d55bde3114adcacdacf5dd74b871</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-09-16 06:10:33 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f9c13d4ce6cf1962eb8e3cb201bb974b32f0db3a1806b0c6352a0a12e7877d30</td>
|
|
<td>[68a3f034978467a3921f39ac]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_be420adaea8f45e69ad3e341273a38ab.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T03:31:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_be420adaea8f45e69ad3e341273a38ab.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 03:32:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f9a0f6cdf5c1aa62deaffa6fbffbb56bf484a879e88f5d7f775bcadbb2a0c34e</td>
|
|
<td>[68a1a4c40fc81084514a3a34]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ie2wsj0b.m1p.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ie2wsj0b.m1p.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:38 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:45:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f8d7b2befffa01c23b301f5168c7e7e2282997099904057bfc6cac0ffaf53265</td>
|
|
<td>[68a17e555329b4ad00f14830]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ynbbntyr.zmr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:01:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ynbbntyr.zmr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:01:31 +0000 UTC</td>
|
|
<td>2025-08-17 07:01:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:01:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f86bbdcf20149796065c2615ecfff56ddd1aaa311e74d7952014b8d81dc3bc7b</td>
|
|
<td>[68a5bdfb54e99efcaf1f8db9]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\vkgsr1ui.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vkgsr1ui.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:22:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>004dc4972b75bfbd1376f38f1f4b423d21a2a79e908a721697d1a1db3d7055f7</td>
|
|
<td>[68a240c4e6cd2ce37129562d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hf4ikxag.z2f.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:51:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hf4ikxag.z2f.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:51:08 +0000 UTC</td>
|
|
<td>2025-08-17 20:51:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:51:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0339b3dae7a5b6041c5bbb3def63e10b124a467d5e1f2bf3af0ab8fa500073ce</td>
|
|
<td>[68a5c8eceb9e7b7716dce208]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Talis\Atlas\temp\DownloadFiles.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:58Z]</td>
|
|
<td>[a3a891260bd6c4b8107fc2851f015d10]</td>
|
|
<td>[8ff719c4242076946baef37ae6acef7fdc21f05b]</td>
|
|
<td>[0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe]</td>
|
|
<td>[9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DownloadFiles.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>1905</td>
|
|
<td>a3a891260bd6c4b8107fc2851f015d10</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>8ff719c4242076946baef37ae6acef7fdc21f05b</td>
|
|
<td>0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe</td>
|
|
<td>9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>197fea9fc376fde139a59fa4689a84ebc896b2afd1802d222c6dc86f6810c078</td>
|
|
<td>[68a16f7de3fc40447cda5394]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1cwr4aqw.s5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:58:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1cwr4aqw.s5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:58:09 +0000 UTC</td>
|
|
<td>2025-08-17 05:58:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:58:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19662d119168e78bacd4b3a8bd2078e969aae42289688dc5f70271ba774c9b2e</td>
|
|
<td>[68a32fce1e3a6c23a9ae63ca]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:51:06Z]</td>
|
|
<td>[431533e50a4a795e0182a41c54b870a6]</td>
|
|
<td>[363cf7b11b02371fbdbd3d036cf77f4f477ef7d9]</td>
|
|
<td>[10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f]</td>
|
|
<td>[7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2226</td>
|
|
<td>431533e50a4a795e0182a41c54b870a6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 13:51:02 +0000 UTC</td>
|
|
<td>363cf7b11b02371fbdbd3d036cf77f4f477ef7d9</td>
|
|
<td>10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f</td>
|
|
<td>7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc</td>
|
|
<td>2025-08-18 13:51:10 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19557978a15b783d556c4aca4eda4cbe58d36a15fe30474abd2b6e6991490d4e</td>
|
|
<td>[68a472b1b022648922e235a2]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\setupapi-1.4.0.109.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[4bb0b1f8960c908d0a4826ac6e06b044]</td>
|
|
<td>[51a5a3c50bcc35e32a8da6c27fedbc5d043b13dd]</td>
|
|
<td>[51ffb9fec38c9a13c7aebaa3745998040c928cf28c43fd7331576e2d28bebc23cf50f3dc0569c23e0f64ef2f7ec575c8]</td>
|
|
<td>[c72fb5656486a56d5d1f21b8a6b21af8ce6a0913c9fef2346e82a7d5fab412aa89473ec12d47f18417629ae072573546a871db24ccd18bd42845828032b94388]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setupapi-1.4.0.109.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\dell\storage\setupapi\main\</td>
|
|
<td></td>
|
|
<td>52894</td>
|
|
<td>4bb0b1f8960c908d0a4826ac6e06b044</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:54:59 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>51a5a3c50bcc35e32a8da6c27fedbc5d043b13dd</td>
|
|
<td>51ffb9fec38c9a13c7aebaa3745998040c928cf28c43fd7331576e2d28bebc23cf50f3dc0569c23e0f64ef2f7ec575c8</td>
|
|
<td>c72fb5656486a56d5d1f21b8a6b21af8ce6a0913c9fef2346e82a7d5fab412aa89473ec12d47f18417629ae072573546a871db24ccd18bd42845828032b94388</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1937781879992180304a96bdd855b4ce13ea1252dd609c7fdd9521d8bd88edbf</td>
|
|
<td>[68a472b1b022648922e23585]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.mail-api-1.5.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[8e80aed267f0dee527692b3aba2bfe1c]</td>
|
|
<td>[d40cb48faf5f39e86a6a5a8d8bee7b9673abf674]</td>
|
|
<td>[4a3e2a1193482dcab0a1b6d31043acfe15afe9162bf1502228e4191bd6d4f428f0d81771ea1feb6a812bb24ed36e95a7]</td>
|
|
<td>[e91d2b989f5822c5c91872b9ded74f04981e79f061962d7c0a9ab4cb59d6b253316a2ac94f894ebbbc3abec6c3023844b532d7b748e37c9834da0d5f42b00703]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>javax.mail-api-1.5.1.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>192494</td>
|
|
<td>8e80aed267f0dee527692b3aba2bfe1c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>d40cb48faf5f39e86a6a5a8d8bee7b9673abf674</td>
|
|
<td>4a3e2a1193482dcab0a1b6d31043acfe15afe9162bf1502228e4191bd6d4f428f0d81771ea1feb6a812bb24ed36e95a7</td>
|
|
<td>e91d2b989f5822c5c91872b9ded74f04981e79f061962d7c0a9ab4cb59d6b253316a2ac94f894ebbbc3abec6c3023844b532d7b748e37c9834da0d5f42b00703</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-11-28 02:58:40 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>192a97f6a2e408c36d9ec8a0eee6bba33a516ddedf3662c031d88e744629f991</td>
|
|
<td>[68a48674c4cb2500be692638, 68a48674c4cb2500be69264a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.File.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.File.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z]</td>
|
|
<td>[e5ae6947f5ef06d6a52a86d07cebcb3b]</td>
|
|
<td>[ae0bd8bd58231799c2d116b50081a6ee06b6b081]</td>
|
|
<td>[94724cd196b1adfa30d4112eedc776fb28bec172a66cb717475e8615dbd9eae1eeb61ad2d9ecc257aace0f5d4f3bc734]</td>
|
|
<td>[64884fcf807f3cb5edb6f3958683ce075a6a75451992ebc409f551efebe54e5559923c314cdc834477fac9f2975a7cb454fa6f519e87522981ba998a16fc2849]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.File.dll</td>
|
|
<td>C:\ProgramData\Laurel Bridge Software\Compass\www\</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>31232</td>
|
|
<td>e5ae6947f5ef06d6a52a86d07cebcb3b</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>ae0bd8bd58231799c2d116b50081a6ee06b6b081</td>
|
|
<td>94724cd196b1adfa30d4112eedc776fb28bec172a66cb717475e8615dbd9eae1eeb61ad2d9ecc257aace0f5d4f3bc734</td>
|
|
<td>64884fcf807f3cb5edb6f3958683ce075a6a75451992ebc409f551efebe54e5559923c314cdc834477fac9f2975a7cb454fa6f519e87522981ba998a16fc2849</td>
|
|
<td>2025-04-29 13:21:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-24 09:01:53 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-28 17:54:25.557 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>184e0f3785ff2cf00bf741f90110338443603e4ca169be51e866764145c5c1b4</td>
|
|
<td>[68a6afe50e0f3bd8deac4cfd, 68a6afe50e0f3bd8deac4d10, 68a6afe50e0f3bd8deac4d3f, 68a6afe50e0f3bd8deac4d5f, 68a6afe50e0f3bd8deac4d7e, 68a6afe50e0f3bd8deac4d9e, 68a6afe50e0f3bd8deac4dbe, 68a6afe50e0f3bd8deac4dde, 68a6afe50e0f3bd8deac4dfe, 68a6afe50e0f3bd8deac4e1e, 68a6afe50e0f3bd8deac4e3e, 68a6afe50e0f3bd8deac4e5e, 68a6afe50e0f3bd8deac4e7e, 68a6afe50e0f3bd8deac4e9e, 68a6afe50e0f3bd8deac4eb0, 68a6afe50e0f3bd8deac4ede, 68a6afe50e0f3bd8deac4efe, 68a6afe50e0f3bd8deac4f1f, 68a6afe50e0f3bd8deac4f3e, 68a6afe50e0f3bd8deac4f68, 68a6afe50e0f3bd8deac4f88, 68a6afe50e0f3bd8deac4fa8, 68a6afe50e0f3bd8deac4fc8, 68a6afe50e0f3bd8deac4fe8, 68a6afe50e0f3bd8deac5008, 68a6afe50e0f3bd8deac5028, 68a6afe50e0f3bd8deac5048, 68a6afe50e0f3bd8deac5068, 68a6afe50e0f3bd8deac5088, 68a6afe50e0f3bd8deac50b3, 68a6afe50e0f3bd8deac50d1, 68a6afe50e0f3bd8deac50f2, 68a6afe50e0f3bd8deac511c, 68a6afe50e0f3bd8deac513c, 68a6afe50e0f3bd8deac515c, 68a6afe50e0f3bd8deac5186, 68a6afe50e0f3bd8deac51a6, 68a6afe50e0f3bd8deac51c6, 68a6afe50e0f3bd8deac51e7, 68a6afe50e0f3bd8deac51f9, 68a6afe50e0f3bd8deac5231, 68a6afe50e0f3bd8deac5247, 68a6afe50e0f3bd8deac5267, 68a6afe50e0f3bd8deac527c, 68a6afe50e0f3bd8deac529b, 68a6afe50e0f3bd8deac52bb, 68a6afe50e0f3bd8deac52dc, 68a6afe50e0f3bd8deac52fb, 68a6afe50e0f3bd8deac531b, 68a6afe50e0f3bd8deac533b, 68a6afe50e0f3bd8deac535b, 68a6afe50e0f3bd8deac537b, 68a6afe50e0f3bd8deac53a2, 68a6afe50e0f3bd8deac53bd, 68a6afe50e0f3bd8deac53e2, 68a6afe50e0f3bd8deac5400, 68a6afe50e0f3bd8deac5421, 68a6afe50e0f3bd8deac543c, 68a6afe50e0f3bd8deac5462, 68a6afe50e0f3bd8deac5481, 68a6afe50e0f3bd8deac54a1, 68a6afe50e0f3bd8deac54c1, 68a6afe50e0f3bd8deac54e1, 68a6afe50e0f3bd8deac5501, 68a6afe50e0f3bd8deac5521, 68a6afe50e0f3bd8deac5541, 68a6afe50e0f3bd8deac556b, 68a6afe50e0f3bd8deac558b, 68a6afe50e0f3bd8deac55ab, 68a6afe50e0f3bd8deac55cc, 68a6afe50e0f3bd8deac55eb, 68a6afe50e0f3bd8deac560c, 68a6afe50e0f3bd8deac562b, 68a6afe50e0f3bd8deac565b, 68a6afe50e0f3bd8deac567b, 68a6afe50e0f3bd8deac568c, 68a6afe50e0f3bd8deac56a9, 68a6afe50e0f3bd8deac56c9, 68a6afe50e0f3bd8deac56e2, 68a6afe50e0f3bd8deac570a, 68a6afe50e0f3bd8deac5724, 68a6afe50e0f3bd8deac5749, 68a6afe50e0f3bd8deac577d, 68a6afe50e0f3bd8deac5792, 68a6afe50e0f3bd8deac57bd, 68a6afe50e0f3bd8deac57d3, 68a6afe50e0f3bd8deac57fc, 68a6afe50e0f3bd8deac5812, 68a6afe50e0f3bd8deac582b, 68a6afe50e0f3bd8deac5853, 68a6afe50e0f3bd8deac587c, 68a6afe50e0f3bd8deac5893, 68a6afe50e0f3bd8deac58a3, 68a6afe50e0f3bd8deac58d3, 68a6afe50e0f3bd8deac58e5, 68a6afe50e0f3bd8deac590d, 68a6afe50e0f3bd8deac5924, 68a6afe50e0f3bd8deac5954, 68a6afe50e0f3bd8deac5974, 68a6afe50e0f3bd8deac598a, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-xena-10-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[d0ed1edf3a32f88240f40aa8a4cded96]</td>
|
|
<td>[a1d11389c783f5ee22c5977f28f2ecda957a720a]</td>
|
|
<td>[d17543c1fc6fd685b3208fc21e5a3ff64979119318645bb77f4954e6aef2b6649f5ab992f4a38ec5ca10a406c2f44df4]</td>
|
|
<td>[ce254acfc756a589313f8b6f3beebeaf4071d01fc19658acd93305057479f433fd1e8f3528bf48ef044303c1ac3caff08200e84225d5c8ca9492bff57a33d097]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-xena-10-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-xena-10-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>52224</td>
|
|
<td>d0ed1edf3a32f88240f40aa8a4cded96</td>
|
|
<td>CIP-Xena</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2016-02-01 07:54:52 +0000 UTC</td>
|
|
<td>a1d11389c783f5ee22c5977f28f2ecda957a720a</td>
|
|
<td>d17543c1fc6fd685b3208fc21e5a3ff64979119318645bb77f4954e6aef2b6649f5ab992f4a38ec5ca10a406c2f44df4</td>
|
|
<td>ce254acfc756a589313f8b6f3beebeaf4071d01fc19658acd93305057479f433fd1e8f3528bf48ef044303c1ac3caff08200e84225d5c8ca9492bff57a33d097</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1841dccf8ab1e7d9158f73a6f21a031567a84f61a72df756223ddfee32401333</td>
|
|
<td>[68a523a99ba7c92b34976f9e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.Controls.v7.0.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:44Z]</td>
|
|
<td>[40b1f198a5469c65d74646e22aeb3b5c]</td>
|
|
<td>[b8c2f379906dd10c0136c5c4151cd5486a361d46]</td>
|
|
<td>[7d2f561f9bec7368f2e57eaa4acd66e5d77f033483451f25dde84df39a462116dc8d327c0ac83d5c2f94aedae5cc3b80]</td>
|
|
<td>[6cddb4188e1cad83e3c1b8efa12f61a572d05339885d2bb02381a8afa6eeeed4bfce05afdf65993b39753d5b7cd0b3c154177a9b35ad48895fa4cbc48c81750b]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Xceed.Wpf.Controls.v7.0.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Xceed Controls for WPF</td>
|
|
<td>195072</td>
|
|
<td>40b1f198a5469c65d74646e22aeb3b5c</td>
|
|
<td>Xceed Controls for WPF</td>
|
|
<td>7.0.20452.13100</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>b8c2f379906dd10c0136c5c4151cd5486a361d46</td>
|
|
<td>7d2f561f9bec7368f2e57eaa4acd66e5d77f033483451f25dde84df39a462116dc8d327c0ac83d5c2f94aedae5cc3b80</td>
|
|
<td>6cddb4188e1cad83e3c1b8efa12f61a572d05339885d2bb02381a8afa6eeeed4bfce05afdf65993b39753d5b7cd0b3c154177a9b35ad48895fa4cbc48c81750b</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-12-28 16:31:08 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>17e48334a38dbd836fe464e5c186505984d2cce8d90c271067a21ce18c41d6f2</td>
|
|
<td>[68a3f034978467a3921f39ab]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T03:31:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 03:32:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>17b63ace273280d515dc03790cc9616ab0e642ac676752b7a8428f489ab2c6d6</td>
|
|
<td>[68a22f92c12f0e944e5d68ee]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gdwb5ppl.3to.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:37:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gdwb5ppl.3to.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:37:41 +0000 UTC</td>
|
|
<td>2025-08-17 19:37:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:37:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>179832435871d03884d0c7276e49a11f82974cdb823c3738f69ab8092647fcac</td>
|
|
<td>[68a17d46e874e98975d27502]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjl5psll.in3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:57:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hjl5psll.in3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:57:01 +0000 UTC</td>
|
|
<td>2025-08-17 06:57:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:57:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1773c2dd43140d329f6e0955d6d76b67f1600ad0c4a641f0050cfe5efe225efc</td>
|
|
<td>[68a5c8eceb9e7b7716dce201, 68a5ca39b5df6e9c598d9a13, 68a5ca39b5df6e9c598d9a20, 68a5ccf2ddfdba423e488636, 68a5ccf2ddfdba423e488644, 68a5ccf2ddfdba423e488652, 68a5ccf2ddfdba423e48865f, 68a5ccf2ddfdba423e48866c, 68a5ccf2ddfdba423e488679, 68a5ccf2ddfdba423e488686, 68a5ccf2ddfdba423e488693]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\TraceFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[125f529a46ab4aa74577b49ec21e30c4]</td>
|
|
<td>[6a5e7e81ad0215822fcdaa684dd94a1e03854b01]</td>
|
|
<td>[2cc689b234c5f1f7670d28917f68ea20ccf64038596ba533da7d45f3e7e14e9727fe4312755d74a390682879a39817d5]</td>
|
|
<td>[9b48bbe95bb98c487a240922d55930227af2176098fdbc59625b0ee88281b09a0657f718d8a2df828287be2692a948474a3cf9206f4091573ecdf70889e1107a]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>TraceFunctions.ps1</td>
|
|
<td>C:\azagent\A2\_work\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.247.1\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>4510</td>
|
|
<td>125f529a46ab4aa74577b49ec21e30c4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-19 14:57:26 +0000 UTC</td>
|
|
<td>2024-10-22 15:45:10 +0000 UTC</td>
|
|
<td>6a5e7e81ad0215822fcdaa684dd94a1e03854b01</td>
|
|
<td>2cc689b234c5f1f7670d28917f68ea20ccf64038596ba533da7d45f3e7e14e9727fe4312755d74a390682879a39817d5</td>
|
|
<td>9b48bbe95bb98c487a240922d55930227af2176098fdbc59625b0ee88281b09a0657f718d8a2df828287be2692a948474a3cf9206f4091573ecdf70889e1107a</td>
|
|
<td>2025-04-16 18:41:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:04 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-16 18:46:05.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>17731fe321a7a7cc3b56cb797634b8ec29fa0322004886a1523bbc7bc7eecf71</td>
|
|
<td>[68a472a799ad3734d804e2d8]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\avalon-framework-4.1.3.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:35Z]</td>
|
|
<td>[bef9f9be8ba066273fdef72b3503a307]</td>
|
|
<td>[92315ee1c4a4c90bee05055713811f28f8509075]</td>
|
|
<td>[dc477c2c42df78b8b8807c3c3ea419e5c356d90dfef63c218da537026f689b67811bb3b16279bbee970b682df4401b7f]</td>
|
|
<td>[2673fa0a9eaf80bf6c3675131b1fc6ff8df4a75c400fdf37a968684633335f0b9113567c7e6f7ae0750a0713af47a4ac6c07728dcd320b443c3bc30ef4f1e608]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>avalon-framework-4.1.3.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>63966</td>
|
|
<td>bef9f9be8ba066273fdef72b3503a307</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>92315ee1c4a4c90bee05055713811f28f8509075</td>
|
|
<td>dc477c2c42df78b8b8807c3c3ea419e5c356d90dfef63c218da537026f689b67811bb3b16279bbee970b682df4401b7f</td>
|
|
<td>2673fa0a9eaf80bf6c3675131b1fc6ff8df4a75c400fdf37a968684633335f0b9113567c7e6f7ae0750a0713af47a4ac6c07728dcd320b443c3bc30ef4f1e608</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-11-15 08:42:51 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb</td>
|
|
<td>[68a472b1b022648922e23580]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-jaxrs-1.9.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[8481e1904d9bfe974157a6af04b4445e]</td>
|
|
<td>[534d72d2b9d6199dd531dfb27083dd4844082bba]</td>
|
|
<td>[abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936]</td>
|
|
<td>[9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jackson-jaxrs-1.9.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>18336</td>
|
|
<td>8481e1904d9bfe974157a6af04b4445e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>534d72d2b9d6199dd531dfb27083dd4844082bba</td>
|
|
<td>abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936</td>
|
|
<td>9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-06-24 07:50:59 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 12:40:40.528 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>170d4b7c2de7fb1c9deb285fdeff1310fcb485e918c7d9aa2a2ae1ec916ff314</td>
|
|
<td>[68a3146b5f0c41860c8c84f5, 68a3146b5f0c41860c8c854e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\heapq.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[3b625d3d2635c2e9ea41265880245e3b]</td>
|
|
<td>[6ee317e222aef1f732a799eca5285b2f3fe532b6]</td>
|
|
<td>[7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8]</td>
|
|
<td>[d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>heapq.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17762</td>
|
|
<td>3b625d3d2635c2e9ea41265880245e3b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>6ee317e222aef1f732a799eca5285b2f3fe532b6</td>
|
|
<td>7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8</td>
|
|
<td>d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>16baef4033a192466a85d09a61bbe23a5b321e833b215a3678c2a815b180cf58</td>
|
|
<td>[68a523949cec397f02de9f42]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Altova.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[df68553b3db6fab749316db4a9160ac7]</td>
|
|
<td>[2eb60ad1902625e818d26dbf381aa0b0fea843b2]</td>
|
|
<td>[1131ef04b60ccbd837e698f4b0c8dc11d3aa14de3602acb9cb40d868df950dafcec5216c5fa59930e51fd1fe9daa9d2b]</td>
|
|
<td>[bc22e597c97883c886c90517c9697e1efdc60a4cceaf762d54661f21e31aab571fe4f05391d7cb6dfa822e42f26fb0f09183e093d1aa676b31aa5b4141314a5b]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Altova.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>69632</td>
|
|
<td>df68553b3db6fab749316db4a9160ac7</td>
|
|
<td></td>
|
|
<td>1.0.3483.28696</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2eb60ad1902625e818d26dbf381aa0b0fea843b2</td>
|
|
<td>1131ef04b60ccbd837e698f4b0c8dc11d3aa14de3602acb9cb40d868df950dafcec5216c5fa59930e51fd1fe9daa9d2b</td>
|
|
<td>bc22e597c97883c886c90517c9697e1efdc60a4cceaf762d54661f21e31aab571fe4f05391d7cb6dfa822e42f26fb0f09183e093d1aa676b31aa5b4141314a5b</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-06-12 09:06:59 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>169a203c4334a81d8e0095f34baa1cf1840ad60a6689a336cb19e9d41acbae6b</td>
|
|
<td>[68a6afe50e0f3bd8deac4cfe, 68a6afe50e0f3bd8deac4d11, 68a6afe50e0f3bd8deac4d40, 68a6afe50e0f3bd8deac4d60, 68a6afe50e0f3bd8deac4d7f, 68a6afe50e0f3bd8deac4d9f, 68a6afe50e0f3bd8deac4dbf, 68a6afe50e0f3bd8deac4ddf, 68a6afe50e0f3bd8deac4dff, 68a6afe50e0f3bd8deac4e1f, 68a6afe50e0f3bd8deac4e3f, 68a6afe50e0f3bd8deac4e5f, 68a6afe50e0f3bd8deac4e7f, 68a6afe50e0f3bd8deac4e9f, 68a6afe50e0f3bd8deac4eb1, 68a6afe50e0f3bd8deac4edf, 68a6afe50e0f3bd8deac4eff, 68a6afe50e0f3bd8deac4f20, 68a6afe50e0f3bd8deac4f3f, 68a6afe50e0f3bd8deac4f69, 68a6afe50e0f3bd8deac4f89, 68a6afe50e0f3bd8deac4fa9, 68a6afe50e0f3bd8deac4fc9, 68a6afe50e0f3bd8deac4fe9, 68a6afe50e0f3bd8deac5009, 68a6afe50e0f3bd8deac5029, 68a6afe50e0f3bd8deac5049, 68a6afe50e0f3bd8deac5069, 68a6afe50e0f3bd8deac5089, 68a6afe50e0f3bd8deac50b4, 68a6afe50e0f3bd8deac50d2, 68a6afe50e0f3bd8deac50f3, 68a6afe50e0f3bd8deac511d, 68a6afe50e0f3bd8deac513d, 68a6afe50e0f3bd8deac515d, 68a6afe50e0f3bd8deac5187, 68a6afe50e0f3bd8deac51a7, 68a6afe50e0f3bd8deac51c7, 68a6afe50e0f3bd8deac51e8, 68a6afe50e0f3bd8deac51fa, 68a6afe50e0f3bd8deac5232, 68a6afe50e0f3bd8deac5248, 68a6afe50e0f3bd8deac5268, 68a6afe50e0f3bd8deac527d, 68a6afe50e0f3bd8deac529c, 68a6afe50e0f3bd8deac52bd, 68a6afe50e0f3bd8deac52dd, 68a6afe50e0f3bd8deac52fc, 68a6afe50e0f3bd8deac531c, 68a6afe50e0f3bd8deac533c, 68a6afe50e0f3bd8deac535c, 68a6afe50e0f3bd8deac537c, 68a6afe50e0f3bd8deac53a3, 68a6afe50e0f3bd8deac53be, 68a6afe50e0f3bd8deac53e3, 68a6afe50e0f3bd8deac5401, 68a6afe50e0f3bd8deac5422, 68a6afe50e0f3bd8deac543d, 68a6afe50e0f3bd8deac5463, 68a6afe50e0f3bd8deac5482, 68a6afe50e0f3bd8deac54a2, 68a6afe50e0f3bd8deac54c2, 68a6afe50e0f3bd8deac54e2, 68a6afe50e0f3bd8deac5502, 68a6afe50e0f3bd8deac5522, 68a6afe50e0f3bd8deac5542, 68a6afe50e0f3bd8deac556c, 68a6afe50e0f3bd8deac558c, 68a6afe50e0f3bd8deac55ac, 68a6afe50e0f3bd8deac55cd, 68a6afe50e0f3bd8deac55ec, 68a6afe50e0f3bd8deac560d, 68a6afe50e0f3bd8deac562c, 68a6afe50e0f3bd8deac565c, 68a6afe50e0f3bd8deac567c, 68a6afe50e0f3bd8deac568d, 68a6afe50e0f3bd8deac56aa, 68a6afe50e0f3bd8deac56ca, 68a6afe50e0f3bd8deac56e3, 68a6afe50e0f3bd8deac570b, 68a6afe50e0f3bd8deac5725, 68a6afe50e0f3bd8deac574a, 68a6afe50e0f3bd8deac577e, 68a6afe50e0f3bd8deac5793, 68a6afe50e0f3bd8deac57be, 68a6afe50e0f3bd8deac57d4, 68a6afe50e0f3bd8deac57fe, 68a6afe50e0f3bd8deac5813, 68a6afe50e0f3bd8deac582c, 68a6afe50e0f3bd8deac5854, 68a6afe50e0f3bd8deac587b, 68a6afe50e0f3bd8deac5894, 68a6afe50e0f3bd8deac58a4, 68a6afe50e0f3bd8deac58d4, 68a6afe50e0f3bd8deac58e6, 68a6afe50e0f3bd8deac590e, 68a6afe50e0f3bd8deac5925, 68a6afe50e0f3bd8deac5955, 68a6afe50e0f3bd8deac5975, 68a6afe50e0f3bd8deac598b, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-ohbz-14-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[6fc8a4b8b320677eb4993ca674392938]</td>
|
|
<td>[240f91e3ed1d661abc106067240036f1a823580b]</td>
|
|
<td>[1a87fb2a454af8f5e5e3e113382b9bc14d0cc50004b5845ce84542396f51c43687a9ee34bc2cad5d8ee0c4fac756b896]</td>
|
|
<td>[bf9d284f19b609ec66ed21c959f8841f9253e711f1f52d3917b8c58b9761d951b19b80e2d4256065b1451727b97850f6726ae0985a6b330b7f7a154b52d6146c]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-ohbz-14-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-ohbz-14-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>116224</td>
|
|
<td>6fc8a4b8b320677eb4993ca674392938</td>
|
|
<td>CIP-Ohbz</td>
|
|
<td>1.4.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-20 05:15:19 +0000 UTC</td>
|
|
<td>240f91e3ed1d661abc106067240036f1a823580b</td>
|
|
<td>1a87fb2a454af8f5e5e3e113382b9bc14d0cc50004b5845ce84542396f51c43687a9ee34bc2cad5d8ee0c4fac756b896</td>
|
|
<td>bf9d284f19b609ec66ed21c959f8841f9253e711f1f52d3917b8c58b9761d951b19b80e2d4256065b1451727b97850f6726ae0985a6b330b7f7a154b52d6146c</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c99e83e5bb1e752b6a081d36ecb4a804a4bf6a51f76c096ef4a30ebc8b44345</td>
|
|
<td>[68a34d6610b57c5bffc57daf]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c91077087037870eb7a63ed7d989ad265f5c3c8f356ccd3e724aefacdae6905</td>
|
|
<td>[68a4a67eb5e8554bc2e83559]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:43Z]</td>
|
|
<td>[b12cf42ff23c2057b9f1443b8014f97a]</td>
|
|
<td>[174c49890a68701f720d6ac4f822aff1798dc9d2]</td>
|
|
<td>[5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822]</td>
|
|
<td>[9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2060</td>
|
|
<td>b12cf42ff23c2057b9f1443b8014f97a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:43 +0000 UTC</td>
|
|
<td>174c49890a68701f720d6ac4f822aff1798dc9d2</td>
|
|
<td>5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822</td>
|
|
<td>9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d</td>
|
|
<td>2025-08-19 16:29:50 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c86a4cba96b9d9de38004df34ecbfc2617178870a9958ad4f17f1308c06dd5b</td>
|
|
<td>[68a5c8eceb9e7b7716dce200, 68a5ca39b5df6e9c598d9a12, 68a5ca39b5df6e9c598d9a1f, 68a5ccf2ddfdba423e488635, 68a5ccf2ddfdba423e488643, 68a5ccf2ddfdba423e488651, 68a5ccf2ddfdba423e48865e, 68a5ccf2ddfdba423e48866b, 68a5ccf2ddfdba423e488678, 68a5ccf2ddfdba423e488685, 68a5ccf2ddfdba423e488692]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ToolFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[cbab792c0208a46dc59082f0030efd4c]</td>
|
|
<td>[22eb034a2ff6ed4052bfa18fd9acaedd5c3028fd]</td>
|
|
<td>[2dcc0e1741aaa8179733d8b708c870840a1195b1928f6f3639be6cdec10b53cb45f70128667c85e0cbf1bc503c3cd118]</td>
|
|
<td>[97250faa6cabd45cd291bb3075aa6438103385b65f25e24d2ce3117f71314aa204df7a2ba16952b65edd353694297b0b16cae9c42b932418d45111f85049fc49]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ToolFunctions.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>4041</td>
|
|
<td>cbab792c0208a46dc59082f0030efd4c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:41 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>22eb034a2ff6ed4052bfa18fd9acaedd5c3028fd</td>
|
|
<td>2dcc0e1741aaa8179733d8b708c870840a1195b1928f6f3639be6cdec10b53cb45f70128667c85e0cbf1bc503c3cd118</td>
|
|
<td>97250faa6cabd45cd291bb3075aa6438103385b65f25e24d2ce3117f71314aa204df7a2ba16952b65edd353694297b0b16cae9c42b932418d45111f85049fc49</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:03 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c4f4a46ffb6c9b0b7b73281cc81801cd838a1d4b95e5bd01ed90e38527489ca</td>
|
|
<td>[68a3146b5f0c41860c8c8546, 68a3146b5f0c41860c8c8574]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\traceback.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[55adb6e2f9b392dd9d272956ce4405f8]</td>
|
|
<td>[245bf99c09cd2c80e54d4d6c044a46088e0712f1]</td>
|
|
<td>[1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e]</td>
|
|
<td>[6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>traceback.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>70311</td>
|
|
<td>55adb6e2f9b392dd9d272956ce4405f8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>245bf99c09cd2c80e54d4d6c044a46088e0712f1</td>
|
|
<td>1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e</td>
|
|
<td>6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c3dafc22b5aa4e6d0e812a90056047091c833bb5a9cfeaac5cc792909857dcb</td>
|
|
<td>[68a6afe50e0f3bd8deac4d01, 68a6afe50e0f3bd8deac4d16, 68a6afe50e0f3bd8deac4d43, 68a6afe50e0f3bd8deac4d64, 68a6afe50e0f3bd8deac4d83, 68a6afe50e0f3bd8deac4da3, 68a6afe50e0f3bd8deac4dc5, 68a6afe50e0f3bd8deac4de4, 68a6afe50e0f3bd8deac4e04, 68a6afe50e0f3bd8deac4e24, 68a6afe50e0f3bd8deac4e44, 68a6afe50e0f3bd8deac4e64, 68a6afe50e0f3bd8deac4e84, 68a6afe50e0f3bd8deac4ea4, 68a6afe50e0f3bd8deac4eb6, 68a6afe50e0f3bd8deac4ee5, 68a6afe50e0f3bd8deac4f04, 68a6afe50e0f3bd8deac4f24, 68a6afe50e0f3bd8deac4f45, 68a6afe50e0f3bd8deac4f6d, 68a6afe50e0f3bd8deac4f8e, 68a6afe50e0f3bd8deac4fae, 68a6afe50e0f3bd8deac4fce, 68a6afe50e0f3bd8deac4fee, 68a6afe50e0f3bd8deac500e, 68a6afe50e0f3bd8deac502e, 68a6afe50e0f3bd8deac504d, 68a6afe50e0f3bd8deac506e, 68a6afe50e0f3bd8deac508e, 68a6afe50e0f3bd8deac50b8, 68a6afe50e0f3bd8deac50d7, 68a6afe50e0f3bd8deac50f8, 68a6afe50e0f3bd8deac5122, 68a6afe50e0f3bd8deac5144, 68a6afe50e0f3bd8deac5162, 68a6afe50e0f3bd8deac518c, 68a6afe50e0f3bd8deac51ac, 68a6afe50e0f3bd8deac51cb, 68a6afe50e0f3bd8deac51ec, 68a6afe50e0f3bd8deac51ff, 68a6afe50e0f3bd8deac5216, 68a6afe50e0f3bd8deac524d, 68a6afe50e0f3bd8deac526d, 68a6afe50e0f3bd8deac5280, 68a6afe50e0f3bd8deac52a1, 68a6afe50e0f3bd8deac52c1, 68a6afe50e0f3bd8deac52e1, 68a6afe50e0f3bd8deac5301, 68a6afe50e0f3bd8deac5322, 68a6afe50e0f3bd8deac5341, 68a6afe50e0f3bd8deac5361, 68a6afe50e0f3bd8deac5381, 68a6afe50e0f3bd8deac53a7, 68a6afe50e0f3bd8deac53c2, 68a6afe50e0f3bd8deac53e6, 68a6afe50e0f3bd8deac5406, 68a6afe50e0f3bd8deac5427, 68a6afe50e0f3bd8deac5442, 68a6afe50e0f3bd8deac5468, 68a6afe50e0f3bd8deac5487, 68a6afe50e0f3bd8deac54a6, 68a6afe50e0f3bd8deac54c7, 68a6afe50e0f3bd8deac54e7, 68a6afe50e0f3bd8deac5507, 68a6afe50e0f3bd8deac5527, 68a6afe50e0f3bd8deac5547, 68a6afe50e0f3bd8deac5571, 68a6afe50e0f3bd8deac5591, 68a6afe50e0f3bd8deac55b1, 68a6afe50e0f3bd8deac55d1, 68a6afe50e0f3bd8deac55f1, 68a6afe50e0f3bd8deac5612, 68a6afe50e0f3bd8deac5631, 68a6afe50e0f3bd8deac563a, 68a6afe50e0f3bd8deac5660, 68a6afe50e0f3bd8deac5680, 68a6afe50e0f3bd8deac568f, 68a6afe50e0f3bd8deac56af, 68a6afe50e0f3bd8deac56cf, 68a6afe50e0f3bd8deac56e7, 68a6afe50e0f3bd8deac570f, 68a6afe50e0f3bd8deac5728, 68a6afe50e0f3bd8deac574f, 68a6afe50e0f3bd8deac5758, 68a6afe50e0f3bd8deac5797, 68a6afe50e0f3bd8deac57a3, 68a6afe50e0f3bd8deac57d8, 68a6afe50e0f3bd8deac57e3, 68a6afe50e0f3bd8deac5817, 68a6afe50e0f3bd8deac5830, 68a6afe50e0f3bd8deac5859, 68a6afe50e0f3bd8deac5861, 68a6afe50e0f3bd8deac5898, 68a6afe50e0f3bd8deac58a8, 68a6afe50e0f3bd8deac58d8, 68a6afe50e0f3bd8deac58ea, 68a6afe50e0f3bd8deac5912, 68a6afe50e0f3bd8deac5929, 68a6afe50e0f3bd8deac5959, 68a6afe50e0f3bd8deac5979, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-lzwwrapper-16-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...]</td>
|
|
<td>[0d8711eda221ecd7d62b0ce8129403e8]</td>
|
|
<td>[4dbec9785ca3cfdf10a1f8a9a8d976075756eeac]</td>
|
|
<td>[12e7ea204f5b9790e28ab3a2b1452be96f2c2805e26906d12e28eafaea0430322f4b70ce7d0b6d234e196032fea40b37]</td>
|
|
<td>[9d16cb297c365ffac4d638b2b6562440cbf8910ef13d39d19b8ede03ad2b780c218e4ecef2bfb999c92b91a732179b8a54a0d48379e1bff68e55fdd18a34dab8]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-lzwwrapper-16-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-lzwwrapper-16-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>20992</td>
|
|
<td>0d8711eda221ecd7d62b0ce8129403e8</td>
|
|
<td>CIP</td>
|
|
<td>1.6.5.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-13 05:40:52 +0000 UTC</td>
|
|
<td>4dbec9785ca3cfdf10a1f8a9a8d976075756eeac</td>
|
|
<td>12e7ea204f5b9790e28ab3a2b1452be96f2c2805e26906d12e28eafaea0430322f4b70ce7d0b6d234e196032fea40b37</td>
|
|
<td>9d16cb297c365ffac4d638b2b6562440cbf8910ef13d39d19b8ede03ad2b780c218e4ecef2bfb999c92b91a732179b8a54a0d48379e1bff68e55fdd18a34dab8</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c0d104a8743951cc262698fd2ad920b4fcfed18090a9f1a67144ee21b7b0049</td>
|
|
<td>[68a1b11e62bedacdcc003190]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_10ru0x02.3yt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:38:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_10ru0x02.3yt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:38:12 +0000 UTC</td>
|
|
<td>2025-08-17 10:38:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:38:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1bec31633cd92c7e7b6897b5b7a117c32f9bec3abc83a5ae122dc67cfe770e0f</td>
|
|
<td>[68a16bd60756fe54a9918f91, 68a2149cb58debea69d7c73f, 68a2bd5ff793a9057f329bf9, 68a3663261f8067c48423ead, 68a40efceddb3a9f1a71a5f3, 68a4b7cd36bc5d38057e235b]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\reslib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[db53771ef4c80df47010df1b9b74ccca]</td>
|
|
<td>[04235cf9f35465752309b98f0f11bcc5886f45db]</td>
|
|
<td>[2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410]</td>
|
|
<td>[7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>reslib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>57144</td>
|
|
<td>db53771ef4c80df47010df1b9b74ccca</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>04235cf9f35465752309b98f0f11bcc5886f45db</td>
|
|
<td>2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410</td>
|
|
<td>7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:58 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1b64fc501fa205199281de9b95c53dc185838e68da9587c549e9e6f1cdc43e55</td>
|
|
<td>[68a472b1b022648922e2356f]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmHostIntegrationApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[f17f58d6cb8b6edcc0823121d0af3163]</td>
|
|
<td>[2a65fa40e480abf34189a309e084b000bb0c0220]</td>
|
|
<td>[e5533ff248fc3923954e34d399a1d26934f6db28317aad7d594b3dea8c33ec7521c3851c0a2ee0f003f37d42897f78e7]</td>
|
|
<td>[f7db28e94728ec58ba5dfdc9f056db84d94bdcb3a23c9df843d89a2a0b6096e7c745644e6407a30f0df8d57f446724064fba4ae8e15741169492338b63a625ee]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmHostIntegrationApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>121140</td>
|
|
<td>f17f58d6cb8b6edcc0823121d0af3163</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2a65fa40e480abf34189a309e084b000bb0c0220</td>
|
|
<td>e5533ff248fc3923954e34d399a1d26934f6db28317aad7d594b3dea8c33ec7521c3851c0a2ee0f003f37d42897f78e7</td>
|
|
<td>f7db28e94728ec58ba5dfdc9f056db84d94bdcb3a23c9df843d89a2a0b6096e7c745644e6407a30f0df8d57f446724064fba4ae8e15741169492338b63a625ee</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1b1e6e65d2b28da1a31023fe1c0a4071c001db0ab55947e0d2d50a4aa335e321</td>
|
|
<td>[68a5c7657732fa5006a7acf0]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe -package:"D:\QS1\QAU\Updates\QAUInst.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\" -tempdisk1folder:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\" -IS_OriginalLauncher:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\QAUInst.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\QAUInst.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:02:23Z]</td>
|
|
<td>[c1478d20d872971cf6b4615e79ecfa72]</td>
|
|
<td>[31faaac28aa42532c4121fa4ea689db8248db888]</td>
|
|
<td>[747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215]</td>
|
|
<td>[58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QAUInst.exe</td>
|
|
<td>C:\Windows\Temp\{7ECE6BBA-38D7-4AA8-BD90-D64A990063CA}\</td>
|
|
<td>InstallScript Setup Launcher Unicode</td>
|
|
<td>914944</td>
|
|
<td>c1478d20d872971cf6b4615e79ecfa72</td>
|
|
<td>QS/1 Automatic Updates</td>
|
|
<td>1.0.0.297</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-22 21:33:33 +0000 UTC</td>
|
|
<td>2025-05-22 21:33:33 +0000 UTC</td>
|
|
<td>31faaac28aa42532c4121fa4ea689db8248db888</td>
|
|
<td>747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215</td>
|
|
<td>58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502</td>
|
|
<td>2025-05-22 21:33:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1b096ab7c58272c64f17e7a582777c8e9ea3d42f42e14b605ec148acf45d3fd1</td>
|
|
<td>[68a1abc4f0472d34305de372]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_rupfwq53.gwm.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rupfwq53.gwm.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:24 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1ac7ceb23e48ad66e86d0e748a2eb1125d5131a459d24779854d2bd381a9a2dc</td>
|
|
<td>[68a4855388937a93ff144377]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Web.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[e420fcc66faf3bb597920bc95092bc82]</td>
|
|
<td>[225c1cb6bde189a744287718d5838279c6495f70]</td>
|
|
<td>[8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b]</td>
|
|
<td>[f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core</td>
|
|
<td>18432</td>
|
|
<td>e420fcc66faf3bb597920bc95092bc82</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>225c1cb6bde189a744287718d5838279c6495f70</td>
|
|
<td>8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b</td>
|
|
<td>f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1ab5b7413053d06ca8df013b5f75357726018a0766346e49aec09ccd4c70b83f</td>
|
|
<td>[68a34b98a6132bf659cce5bb, 68a34df0b71eea1289980a20]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Blue.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[e5725239798a7d08e4b943d6a7fdf979]</td>
|
|
<td>[3741d4afd24407f229141ed701c02bd1c7f5ed93]</td>
|
|
<td>[d56d26dc6d609ae4566e52dcef0fac9b8720d7a1956f547bc92d60c4918012cf67bf73c5e440a567cfbb4cf31debdedc]</td>
|
|
<td>[e9a1c47d6cf6ae6e7cf314789cebd48317deb1fd2401af878998d6e52d1018840eb14845cdc4e029fbe168f6c91eae517e757a160cf965ae082357e1295de7ea]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Blue.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Blue</td>
|
|
<td>804352</td>
|
|
<td>e5725239798a7d08e4b943d6a7fdf979</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>3741d4afd24407f229141ed701c02bd1c7f5ed93</td>
|
|
<td>d56d26dc6d609ae4566e52dcef0fac9b8720d7a1956f547bc92d60c4918012cf67bf73c5e440a567cfbb4cf31debdedc</td>
|
|
<td>e9a1c47d6cf6ae6e7cf314789cebd48317deb1fd2401af878998d6e52d1018840eb14845cdc4e029fbe168f6c91eae517e757a160cf965ae082357e1295de7ea</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:17 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1aa0f52be8015d5624a34baa8ff09a5e51a84ee1d541fefb6e42312cd8266209</td>
|
|
<td>[68a1a82b7de272dd853193b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_768146f715644334a001f4d6f657b99a.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_768146f715644334a001f4d6f657b99a.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19f6ab70ded4feceef4245317e13cc2723dba13451347a16410ff088aa94ed9e</td>
|
|
<td>[68a4ac67cfad262556985011, 68a4dda823653165b0c6ea28]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\Microsoft.PowerShell.Oms.Assessments.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2278.870, v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T16:51:09Z, 2025-08-19T20:20:41Z]</td>
|
|
<td>[73567d31f6f5a57f178f72390032e4a7]</td>
|
|
<td>[da44ee8ec0db86402e5d6c017827ba77fa19bf72]</td>
|
|
<td>[86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483]</td>
|
|
<td>[ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments.dll</td>
|
|
<td>C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments</td>
|
|
<td>111616</td>
|
|
<td>73567d31f6f5a57f178f72390032e4a7</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-07 15:47:40 +0000 UTC</td>
|
|
<td>2024-10-07 15:46:58 +0000 UTC</td>
|
|
<td>da44ee8ec0db86402e5d6c017827ba77fa19bf72</td>
|
|
<td>86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483</td>
|
|
<td>ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac</td>
|
|
<td>2025-07-15 16:51:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19bbcc16c175702ae348e14d03804631d4f852e8d03c5001e4255c2e583fb086</td>
|
|
<td>[68a50936a0536b4a4308bb01]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\DatascopeB_5_0_2_9.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:30:55Z]</td>
|
|
<td>[91d6ed9ec25335c8993911305fa93660]</td>
|
|
<td>[9e017857441e23e5cc32d68e6f941671dac75216]</td>
|
|
<td>[111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3]</td>
|
|
<td>[36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DatascopeB_5_0_2_9.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>828928</td>
|
|
<td>91d6ed9ec25335c8993911305fa93660</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:30:20 +0000 UTC</td>
|
|
<td>2025-08-19 23:30:21 +0000 UTC</td>
|
|
<td>9e017857441e23e5cc32d68e6f941671dac75216</td>
|
|
<td>111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3</td>
|
|
<td>36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139</td>
|
|
<td>2025-08-19 23:31:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1993206ba43487d40316b266c2a25a246a8eccafd1d33d2be091b1ca11ced920</td>
|
|
<td>[68a5c64d54e5003d1abde4c7]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\qsettings32.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z]</td>
|
|
<td>[8e4734c2dd89067c370a2f4ff047ef17]</td>
|
|
<td>[849ad81198cbf053cc629d04148d50c66f26c2d5]</td>
|
|
<td>[4bd179374f7858b3db7b28a275d8fcec260fab1986e55d77aa3aa50cc0e26ef12b11ad4684fb6d3ff13b2145c894717c]</td>
|
|
<td>[ba7e954082a57b8e8937ce7d57063165ba66cbec31d6899d61b9c8b0200b78082d8136a5cf949c530604c65b7017fb17617f02fbfddfcffff9245e9ec90592e1]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>qsettings32.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\</td>
|
|
<td></td>
|
|
<td>32822</td>
|
|
<td>8e4734c2dd89067c370a2f4ff047ef17</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:57:41 +0000 UTC</td>
|
|
<td>2009-10-28 21:10:06 +0000 UTC</td>
|
|
<td>849ad81198cbf053cc629d04148d50c66f26c2d5</td>
|
|
<td>4bd179374f7858b3db7b28a275d8fcec260fab1986e55d77aa3aa50cc0e26ef12b11ad4684fb6d3ff13b2145c894717c</td>
|
|
<td>ba7e954082a57b8e8937ce7d57063165ba66cbec31d6899d61b9c8b0200b78082d8136a5cf949c530604c65b7017fb17617f02fbfddfcffff9245e9ec90592e1</td>
|
|
<td>2025-08-20 12:57:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-05 23:33:46 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:00:50.983 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>20aedfcc2009362bc8633f6532da1ed127c65bfe62a162c12bec185791071da2</td>
|
|
<td>[68a3146b5f0c41860c8c84f3, 68a3146b5f0c41860c8c8524]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\operator.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[4d902c5d88140a642fe4ef1a19911781]</td>
|
|
<td>[faf9cceba79990efbfcc000ae2d94a21dba89a1f]</td>
|
|
<td>[a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140]</td>
|
|
<td>[54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>operator.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17367</td>
|
|
<td>4d902c5d88140a642fe4ef1a19911781</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>faf9cceba79990efbfcc000ae2d94a21dba89a1f</td>
|
|
<td>a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140</td>
|
|
<td>54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>209d605e45aba340d5ddd93ce438fd4f8178d56ecb4911f3c4cd04badca4f0cd</td>
|
|
<td>[68a1bfd674ff3871c4d1c5c9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nosccapp2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jba2l2dq.vnn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:41:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jba2l2dq.vnn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:41:04 +0000 UTC</td>
|
|
<td>2025-08-17 11:41:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:41:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>208fe14221f4de86e1d3367e7e3af0431b468c606a965f94078806268cd1fcd9</td>
|
|
<td>[68a5c8eceb9e7b7716dce1f8, 68a5ca39b5df6e9c598d9a0a, 68a5ca39b5df6e9c598d9a17, 68a5ccf2ddfdba423e48862d, 68a5ccf2ddfdba423e48863b, 68a5ccf2ddfdba423e488649, 68a5ccf2ddfdba423e488656, 68a5ccf2ddfdba423e488663, 68a5ccf2ddfdba423e488670, 68a5ccf2ddfdba423e48867d, 68a5ccf2ddfdba423e48868a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\VstsTaskSdk.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:51Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[a2b60434350ac0955961357829a8a1c5]</td>
|
|
<td>[8e37dd79783b74df97a476dff753c6e1753affb2]</td>
|
|
<td>[5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0]</td>
|
|
<td>[bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VstsTaskSdk.psm1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>6727</td>
|
|
<td>a2b60434350ac0955961357829a8a1c5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:41 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>8e37dd79783b74df97a476dff753c6e1753affb2</td>
|
|
<td>5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0</td>
|
|
<td>bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2063d0c99b559ee70851bb6ef469403083548a7de9815d5d75c9091079f51e7a</td>
|
|
<td>[68a5239e621d09b2b1ed5e47]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfigurationSchema.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[4d713ca1bcb6151d41a165fa97487752]</td>
|
|
<td>[d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1]</td>
|
|
<td>[b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2]</td>
|
|
<td>[ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringConfigurationSchema.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>187392</td>
|
|
<td>4d713ca1bcb6151d41a165fa97487752</td>
|
|
<td></td>
|
|
<td>1.0.8565.40745</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1</td>
|
|
<td>b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2</td>
|
|
<td>ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1f477058702261b995bc18234ff867b47234569c3cd8255454037b74cddd65bc</td>
|
|
<td>[68a5239e621d09b2b1ed5e5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SQLiteHelper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[05c2fabec68ff1d6f465b6934a1a3647]</td>
|
|
<td>[802732afb976e598f0121b892ad0826871e83ab9]</td>
|
|
<td>[204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2]</td>
|
|
<td>[7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SQLiteHelper.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>AeroScout.MobileView.Common</td>
|
|
<td>10240</td>
|
|
<td>05c2fabec68ff1d6f465b6934a1a3647</td>
|
|
<td>AeroScout.MobileView.Common</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:22 +0000 UTC</td>
|
|
<td>802732afb976e598f0121b892ad0826871e83ab9</td>
|
|
<td>204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2</td>
|
|
<td>7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1ed3e1c588280d115f883456dbe63b1f2610c8f2b0bae609b75c22c0f36382ca</td>
|
|
<td>[68a306a5ba5832f49fe9cf4c]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RPRT30D4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[983b74b53f11dc71fffef7e10c6e030d]</td>
|
|
<td>[93034b2b19724dd41179d410a034545354d5247c]</td>
|
|
<td>[2bbfa19e3f893ac556e390762372c3ad25c10caf16729e56da37a1218fdac4b360cf31f74d158915899c57a9d8320f5f]</td>
|
|
<td>[8d6cd5372e3d92aed986f962f9fd20f29096a908660eaa2ae20b6ef128ef9a6b40a4dcb45cd6e0bc26498693159e55fcd82586ce8ac39723e88c21982f5bb668]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RPRT30D4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>426496</td>
|
|
<td>983b74b53f11dc71fffef7e10c6e030d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:25 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>93034b2b19724dd41179d410a034545354d5247c</td>
|
|
<td>2bbfa19e3f893ac556e390762372c3ad25c10caf16729e56da37a1218fdac4b360cf31f74d158915899c57a9d8320f5f</td>
|
|
<td>8d6cd5372e3d92aed986f962f9fd20f29096a908660eaa2ae20b6ef128ef9a6b40a4dcb45cd6e0bc26498693159e55fcd82586ce8ac39723e88c21982f5bb668</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:32:27 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e7677f18861b48d241ad124822203b017bd2503bc70ea46bdd133be3c0acad3</td>
|
|
<td>[68a523a99ba7c92b34976f9d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Validators.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[ff4b8004d67dd2a1c2ba1c7e778a0049]</td>
|
|
<td>[81a1ce5f39a72ab8469e75017bf3fa7077f3487b]</td>
|
|
<td>[137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550]</td>
|
|
<td>[ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Validators.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Validators</td>
|
|
<td>13312</td>
|
|
<td>ff4b8004d67dd2a1c2ba1c7e778a0049</td>
|
|
<td>Validators</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>81a1ce5f39a72ab8469e75017bf3fa7077f3487b</td>
|
|
<td>137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550</td>
|
|
<td>ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e3bc76525ba81e4e7118d671058905654cac19e6edd50213ec252b56526db0c</td>
|
|
<td>[68a3146b5f0c41860c8c84f4, 68a3146b5f0c41860c8c8530]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\reprlib.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[b3f6d0b4b7085fd925967d507f8aaebf]</td>
|
|
<td>[1baa1965e6507527b405a8e8c18b4d61a8f4c6cb]</td>
|
|
<td>[dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3]</td>
|
|
<td>[32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>reprlib.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>10117</td>
|
|
<td>b3f6d0b4b7085fd925967d507f8aaebf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>1baa1965e6507527b405a8e8c18b4d61a8f4c6cb</td>
|
|
<td>dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3</td>
|
|
<td>32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e3ae688305501b61ca04a7b50d76d4e55e84350f6966c695ae0c0c8c2076bfb</td>
|
|
<td>[68a523949cec397f02de9f61]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\IPAddressControlLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z]</td>
|
|
<td>[d7cb593f2a75e63808f0520ecec6d003]</td>
|
|
<td>[ecf814407df1abfecc4a93e83579a1463c33aca6]</td>
|
|
<td>[cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936]</td>
|
|
<td>[54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IPAddressControlLib.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>28672</td>
|
|
<td>d7cb593f2a75e63808f0520ecec6d003</td>
|
|
<td></td>
|
|
<td>1.0.8565.40691</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>ecf814407df1abfecc4a93e83579a1463c33aca6</td>
|
|
<td>cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936</td>
|
|
<td>54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a</td>
|
|
<td>[68a5c64d54e5003d1abde4c2, 68a5c77e05aa879ada66b41e, 68a5c77e05aa879ada66b424, 68a5c77e05aa879ada66b429, 68a5c77e05aa879ada66b42e, 68a5c77e05aa879ada66b432]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\_IsRes.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[e54601d8a464a455de081d63d4b7927d]</td>
|
|
<td>[0ff6da399c123394cca3b4cc64a41d8037787b73]</td>
|
|
<td>[34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa]</td>
|
|
<td>[5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_IsRes.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\</td>
|
|
<td>FLEXnet (R) InstallShield (R) Dialog Resources</td>
|
|
<td>123312</td>
|
|
<td>e54601d8a464a455de081d63d4b7927d</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:15 +0000 UTC</td>
|
|
<td>2006-05-17 14:19:28 +0000 UTC</td>
|
|
<td>0ff6da399c123394cca3b4cc64a41d8037787b73</td>
|
|
<td>34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa</td>
|
|
<td>5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1df39083a555ad2e4301b24f8970c3cf88fad01b9393cb5f8e7e5aee5332cac7</td>
|
|
<td>[68a2408816f43bddda2dc0c4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hlln0dgm.sse.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:50:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hlln0dgm.sse.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:50:09 +0000 UTC</td>
|
|
<td>2025-08-17 20:50:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:50:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1db1a44f9537b17f981cac0e51c92988e6f6e64f555249b2e267276ac42c6643</td>
|
|
<td>[68a4c47e2db3c760ec3d2a2c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5b304b09fa8941c399c57da1067eb872.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:37:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5b304b09fa8941c399c57da1067eb872.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 18:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1d45142af79b7d23419c8a0ba0d90624a70f7a43168748de97bd56e98d06a564</td>
|
|
<td>[68a306a5ba5832f49fe9cf5f]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FORMENGC.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:38Z]</td>
|
|
<td>[54173cd6524ad642ed45b3a1fbd8e398]</td>
|
|
<td>[695c112f407b054652f69beb4ee4cbd2419214a4]</td>
|
|
<td>[c29d42fd607af2976f0d4ac82d69cb8dd3cbb3e068118e1a2c3a39e17b722443b1c8522fbb576a08a990b4a07b4fb7dd]</td>
|
|
<td>[133fe36e794d5582a65cf2ca57a9a83d72329e8f94cb58f029e8ebb13c226a6284f5ee6be873fe0d84ba5b5c908c4edcb34d108361e748c6748d8a7f62127069]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FORMENGC.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>48128</td>
|
|
<td>54173cd6524ad642ed45b3a1fbd8e398</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:15 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>695c112f407b054652f69beb4ee4cbd2419214a4</td>
|
|
<td>c29d42fd607af2976f0d4ac82d69cb8dd3cbb3e068118e1a2c3a39e17b722443b1c8522fbb576a08a990b4a07b4fb7dd</td>
|
|
<td>133fe36e794d5582a65cf2ca57a9a83d72329e8f94cb58f029e8ebb13c226a6284f5ee6be873fe0d84ba5b5c908c4edcb34d108361e748c6748d8a7f62127069</td>
|
|
<td>2025-04-30 20:03:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-17 05:13:22 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1d36cdd250632c13e621811c31c46889a5b8e5703cefdf3cc1d70d8fd33ade51</td>
|
|
<td>[68a2429a92c7d722f343012e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4u5rhbcj.vq2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:59:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4u5rhbcj.vq2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:59:00 +0000 UTC</td>
|
|
<td>2025-08-17 20:59:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:59:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1d2978f61d75fe69b8ed93b5bcc1b8fd25cb8a460294bdb695478118aa5ff636</td>
|
|
<td>[68a16bd60756fe54a9918fa8, 68a2149cb58debea69d7c753, 68a2bd5ff793a9057f329c0e, 68a3663261f8067c48423ec1, 68a40efceddb3a9f1a71a60a, 68a4b7cd36bc5d38057e236f]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMeshNetAgent.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[2bf5f0103f41ad0f489491f5449ed8fc]</td>
|
|
<td>[710375edab7207797e5c1934876f5aad0835c0ed]</td>
|
|
<td>[aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627]</td>
|
|
<td>[7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zMeshNetAgent.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>505656</td>
|
|
<td>2bf5f0103f41ad0f489491f5449ed8fc</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>710375edab7207797e5c1934876f5aad0835c0ed</td>
|
|
<td>aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627</td>
|
|
<td>7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:45 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1cd31123183f98fa54f76a0aefddad0b56efda5633c421baad6c049271c47811</td>
|
|
<td>[68a4ccc785b914a60d739e49, 68a4ce1fc826337212f53be9, 68a4d07753a851daf11e6933, 68a4d07753a851daf11e6946, 68a4d07753a851daf11e694d, 68a4d2d1ff2b441b8442812b, 68a4d2d1ff2b441b8442813e, 68a4d2d1ff2b441b84428145]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\WinError.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[98c935ab759b31b868ce685c550a2d27]</td>
|
|
<td>[010b6e43cb224a92837e476bab31e4f8983cf513]</td>
|
|
<td>[6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79]</td>
|
|
<td>[6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WinError.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\</td>
|
|
<td></td>
|
|
<td>73728</td>
|
|
<td>98c935ab759b31b868ce685c550a2d27</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:13:00 +0000 UTC</td>
|
|
<td>010b6e43cb224a92837e476bab31e4f8983cf513</td>
|
|
<td>6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79</td>
|
|
<td>6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>233fd2e9b361be99ce56a380a8ef954b2f0f14e7571e470860b9a862e4a4b4ed</td>
|
|
<td>[68a180c1aa5e4fe2dc53b3d5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqv4gtvi.vua.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:11:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dqv4gtvi.vua.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:11:54 +0000 UTC</td>
|
|
<td>2025-08-17 07:11:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>233cda908dbe688d1964cdba2ae0c67c0336dd94f040e969e824e4716fafa610</td>
|
|
<td>[68a4cf1f4971da3ff4f65d7b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2308d71301f35c862f39d38bfbefdb09372ea138f938c58875f8f6a84635ecf3</td>
|
|
<td>[68a243bcea61ab2e604201ef]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1mkxt511.2qd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:03:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1mkxt511.2qd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:03:48 +0000 UTC</td>
|
|
<td>2025-08-17 21:03:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:03:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22d76128e43dcda3bf06d4f9d0b0c37120688fba142a594fb6c2855cf92c634d</td>
|
|
<td>[68a162e82a638d4aa3f3a7dd, 68a2b471d463128b1e9bad1b, 68a4061e04f40cbca7b61c8c, 68a557c15db6cbee6e2f08cb, 68a6a9787a86f4672b9b6280]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_sunnuc]</td>
|
|
<td>[NT-SUNCHECK]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\SNC\Script\imagevwr_clean.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-18T05:00:01Z, 2025-08-19T05:00:01Z, 2025-08-20T05:00:01Z, 2025-08-21T05:00:01Z]</td>
|
|
<td>[e91533b86712d32131a81409f3b031df]</td>
|
|
<td>[beceab015ae24e529a6f8fd1139e8c9a0fd3ed02]</td>
|
|
<td>[bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00]</td>
|
|
<td>[3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>imagevwr_clean.bat</td>
|
|
<td>D:\SNC\Script\</td>
|
|
<td></td>
|
|
<td>115</td>
|
|
<td>e91533b86712d32131a81409f3b031df</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-03-21 15:11:15 +0000 UTC</td>
|
|
<td>2022-03-21 15:11:46 +0000 UTC</td>
|
|
<td>beceab015ae24e529a6f8fd1139e8c9a0fd3ed02</td>
|
|
<td>bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00</td>
|
|
<td>3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22be3449469641a3b6c5d4f7483dbea6cee9923a6d231814fdcf85d3b0eb8c9c</td>
|
|
<td>[68a3401733e8ca6597dd2da4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Garrett]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w25oryih.dxh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:00:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w25oryih.dxh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:00:33 +0000 UTC</td>
|
|
<td>2025-08-18 15:00:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:00:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22b0f3100973b824e8bb0d1c171a742b29fc8876f6d05cfd2683b3480820c4e2</td>
|
|
<td>[68a5c8eceb9e7b7716dce205, 68a5ccf2ddfdba423e48863a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\5560f244-d35c-4531-951d-c286d0f86bc1.ps1, C:\_work_devops_mdi\_temp\79b011f7-d177-464f-ade0-ed0f83404238.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:53Z, 2025-08-20T13:22:24Z]</td>
|
|
<td>[9e7c41c8a61927e846853cc41c52d2ad]</td>
|
|
<td>[5cc1d41b8d768427ff9a860f4703f860288ad947]</td>
|
|
<td>[ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0]</td>
|
|
<td>[d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>5560f244-d35c-4531-951d-c286d0f86bc1.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>556</td>
|
|
<td>9e7c41c8a61927e846853cc41c52d2ad</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:53 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:53 +0000 UTC</td>
|
|
<td>5cc1d41b8d768427ff9a860f4703f860288ad947</td>
|
|
<td>ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0</td>
|
|
<td>d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>228fc0493527ecb62f2122e00925e443bc1d5c73f9baaa085fc59131ecf29d88</td>
|
|
<td>[68a5239e621d09b2b1ed5e63]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.Utils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:39Z]</td>
|
|
<td>[c814e1099b4aec41ac5b5ae5c19fd55f]</td>
|
|
<td>[c817ab73ce96627a1f128ad8090763b8dec0f24e]</td>
|
|
<td>[3bd1ae56da320ca85db7c1e4db64263fd37793011e7fe4945ef1419565c7a02753607db6c34f3a5635a6480fcd0facf8]</td>
|
|
<td>[dde541130c219b92632326528f9602e9b01832eea53b9ce2560077b2e9b8975f9cb462b92c6268c7ce2fac715383743bea9435c2f36a9fa3e19e1fcf66ddd120]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.Utils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.Utils</td>
|
|
<td>24064</td>
|
|
<td>c814e1099b4aec41ac5b5ae5c19fd55f</td>
|
|
<td>Stanley.Infra.Utils</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>c817ab73ce96627a1f128ad8090763b8dec0f24e</td>
|
|
<td>3bd1ae56da320ca85db7c1e4db64263fd37793011e7fe4945ef1419565c7a02753607db6c34f3a5635a6480fcd0facf8</td>
|
|
<td>dde541130c219b92632326528f9602e9b01832eea53b9ce2560077b2e9b8975f9cb462b92c6268c7ce2fac715383743bea9435c2f36a9fa3e19e1fcf66ddd120</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-09-16 00:02:13 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22469202a2b13e3a019c5dfea82acb5ced6e6a3cc8ba34ec2e760a380c24ed8b</td>
|
|
<td>[68a472a799ad3734d804e2e6]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-script-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[4261d298e514aee833501762ed9af58e]</td>
|
|
<td>[1359da49bdbf10786fc9cb592833ded11b97e432]</td>
|
|
<td>[0e0c5abb13703b546189c68885ed0a008c736aa890784399201397d98a109962ef007500f500cdab50b0671bdbcdeb3d]</td>
|
|
<td>[411b952b48c024dc23e1e84d2da43758ada4c3eadc24c9d979aeaefaa63f073aa174461203e63e62daf81dc7fe27bfb083edd4933abcf283ebc4301a064d4053]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-script-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>25715</td>
|
|
<td>4261d298e514aee833501762ed9af58e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>1359da49bdbf10786fc9cb592833ded11b97e432</td>
|
|
<td>0e0c5abb13703b546189c68885ed0a008c736aa890784399201397d98a109962ef007500f500cdab50b0671bdbcdeb3d</td>
|
|
<td>411b952b48c024dc23e1e84d2da43758ada4c3eadc24c9d979aeaefaa63f073aa174461203e63e62daf81dc7fe27bfb083edd4933abcf283ebc4301a064d4053</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-09-04 06:54:57 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2233d2241c36f41cc078985b2edb866cd7d395607d5d836f5cc6a9e9a818d906</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce5, 68a6afe50e0f3bd8deac4cf4, 68a6afe50e0f3bd8deac4d28, 68a6afe50e0f3bd8deac4d36, 68a6afe50e0f3bd8deac4d56, 68a6afe50e0f3bd8deac4d76, 68a6afe50e0f3bd8deac4d96, 68a6afe50e0f3bd8deac4db6, 68a6afe50e0f3bd8deac4dd6, 68a6afe50e0f3bd8deac4df6, 68a6afe50e0f3bd8deac4e16, 68a6afe50e0f3bd8deac4e36, 68a6afe50e0f3bd8deac4e55, 68a6afe50e0f3bd8deac4e76, 68a6afe50e0f3bd8deac4e96, 68a6afe50e0f3bd8deac4ec7, 68a6afe50e0f3bd8deac4ed6, 68a6afe50e0f3bd8deac4ef6, 68a6afe50e0f3bd8deac4f16, 68a6afe50e0f3bd8deac4f36, 68a6afe50e0f3bd8deac4f60, 68a6afe50e0f3bd8deac4f80, 68a6afe50e0f3bd8deac4fa0, 68a6afe50e0f3bd8deac4fc0, 68a6afe50e0f3bd8deac4fe0, 68a6afe50e0f3bd8deac5000, 68a6afe50e0f3bd8deac5020, 68a6afe50e0f3bd8deac5040, 68a6afe50e0f3bd8deac5060, 68a6afe50e0f3bd8deac5080, 68a6afe50e0f3bd8deac50aa, 68a6afe50e0f3bd8deac50ca, 68a6afe50e0f3bd8deac50ea, 68a6afe50e0f3bd8deac5114, 68a6afe50e0f3bd8deac5134, 68a6afe50e0f3bd8deac5154, 68a6afe50e0f3bd8deac517e, 68a6afe50e0f3bd8deac519e, 68a6afe50e0f3bd8deac51be, 68a6afe50e0f3bd8deac51df, 68a6afe50e0f3bd8deac5211, 68a6afe50e0f3bd8deac5228, 68a6afe50e0f3bd8deac523f, 68a6afe50e0f3bd8deac525f, 68a6afe50e0f3bd8deac5293, 68a6afe50e0f3bd8deac52b3, 68a6afe50e0f3bd8deac52d3, 68a6afe50e0f3bd8deac52f3, 68a6afe50e0f3bd8deac5313, 68a6afe50e0f3bd8deac5333, 68a6afe50e0f3bd8deac5353, 68a6afe50e0f3bd8deac5373, 68a6afe50e0f3bd8deac5399, 68a6afe50e0f3bd8deac53b5, 68a6afe50e0f3bd8deac53d9, 68a6afe50e0f3bd8deac53f8, 68a6afe50e0f3bd8deac5419, 68a6afe50e0f3bd8deac5433, 68a6afe50e0f3bd8deac5459, 68a6afe50e0f3bd8deac5479, 68a6afe50e0f3bd8deac5499, 68a6afe50e0f3bd8deac54b9, 68a6afe50e0f3bd8deac54d9, 68a6afe50e0f3bd8deac54f9, 68a6afe50e0f3bd8deac5519, 68a6afe50e0f3bd8deac5539, 68a6afe50e0f3bd8deac5563, 68a6afe50e0f3bd8deac5583, 68a6afe50e0f3bd8deac55a3, 68a6afe50e0f3bd8deac55c3, 68a6afe50e0f3bd8deac55e3, 68a6afe50e0f3bd8deac5603, 68a6afe50e0f3bd8deac5623, 68a6afe50e0f3bd8deac5652, 68a6afe50e0f3bd8deac5673, 68a6afe50e0f3bd8deac56a1, 68a6afe50e0f3bd8deac56c1, 68a6afe50e0f3bd8deac56d8, 68a6afe50e0f3bd8deac5700, 68a6afe50e0f3bd8deac571b, 68a6afe50e0f3bd8deac5741, 68a6afe50e0f3bd8deac5774, 68a6afe50e0f3bd8deac5787, 68a6afe50e0f3bd8deac57b5, 68a6afe50e0f3bd8deac57cb, 68a6afe50e0f3bd8deac57f5, 68a6afe50e0f3bd8deac5809, 68a6afe50e0f3bd8deac5822, 68a6afe50e0f3bd8deac584b, 68a6afe50e0f3bd8deac5873, 68a6afe50e0f3bd8deac5888, 68a6afe50e0f3bd8deac58bd, 68a6afe50e0f3bd8deac58cb, 68a6afe50e0f3bd8deac58fa, 68a6afe50e0f3bd8deac5905, 68a6afe50e0f3bd8deac593c, 68a6afe50e0f3bd8deac594b, 68a6afe50e0f3bd8deac596b, 68a6afe50e0f3bd8deac5982, 68a6afe50e0f3bd8deac59ab, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[8ce4a50ac3ce8a3e96a3de89466c795b]</td>
|
|
<td>[6197e0d412b2b12c05a7ca02b19dc9ac592f2bb7]</td>
|
|
<td>[b2c71b9d4622fe114e379d66c37d3981162b39ab94b2591dcb1367665c2041b13365e4fc1953e2a77f5b4e311362dd51]</td>
|
|
<td>[d60d1899ca054c6328637e33d17c10d7bd97384e1b56dfd567df0be96034d1f08ab2ffa77637d88a9f07805086a3de1bfe9979f12a2a33f55cfdf0a89a5e025b]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeUtils.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>651776</td>
|
|
<td>8ce4a50ac3ce8a3e96a3de89466c795b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 02:58:12 +0000 UTC</td>
|
|
<td>6197e0d412b2b12c05a7ca02b19dc9ac592f2bb7</td>
|
|
<td>b2c71b9d4622fe114e379d66c37d3981162b39ab94b2591dcb1367665c2041b13365e4fc1953e2a77f5b4e311362dd51</td>
|
|
<td>d60d1899ca054c6328637e33d17c10d7bd97384e1b56dfd567df0be96034d1f08ab2ffa77637d88a9f07805086a3de1bfe9979f12a2a33f55cfdf0a89a5e025b</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22201473661fe80882437e0c7debc4ba2c4140860390d21f164b62bcbbf2a7d6</td>
|
|
<td>[68a5239e621d09b2b1ed5e69]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:41Z]</td>
|
|
<td>[ced1c8a2bd6fba76fdf05a5900e970e5]</td>
|
|
<td>[3f4cc42f538b7584f4ac7582833a836db6136fc8]</td>
|
|
<td>[e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a]</td>
|
|
<td>[d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerApplicationData</td>
|
|
<td>32256</td>
|
|
<td>ced1c8a2bd6fba76fdf05a5900e970e5</td>
|
|
<td>SystemManagerApplicationData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:30 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:30 +0000 UTC</td>
|
|
<td>3f4cc42f538b7584f4ac7582833a836db6136fc8</td>
|
|
<td>e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a</td>
|
|
<td>d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>21b7c7e77c8cd9fc2a9e839d9b3ecb2d8ec09f95788fcac0b77950402171ff51</td>
|
|
<td>[68a472a799ad3734d804e2e3]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-gvt-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[fbed0d17663cd8747081a3637db4c890]</td>
|
|
<td>[c2b801412806277ade24cae0a2af286523105d71]</td>
|
|
<td>[553c9df8f8867c70058fed69f6d3ef3f98b939d1edd538c63d52e83e2674599c322446ddbb37203ab45639e30a73bb27]</td>
|
|
<td>[cf8e06596f0e34fca731279d53205269aeb93d85d3352788ef2ac6241e34d90341e12e3cc99c8b43af800f13160128199fefd44952c41b3f727b916e5ef5089d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-gvt-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>191437</td>
|
|
<td>fbed0d17663cd8747081a3637db4c890</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>c2b801412806277ade24cae0a2af286523105d71</td>
|
|
<td>553c9df8f8867c70058fed69f6d3ef3f98b939d1edd538c63d52e83e2674599c322446ddbb37203ab45639e30a73bb27</td>
|
|
<td>cf8e06596f0e34fca731279d53205269aeb93d85d3352788ef2ac6241e34d90341e12e3cc99c8b43af800f13160128199fefd44952c41b3f727b916e5ef5089d</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:27:50 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>21b77f5fe87f2e11a022a614e6fc52d52b7c2d35e1f5984b09efff3e86e8b2b2</td>
|
|
<td>[68a6afe50e0f3bd8deac4f52, 68a6afe50e0f3bd8deac509c, 68a6afe50e0f3bd8deac5106, 68a6afe50e0f3bd8deac5170, 68a6afe50e0f3bd8deac5555, 68a6afe50e0f3bd8deac564d, 68a6afe50e0f3bd8deac5766, 68a6afe50e0f3bd8deac5d30, 68a6afe50e0f3bd8deac5db1, 68a6afe50e0f3bd8deac5eef]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\libiconv-2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[4966b117e4b909f990b2a8ac8138dc46]</td>
|
|
<td>[7239da6d51a4f2af3627be6f21b47d0ed4565f00]</td>
|
|
<td>[e4f36862a575ecc18f0108ca65d415be36e30e8ee951a5959e2c689fc8fdac94baa82b254709a0b06499be98909ccb5b]</td>
|
|
<td>[ae114cddd517da6741355455b9a5ad0ac7e42a73fdb0e974c1de09f744504226dc9b8e212ea8cb8885da7dacc94e7bb293fef440985d412ef7ac07411a783a1c]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libiconv-2.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>LGPLed libiconv for Windows</td>
|
|
<td>1872271</td>
|
|
<td>4966b117e4b909f990b2a8ac8138dc46</td>
|
|
<td>libiconv: character set conversion library</td>
|
|
<td>1.16</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:22 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:49 +0000 UTC</td>
|
|
<td>7239da6d51a4f2af3627be6f21b47d0ed4565f00</td>
|
|
<td>e4f36862a575ecc18f0108ca65d415be36e30e8ee951a5959e2c689fc8fdac94baa82b254709a0b06499be98909ccb5b</td>
|
|
<td>ae114cddd517da6741355455b9a5ad0ac7e42a73fdb0e974c1de09f744504226dc9b8e212ea8cb8885da7dacc94e7bb293fef440985d412ef7ac07411a783a1c</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-20 16:26:11 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:01:04.066 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>217ae6173e31d07e55dffe8fc77d2f8f4324cee5a2ad841dba2c948131f71837</td>
|
|
<td>[68a34b98a6132bf659cce5ae, 68a34df0b71eea1289980a13]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Squirrel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[023642309c7555ca224d948c3cf04a4f]</td>
|
|
<td>[8b05040573daec47919cfcabca5dd30f79842c72]</td>
|
|
<td>[a19e8eb7464a6fa73de83995f9d92ec19cd0b89137b32950e67010625597b989995bb20c45d42cb05e49024b6b36f325]</td>
|
|
<td>[1e6beff9207a00ba93207c5c2b3121d75dc84275678822fd9ad33eaf9383b3afff39c236b464234327bfd72ec4e5b4cbed83a260524abd483e943e11cff430f8]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Squirrel.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Squirrel</td>
|
|
<td>267264</td>
|
|
<td>023642309c7555ca224d948c3cf04a4f</td>
|
|
<td>Squirrel</td>
|
|
<td>2.0.1+eef37460ae</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:58 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:58 +0000 UTC</td>
|
|
<td>8b05040573daec47919cfcabca5dd30f79842c72</td>
|
|
<td>a19e8eb7464a6fa73de83995f9d92ec19cd0b89137b32950e67010625597b989995bb20c45d42cb05e49024b6b36f325</td>
|
|
<td>1e6beff9207a00ba93207c5c2b3121d75dc84275678822fd9ad33eaf9383b3afff39c236b464234327bfd72ec4e5b4cbed83a260524abd483e943e11cff430f8</td>
|
|
<td>2025-06-09 21:58:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-27 20:54:04 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2138453e8f358ff4ffdf4c4ee8edffb8752e3ddd99697791bb067c086334522c</td>
|
|
<td>[68a5c8eceb9e7b7716dce1fe, 68a5ca39b5df6e9c598d9a10, 68a5ca39b5df6e9c598d9a1d, 68a5ccf2ddfdba423e488633, 68a5ccf2ddfdba423e488641, 68a5ccf2ddfdba423e48864f, 68a5ccf2ddfdba423e48865c, 68a5ccf2ddfdba423e488669, 68a5ccf2ddfdba423e488676, 68a5ccf2ddfdba423e488683, 68a5ccf2ddfdba423e488690]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LongPathFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[04c730bac93e37a873d8c662db38f1a4]</td>
|
|
<td>[e7a1314c887f52f44649489d5d33e0be76f88f90]</td>
|
|
<td>[fda5548e620c9eaa66594870e70e934688ca30a8759333624a6a657bcf39dc8e6eec1fe0a3391aa93f2d9a2b5179edaa]</td>
|
|
<td>[e2a4137e2592fad0623a79751ada576030d2b5fa7ff33b49ceb2f558698e962621b2d7ba0e5977602be99ba5d1af8c121be31ea177a4f381bc19d483265a5697]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LongPathFunctions.ps1</td>
|
|
<td>C:\azagent\A2\_work\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.247.1\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>9108</td>
|
|
<td>04c730bac93e37a873d8c662db38f1a4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-19 14:57:26 +0000 UTC</td>
|
|
<td>2024-10-22 15:45:10 +0000 UTC</td>
|
|
<td>e7a1314c887f52f44649489d5d33e0be76f88f90</td>
|
|
<td>fda5548e620c9eaa66594870e70e934688ca30a8759333624a6a657bcf39dc8e6eec1fe0a3391aa93f2d9a2b5179edaa</td>
|
|
<td>e2a4137e2592fad0623a79751ada576030d2b5fa7ff33b49ceb2f558698e962621b2d7ba0e5977602be99ba5d1af8c121be31ea177a4f381bc19d483265a5697</td>
|
|
<td>2025-04-16 18:41:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:04 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-16 18:46:05.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>212af7c4b44a918b3060ef55417f27f14b15bf0f7a19cd52de911c36d5ef9ea2</td>
|
|
<td>[68a4ccc785b914a60d739e4d, 68a4d07753a851daf11e6935, 68a4d2d1ff2b441b8442812d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisitectl.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z]</td>
|
|
<td>[514ed83234038d4fdb35855046c46bea]</td>
|
|
<td>[6ddf7c13900920915184c88693c24703856086d0]</td>
|
|
<td>[415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091]</td>
|
|
<td>[67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hcisitectl.bat</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>133</td>
|
|
<td>514ed83234038d4fdb35855046c46bea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>6ddf7c13900920915184c88693c24703856086d0</td>
|
|
<td>415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091</td>
|
|
<td>67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>20b9ac86095a725783035db578d94d79959e492461d50fd0f8ab6274eab39534</td>
|
|
<td>[68a47bc2880fc3ea1ff87615]</td>
|
|
<td>[2]</td>
|
|
<td>[AdminJKM]</td>
|
|
<td>[PDQ-INFRA]</td>
|
|
<td>[WHI]</td>
|
|
<td>[\\wheelinghospital.com\sysvol\wheelinghospital.com\Policies\{4E0157AA-F18B-43AF-8DC2-A4FC7E414E88}\User\Scripts\Logoff\ClinicalInformatics_Servers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\gpscript.exe]</td>
|
|
<td>[2025-08-19T13:27:24Z]</td>
|
|
<td>[eae3ad65cf0b5377f069a0667ba10043]</td>
|
|
<td>[a37860bb1e075fa074434b286d2e0b5e7414368f]</td>
|
|
<td>[d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee]</td>
|
|
<td>[aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104]</td>
|
|
<td>[172.24.26.60]</td>
|
|
<td>[172.24.26.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ClinicalInformatics_Servers.ps1</td>
|
|
<td>\\wheelinghospital.com\SysVol\wheelinghospital.com\Policies\{44822848-47D6-4FB7-BB91-7BBCA7B70574}\User\Scripts\Logon\</td>
|
|
<td></td>
|
|
<td>2091</td>
|
|
<td>eae3ad65cf0b5377f069a0667ba10043</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2015-05-12 19:09:52 +0000 UTC</td>
|
|
<td>2017-09-06 21:55:22 +0000 UTC</td>
|
|
<td>a37860bb1e075fa074434b286d2e0b5e7414368f</td>
|
|
<td>d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee</td>
|
|
<td>aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104</td>
|
|
<td>2025-08-02 13:43:30 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}, {'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65</td>
|
|
<td>[68a472b1b022648922e235ac]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\woodstox-core-asl-4.4.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[1f53f91f117288fb2ef2e120f27e5498]</td>
|
|
<td>[84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1]</td>
|
|
<td>[e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa]</td>
|
|
<td>[33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>woodstox-core-asl-4.4.1.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\woodstox-core-asl-4.4.1.jar-90b76e194d05ab9a\</td>
|
|
<td></td>
|
|
<td>486013</td>
|
|
<td>1f53f91f117288fb2ef2e120f27e5498</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1</td>
|
|
<td>e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa</td>
|
|
<td>33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-25 04:34:50 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>270d051fc9cbb8cb66497b8dea30b5008c9ae9ffb0e15f79c4e7cb490f8abdca</td>
|
|
<td>[68a25f08a862a9b86d2b3e0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_mi1gobfg.pks.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mi1gobfg.pks.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:00:13 +0000 UTC</td>
|
|
<td>2025-08-17 23:00:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>270c1c3c1e64123a4db1558966578672ef7a14530882f818792f481f02abf3f3</td>
|
|
<td>[68a472b1b022648922e23576]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFSEMServiceClient.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[74808dbd1c651755962d9f78f74fd61f]</td>
|
|
<td>[20c98c008db8ac2325a8bc2e473e5121062916e5]</td>
|
|
<td>[f37c94b93ab9ae467b0d849a4644a5e1a2f9bc73e7385e5f5f47bafcf9462e624f4edad20c26ae753030990296e82c52]</td>
|
|
<td>[50eb41001f88e2cfd9219d24bfe8edb12c2b9a2c7ceed7c4df7ce5e1a19e27d74c6492dab6542a76a250a93552700c1bedc8daa83c0cf4034cfa602c2d8edbc3]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FluidFSEMServiceClient-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\compellent\fluidfsclient\main\</td>
|
|
<td></td>
|
|
<td>39080</td>
|
|
<td>74808dbd1c651755962d9f78f74fd61f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:54:57 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>20c98c008db8ac2325a8bc2e473e5121062916e5</td>
|
|
<td>f37c94b93ab9ae467b0d849a4644a5e1a2f9bc73e7385e5f5f47bafcf9462e624f4edad20c26ae753030990296e82c52</td>
|
|
<td>50eb41001f88e2cfd9219d24bfe8edb12c2b9a2c7ceed7c4df7ce5e1a19e27d74c6492dab6542a76a250a93552700c1bedc8daa83c0cf4034cfa602c2d8edbc3</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>270aff5383a4742b7159a21eeb3bc8c3620478cb561e6db80510f187e3ab50d6</td>
|
|
<td>[68a246eb395eca2c3f17fa04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zfqr5yrd.w2r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:17:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zfqr5yrd.w2r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:17:27 +0000 UTC</td>
|
|
<td>2025-08-17 21:17:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:17:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>25a1d161a927d2f4137696882e75cbfba197acf96590c7062a3fb31383548698</td>
|
|
<td>[68a1830c2dc56a47504409e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3gsdtrcc.e1e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:21:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3gsdtrcc.e1e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:21:44 +0000 UTC</td>
|
|
<td>2025-08-17 07:21:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:21:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>254f47a4a8697b42051ab2cd2b081a76c48204bd8a57ac9527ac623733119c7d</td>
|
|
<td>[68a1e71b93264a29fd1ee60a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSwisslog]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xw0tqpga.deh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:28:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xw0tqpga.deh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:28:31 +0000 UTC</td>
|
|
<td>2025-08-17 14:28:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:28:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2539cd16bb06022c2a25860732b37be246b51dc74e2b6b991d06594d04b705b0</td>
|
|
<td>[68a3146b5f0c41860c8c84f8, 68a3146b5f0c41860c8c8539]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\collections\__pycache__\abc.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[cc29eb47fb461ae6f3b5406ff37c01ae]</td>
|
|
<td>[36b89b966daf9b3254160799ea992b61d85e7c15]</td>
|
|
<td>[f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177]</td>
|
|
<td>[a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>abc.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\collections\__pycache__\</td>
|
|
<td></td>
|
|
<td>253</td>
|
|
<td>cc29eb47fb461ae6f3b5406ff37c01ae</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>36b89b966daf9b3254160799ea992b61d85e7c15</td>
|
|
<td>f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177</td>
|
|
<td>a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2522bec3a9e8b209bd9a270dfd1bdc12122b5d6f0eabca8d1d0446d744fc6dfe</td>
|
|
<td>[68a232eef903f5e7e0112d84]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a3ih1mon.uvf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:52:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a3ih1mon.uvf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:52:02 +0000 UTC</td>
|
|
<td>2025-08-17 19:52:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:52:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>24eef93b4f74e3757ec2d460a19fe531ec83318175c43314e0191b2ed987c0e3</td>
|
|
<td>[68a6afe50e0f3bd8deac4f51, 68a6afe50e0f3bd8deac509a, 68a6afe50e0f3bd8deac5105, 68a6afe50e0f3bd8deac516f, 68a6afe50e0f3bd8deac5554, 68a6afe50e0f3bd8deac564a, 68a6afe50e0f3bd8deac5765, 68a6afe50e0f3bd8deac5d2f, 68a6afe50e0f3bd8deac5db0, 68a6afe50e0f3bd8deac5eee]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\libxml2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[dd4f9e570c7b2d78f4b1c9b0e3b9694b]</td>
|
|
<td>[4de55a20b2fd9d9e5ca14d82953d51ed9ce33931]</td>
|
|
<td>[9310e3dc26d5474ec190860ff2e77970763d4d36a8c4406c5ebeaba37130418825f5b8e9049a7fa23564c5583f8c3ee5]</td>
|
|
<td>[9931da42a06625259fa741a57040d1683beaffc394597cd6e9312661ba6b3f31578c8277987b7e40d17c36cb692bf280e7db8dad3eac7c14d1d848ccaf977789]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libxml2.dll</td>
|
|
<td>D:\biomerieux\programs\postgresql\12.5\bin\</td>
|
|
<td>libxml2 library</td>
|
|
<td>2269696</td>
|
|
<td>dd4f9e570c7b2d78f4b1c9b0e3b9694b</td>
|
|
<td>libxml2</td>
|
|
<td>2.9.9</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-12-04 17:20:07 +0000 UTC</td>
|
|
<td>2020-11-11 04:09:34 +0000 UTC</td>
|
|
<td>4de55a20b2fd9d9e5ca14d82953d51ed9ce33931</td>
|
|
<td>9310e3dc26d5474ec190860ff2e77970763d4d36a8c4406c5ebeaba37130418825f5b8e9049a7fa23564c5583f8c3ee5</td>
|
|
<td>9931da42a06625259fa741a57040d1683beaffc394597cd6e9312661ba6b3f31578c8277987b7e40d17c36cb692bf280e7db8dad3eac7c14d1d848ccaf977789</td>
|
|
<td>2025-04-23 19:05:50 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-02-05 11:42:43 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-23 19:10:35.739 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>24caf033e838c16b0cd2adbc677d4d30b06124b25b7a2d2c11781fbd86da2f84</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21b]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\RoboCopyStuff.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[d7083504aa22f3989277128edc021706]</td>
|
|
<td>[1a6bc93829561a0da597a0e7118345b217271476]</td>
|
|
<td>[617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838]</td>
|
|
<td>[ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RoboCopyStuff.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>638</td>
|
|
<td>d7083504aa22f3989277128edc021706</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-06 12:04:04 +0000 UTC</td>
|
|
<td>2025-06-06 20:43:59 +0000 UTC</td>
|
|
<td>1a6bc93829561a0da597a0e7118345b217271476</td>
|
|
<td>617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838</td>
|
|
<td>ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>248bec056cfb1959e62f399e24e6ebb6d6502d074b6749f27fb402df4b9603df</td>
|
|
<td>[68a472a799ad3734d804e2dc]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-codec-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[f98a5254fe07321bde47e880d85bf3ea]</td>
|
|
<td>[67584aea83603188e4611f35209b020258907d6c]</td>
|
|
<td>[2e63ffca7574615c7d6145224edde379701e8a536dfca37aeb3d9150390cb97bdd61b6771538832cf1df7b4472499a20]</td>
|
|
<td>[6945fbf246d1a9816b89a20b3d4277d8f2aa31a5560c9f075f8ccea227026d6182aa7762cf4385736acbd27608501f2e83b25be28a861739200ce97233b96b8a]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-codec-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>111948</td>
|
|
<td>f98a5254fe07321bde47e880d85bf3ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>67584aea83603188e4611f35209b020258907d6c</td>
|
|
<td>2e63ffca7574615c7d6145224edde379701e8a536dfca37aeb3d9150390cb97bdd61b6771538832cf1df7b4472499a20</td>
|
|
<td>6945fbf246d1a9816b89a20b3d4277d8f2aa31a5560c9f075f8ccea227026d6182aa7762cf4385736acbd27608501f2e83b25be28a861739200ce97233b96b8a</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-10-07 01:13:18 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>247834099661008e2e66f0f29941d1402246e7afdeafd3c902c36d3c280c6ccc</td>
|
|
<td>[68a48674c4cb2500be69260e, 68a48674c4cb2500be692624]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Formatting.Compact.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[a500c5577afb7e7c1fc08779e5447f39]</td>
|
|
<td>[f4fe77f7f9dbafb9a1f09302d9d7704762cd5048]</td>
|
|
<td>[9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb]</td>
|
|
<td>[fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Formatting.Compact.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>20744</td>
|
|
<td>a500c5577afb7e7c1fc08779e5447f39</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>1.1.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2019-10-17 10:18:46 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>f4fe77f7f9dbafb9a1f09302d9d7704762cd5048</td>
|
|
<td>9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb</td>
|
|
<td>fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2476c367fffa78e58eb0abf44459362577b5ff6503f33a81f07f5748120d3e4c</td>
|
|
<td>[68a3b07b89708f7e107efecf]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_pympxbs0.15a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_pympxbs0.15a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 23:00:04 +0000 UTC</td>
|
|
<td>2025-08-18 23:00:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2418072fd708bbc588f91d1f5e9ecbea5f79e006a3543f85f39cbfb4c6dae201</td>
|
|
<td>[68a5c90aab7f84c2d5a0971f]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\LocalizerDll.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe]</td>
|
|
<td>[2025-08-20T13:09:27Z]</td>
|
|
<td>[b835819d6c896ab4423ff2cc68174662]</td>
|
|
<td>[0e836eba45513c3c40fa966f00bd54b92c35f10a]</td>
|
|
<td>[53064442cf2136ecc87376bd41f52dd0c98e2ed86d01263491a7b7761510e90b17790591976afd9bc4dec4a871cb925a]</td>
|
|
<td>[792997b6e227d9940c8b489c36995dc54d119d1a20a3fdb1c3386925bbfc83b1498bbfcefb70e46f1daa9fbae72e8631a3657e1d2466521115dd672084827105]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LocalizerDll.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\</td>
|
|
<td></td>
|
|
<td>108032</td>
|
|
<td>b835819d6c896ab4423ff2cc68174662</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:09:26 +0000 UTC</td>
|
|
<td>2017-04-28 12:00:02 +0000 UTC</td>
|
|
<td>0e836eba45513c3c40fa966f00bd54b92c35f10a</td>
|
|
<td>53064442cf2136ecc87376bd41f52dd0c98e2ed86d01263491a7b7761510e90b17790591976afd9bc4dec4a871cb925a</td>
|
|
<td>792997b6e227d9940c8b489c36995dc54d119d1a20a3fdb1c3386925bbfc83b1498bbfcefb70e46f1daa9fbae72e8631a3657e1d2466521115dd672084827105</td>
|
|
<td>2025-08-20 13:09:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-24 05:01:44 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>23e6cd4f28988c0bddca07f10c3a1daa496bc19b12766b988c3a6007a0e4a6ab</td>
|
|
<td>[68a6afe50e0f3bd8deac4d04, 68a6afe50e0f3bd8deac4d19, 68a6afe50e0f3bd8deac4d46, 68a6afe50e0f3bd8deac4d67, 68a6afe50e0f3bd8deac4d86, 68a6afe50e0f3bd8deac4da6, 68a6afe50e0f3bd8deac4dc7, 68a6afe50e0f3bd8deac4de8, 68a6afe50e0f3bd8deac4e07, 68a6afe50e0f3bd8deac4e27, 68a6afe50e0f3bd8deac4e47, 68a6afe50e0f3bd8deac4e67, 68a6afe50e0f3bd8deac4e87, 68a6afe50e0f3bd8deac4ea8, 68a6afe50e0f3bd8deac4eb4, 68a6afe50e0f3bd8deac4ee4, 68a6afe50e0f3bd8deac4f07, 68a6afe50e0f3bd8deac4f27, 68a6afe50e0f3bd8deac4f44, 68a6afe50e0f3bd8deac4f70, 68a6afe50e0f3bd8deac4f92, 68a6afe50e0f3bd8deac4fb2, 68a6afe50e0f3bd8deac4fd1, 68a6afe50e0f3bd8deac4ff1, 68a6afe50e0f3bd8deac5011, 68a6afe50e0f3bd8deac5031, 68a6afe50e0f3bd8deac5051, 68a6afe50e0f3bd8deac5071, 68a6afe50e0f3bd8deac5091, 68a6afe50e0f3bd8deac50bb, 68a6afe50e0f3bd8deac50de, 68a6afe50e0f3bd8deac50fb, 68a6afe50e0f3bd8deac5126, 68a6afe50e0f3bd8deac5142, 68a6afe50e0f3bd8deac5165, 68a6afe50e0f3bd8deac518f, 68a6afe50e0f3bd8deac51af, 68a6afe50e0f3bd8deac51ce, 68a6afe50e0f3bd8deac51ef, 68a6afe50e0f3bd8deac5202, 68a6afe50e0f3bd8deac5219, 68a6afe50e0f3bd8deac5250, 68a6afe50e0f3bd8deac5270, 68a6afe50e0f3bd8deac5283, 68a6afe50e0f3bd8deac52a4, 68a6afe50e0f3bd8deac52c4, 68a6afe50e0f3bd8deac52e4, 68a6afe50e0f3bd8deac5304, 68a6afe50e0f3bd8deac5324, 68a6afe50e0f3bd8deac5344, 68a6afe50e0f3bd8deac5364, 68a6afe50e0f3bd8deac5384, 68a6afe50e0f3bd8deac53aa, 68a6afe50e0f3bd8deac53c5, 68a6afe50e0f3bd8deac53e9, 68a6afe50e0f3bd8deac540a, 68a6afe50e0f3bd8deac542a, 68a6afe50e0f3bd8deac5448, 68a6afe50e0f3bd8deac5467, 68a6afe50e0f3bd8deac548a, 68a6afe50e0f3bd8deac54aa, 68a6afe50e0f3bd8deac54ca, 68a6afe50e0f3bd8deac54ea, 68a6afe50e0f3bd8deac550a, 68a6afe50e0f3bd8deac552a, 68a6afe50e0f3bd8deac554a, 68a6afe50e0f3bd8deac5574, 68a6afe50e0f3bd8deac5594, 68a6afe50e0f3bd8deac55b4, 68a6afe50e0f3bd8deac55d4, 68a6afe50e0f3bd8deac55f4, 68a6afe50e0f3bd8deac5611, 68a6afe50e0f3bd8deac5634, 68a6afe50e0f3bd8deac563d, 68a6afe50e0f3bd8deac5663, 68a6afe50e0f3bd8deac5683, 68a6afe50e0f3bd8deac5692, 68a6afe50e0f3bd8deac56b2, 68a6afe50e0f3bd8deac56d2, 68a6afe50e0f3bd8deac56ea, 68a6afe50e0f3bd8deac5712, 68a6afe50e0f3bd8deac572b, 68a6afe50e0f3bd8deac5752, 68a6afe50e0f3bd8deac575b, 68a6afe50e0f3bd8deac579a, 68a6afe50e0f3bd8deac57a6, 68a6afe50e0f3bd8deac57df, 68a6afe50e0f3bd8deac57e6, 68a6afe50e0f3bd8deac581a, 68a6afe50e0f3bd8deac5833, 68a6afe50e0f3bd8deac585c, 68a6afe50e0f3bd8deac5864, 68a6afe50e0f3bd8deac589b, 68a6afe50e0f3bd8deac58ac, 68a6afe50e0f3bd8deac58dc, 68a6afe50e0f3bd8deac58ed, 68a6afe50e0f3bd8deac5915, 68a6afe50e0f3bd8deac592c, 68a6afe50e0f3bd8deac595d, 68a6afe50e0f3bd8deac597c, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-ringbuffersync-10-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...]</td>
|
|
<td>[cff1a57834c0c67902ed4abbf7fef414]</td>
|
|
<td>[338762af9ba89b3a85fccc8b3ae5e7ca526445d8]</td>
|
|
<td>[40f13c181a8796ca6414425f894f04dc9efd4478dd2303f6c920cc4e5ce40717ef18e5bbefef98d9557e3590a4511644]</td>
|
|
<td>[21994b3d139941f748c28f9af1b8ce93488ee69b28ffd5f3553b517731993c32b652e4b55811ceda5e79dace68da24a52ebaa694856a4c42b7275f19f5f992d0]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-ringbuffersync-10-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-ringbuffersync-10-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>18944</td>
|
|
<td>cff1a57834c0c67902ed4abbf7fef414</td>
|
|
<td>CIP-RingBufferSync</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-20 05:22:35 +0000 UTC</td>
|
|
<td>338762af9ba89b3a85fccc8b3ae5e7ca526445d8</td>
|
|
<td>40f13c181a8796ca6414425f894f04dc9efd4478dd2303f6c920cc4e5ce40717ef18e5bbefef98d9557e3590a4511644</td>
|
|
<td>21994b3d139941f748c28f9af1b8ce93488ee69b28ffd5f3553b517731993c32b652e4b55811ceda5e79dace68da24a52ebaa694856a4c42b7275f19f5f992d0</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>23d2a28820aa7269c8e12b57fe64354de0b4e14f7ea29bf7a7f4dab6efbab0fc</td>
|
|
<td>[68a5d0f7f298663174d8aef1]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_bmeb2ak5.xwg.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2291.881]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:43:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bmeb2ak5.xwg.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:43:16 +0000 UTC</td>
|
|
<td>2025-08-20 13:43:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:43:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a71f00384903af1b59a3e2e6eec836f8e710ecb30d4ace38eefd70df1259a04</td>
|
|
<td>[68a156b7b8a9d1158beec7c0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_i3bblstt.0ux.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:12:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_i3bblstt.0ux.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:12:24 +0000 UTC</td>
|
|
<td>2025-08-17 04:12:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:12:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a630e3a0f83a914e2e497a7a90ba1d8cdf2a4eba126318cc394192700fce5d1</td>
|
|
<td>[68a1ca94eae0fd62a51f5224]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_urevov14.ccs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:26:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_urevov14.ccs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:26:47 +0000 UTC</td>
|
|
<td>2025-08-17 12:26:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:27:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a1e58ab32b65708a720962e3169ef3d00125fba6bd4879e799dfc871985c452</td>
|
|
<td>[68a523a99ba7c92b34976fa0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.DataGrid.v7.0.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:45Z]</td>
|
|
<td>[42cb442252a825cf7eb0af412fbb303e]</td>
|
|
<td>[b64c7987c309ecd84f9d7c1318e5753b848fa71a]</td>
|
|
<td>[b121d9aa356ec4f069b7f81b76caf509745c79f9290712af129d2a8ec08e397439732ac03314860df3fc4458b1cb18d6]</td>
|
|
<td>[1f553747599b75987f7f4091dddb937d9b8d5b33bf78bf3583cd6577d13af12c5b319c855f4e1d156c697efd285d6140ab0f00900c082f0eeeaca18073e5e476]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Xceed.Wpf.DataGrid.v7.0.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Xceed DataGrid for WPF</td>
|
|
<td>5462016</td>
|
|
<td>42cb442252a825cf7eb0af412fbb303e</td>
|
|
<td>Xceed DataGrid for WPF</td>
|
|
<td>7.0.20452.13100</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>b64c7987c309ecd84f9d7c1318e5753b848fa71a</td>
|
|
<td>b121d9aa356ec4f069b7f81b76caf509745c79f9290712af129d2a8ec08e397439732ac03314860df3fc4458b1cb18d6</td>
|
|
<td>1f553747599b75987f7f4091dddb937d9b8d5b33bf78bf3583cd6577d13af12c5b319c855f4e1d156c697efd285d6140ab0f00900c082f0eeeaca18073e5e476</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-12-28 16:38:23 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>29d815794c1360b53ba4549d8441bc4929756fcec041c7cbcc743f4e1add177a</td>
|
|
<td>[68a5c81947601aee5f76e912, 68a5c9d7599432010e418bca]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[D:\QS1\ltimg14N.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z]</td>
|
|
<td>[efa7f3606628820a1f7c41ab730436d7]</td>
|
|
<td>[e72ef9934fd0b7443d5e9edefaac3422a2844bf6]</td>
|
|
<td>[c0641215c952711ea97a11956eff3e185e7a9ebea5b9658649aa5bf068138da6fe9f85fd75487b3c4dc750a983e5ba37]</td>
|
|
<td>[72a0f837fb33c12bd8b9004628dcae1ea3d3b43f2c7498569331ec5e52872abb31f5d859f96a93cd86c911a91466ea63942c8288ece23209299a8a70555c7071]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltimg14N.dll</td>
|
|
<td>C:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>1122304</td>
|
|
<td>efa7f3606628820a1f7c41ab730436d7</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>14.5.0.013</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:13:27 +0000 UTC</td>
|
|
<td>2006-06-04 16:31:28 +0000 UTC</td>
|
|
<td>e72ef9934fd0b7443d5e9edefaac3422a2844bf6</td>
|
|
<td>c0641215c952711ea97a11956eff3e185e7a9ebea5b9658649aa5bf068138da6fe9f85fd75487b3c4dc750a983e5ba37</td>
|
|
<td>72a0f837fb33c12bd8b9004628dcae1ea3d3b43f2c7498569331ec5e52872abb31f5d859f96a93cd86c911a91466ea63942c8288ece23209299a8a70555c7071</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-13 00:47:08 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>29877ebec7f64ecd376dea7bc916b4547ac036f84ab40e78edde56b014708a34</td>
|
|
<td>[68a241001a4f473f56688bb2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t4ptnebx.hz2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:52:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_t4ptnebx.hz2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:52:03 +0000 UTC</td>
|
|
<td>2025-08-17 20:52:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:52:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>297d493d5e5cb60eb0efb9655c35018b6deb10e9cafe24a8e83065ea6531237b</td>
|
|
<td>[68a345f4e4355f704785fb54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nsdprodconn1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l5fz4t12.5ye.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.856]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:25:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_l5fz4t12.5ye.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:25:35 +0000 UTC</td>
|
|
<td>2025-08-18 15:25:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:25:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2942b263d56edddcb66177748a35f7be115f1afd60e80fa55f0ee09629494d15</td>
|
|
<td>[68a3146b5f0c41860c8c850a, 68a3146b5f0c41860c8c855d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ipaddress.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[2c3b87b89037f45d258d52a25767f1b0]</td>
|
|
<td>[550d2ad97228d271783e4378c7541b6800f11e9c]</td>
|
|
<td>[76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85]</td>
|
|
<td>[5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ipaddress.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>91036</td>
|
|
<td>2c3b87b89037f45d258d52a25767f1b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>550d2ad97228d271783e4378c7541b6800f11e9c</td>
|
|
<td>76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85</td>
|
|
<td>5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>28dc4aee3f28fbfad8067e4d849cee25edb2180d156ebdba8a2b46cfc7bba79b</td>
|
|
<td>[68a472b1b022648922e2356a]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmBaseApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[e90381e9af9ffb6b05d47e7f98282ec6]</td>
|
|
<td>[fe20ccd89a26cc7582d7fb438572dfc454e7e93f]</td>
|
|
<td>[33e7ed8537bf1c662d81718742eec3d090ce2886d34c55d456fb7208de7ac8d61a45f1231de0fc3df6b013f53f908846]</td>
|
|
<td>[e5329754b5ea8bbd24560d39a7d2ad409620d56a0b46171e2c3e24def5ad869c0d0ac81a55706cf0b4721ae97f49e20d24fcaa8f55a8bbfa8195773988fea84d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmBaseApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>7640423</td>
|
|
<td>e90381e9af9ffb6b05d47e7f98282ec6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>fe20ccd89a26cc7582d7fb438572dfc454e7e93f</td>
|
|
<td>33e7ed8537bf1c662d81718742eec3d090ce2886d34c55d456fb7208de7ac8d61a45f1231de0fc3df6b013f53f908846</td>
|
|
<td>e5329754b5ea8bbd24560d39a7d2ad409620d56a0b46171e2c3e24def5ad869c0d0ac81a55706cf0b4721ae97f49e20d24fcaa8f55a8bbfa8195773988fea84d</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>28a6ddc7b83ff25e1c70b0fed71b0ca7654225cc971081844355bc58edf112e5</td>
|
|
<td>[68a31af24db7fedadb153881]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:03Z]</td>
|
|
<td>[6bace707dc12b04a2ca321a88f309f57]</td>
|
|
<td>[58584ffc334e08a10bada624c0466596e38b099c]</td>
|
|
<td>[e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a]</td>
|
|
<td>[5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2198</td>
|
|
<td>6bace707dc12b04a2ca321a88f309f57</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-07-30 13:01:59 +0000 UTC</td>
|
|
<td>58584ffc334e08a10bada624c0466596e38b099c</td>
|
|
<td>e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a</td>
|
|
<td>5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379</td>
|
|
<td>2025-08-18 12:22:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>286bda5fe51f78dda99863ac6ee4becee74c4b75bca67685ae614db4a63a2388</td>
|
|
<td>[68a2c2f1ecaae62fd9d56685]</td>
|
|
<td>[2]</td>
|
|
<td>[IUSR]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\pgscripts\webgate.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>["C:\inetpub\pgscripts\webgate.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T06:01:12Z]</td>
|
|
<td>[a9cb58cad33d4c3b6903c2493966f71f]</td>
|
|
<td>[b1ea2f963fb91644838e7e03faeafd62b44e0e42]</td>
|
|
<td>[43bb540bc9719f42db74f0d87b7579636fd84f944f6ab517adfcef393bb3d269eff3b72617a9044defa71de36a32a757]</td>
|
|
<td>[bfa11fd3c70649a33fe59bef4072f921b8ebddbfa97894cbe4dff4e8614dd2e02efc00d93799f206f594dfbf62508c5291f9c61204acbd4571f80951798ede8b]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>webgate.exe</td>
|
|
<td>C:\inetpub\pgscripts\</td>
|
|
<td></td>
|
|
<td>57856</td>
|
|
<td>a9cb58cad33d4c3b6903c2493966f71f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-02-09 15:53:42 +0000 UTC</td>
|
|
<td>2000-09-15 15:22:40 +0000 UTC</td>
|
|
<td>b1ea2f963fb91644838e7e03faeafd62b44e0e42</td>
|
|
<td>43bb540bc9719f42db74f0d87b7579636fd84f944f6ab517adfcef393bb3d269eff3b72617a9044defa71de36a32a757</td>
|
|
<td>bfa11fd3c70649a33fe59bef4072f921b8ebddbfa97894cbe4dff4e8614dd2e02efc00d93799f206f594dfbf62508c5291f9c61204acbd4571f80951798ede8b</td>
|
|
<td>2025-05-01 19:01:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-26 02:34:29 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-05-01 19:04:44.439 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>282bb98037b6bcd2ce92e9f3f49f31157d927aa087b03b0e43910c9726b1fd9d</td>
|
|
<td>[68a34d6610b57c5bffc57dab]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2829bf3587fea06178f33415f46a9bda7c11ffde0ee0b82e286e9a1475c475df</td>
|
|
<td>[68a472a799ad3734d804e2ee]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcmail-jdk15on-1.50.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[e67997e62162367c28fdf23aea6f28e5]</td>
|
|
<td>[84dcd26a35af8b561b22a3f50bef2c58046e4351]</td>
|
|
<td>[cf5af9ceebab29fb92dab6cf39c2d15ce66d1c8ba29fdd2bb1434a617541541f9e0ada181d174dcad49dc8a675cf9a6b]</td>
|
|
<td>[61e82e81a6d814d4c6035c10534976e1eb6e7038f7bff4fb36a8d5486092f83046fd7cb6279d5d99f2c8737b4cfbffe4926c46ad11863cd1f86dcba69545feca]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bcmail-jdk15on-1.50.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>92311</td>
|
|
<td>e67997e62162367c28fdf23aea6f28e5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>84dcd26a35af8b561b22a3f50bef2c58046e4351</td>
|
|
<td>cf5af9ceebab29fb92dab6cf39c2d15ce66d1c8ba29fdd2bb1434a617541541f9e0ada181d174dcad49dc8a675cf9a6b</td>
|
|
<td>61e82e81a6d814d4c6035c10534976e1eb6e7038f7bff4fb36a8d5486092f83046fd7cb6279d5d99f2c8737b4cfbffe4926c46ad11863cd1f86dcba69545feca</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-07-04 04:37:57 +0000 UTC</td>
|
|
<td>60</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>27e9c1cf191627924c1b5ff9bc0c8f7927779ecacffed7f85d3968f819a72749</td>
|
|
<td>[68a1e0a88404c6cec2db4a20]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_er4hfvz1.km1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:01:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_er4hfvz1.km1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:01:01 +0000 UTC</td>
|
|
<td>2025-08-17 14:01:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:01:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>27bbf833fcaa2960b9ee59bb02f1e331d2bc2cb9f4cca1eda8cbfeafaf4bdcf4</td>
|
|
<td>[68a1628b267ecd2812a04628, 68a18e5a6551d5c53747f65e, 68a1b6ecbe5c72e648d21629, 68a1e120531e0ca3ba96eb26, 68a20b4fadd40ccee42bde95, 68a2357ef2f54b1728fb0813, 68a2614c3f2e6a5dec3baf18, 68a289e116193e2cd8f24c47, 68a2b41273bf4601c4cc56cd, 68a2de4297bbbb1ebcb6cf61, 68a308710a7b8d912880836c, 68a332ae0313772628837632, 68a35cf18216a1feae2f70c7, 68a3871e9ff2ca2a71809fbd, 68a3b1528c40e2da223cb62b, 68a3db8314b8acff2e9fadaa, 68a405b59388481b8e731cf0, 68a4315b5318f9f79113cba5, 68a45a1544f0d7805650e8bc, 68a4844542b9ebb43736804b, 68a4ae7c8e355abf3b39a7be, 68a4da1b8141e25bf2adffb8, 68a502e63da3e5c1b0f463bb, 68a52e7cfb04c6faf57cc88b, 68a55747ebdf87cb5fee9ae2, 68a582da54a9620183e92742, 68a5aba7b336d276a8e9eab7, 68a5d5e21910cfe0f0de35b8, 68a6016bf4dd6ac2cce6e47e, 68a62a5363df737e3bb9fb3e, 68a654899c2e8c06d5684638, 68a67ebae711ae898d7aead8, 68a6a8ebe9a4fb2cedcfe642, 68a6d31dd1543ce3c700d734, 68a6fd4e0df9cfba68e08b42, 68a727884f41788f2e391f97]</td>
|
|
<td>[2]</td>
|
|
<td>[iatricservice]</td>
|
|
<td>[i-nSam6Test]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[F:\RecycleSSRS\RecycleSSRSWarmup.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2255.853, v2260.859, v2268.865, v2272.867, v2273.867, v2280.871, v2283.876, v2284.877, v2293.885, v2307.897, v2310.898, v2314.902, v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:02Z, 2025-08-17T08:00:02Z, 2025-08-17T11:00:02Z, 2025-08-17T14:00:02Z, 2025-08-17T17:00:02Z, 2025-08-17T20:00:02Z, 2025-08-17T23:00:02Z, 2025-08-18T02:00:02Z, 2025-08-18T05:00:01Z, 2025-08-18T08:00:02Z, 2025-08-18T11:00:01Z, 2025-08-18T14:00:02Z, 2025-08-18T17:00:03Z, 2025-08-18T20:00:02Z, 2025-08-18T23:00:02Z, 2025-08-19T02:00:02Z, 2025-08-19T05:00:01Z, 2025-08-19T08:00:02Z, 2025-08-19T11:00:02Z, 2025-08-19T14:00:01Z, 2025-08-19T17:00:03Z, 2025-08-19T20:00:02Z, 2025-08-19T23:00:02Z, 2025-08-20T02:00:01Z, 2025-08-20T05:00:01Z, 2025-08-20T08:00:01Z, 2025-08-20T11:00:01Z, 2025-08-20T14:00:02Z, 2025-08-20T17:00:01Z, 2025-08-20T20:00:09Z, 2025-08-20T23:00:02Z, 2025-08-21T02:00:02Z, 2025-08-21T05:00:02Z, 2025-08-21T08:00:02Z, 2025-08-21T11:00:02Z, 2025-08-21T14:00:03Z]</td>
|
|
<td>[0ec934ef2b8857c6529b162149d8151a]</td>
|
|
<td>[622113c956a7814f286597edbc589c8657d55fb4]</td>
|
|
<td>[531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0]</td>
|
|
<td>[e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f]</td>
|
|
<td>[172.17.252.138]</td>
|
|
<td>[172.17.252.138]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RecycleSSRSWarmup.ps1</td>
|
|
<td>F:\RecycleSSRS\</td>
|
|
<td></td>
|
|
<td>998</td>
|
|
<td>0ec934ef2b8857c6529b162149d8151a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-01-10 19:31:26 +0000 UTC</td>
|
|
<td>2024-03-18 16:06:03 +0000 UTC</td>
|
|
<td>622113c956a7814f286597edbc589c8657d55fb4</td>
|
|
<td>531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0</td>
|
|
<td>e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f</td>
|
|
<td>2025-08-08 17:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>27a77db909f3c2833c0b1a37c55af1db06045118ad2eed96ce567b6632bce038</td>
|
|
<td>[68a472b1b022648922e23575]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FastInfoset-1.2.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[4f941b36a4c9e827e68e8f3249253240]</td>
|
|
<td>[098f56b9354e27bd2941cc5d461344e240ae51ae]</td>
|
|
<td>[90e39b3c6b6cc623d4f3f040d322f90321a7446c1462952600bd308beface4b714eb1c4a171c29a17fd3878e26cd540d]</td>
|
|
<td>[3ead1bbc9aeddf16cf270518b5ef63b4a020154c5ce4b4d1aaf3ed7d5ba312d952122d656a5a57e11e947d752404d5d3f6fdff9e9b5b2e72f06d3dc9c400c252]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FastInfoset-1.2.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\sun\xml\fastinfoset\main\</td>
|
|
<td></td>
|
|
<td>296714</td>
|
|
<td>4f941b36a4c9e827e68e8f3249253240</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:04 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>098f56b9354e27bd2941cc5d461344e240ae51ae</td>
|
|
<td>90e39b3c6b6cc623d4f3f040d322f90321a7446c1462952600bd308beface4b714eb1c4a171c29a17fd3878e26cd540d</td>
|
|
<td>3ead1bbc9aeddf16cf270518b5ef63b4a020154c5ce4b4d1aaf3ed7d5ba312d952122d656a5a57e11e947d752404d5d3f6fdff9e9b5b2e72f06d3dc9c400c252</td>
|
|
<td>2025-03-28 16:06:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-26 17:18:14 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:03:16.254 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>277c4d11a57d20bbf9bfeef15f0a72ec98264bbae569700636e85dfffca1e293</td>
|
|
<td>[68a306a5ba5832f49fe9cf36]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\HTMLVWR.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[0791e37231175eeb053e8ca3e00020bc]</td>
|
|
<td>[782cfb2f326a7b4d13b07c0813805ca3959bc278]</td>
|
|
<td>[2ea8f572f51bd603487da7757fc1fe261a2b1f817887797b75b4e52a90b173283ba6923e30d912ec684ab323cf207931]</td>
|
|
<td>[00d9c9676c1fdc88665a9e11e8c731e8795cb848096270627e38f651b16cb1de57d76ef27f70ec7758798b56b780f97cd9f966e8aa899944fe8a44dbe7121dd6]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HTMLVWR.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>0791e37231175eeb053e8ca3e00020bc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:17 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>782cfb2f326a7b4d13b07c0813805ca3959bc278</td>
|
|
<td>2ea8f572f51bd603487da7757fc1fe261a2b1f817887797b75b4e52a90b173283ba6923e30d912ec684ab323cf207931</td>
|
|
<td>00d9c9676c1fdc88665a9e11e8c731e8795cb848096270627e38f651b16cb1de57d76ef27f70ec7758798b56b780f97cd9f966e8aa899944fe8a44dbe7121dd6</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:20:29 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2d7b9c0019374c8a0443bd2100e09c42ea88e60ccd9a6c8e95cd6e8733b695ee</td>
|
|
<td>[68a6afe50e0f3bd8deac4f4c, 68a6afe50e0f3bd8deac5098, 68a6afe50e0f3bd8deac5100, 68a6afe50e0f3bd8deac516a, 68a6afe50e0f3bd8deac554f, 68a6afe50e0f3bd8deac5641, 68a6afe50e0f3bd8deac5760, 68a6afe50e0f3bd8deac5d29, 68a6afe50e0f3bd8deac5dab, 68a6afe50e0f3bd8deac5ee9]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\libssl-1_1-x64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[dba7c14a534b3ef46ccb8982202eff3b]</td>
|
|
<td>[5a990ff964e4b4cc87d4f6407fd71b6c079c4a07]</td>
|
|
<td>[605eca459d2a6b27e64d497f84c00a6b6e091bdc875c643231634b013f5f39405700a543c6e47ec53ff60b8ddaabe907]</td>
|
|
<td>[97d4654fac700f7da04e701ede9dea79c35c08b9bba060a3fd7876375180b6baefd39dcc91b28dce123b2ff960074e41996abed01bbcd2e45b122e9ae683112e]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libssl-1_1-x64.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>680960</td>
|
|
<td>dba7c14a534b3ef46ccb8982202eff3b</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1d</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:22 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:49 +0000 UTC</td>
|
|
<td>5a990ff964e4b4cc87d4f6407fd71b6c079c4a07</td>
|
|
<td>605eca459d2a6b27e64d497f84c00a6b6e091bdc875c643231634b013f5f39405700a543c6e47ec53ff60b8ddaabe907</td>
|
|
<td>97d4654fac700f7da04e701ede9dea79c35c08b9bba060a3fd7876375180b6baefd39dcc91b28dce123b2ff960074e41996abed01bbcd2e45b122e9ae683112e</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-20 16:24:20 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:01:04.066 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7</td>
|
|
<td>[68a472b1b022648922e23582]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-xc-1.9.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[49f6a735bae30745dcf5ecec27090720]</td>
|
|
<td>[e3480072bc95c202476ffa1de99ff7ee9149f29c]</td>
|
|
<td>[7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c]</td>
|
|
<td>[09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jackson-xc-1.9.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>27084</td>
|
|
<td>49f6a735bae30745dcf5ecec27090720</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>e3480072bc95c202476ffa1de99ff7ee9149f29c</td>
|
|
<td>7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c</td>
|
|
<td>09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-07-08 00:03:24 +0000 UTC</td>
|
|
<td>60</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2d1a368c62e35627f1a59cfcc822a56431d635f1baf14b387bb3ebd1299d0ea8</td>
|
|
<td>[68a306a5ba5832f49fe9cf58]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DIGRDSRV.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[86cb820d4af0b2e8ae99aab48ad42cde]</td>
|
|
<td>[2abeae8089d579c27064f1ee1522c5a7d09bee80]</td>
|
|
<td>[5fa60410c96a76dfbc9cde03625f46ff3228902cc0cfe76672b91996fc49fd9a65b8ab0e2546bc2178974beffdd9c681]</td>
|
|
<td>[1d9cd089725110bd5613cafe3191277bf08f023d474d15bd926dfd64f41893ccbdf85edbd281c7946d1817e31f11f0696448a9d26f7ccd99c8dee3f5d14b842a]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DIGRDSRV.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>107520</td>
|
|
<td>86cb820d4af0b2e8ae99aab48ad42cde</td>
|
|
<td></td>
|
|
<td>1.13.1.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:10 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>2abeae8089d579c27064f1ee1522c5a7d09bee80</td>
|
|
<td>5fa60410c96a76dfbc9cde03625f46ff3228902cc0cfe76672b91996fc49fd9a65b8ab0e2546bc2178974beffdd9c681</td>
|
|
<td>1d9cd089725110bd5613cafe3191277bf08f023d474d15bd926dfd64f41893ccbdf85edbd281c7946d1817e31f11f0696448a9d26f7ccd99c8dee3f5d14b842a</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:49:00 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ca0a1ad7eaba11089dfabece0c29e383fbbbad90b82be3ca2774e7d3bb5acc9</td>
|
|
<td>[68a5c64d54e5003d1abde4c5]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\NTSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z]</td>
|
|
<td>[8d7374c2b71c19e8ff64ef4125e6139a]</td>
|
|
<td>[dad0aac372f6e2a0310ef7570b4648cea203cea0]</td>
|
|
<td>[8fa6938c48bfa7e920eed7aff4a6132660696a69cd64b154c33a9277403b5bec7561a3e37fe1ca1b610342aaa7d5bfbf]</td>
|
|
<td>[fffea038d10b4a2d2236590ed1381431d88ccbe217b38b7804e89bdb22fb5a74c8973d8a66e1b4d9de663fcd6f55e5fae7e87b8e01c30aaabc3b48a4a74f85ab]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NTSetup.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\</td>
|
|
<td>NTSetup DLL</td>
|
|
<td>131072</td>
|
|
<td>8d7374c2b71c19e8ff64ef4125e6139a</td>
|
|
<td>NTSetup Dynamic Link Library</td>
|
|
<td>1, 4, 0, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:57:41 +0000 UTC</td>
|
|
<td>2002-10-07 17:18:04 +0000 UTC</td>
|
|
<td>dad0aac372f6e2a0310ef7570b4648cea203cea0</td>
|
|
<td>8fa6938c48bfa7e920eed7aff4a6132660696a69cd64b154c33a9277403b5bec7561a3e37fe1ca1b610342aaa7d5bfbf</td>
|
|
<td>fffea038d10b4a2d2236590ed1381431d88ccbe217b38b7804e89bdb22fb5a74c8973d8a66e1b4d9de663fcd6f55e5fae7e87b8e01c30aaabc3b48a4a74f85ab</td>
|
|
<td>2025-08-20 12:57:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-05 23:33:50 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:00:50.983 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2c73f99ad12864d0c9b8f810de30c8ac9d3b89b9129169865c5c3837c7a6856c</td>
|
|
<td>[68a18f0549fba6e1a58ed5a8, 68a2e08b03d8e95044c937d3, 68a432305af3ecc3cb0504f6, 68a585326688127c061e72f3, 68a6d573cceb2b8a964b3383]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_Iatric]</td>
|
|
<td>[i-nSamDB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\Program Files (x86)\CoreFTP\SunquestRH.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:10:00Z, 2025-08-18T08:10:00Z, 2025-08-19T08:10:00Z, 2025-08-20T08:10:00Z, 2025-08-21T08:10:00Z]</td>
|
|
<td>[a930976021610a665899490be2be6e36]</td>
|
|
<td>[007eda380db0425df9a36638bfdf85e77c259ae1]</td>
|
|
<td>[3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532]</td>
|
|
<td>[68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SunquestRH.bat</td>
|
|
<td>D:\Program Files (x86)\CoreFTP\</td>
|
|
<td></td>
|
|
<td>511</td>
|
|
<td>a930976021610a665899490be2be6e36</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-01 13:02:24 +0000 UTC</td>
|
|
<td>2023-11-01 13:05:15 +0000 UTC</td>
|
|
<td>007eda380db0425df9a36638bfdf85e77c259ae1</td>
|
|
<td>3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532</td>
|
|
<td>68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be</td>
|
|
<td>2025-08-09 08:10:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2c62fa36ba4071ca3ae4f3fad23da407915c3464caf444548ef5b63546835a12</td>
|
|
<td>[68a4b0fb13fac5171eeef0dc]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\WPFToolkit.Extended.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:37Z]</td>
|
|
<td>[017e10a4e1dd8d99d78701ed8d793307]</td>
|
|
<td>[05171709895e3c65e2eb4a7a29ba9f70be7bdecd]</td>
|
|
<td>[be509cac62a9cecb95fcd9eac763ad961ea5567bca2cace68e3323a9022e278b377988b0a8682a494862ba8cc728f6da]</td>
|
|
<td>[45d8b842d7656f1455dcd8b071222235dc86f7e7fa44494ba810ae60ec0592c590f73908840e4eae1236a65897321ea2ae65b02bb9b491d8597a0d5d83aaff2e]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WPFToolkit.Extended.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Extended WPF Toolkit</td>
|
|
<td>345600</td>
|
|
<td>017e10a4e1dd8d99d78701ed8d793307</td>
|
|
<td>Extended WPF Toolkit</td>
|
|
<td>1.5.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:42 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:11 +0000 UTC</td>
|
|
<td>05171709895e3c65e2eb4a7a29ba9f70be7bdecd</td>
|
|
<td>be509cac62a9cecb95fcd9eac763ad961ea5567bca2cace68e3323a9022e278b377988b0a8682a494862ba8cc728f6da</td>
|
|
<td>45d8b842d7656f1455dcd8b071222235dc86f7e7fa44494ba810ae60ec0592c590f73908840e4eae1236a65897321ea2ae65b02bb9b491d8597a0d5d83aaff2e</td>
|
|
<td>2025-05-22 18:56:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-12 20:59:42 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-22 19:00:56.976 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2bee0e09b0add0c35eda78f7379069960dac061c4e215792c32e6afe3414f579</td>
|
|
<td>[68a5d382bd3935126ed513eb]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVA12]</td>
|
|
<td>[I-CA-PSM]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVA12\Desktop\GatewayWindowsDefenderATPOnboardingPackage\WindowsDefenderATPLocalOnboardingScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:54:00Z]</td>
|
|
<td>[f50eda75d10c6f119c6cd40966efea67]</td>
|
|
<td>[0c73d106cbfa403bf59db7d87ff1ea8314baac1d]</td>
|
|
<td>[6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33]</td>
|
|
<td>[282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WindowsDefenderATPLocalOnboardingScript.cmd</td>
|
|
<td>C:\Users\CA_Jnt_SVA9\Desktop\GatewayWindowsDefenderATPOnboardingPackage\</td>
|
|
<td></td>
|
|
<td>17354</td>
|
|
<td>f50eda75d10c6f119c6cd40966efea67</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-17 00:26:56 +0000 UTC</td>
|
|
<td>2025-03-24 19:48:16 +0000 UTC</td>
|
|
<td>0c73d106cbfa403bf59db7d87ff1ea8314baac1d</td>
|
|
<td>6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33</td>
|
|
<td>282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0</td>
|
|
<td>2025-03-24 19:52:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2be3b84d9b1ddf317e94d3345117c0192e80ff50445538ae0c54066ae2c8e607</td>
|
|
<td>[68a48674c4cb2500be692614, 68a48674c4cb2500be69262a]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.DataAccessLayer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[7585a161b995fa0f4eb3ddc40d2d0f48]</td>
|
|
<td>[00e62d3ef0e9c5eab320fb45443f6a5b77079a89]</td>
|
|
<td>[a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11]</td>
|
|
<td>[deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer</td>
|
|
<td>27920</td>
|
|
<td>7585a161b995fa0f4eb3ddc40d2d0f48</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>00e62d3ef0e9c5eab320fb45443f6a5b77079a89</td>
|
|
<td>a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11</td>
|
|
<td>deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b531f26102d0687325387dac16e037621852063de02203aa4674e01d589374a</td>
|
|
<td>[68a19be542f4bad561883042]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dr1aymbt.j23.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:07:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dr1aymbt.j23.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:07:42 +0000 UTC</td>
|
|
<td>2025-08-17 09:07:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:07:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b3c5867c013952c0c01a0604e9fab348297e52f7a1ceee65318d3ebb2be888d</td>
|
|
<td>[68a25fb2e970d941642e7edd, 68a25fb2e970d941642e7eea, 68a3b2cf09045b56b2a707b5, 68a3b2cf09045b56b2a707c2, 68a502e12ae1a61fbf4caf13, 68a502e12ae1a61fbf4caf20, 68a65489c4cae84feadc5713, 68a65489c4cae84feadc5720]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\dbatools.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:06Z, 2025-08-20T23:00:15Z]</td>
|
|
<td>[b51cf28a2350177a4572c66c016c2103]</td>
|
|
<td>[5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa]</td>
|
|
<td>[c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386]</td>
|
|
<td>[55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.dll</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\</td>
|
|
<td>dbatools</td>
|
|
<td>160672</td>
|
|
<td>b51cf28a2350177a4572c66c016c2103</td>
|
|
<td>dbatools</td>
|
|
<td>1.0.0</td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 18:35:12 +0000 UTC</td>
|
|
<td>2024-03-09 14:53:34 +0000 UTC</td>
|
|
<td>5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa</td>
|
|
<td>c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386</td>
|
|
<td>55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb</td>
|
|
<td>2025-05-10 23:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-03-24 01:06:35 +0000 UTC</td>
|
|
<td>43</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-10 23:01:16.463 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b26d356e02d80baf5c4ca4efaee0098d4babcadfa1aae9bfab2082b04a5bc34</td>
|
|
<td>[68a5c8eceb9e7b7716dce1fa, 68a5ca39b5df6e9c598d9a0c, 68a5ca39b5df6e9c598d9a19, 68a5ccf2ddfdba423e48862f, 68a5ccf2ddfdba423e48863d, 68a5ccf2ddfdba423e48864b, 68a5ccf2ddfdba423e488658, 68a5ccf2ddfdba423e488665, 68a5ccf2ddfdba423e488672, 68a5ccf2ddfdba423e48867f, 68a5ccf2ddfdba423e48868c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\InputFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[cfc9166756e8368d8b06cde331d490e5]</td>
|
|
<td>[6c011eddf69df54f41e0d7b8be2d5b2528af7ca2]</td>
|
|
<td>[f1856edd7a27a2d96073a9304da17fe25be15b68036186dca7747758afddafc495780ce10ce2226f7962788e515a70b7]</td>
|
|
<td>[b76e01f596b88af67ec3a8ed50ed5fba05bd67b75aa253dde511c5ae7767f53e5cc69135a1920cfba8be238a4d33c8a137c3ad027fb43f7301aa889b38c90b0c]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InputFunctions.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>16284</td>
|
|
<td>cfc9166756e8368d8b06cde331d490e5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:40 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>6c011eddf69df54f41e0d7b8be2d5b2528af7ca2</td>
|
|
<td>f1856edd7a27a2d96073a9304da17fe25be15b68036186dca7747758afddafc495780ce10ce2226f7962788e515a70b7</td>
|
|
<td>b76e01f596b88af67ec3a8ed50ed5fba05bd67b75aa253dde511c5ae7767f53e5cc69135a1920cfba8be238a4d33c8a137c3ad027fb43f7301aa889b38c90b0c</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:02 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b13145185c874dede90e8f4656daa3b60d93459e476545dbad90746d750c458</td>
|
|
<td>[68a4698d5445b9aa205794eb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_0e99f74a14614d68b1464e32cd41867d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:09:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_0e99f74a14614d68b1464e32cd41867d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:09:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ad4cc623a5619920ce1d4ce674a6cb47b5706f757e0dbccd2c89616e626900c</td>
|
|
<td>[68a3165f22b7418ee6d4590f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cm32l4nf.gxu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:02:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cm32l4nf.gxu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:02:31 +0000 UTC</td>
|
|
<td>2025-08-18 12:02:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:02:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ad327190254cfabf1ce372b9eb3080fde80527f9afb95609744c84b069f01af</td>
|
|
<td>[68a48674c4cb2500be692641]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.BedClient.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[53bb6bf6e10f31058b313d251d35a3ee]</td>
|
|
<td>[bd121b21353174db9fbf449b13da23abf6841825]</td>
|
|
<td>[00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73]</td>
|
|
<td>[c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient</td>
|
|
<td>12800</td>
|
|
<td>53bb6bf6e10f31058b313d251d35a3ee</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>bd121b21353174db9fbf449b13da23abf6841825</td>
|
|
<td>00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73</td>
|
|
<td>c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a9fef8db4e3a019e32d440cc704ed0b8a15a439567000c15c6f6570c9096783</td>
|
|
<td>[68a5239e621d09b2b1ed5e52]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackSchema_icd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[6a9ba4094531a25a391fa577c7c6c08b]</td>
|
|
<td>[b0879b11bc79c994c3083b9a2e5c646465c0b075]</td>
|
|
<td>[6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308]</td>
|
|
<td>[af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackSchema_icd.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>74240</td>
|
|
<td>6a9ba4094531a25a391fa577c7c6c08b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40719</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>b0879b11bc79c994c3083b9a2e5c646465c0b075</td>
|
|
<td>6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308</td>
|
|
<td>af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a9a5636e4828e6f3bfe77608737599ea956c596c3cbfe3da67e1f219e767035</td>
|
|
<td>[68a523a99ba7c92b34976f97]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViewModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[29caf1a5cf79c811d9204a9c7b60261e]</td>
|
|
<td>[9922a071d594279b368fdda2c79df68cf19efaf4]</td>
|
|
<td>[a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465]</td>
|
|
<td>[91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerViewModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerViewModel</td>
|
|
<td>1076224</td>
|
|
<td>29caf1a5cf79c811d9204a9c7b60261e</td>
|
|
<td>SystemManagerViewModel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:32 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:32 +0000 UTC</td>
|
|
<td>9922a071d594279b368fdda2c79df68cf19efaf4</td>
|
|
<td>a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465</td>
|
|
<td>91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31617bc6d788d17e9d6b4e157c61ff4f5aa99ff6dd12390aaec350e1dad59cfd</td>
|
|
<td>[68a1abd81464ade8cebc30df]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jpj1pwcu.2im.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jpj1pwcu.2im.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:40 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3129528d911f66c7bb4157add40fd6f5e831069ce89676d412d7a3f781baf5d4</td>
|
|
<td>[68a194b6a53d5390bd32653e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wbyd23ye.0vk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:37:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wbyd23ye.0vk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:37:02 +0000 UTC</td>
|
|
<td>2025-08-17 08:37:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:37:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30f6420e30c14493561c208144082198b6ef8921d5584e99ce925a2859ccbf4c</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20b]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindPasswordLastSet.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[305adcf21d1608c85d2bad7b2ee17f27]</td>
|
|
<td>[e3ef3170c8936e8e00b1e0bd20050c116cba3dc3]</td>
|
|
<td>[4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200]</td>
|
|
<td>[6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindPasswordLastSet.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3800</td>
|
|
<td>305adcf21d1608c85d2bad7b2ee17f27</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:20 +0000 UTC</td>
|
|
<td>2025-06-05 20:58:32 +0000 UTC</td>
|
|
<td>e3ef3170c8936e8e00b1e0bd20050c116cba3dc3</td>
|
|
<td>4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200</td>
|
|
<td>6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30dbaca4c387bc212e326f653c535f315e111997840af61c4cceaafc2c2b7b6e</td>
|
|
<td>[68a18d08c761638e1c82e3dc, 68a2dfdc19028bf24d272e37, 68a4315aac209890fd02860e, 68a581c7ea8ad1c4ecc342b9, 68a675a8d9e8ba5c8c053675, 68a678012a384e856ec0536a, 68a678012a384e856ec0536b, 68a67a593958445599787145, 68a6d3680ea780744e57b835, 68a70821cb4641958b20b7b3, 68a70821cb4641958b20b7b4, 68a70ace6496c8f136b8d2e6]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc, CA_Jnt_ECSA5]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\__SCRIPT REF Files\REFEpicHHEnvPLY_ACE3_Refresh.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe, C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T01:18:06Z, 2025-08-21T01:26:12Z, 2025-08-21T01:30:24Z, 2025-08-21T01:36:08Z, 2025-08-21T08:00:02Z, 2025-08-21T11:40:55Z, 2025-08-21T11:46:45Z, 2025-08-21T11:52:21Z]</td>
|
|
<td>[fe11a07acc95a9d0efd502c6c79f11ea]</td>
|
|
<td>[d2d2aa489d4f51c3d533906b9f1adcde16ae28b0]</td>
|
|
<td>[d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b]</td>
|
|
<td>[74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>REFEpicHHEnvPLY_ACE3_Refresh.bat</td>
|
|
<td>C:\HomeHealth\__SCRIPT REF Files\</td>
|
|
<td></td>
|
|
<td>588</td>
|
|
<td>fe11a07acc95a9d0efd502c6c79f11ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:45:25 +0000 UTC</td>
|
|
<td>d2d2aa489d4f51c3d533906b9f1adcde16ae28b0</td>
|
|
<td>d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b</td>
|
|
<td>74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe</td>
|
|
<td>2025-08-09 08:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30c40b2e85aea20466293274a208494617b0ec644dc769ba34320f80a1fd712d</td>
|
|
<td>[68a5c9dc84f2b6dc03121e9b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\QS1\191\POS\191009002POSH.EXE]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[D:\QS1\191\POS\191009002POSH.EXE D:\QS1\191\POS -OVERWRITE]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[2025-08-20T13:12:57Z]</td>
|
|
<td>[a99c86c5bcf6da46479c9b6d2de2d67a]</td>
|
|
<td>[cca47bb481644c9ef6eac0e5d17958e0cbd3fd4a]</td>
|
|
<td>[7df31ac7a85e7f932e0b1aa15c6ff92eae1df06d374aa6122b3a01dd996e337349626475f8ad3a903d2500619ef6ec81]</td>
|
|
<td>[1f446bd154c8572d4e53bb921a8ebe62b04b78e65c6e3dc9dbd2d32de7a9e2f28f93fc381701ca88bbe04ea3b3df50e392d57a464ad2e3615bdf6eb4df3d4874]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>191009002POSH.exe</td>
|
|
<td>C:\QS1\191\POS\</td>
|
|
<td>PKSFX® Command Line for Windows</td>
|
|
<td>9417433</td>
|
|
<td>a99c86c5bcf6da46479c9b6d2de2d67a</td>
|
|
<td>PKSFX® Command Line for Windows</td>
|
|
<td>5, 0, 1, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:15:58 +0000 UTC</td>
|
|
<td>2012-02-27 15:33:12 +0000 UTC</td>
|
|
<td>cca47bb481644c9ef6eac0e5d17958e0cbd3fd4a</td>
|
|
<td>7df31ac7a85e7f932e0b1aa15c6ff92eae1df06d374aa6122b3a01dd996e337349626475f8ad3a903d2500619ef6ec81</td>
|
|
<td>1f446bd154c8572d4e53bb921a8ebe62b04b78e65c6e3dc9dbd2d32de7a9e2f28f93fc381701ca88bbe04ea3b3df50e392d57a464ad2e3615bdf6eb4df3d4874</td>
|
|
<td>2025-07-17 16:16:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-11-22 05:02:47 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>3</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.10</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30ba0c3d915cdd4487952120eba8205e1d1acd2017b272c1c1a30c08427bf548</td>
|
|
<td>[68a16bd60756fe54a9918f93, 68a2149cb58debea69d7c740, 68a2bd5ff793a9057f329bfa, 68a3663261f8067c48423eae, 68a40efceddb3a9f1a71a5f4, 68a4b7cd36bc5d38057e235c]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[230b8336c1852e9a94a3df36af12c82c]</td>
|
|
<td>[54d436628aa6c32a6e72b86ef79da23d455eeca9]</td>
|
|
<td>[3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd]</td>
|
|
<td>[36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNetUtils.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>638264</td>
|
|
<td>230b8336c1852e9a94a3df36af12c82c</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>54d436628aa6c32a6e72b86ef79da23d455eeca9</td>
|
|
<td>3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd</td>
|
|
<td>36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:39 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30637f470d50f8e4e55ca6bf69130a74b83e9b51f757d487a2c076ed7397eaa9</td>
|
|
<td>[68a1781303efa29c2490c53e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_por1serl.ypl.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:34:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_por1serl.ypl.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:34:54 +0000 UTC</td>
|
|
<td>2025-08-17 06:34:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:34:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>301cf50872c1e5c8b34b970892ba731a492642a1afee8c89cc1de5411b3a099a</td>
|
|
<td>[68a62a95414ce37e5511e739]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T20:05:34Z]</td>
|
|
<td>[4b09a5c54dd9c4160a0153c47e6b6b5d]</td>
|
|
<td>[f2a30745b256ff1540a76e75cf58aad763febdc8]</td>
|
|
<td>[e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956]</td>
|
|
<td>[ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IPDataListenerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\IPDataListenerService\</td>
|
|
<td>FormFast.FastPrint.IPDataListener</td>
|
|
<td>25088</td>
|
|
<td>4b09a5c54dd9c4160a0153c47e6b6b5d</td>
|
|
<td>FormFast.FastPrint.IPDataListener</td>
|
|
<td>23.6.0.20130</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:20:04 +0000 UTC</td>
|
|
<td>2023-06-20 18:20:04 +0000 UTC</td>
|
|
<td>f2a30745b256ff1540a76e75cf58aad763febdc8</td>
|
|
<td>e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956</td>
|
|
<td>ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45</td>
|
|
<td>2025-08-20 20:05:41 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3019e0e4ed37e5ef7b0c577519a67e7acac4fd4fbdda1a9b88785338286c4e1d</td>
|
|
<td>[68a48674c4cb2500be692635, 68a48674c4cb2500be692647]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z]</td>
|
|
<td>[26661aa51c547414f531e8b13455d674]</td>
|
|
<td>[88d59516fbf7ef6b499d7e33195681be2e31b799]</td>
|
|
<td>[f440ed67572ee0f1d34a5bc19784ccef448172dd526454d60e593d9226cf15a82537e69f24366518c6b3a12b253ae0ed]</td>
|
|
<td>[74bcd1277e80ed3d01346a4eb60e094098c45b1b5f9c35679ea5be6db7a94a35796df0be9388ed8bf753505aea685f9827fe8533fbb7247334dea3c84e1d3c36]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.dll</td>
|
|
<td>C:\ProgramData\chocolatey\lib\IdentityManagement_App\Content\WebPub\FederationHelperCore\</td>
|
|
<td>Serilog</td>
|
|
<td>136192</td>
|
|
<td>26661aa51c547414f531e8b13455d674</td>
|
|
<td>Serilog</td>
|
|
<td>2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-12 20:05:24 +0000 UTC</td>
|
|
<td>2024-10-22 09:32:58 +0000 UTC</td>
|
|
<td>88d59516fbf7ef6b499d7e33195681be2e31b799</td>
|
|
<td>f440ed67572ee0f1d34a5bc19784ccef448172dd526454d60e593d9226cf15a82537e69f24366518c6b3a12b253ae0ed</td>
|
|
<td>74bcd1277e80ed3d01346a4eb60e094098c45b1b5f9c35679ea5be6db7a94a35796df0be9388ed8bf753505aea685f9827fe8533fbb7247334dea3c84e1d3c36</td>
|
|
<td>2025-06-12 20:06:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-01 19:31:17 +0000 UTC</td>
|
|
<td>75</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-12 20:11:15.307 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2fab00aa354289df924737e7fe31040d7048812306926c53eea3ee0e64db95f4</td>
|
|
<td>[68a2fecafcf4c946042d757a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[probe]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Npcap\CheckStatus.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T10:21:53Z]</td>
|
|
<td>[3075c353f24617be908f7e952de085f2]</td>
|
|
<td>[a380da5dcac37716092c0eda4b9f97c909d87ab2]</td>
|
|
<td>[5a65486318864f0287918bcd89d053a52b1dc0405e9b37317b4f4713af756e65f7924f44c9aa12aa9bf4eec082f66f4d]</td>
|
|
<td>[0caac4037e821f144c6f4fbe25c2e364e31c3b1c314d2c14ede4565501553950f6266f8c28c099f126d4b5950bb1f71be38eb5ec54ee4a206e723f0f30799c8a]</td>
|
|
<td>[172.23.26.35]</td>
|
|
<td>[172.23.26.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckStatus.bat</td>
|
|
<td>C:\Program Files\Npcap\</td>
|
|
<td></td>
|
|
<td>862</td>
|
|
<td>3075c353f24617be908f7e952de085f2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-06-09 19:14:10 +0000 UTC</td>
|
|
<td>2020-06-09 19:14:10 +0000 UTC</td>
|
|
<td>a380da5dcac37716092c0eda4b9f97c909d87ab2</td>
|
|
<td>5a65486318864f0287918bcd89d053a52b1dc0405e9b37317b4f4713af756e65f7924f44c9aa12aa9bf4eec082f66f4d</td>
|
|
<td>0caac4037e821f144c6f4fbe25c2e364e31c3b1c314d2c14ede4565501553950f6266f8c28c099f126d4b5950bb1f71be38eb5ec54ee4a206e723f0f30799c8a</td>
|
|
<td>2025-08-09 05:12:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-20 09:34:17 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 12:00:10.068 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2fa0c8055ed4dd4b3be006b6ae7fb7f563b79393f21a66d682b56f92e221dc01</td>
|
|
<td>[68a611738671451adb8f5997]</td>
|
|
<td>[2]</td>
|
|
<td>[DEVSCCMADM]</td>
|
|
<td>[DP-Warehouse]</td>
|
|
<td>[DEV-WVUHS]</td>
|
|
<td>[C:\Windows\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>["C:\WINDOWS\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp" /SL5="$70C2C,11857990,180224,C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe" /VERYSILENT /DIR=C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\ /EXTRACT="YES"]</td>
|
|
<td>[Lenovo]</td>
|
|
<td>[C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe]</td>
|
|
<td>[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe]</td>
|
|
<td>[2025-08-20T18:16:58Z]</td>
|
|
<td>[61431127214fa224f8da58e06ba8831e]</td>
|
|
<td>[472aa381a40e1455ce7aadd87d2a2b47d4e05cb5]</td>
|
|
<td>[1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc]</td>
|
|
<td>[c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>m2wlg08us14.tmp</td>
|
|
<td>C:\Windows\TempInst\is-Q9LLO.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2917392</td>
|
|
<td>61431127214fa224f8da58e06ba8831e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Lenovo</td>
|
|
<td>2025-05-12 18:26:03 +0000 UTC</td>
|
|
<td>2025-05-12 18:26:03 +0000 UTC</td>
|
|
<td>472aa381a40e1455ce7aadd87d2a2b47d4e05cb5</td>
|
|
<td>1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc</td>
|
|
<td>c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7</td>
|
|
<td>2025-05-12 18:26:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-11-05 07:38:45 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-12 18:28:22.207 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2f9fcdaf7ccf5b9ce1e4da934121df5ca0fe0f447b60d7be848f380a0dd6c250</td>
|
|
<td>[68a71866f94bca2e233c5e49]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\is-50FHK.tmp\azuredatastudio-windows-setup.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2319.906]</td>
|
|
<td>["C:\Users\CA_TSK~1\AppData\Local\Temp\is-50FHK.tmp\azuredatastudio-windows-setup.tmp" /SL5="$1B0B2A,103027367,800768,C:\ProgramData\Package Cache\6F788251C464622D41B23CB393BD406BEAEA63CE\azuredatastudio-windows-setup.exe" /VERYSILENT /NORESTART /RESTARTEXITCODE=3010 /FORCECLOSEAPPLICATIONS /MERGETASKS=!runcode /LOG="C:\Users\CA_TSK~1\AppData\Local\Temp\SsmsSetup\SSMS-Setup-ENU_20250821085621_13_AzureDataStudio.log"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\ProgramData\Package Cache\6F788251C464622D41B23CB393BD406BEAEA63CE\azuredatastudio-windows-setup.exe]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[2025-08-21T13:00:20Z]</td>
|
|
<td>[010148a8d44b449ea4a6196fb68df83c]</td>
|
|
<td>[6d21310644af6d6a06e634af48d09614c875539d]</td>
|
|
<td>[a7b58b3fe6fc66e6e1f197619cd863eab3fec98e05d4407fcb581f8e1450cab422d6e6ae2cca85fdb8662d319a15a1e7]</td>
|
|
<td>[8a66f47d47f012eea37b1be5a31a71abbf387892b9950d760c3ade68026b0cdf5ef96e03183add6aeaead11f2876fb7cd817f059f691108949614252eb6b8ac1]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>azuredatastudio-windows-setup.tmp</td>
|
|
<td>C:\Users\ca_tsk_pacs1\AppData\Local\Temp\is-50FHK.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2591232</td>
|
|
<td>010148a8d44b449ea4a6196fb68df83c</td>
|
|
<td>Azure Data Studio</td>
|
|
<td>1.28.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 13:00:20 +0000 UTC</td>
|
|
<td>2025-08-21 13:00:20 +0000 UTC</td>
|
|
<td>6d21310644af6d6a06e634af48d09614c875539d</td>
|
|
<td>a7b58b3fe6fc66e6e1f197619cd863eab3fec98e05d4407fcb581f8e1450cab422d6e6ae2cca85fdb8662d319a15a1e7</td>
|
|
<td>8a66f47d47f012eea37b1be5a31a71abbf387892b9950d760c3ade68026b0cdf5ef96e03183add6aeaead11f2876fb7cd817f059f691108949614252eb6b8ac1</td>
|
|
<td>2025-08-21 13:00:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-06-22 12:04:36 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 13:00:32.768 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2f9e817844b4d82cf8abae043af1a9572cb39d52185f1a337ad12a15c83d01f8</td>
|
|
<td>[68a34b98a6132bf659cce5ba, 68a34df0b71eea1289980a1f]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.HighContrastBlack.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[3d755d8629f654f4625ea2529a0846e3]</td>
|
|
<td>[eab2bab31f1de9a244d26909b0807d6eca76f369]</td>
|
|
<td>[fc26c1f4ab858d27489f3bc54433e134b73d5c28a70702e28c91191a3e4c85762e2330cbfe285fd4c351f32d15fa1ff7]</td>
|
|
<td>[a02fc068c7e917bf6420c2f6199e7a9f16cf4a144674b150fc5f6ee0ed493ad9f9fdecca8ec4f1ad016d1032302eaaa96b4155cb9bec710ad49f8328b435cff5]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.HighContrastBlack.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.HighContrastBlack</td>
|
|
<td>253952</td>
|
|
<td>3d755d8629f654f4625ea2529a0846e3</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>eab2bab31f1de9a244d26909b0807d6eca76f369</td>
|
|
<td>fc26c1f4ab858d27489f3bc54433e134b73d5c28a70702e28c91191a3e4c85762e2330cbfe285fd4c351f32d15fa1ff7</td>
|
|
<td>a02fc068c7e917bf6420c2f6199e7a9f16cf4a144674b150fc5f6ee0ed493ad9f9fdecca8ec4f1ad016d1032302eaaa96b4155cb9bec710ad49f8328b435cff5</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-21 16:35:44 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e24f5990f0ba6248fa08bf4d4782db2aad9974e518c0e1e233efa92494be937</td>
|
|
<td>[68a50f31981abdebabc95a70]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ek2lcwm3.ikq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T23:56:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ek2lcwm3.ikq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:56:21 +0000 UTC</td>
|
|
<td>2025-08-19 23:56:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:56:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e2080bfb96ee899e9ddbc4d7d3fc32bb0c8b70e167c44af62861c3b6bba2753</td>
|
|
<td>[68a16bd60756fe54a9918fa2, 68a2149cb58debea69d7c74d, 68a2bd5ff793a9057f329c08, 68a3663261f8067c48423ebb, 68a40efceddb3a9f1a71a604, 68a4b7cd36bc5d38057e2369]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zAutoUpdate.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[9f75a49b3b2b2629b9292a2500a37bb7]</td>
|
|
<td>[bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3]</td>
|
|
<td>[317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81]</td>
|
|
<td>[8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zAutoUpdate.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>56632</td>
|
|
<td>9f75a49b3b2b2629b9292a2500a37bb7</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3</td>
|
|
<td>317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81</td>
|
|
<td>8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:17 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e04fd3951fbb534d097ed620d224eb5876826669ab7d633fda596e061b7a985</td>
|
|
<td>[68a52f3a711130a12eb554ea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3mWebTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm4pscpp.fzz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:13:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mm4pscpp.fzz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:13:10 +0000 UTC</td>
|
|
<td>2025-08-20 02:13:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:13:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>33a3d3d9bd487908bea1e47b090ea5599628d2f4ee8fe3fda515360828377884</td>
|
|
<td>[68a48674c4cb2500be692612, 68a48674c4cb2500be692628]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.DataAccessLayer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[a7216a138fc22c7273f6edec8e3b41a6]</td>
|
|
<td>[115294144ead55ae4d0975d87bf46e84d568a87b]</td>
|
|
<td>[6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8]</td>
|
|
<td>[ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.DataAccessLayer.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.DataAccessLayer</td>
|
|
<td>59648</td>
|
|
<td>a7216a138fc22c7273f6edec8e3b41a6</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>115294144ead55ae4d0975d87bf46e84d568a87b</td>
|
|
<td>6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8</td>
|
|
<td>ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>333903c7d22a27098e45fc64b77a264aa220605cfbd3e329c200d7e4b42c881c</td>
|
|
<td>[68a31c5575f8857a10efc136]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\workday\lib\BouncyCastle.Crypto.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:29Z]</td>
|
|
<td>[f0b3e112ce4807a28e2b5d66a840ed7f]</td>
|
|
<td>[54a6743781fd4ceb720331fce92f16186931192d]</td>
|
|
<td>[9522bd52af2523db8504fbb8574a63aabf6ef291a2df8793eccdef28b13f20ab9f1df611778854ffb654d943b3ffcf15]</td>
|
|
<td>[dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BouncyCastle.Crypto.dll</td>
|
|
<td>C:\ProgramData\CareFusion\DepConInstall\</td>
|
|
<td>BouncyCastle.Crypto</td>
|
|
<td>2609152</td>
|
|
<td>f0b3e112ce4807a28e2b5d66a840ed7f</td>
|
|
<td>Bouncy Castle for .NET</td>
|
|
<td>1.8.9</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-11 02:17:36 +0000 UTC</td>
|
|
<td>2024-12-11 02:17:36 +0000 UTC</td>
|
|
<td>54a6743781fd4ceb720331fce92f16186931192d</td>
|
|
<td>9522bd52af2523db8504fbb8574a63aabf6ef291a2df8793eccdef28b13f20ab9f1df611778854ffb654d943b3ffcf15</td>
|
|
<td>dc8ec9754c5e86f7e54e75ff3e5859c1b057f90e9c41788037b944a5db2cb3b70060763d0efcbe55ec595bcc47a9c0ff847a4876821470ca1659c31afd5b0190</td>
|
|
<td>2025-06-12 20:35:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-12 20:24:56 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-12 20:46:38.174 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3307319ddc221f1b23e8a1445aef10d2d2308e0ec46977b3f17cbb15c0ef335b</td>
|
|
<td>[68a472a799ad3734d804e2f9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-io-1.3.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[2e55c05d3386889af97caae4517ac9df]</td>
|
|
<td>[b90b6ac57cf27a2858eaa490d02ba7945d18ca7b]</td>
|
|
<td>[f274993847fd46b8aa27e96c812fae0aacd0934fcd5670ba366b451b74079a21f295bb62ff676e7c7bdca13fe536d723]</td>
|
|
<td>[fbefc32530253cc3fe5638da036a85567cdce9c9f748522725f58b349b07a37b474e16cec329b333b7f720e3c385a2ff7024d51d0a93bc26d201726f559e42f1]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>commons-io-1.3.1.jar</td>
|
|
<td>C:\glassfish4\glassfish\lib\install\applications\__admingui\WEB-INF\extra\</td>
|
|
<td></td>
|
|
<td>83613</td>
|
|
<td>2e55c05d3386889af97caae4517ac9df</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-01-14 16:36:43 +0000 UTC</td>
|
|
<td>2015-09-19 17:06:20 +0000 UTC</td>
|
|
<td>b90b6ac57cf27a2858eaa490d02ba7945d18ca7b</td>
|
|
<td>f274993847fd46b8aa27e96c812fae0aacd0934fcd5670ba366b451b74079a21f295bb62ff676e7c7bdca13fe536d723</td>
|
|
<td>fbefc32530253cc3fe5638da036a85567cdce9c9f748522725f58b349b07a37b474e16cec329b333b7f720e3c385a2ff7024d51d0a93bc26d201726f559e42f1</td>
|
|
<td>2025-05-01 15:25:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-07-29 22:36:17 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 15:28:55.484 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>33061af8d2a07379d452f8f0fddcbbf518428dfd3b83d9e2d479c1948020795b</td>
|
|
<td>[68a472b1b022648922e23588]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-core-2.3.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[c97c33a3fa1ba9c96b7fd640337a2361]</td>
|
|
<td>[d044c784e41d026778693fb44a8026c1fd9a7506]</td>
|
|
<td>[b9f74db7d73f19099497fe325affda1eea54c614b6bffc168fefd39aef69d96f27346e81eece79e8637d60d6cfb3df9e]</td>
|
|
<td>[c09afdcd1ff46605975ef0baaf2e81fbb8016f2d3ead844db68c4142bdebf251a500972c1bc9f4311fd14ed5ed2a2a61533d0c459f535d5960284cf1cd38cae3]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jaxb-core-2.3.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxb-core-2.3.0.jar-bc61f504a44bfe3a\</td>
|
|
<td></td>
|
|
<td>255502</td>
|
|
<td>c97c33a3fa1ba9c96b7fd640337a2361</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>d044c784e41d026778693fb44a8026c1fd9a7506</td>
|
|
<td>b9f74db7d73f19099497fe325affda1eea54c614b6bffc168fefd39aef69d96f27346e81eece79e8637d60d6cfb3df9e</td>
|
|
<td>c09afdcd1ff46605975ef0baaf2e81fbb8016f2d3ead844db68c4142bdebf251a500972c1bc9f4311fd14ed5ed2a2a61533d0c459f535d5960284cf1cd38cae3</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-06 23:15:17 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 12:45:43.084 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>32f5d6d34be928b478ea57af9b97eb06222f7782ef96890ddacb6e27a78c3ed3</td>
|
|
<td>[68a6c3f97697b1e2890aed9e]</td>
|
|
<td>[2]</td>
|
|
<td>[sccmcpa]</td>
|
|
<td>[vm-POWERSHELL]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\BMCR5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T07:00:01Z]</td>
|
|
<td>[289218942f0009b9b8521baa43479f70]</td>
|
|
<td>[9e7627966ff79611e91191280095c648fb8160fe]</td>
|
|
<td>[d483dd88d880db13bc150cbd5f24f0f98002c9f13ceb9dd07b9fd924bc4db7622de925e5f49b3e3cf5cfa09a0c1ba1a8]</td>
|
|
<td>[95c692501307cb66293b5c0da1838697de90e17cda42f725dde765c8e09465d8650a3b946857cf0b47ded115cfcccf3e5188b773941608e73abf40d5b442a6af]</td>
|
|
<td>[172.17.251.192]</td>
|
|
<td>[172.17.251.192]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BMCR5.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>3852</td>
|
|
<td>289218942f0009b9b8521baa43479f70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-01-12 13:52:57 +0000 UTC</td>
|
|
<td>2023-02-16 15:31:05 +0000 UTC</td>
|
|
<td>9e7627966ff79611e91191280095c648fb8160fe</td>
|
|
<td>d483dd88d880db13bc150cbd5f24f0f98002c9f13ceb9dd07b9fd924bc4db7622de925e5f49b3e3cf5cfa09a0c1ba1a8</td>
|
|
<td>95c692501307cb66293b5c0da1838697de90e17cda42f725dde765c8e09465d8650a3b946857cf0b47ded115cfcccf3e5188b773941608e73abf40d5b442a6af</td>
|
|
<td>2025-08-21 07:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>32ddd6f42f62b47cab7ac4493310b7cf3203726c13615f7f57e289fc623fedd0</td>
|
|
<td>[68a48674c4cb2500be69263f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Data.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[2ab8001eba88698a847e929579af07ac]</td>
|
|
<td>[d5b67246ce5168b6e967a0b52138ff0cae92f784]</td>
|
|
<td>[f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7]</td>
|
|
<td>[9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Data.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Data</td>
|
|
<td>5632</td>
|
|
<td>2ab8001eba88698a847e929579af07ac</td>
|
|
<td>Stryker.iBedServer.Clinical.Data</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>d5b67246ce5168b6e967a0b52138ff0cae92f784</td>
|
|
<td>f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7</td>
|
|
<td>9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>32a27f811c9d40b323b4038a2955c537a32f8ebf1d27dd7b84531f1e52f8015d</td>
|
|
<td>[68a472b1b022648922e23574]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\EmSetupApi-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[95356690b1b791a53c150c8f439ab707]</td>
|
|
<td>[0348c2c6ed6da8693981588795b5dadf1f4c825f]</td>
|
|
<td>[1196637bdff6fcc7a08b021f581e1406ef6097bc91e47c4dc2815f6c6ec0433bf074bd5a56c6dc5ba213e372e67c54ef]</td>
|
|
<td>[eec40f727216648d609280169860ed9a6ca279a20c612acb4476e5e8eadcec208d9f8d1391683efe90613c6777bc2c00c111c37b283c7f962c82d825f737e90e]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EmSetupApi-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\EmSetupApi-20.1.2.14.jar-d28dbbd0356db56f\</td>
|
|
<td></td>
|
|
<td>137050</td>
|
|
<td>95356690b1b791a53c150c8f439ab707</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>0348c2c6ed6da8693981588795b5dadf1f4c825f</td>
|
|
<td>1196637bdff6fcc7a08b021f581e1406ef6097bc91e47c4dc2815f6c6ec0433bf074bd5a56c6dc5ba213e372e67c54ef</td>
|
|
<td>eec40f727216648d609280169860ed9a6ca279a20c612acb4476e5e8eadcec208d9f8d1391683efe90613c6777bc2c00c111c37b283c7f962c82d825f737e90e</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>326b621474786c3a956a35665f74162d6368f683f36a3279c8ba87ff4db0c088</td>
|
|
<td>[68a26ec274eb3d0bf454e3f7, 68a26ec274eb3d0bf454e3f8, 68a3dc7b3a4d559703d13f32, 68a3dc7b3a4d559703d13f33, 68a54a317a345dcf1b41bfa9, 68a54a317a345dcf1b41bfaa, 68a54a317a345dcf1b41bfab, 68a6b943a019f30e13887e91, 68a6b943a019f30e13887e92, 68a6b943a019f30e13887e93]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-17T23:59:47Z, 2025-08-17T23:59:50Z, 2025-08-19T02:00:28Z, 2025-08-19T02:00:30Z, 2025-08-20T04:00:28Z, 2025-08-20T04:00:30Z, 2025-08-20T04:00:31Z, 2025-08-21T06:00:59Z, 2025-08-21T06:01:01Z, 2025-08-21T06:01:02Z]</td>
|
|
<td>[5fbdd10ee7659f1aee5335bd7e198fb9]</td>
|
|
<td>[c20c64d0f39da127033b6d188e35ec7ff4223707]</td>
|
|
<td>[09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd]</td>
|
|
<td>[56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShell_profile.ps1</td>
|
|
<td>C:\Windows\System32\WindowsPowerShell\v1.0\</td>
|
|
<td></td>
|
|
<td>86</td>
|
|
<td>5fbdd10ee7659f1aee5335bd7e198fb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-07-30 20:39:44 +0000 UTC</td>
|
|
<td>2018-07-30 20:39:44 +0000 UTC</td>
|
|
<td>c20c64d0f39da127033b6d188e35ec7ff4223707</td>
|
|
<td>09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd</td>
|
|
<td>56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb</td>
|
|
<td>2025-08-09 08:03:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>322b2b5c4044e2657eb4e703d336eac4e2cf0f8ba8fa111c62d0474eb76db2a9</td>
|
|
<td>[68a4ccc785b914a60d739e44, 68a4ce1fc826337212f53be4, 68a4d07753a851daf11e692e, 68a4d07753a851daf11e6941, 68a4d2d1ff2b441b84428126, 68a4d2d1ff2b441b84428139]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setroot.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[d3087075a6dd224443a1f6aac8e03744]</td>
|
|
<td>[78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5]</td>
|
|
<td>[e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579]</td>
|
|
<td>[fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot.cmd</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\</td>
|
|
<td></td>
|
|
<td>937</td>
|
|
<td>d3087075a6dd224443a1f6aac8e03744</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:06 +0000 UTC</td>
|
|
<td>2016-12-02 07:18:54 +0000 UTC</td>
|
|
<td>78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5</td>
|
|
<td>e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579</td>
|
|
<td>fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>321acf2e7ad2071fa443468fce5535f6614be43029bd05b5c38e86e0ef393a11</td>
|
|
<td>[68a4b0fb13fac5171eeef0d8]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.DTO.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[71da969b9025ad135aef8a5a5df701be]</td>
|
|
<td>[e0a0af76470e1bfe566cf15d4590c4401e6bac98]</td>
|
|
<td>[cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408]</td>
|
|
<td>[c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Pegasus.DTO.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td></td>
|
|
<td>740352</td>
|
|
<td>71da969b9025ad135aef8a5a5df701be</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:00 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:49 +0000 UTC</td>
|
|
<td>e0a0af76470e1bfe566cf15d4590c4401e6bac98</td>
|
|
<td>cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408</td>
|
|
<td>c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31f330b81ab52a1bdb723d63871b80d93b13e89fb24a04986909f54abb7eae82</td>
|
|
<td>[68a472cff502bbc3c30ebf3f, 68a474e54bf464a98201b8d1, 68a474e54bf464a98201b8d3]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\SuperPutty\WeifenLuo.WinFormsUI.Docking.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\SuperPutty\SuperPutty.exe]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:49:18Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z]</td>
|
|
<td>[d648dd097b893b61d4ca48a9c46d1ad3]</td>
|
|
<td>[6c74bee5592c503e7d375478bb08922203b4b327]</td>
|
|
<td>[ae92aecfeb8c9ab586691f0f7a59a50c7f449544645d3778321c08744fc1cec16e8e6a44bdeb5652d0f0d65696d657b6]</td>
|
|
<td>[81ad3300efb430582a9e3f8e3e19ee0897ab3aa7166d48917f15c16b40987817988a4716078a2b29aee3097a5025edd5753bacce10edbeb1e629e13d6af4bc42]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WeifenLuo.WinFormsUI.Docking.dll</td>
|
|
<td>C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\</td>
|
|
<td>DockPanel Suite for .Net</td>
|
|
<td>364544</td>
|
|
<td>d648dd097b893b61d4ca48a9c46d1ad3</td>
|
|
<td>DockPanel Suite</td>
|
|
<td>2.9.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-23 18:59:38 +0000 UTC</td>
|
|
<td>2024-04-16 15:29:39 +0000 UTC</td>
|
|
<td>6c74bee5592c503e7d375478bb08922203b4b327</td>
|
|
<td>ae92aecfeb8c9ab586691f0f7a59a50c7f449544645d3778321c08744fc1cec16e8e6a44bdeb5652d0f0d65696d657b6</td>
|
|
<td>81ad3300efb430582a9e3f8e3e19ee0897ab3aa7166d48917f15c16b40987817988a4716078a2b29aee3097a5025edd5753bacce10edbeb1e629e13d6af4bc42</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-06 09:25:37 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31b5da4436dcda99daa9b4d389df222f22f4709159f9165c955fe24fd5323762</td>
|
|
<td>[68a3146b5f0c41860c8c8556, 68a3146b5f0c41860c8c857a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ast.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d5f2228dec6e8dc3cbdc9862ec1605cd]</td>
|
|
<td>[79342d19808ee815e433f96728b0e4d3ff1e5c29]</td>
|
|
<td>[86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06]</td>
|
|
<td>[868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ast.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>102841</td>
|
|
<td>d5f2228dec6e8dc3cbdc9862ec1605cd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>79342d19808ee815e433f96728b0e4d3ff1e5c29</td>
|
|
<td>86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06</td>
|
|
<td>868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31ace35747ecced749c928084db3f90c66e95bd9602971bb5ceef131a953689f</td>
|
|
<td>[68a389627bcaf39ed5409b94]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Onedriveownership.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2269.866]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T20:13:13Z]</td>
|
|
<td>[9aae1bdf85a8905cf2d96a5f8ef25933]</td>
|
|
<td>[3065aa4cbf9f3a2341c95212ea1891817294a142]</td>
|
|
<td>[c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e]</td>
|
|
<td>[9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Onedriveownership.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>910</td>
|
|
<td>9aae1bdf85a8905cf2d96a5f8ef25933</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-08 20:39:11 +0000 UTC</td>
|
|
<td>2025-04-08 20:39:11 +0000 UTC</td>
|
|
<td>3065aa4cbf9f3a2341c95212ea1891817294a142</td>
|
|
<td>c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e</td>
|
|
<td>9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16</td>
|
|
<td>2025-08-18 20:13:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3196423864811fbe22bf53f80cc68526cf48ea70190a212e4cc48db649034591</td>
|
|
<td>[68a50ddd41a24e74bb2aa5d2]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\NellcorPuritanBennettB_5_0_3_6.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:50:47Z]</td>
|
|
<td>[a95a1bbcab7cae689156d805a65bdd9e]</td>
|
|
<td>[b55cf6fa2977d2fc1917b131c20390b3c1f26613]</td>
|
|
<td>[66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f]</td>
|
|
<td>[ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NellcorPuritanBennettB_5_0_3_6.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>832000</td>
|
|
<td>a95a1bbcab7cae689156d805a65bdd9e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:50:41 +0000 UTC</td>
|
|
<td>2025-08-19 23:50:42 +0000 UTC</td>
|
|
<td>b55cf6fa2977d2fc1917b131c20390b3c1f26613</td>
|
|
<td>66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f</td>
|
|
<td>ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220</td>
|
|
<td>2025-08-19 23:50:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>318d814bff375eefc6e29af2e0c2de1b068f1446506cc5f35016243e3a35300f</td>
|
|
<td>[68a1ab83995f21981882f87f, 68a2fd0889defb6e59ac74ce, 68a44ea8ec4473d55579feaa, 68a5a03ec841a3410bc8c339, 68a6f1e15639a382a0bc50f8]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\EpicHHEnvSUP_SmartUpdate.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T10:06:06Z, 2025-08-18T10:06:06Z, 2025-08-19T10:06:06Z, 2025-08-20T10:06:06Z, 2025-08-21T10:06:06Z]</td>
|
|
<td>[8594a55773a5d5e9c9180136966b5739]</td>
|
|
<td>[596dbf0a2adc99c52a2c70c81b17d94db0c605e0]</td>
|
|
<td>[35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc]</td>
|
|
<td>[7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvSUP_SmartUpdate.bat</td>
|
|
<td>C:\HomeHealth\</td>
|
|
<td></td>
|
|
<td>94</td>
|
|
<td>8594a55773a5d5e9c9180136966b5739</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:46:58 +0000 UTC</td>
|
|
<td>596dbf0a2adc99c52a2c70c81b17d94db0c605e0</td>
|
|
<td>35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc</td>
|
|
<td>7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8</td>
|
|
<td>2025-08-09 10:06:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3183ca151646505652e1fc5a9b93bc995d5e96e9edb292db6b3b408675579dcb</td>
|
|
<td>[68a4ccc785b914a60d739e52, 68a4ce1fc826337212f53bef, 68a4d07753a851daf11e693a, 68a4d07753a851daf11e6950, 68a4d2d1ff2b441b84428132, 68a4d2d1ff2b441b84428148]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\Process.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[d2f5da45fcdf1a8df76585382af60f4d]</td>
|
|
<td>[8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e]</td>
|
|
<td>[3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad]</td>
|
|
<td>[813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Process.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>d2f5da45fcdf1a8df76585382af60f4d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:50 +0000 UTC</td>
|
|
<td>8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e</td>
|
|
<td>3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad</td>
|
|
<td>813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>369f51727e50dcf477a40a933c8267fe16a92545b1338a513585d445367b7fc7</td>
|
|
<td>[68a71d98771132224a617f87]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.UI.ViewModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:41Z]</td>
|
|
<td>[66179cdf28f4b1c4a642cb3cb643d1f6]</td>
|
|
<td>[e254511fba63b72ce68c42fd81c0b68d19eb238c]</td>
|
|
<td>[08ac91c202280cd79fe77b6bda4417ec52b4556a22650ed967f9cb3286e82672a473a1a7b26e5590050d1f4d9939d9d8]</td>
|
|
<td>[dacfde5491621f7bf9c310e0765a411cbe7773106960333cb5350b7831d614fc3119e9deb5283ff845bfec37c23c21b444a6b5cad95a5d2c31239c885a60d829]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.UI.ViewModel.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.UI.ViewModel</td>
|
|
<td>11776</td>
|
|
<td>66179cdf28f4b1c4a642cb3cb643d1f6</td>
|
|
<td>VideoOS.Mobile.UI.ViewModel</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:02:02 +0000 UTC</td>
|
|
<td>2020-05-11 15:02:02 +0000 UTC</td>
|
|
<td>e254511fba63b72ce68c42fd81c0b68d19eb238c</td>
|
|
<td>08ac91c202280cd79fe77b6bda4417ec52b4556a22650ed967f9cb3286e82672a473a1a7b26e5590050d1f4d9939d9d8</td>
|
|
<td>dacfde5491621f7bf9c310e0765a411cbe7773106960333cb5350b7831d614fc3119e9deb5283ff845bfec37c23c21b444a6b5cad95a5d2c31239c885a60d829</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-08-31 07:41:59 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>369ed67f529db9ddc1b609f2c9340263faa72cd366a4e56589df29de1df74c5c</td>
|
|
<td>[68a48674c4cb2500be692611, 68a48674c4cb2500be692627]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Stryker.iBedServer.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[597d9c63bf971dd23ead4d6abf7295b8]</td>
|
|
<td>[9ba9d7d94b70830e230ef01b19bab207b253f1d5]</td>
|
|
<td>[442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5]</td>
|
|
<td>[8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Common.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>38664</td>
|
|
<td>597d9c63bf971dd23ead4d6abf7295b8</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>9ba9d7d94b70830e230ef01b19bab207b253f1d5</td>
|
|
<td>442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5</td>
|
|
<td>8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3691c63ee84b2628e0c021418d0dee979b50ce550178db3efc5e19fe5bad5b4c</td>
|
|
<td>[68a472cff502bbc3c30ebf3e, 68a474e54bf464a98201b8d0, 68a474e54bf464a98201b8d2]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\SuperPutty\log4net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\SuperPutty\SuperPutty.exe]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:49:17Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z]</td>
|
|
<td>[f69c36bbf1220bdd2a114f4abc6b0fc1]</td>
|
|
<td>[d0bb80306ce3dc12cc0c893e28fef27d721c1b7e]</td>
|
|
<td>[9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f]</td>
|
|
<td>[6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4net.dll</td>
|
|
<td>C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\</td>
|
|
<td>Apache log4net for .NET Framework 2.0</td>
|
|
<td>311296</td>
|
|
<td>f69c36bbf1220bdd2a114f4abc6b0fc1</td>
|
|
<td>log4net</td>
|
|
<td>1.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-23 18:59:50 +0000 UTC</td>
|
|
<td>2024-04-16 15:29:39 +0000 UTC</td>
|
|
<td>d0bb80306ce3dc12cc0c893e28fef27d721c1b7e</td>
|
|
<td>9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f</td>
|
|
<td>6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>36584a0b85a7d69a4e99e80ffd83d0860b0769d634d7e6c5e03dad289d61c026</td>
|
|
<td>[68a34b98a6132bf659cce5b8, 68a34df0b71eea1289980a1d]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Black.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[a436424bbdddc4db06320959ee1cfb6d]</td>
|
|
<td>[20408e8bff0281afd498580863ace0478c8367cf]</td>
|
|
<td>[a68dd6bea9a81aec680b701fd8e02cf4490b4d832b80c9ffa19bd6a7a3d8feb47af89a92e9e3df25cddca6abae543263]</td>
|
|
<td>[eadfd5592b03efff930d9c73b81429613b2fba8af82f4d387ebfdba36d2962d64b7a3acc02af99b17ea31a4ca1fe465a70c7175f8eec74924427917536610059]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Black.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Black</td>
|
|
<td>756224</td>
|
|
<td>a436424bbdddc4db06320959ee1cfb6d</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>20408e8bff0281afd498580863ace0478c8367cf</td>
|
|
<td>a68dd6bea9a81aec680b701fd8e02cf4490b4d832b80c9ffa19bd6a7a3d8feb47af89a92e9e3df25cddca6abae543263</td>
|
|
<td>eadfd5592b03efff930d9c73b81429613b2fba8af82f4d387ebfdba36d2962d64b7a3acc02af99b17ea31a4ca1fe465a70c7175f8eec74924427917536610059</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:17 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>36490d3c9471838f3c20f0d365fb262e57a7b0a20eee7edd0b4e4cff4df5a381</td>
|
|
<td>[68a1e0bc5a612562ec7682af]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_diuxbi12.wl4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:01:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_diuxbi12.wl4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:01:20 +0000 UTC</td>
|
|
<td>2025-08-17 14:01:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:01:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>35831e10050275f4a36fb93aa4db13d2edf34749154ef4636a29477d9f30c565</td>
|
|
<td>[68a4ccc785b914a60d739e43, 68a4ce1fc826337212f53be3, 68a4d07753a851daf11e692d, 68a4d07753a851daf11e6940, 68a4d2d1ff2b441b84428125, 68a4d2d1ff2b441b84428138]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\Qdx_work\custom_scripts\CloverleafInterfaceRecycle.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[829df969d661e3a13c15827ed7d696a3]</td>
|
|
<td>[b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b]</td>
|
|
<td>[d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91]</td>
|
|
<td>[95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CloverleafInterfaceRecycle.cmd</td>
|
|
<td>D:\Qdx_work\custom_scripts\</td>
|
|
<td></td>
|
|
<td>1212</td>
|
|
<td>829df969d661e3a13c15827ed7d696a3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-03-23 18:22:50 +0000 UTC</td>
|
|
<td>2020-03-23 18:22:50 +0000 UTC</td>
|
|
<td>b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b</td>
|
|
<td>d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91</td>
|
|
<td>95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>357fd5748acb778b1de6237309eb65fe0290be08d5e32fc02134e884c12a1306</td>
|
|
<td>[68a4855388937a93ff144375]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[3ba54cdf80da731b9f6ebe6c649cf015]</td>
|
|
<td>[8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6]</td>
|
|
<td>[9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8]</td>
|
|
<td>[ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Core.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Core</td>
|
|
<td>12800</td>
|
|
<td>3ba54cdf80da731b9f6ebe6c649cf015</td>
|
|
<td>Stryker.iBedServer.Authentication.Core</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6</td>
|
|
<td>9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8</td>
|
|
<td>ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>355e3be9137603e9406af1b3997df90c37792223758a0296e3e1d445eee50130</td>
|
|
<td>[68a48674c4cb2500be69263c, 68a48674c4cb2500be69264e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Formatting.Compact.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Formatting.Compact.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[e325b6bbf9e72388bec675215ea5833f]</td>
|
|
<td>[6acca41bbb6bba20550815353a03fdace8750697]</td>
|
|
<td>[b067bb201c025089b927dab4c8fd6497f8434a227734b1bd82e2a74888db5923e0d59399c65e296db6cbfe2ccee368fe]</td>
|
|
<td>[f24db26199445f962b88260d56f0525298010bc2eda451ba283beb8534422b1817562454ada9f6c96e6eb001399b31eeec7e9c16e27cdd8f91526ab9e543f4df]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Formatting.Compact.dll</td>
|
|
<td>C:\ProgramData\Laurel Bridge Software\Compass\www\</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>8704</td>
|
|
<td>e325b6bbf9e72388bec675215ea5833f</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>1.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>6acca41bbb6bba20550815353a03fdace8750697</td>
|
|
<td>b067bb201c025089b927dab4c8fd6497f8434a227734b1bd82e2a74888db5923e0d59399c65e296db6cbfe2ccee368fe</td>
|
|
<td>f24db26199445f962b88260d56f0525298010bc2eda451ba283beb8534422b1817562454ada9f6c96e6eb001399b31eeec7e9c16e27cdd8f91526ab9e543f4df</td>
|
|
<td>2025-04-29 13:21:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-17 10:21:57 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-29 06:25:09.433 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3554782b0252734754cb8fc6c12b1f6561ae7b70d0158ce40cfe36f9f7bcba5c</td>
|
|
<td>[68a31df4554d4b0dc35a15ad]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:34:58Z]</td>
|
|
<td>[c85702cbbe5bef4fbdffdd797532d073]</td>
|
|
<td>[8dcf05881e2b6cb1764d87d63a94201380891187]</td>
|
|
<td>[5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a]</td>
|
|
<td>[d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>c85702cbbe5bef4fbdffdd797532d073</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:34:57 +0000 UTC</td>
|
|
<td>8dcf05881e2b6cb1764d87d63a94201380891187</td>
|
|
<td>5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a</td>
|
|
<td>d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a</td>
|
|
<td>2025-08-18 12:35:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3549bd34bf9410489c6cb1ddd32d5fac8ca1c2eef1db975d40d7957cc15ca81d</td>
|
|
<td>[68a71d98771132224a617f86]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.UI.Mobile.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:41Z]</td>
|
|
<td>[50703aa2aed8f66888228f50fb113350]</td>
|
|
<td>[4b296e74deab8d2e24695dbe20dac26e33c79c49]</td>
|
|
<td>[12f62289035dbea4e81c9990e8d9624383636d020be7dcef5650b34e18e6f23ff883d39e028d9d13bf454f7697e88323]</td>
|
|
<td>[aa60600b00dcb7b6ecca70b918b0c2a0a1bf2d1b7e2ce089ba7a59f8a171a47f2ff9e457a0da1a1dc4f4608b20a57c78ba795aa0d015c9ec78e6d3a9636c8392]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.UI.Mobile.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.UI.Mobile</td>
|
|
<td>88576</td>
|
|
<td>50703aa2aed8f66888228f50fb113350</td>
|
|
<td>UI library assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:02:06 +0000 UTC</td>
|
|
<td>2020-05-11 15:02:06 +0000 UTC</td>
|
|
<td>4b296e74deab8d2e24695dbe20dac26e33c79c49</td>
|
|
<td>12f62289035dbea4e81c9990e8d9624383636d020be7dcef5650b34e18e6f23ff883d39e028d9d13bf454f7697e88323</td>
|
|
<td>aa60600b00dcb7b6ecca70b918b0c2a0a1bf2d1b7e2ce089ba7a59f8a171a47f2ff9e457a0da1a1dc4f4608b20a57c78ba795aa0d015c9ec78e6d3a9636c8392</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-10-22 06:12:51 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>35318a9ab7f60d956cd28206294996eff20bd8bf818a962b29b6c9f61407e40f</td>
|
|
<td>[68a1abb04b15d6efe3e372b4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1nabrctk.jfe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1nabrctk.jfe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:03 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>34ed77bd9b38d618a2ce47893a58840cb425e0a575f531fa6a9e86af4af738c2</td>
|
|
<td>[68a4864ff17c458cfe4c9f0b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedV_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>["C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-19T14:02:35Z]</td>
|
|
<td>[e8b2a9bad33ebe53ffc666fc129e0697]</td>
|
|
<td>[c85a5eabbb0ae0cd9d748394f38b8b58a77723b8]</td>
|
|
<td>[415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b]</td>
|
|
<td>[9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.Vision.WhiteboardApi.exe</td>
|
|
<td>C:\Stryker\Stryker Vision\WhiteboardApi\</td>
|
|
<td>Stryker.Vision.WhiteboardApi</td>
|
|
<td>140800</td>
|
|
<td>e8b2a9bad33ebe53ffc666fc129e0697</td>
|
|
<td>Stryker.Vision.WhiteboardApi</td>
|
|
<td>1.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-22 11:41:12 +0000 UTC</td>
|
|
<td>2024-10-22 11:41:12 +0000 UTC</td>
|
|
<td>c85a5eabbb0ae0cd9d748394f38b8b58a77723b8</td>
|
|
<td>415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b</td>
|
|
<td>9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33</td>
|
|
<td>2025-05-20 14:56:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>34d12dc79fcede9d992ec588dd1c36b3cf98c2193e81e1bdd00b3e512eb0c0a7</td>
|
|
<td>[68a34b98a6132bf659cce5be, 68a34df0b71eea1289980a23]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2013Light.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[56accd290c79e8c4d6e4471c1c02cd59]</td>
|
|
<td>[268c37ffeea68e27fcc1c1994820068e8dcba272]</td>
|
|
<td>[1085ce2659347fd24079fe99912d86ed5e0c66bd51ee88d15ac9586a7b4f3e3f8b08463bdb731859ba57054bb42b9538]</td>
|
|
<td>[1da12aa8e1da32ae7df7d6c4f3853997cf5d886ae4b4a5bb6aa0021c534fc813ce1563e0067d2fd64ea7f6b1d26b41a67f51763c44bed6f23674ccabac3845df]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Office2013Light.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Office2013Light</td>
|
|
<td>230400</td>
|
|
<td>56accd290c79e8c4d6e4471c1c02cd59</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>268c37ffeea68e27fcc1c1994820068e8dcba272</td>
|
|
<td>1085ce2659347fd24079fe99912d86ed5e0c66bd51ee88d15ac9586a7b4f3e3f8b08463bdb731859ba57054bb42b9538</td>
|
|
<td>1da12aa8e1da32ae7df7d6c4f3853997cf5d886ae4b4a5bb6aa0021c534fc813ce1563e0067d2fd64ea7f6b1d26b41a67f51763c44bed6f23674ccabac3845df</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:16 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>346ccc90937cdf654b3d5f9ac9c7809c033d6eddb18e9bd2e22f6b423dd54df3</td>
|
|
<td>[68a19cd53b5aad0f9d7b2018]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_do1v2xwp.v3q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:11:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_do1v2xwp.v3q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:11:40 +0000 UTC</td>
|
|
<td>2025-08-17 09:11:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:11:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3448afe3dc141186a6c6b620a1311cba33347e39cca4770bd490971f1ad4b720</td>
|
|
<td>[68a5e788692da313f892a120, 68a5e788692da313f892a121, 68a5e788692da313f892a123, 68a5e788692da313f892a124, 68a5f7f47c4424bb71e0a54c, 68a5f7f47c4424bb71e0a54d, 68a614164c5f9631798f265b, 68a614164c5f9631798f265c, 68a6aa95090a80acc84f9b3c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, GEHEALTHCARE]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY, U-NVIEWPOINT01]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891, v2306.895, v2307.897, v2314.900]</td>
|
|
<td>["C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --install-setup elevated --original-installer C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\scc-ui;qm=0;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\ui-stream-server-2598735024688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179926804, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179928823, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184107212, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184110252, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191731809, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191733079, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --uninstall]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[2025-08-20T15:09:53Z, 2025-08-20T15:09:54Z, 2025-08-20T15:10:10Z, 2025-08-20T15:10:12Z, 2025-08-20T16:19:50Z, 2025-08-20T16:19:53Z, 2025-08-20T18:26:55Z, 2025-08-20T18:26:56Z, 2025-08-21T05:01:48Z]</td>
|
|
<td>[0c77dd32f741f6067ac3e399b74f593e]</td>
|
|
<td>[e15772572e59e0f8609c248781896b10b164c38a]</td>
|
|
<td>[01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b]</td>
|
|
<td>[349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bomgar-scc.exe</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>21975120</td>
|
|
<td>0c77dd32f741f6067ac3e399b74f593e</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:08 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:08 +0000 UTC</td>
|
|
<td>e15772572e59e0f8609c248781896b10b164c38a</td>
|
|
<td>01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b</td>
|
|
<td>349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36</td>
|
|
<td>2025-07-23 17:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-23 06:26:22 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-23 17:51:40.399 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>340b1e0cf28c5acf2a35fd68cce8eca955b13e2e3856924ec7010dc5ab33929d</td>
|
|
<td>[68a34b98a6132bf659cce5ac, 68a34df0b71eea1289980a11]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.UI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:11Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[4f4246307795f0720126aede580f6e25]</td>
|
|
<td>[e0ecd802924d2d01e3e0f7f2f0844b245d5664db]</td>
|
|
<td>[dd5d4d45ee09f79acb1998e96ab0616a928fe69e93a0244da331cf98c247be9f75bf01502a07a46c66d0c689fb4afc76]</td>
|
|
<td>[5fbc2654c22000f16b5caca83e1ef18e3926a7f0fb4055cf6ae45555a7552d283ff2890d13274e72efda41cd7fb3f6a36d4a1dd478310358dd377e00baeabfa6]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.UI.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Telerik.WinControls.UI</td>
|
|
<td>6871040</td>
|
|
<td>4f4246307795f0720126aede580f6e25</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-17 19:52:02 +0000 UTC</td>
|
|
<td>2023-03-17 19:52:02 +0000 UTC</td>
|
|
<td>e0ecd802924d2d01e3e0f7f2f0844b245d5664db</td>
|
|
<td>dd5d4d45ee09f79acb1998e96ab0616a928fe69e93a0244da331cf98c247be9f75bf01502a07a46c66d0c689fb4afc76</td>
|
|
<td>5fbc2654c22000f16b5caca83e1ef18e3926a7f0fb4055cf6ae45555a7552d283ff2890d13274e72efda41cd7fb3f6a36d4a1dd478310358dd377e00baeabfa6</td>
|
|
<td>2025-05-13 12:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-08 07:52:37 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-13 12:26:34.203 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38f61b0d050e3e36ff68ea1ed7a8dbeedbcb041e12ac3143dd62b76583f337f0</td>
|
|
<td>[68a22d269d187f48e0f4adf9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tsuxgn5g.ban.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:27:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tsuxgn5g.ban.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:27:28 +0000 UTC</td>
|
|
<td>2025-08-17 19:27:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:27:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38e07a6cfe8521a9bb62ef936912ec9893b76764259e17981c2a5ac93141cfb4</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20c]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindADObjectFromSID.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[70ba383b483595c149fabc6fd71ebb84]</td>
|
|
<td>[e7399b87d114d31ba0b5f7ac26958144347857f5]</td>
|
|
<td>[94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c]</td>
|
|
<td>[4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindADObjectFromSID.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>277</td>
|
|
<td>70ba383b483595c149fabc6fd71ebb84</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:20 +0000 UTC</td>
|
|
<td>2024-09-27 21:01:33 +0000 UTC</td>
|
|
<td>e7399b87d114d31ba0b5f7ac26958144347857f5</td>
|
|
<td>94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c</td>
|
|
<td>4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>389f405cfa66b26004484733937a22624782a5d86456e0c35e007b60ebc8e359</td>
|
|
<td>[68a472a799ad3734d804e2ed]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcmail-jdk14-138.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[e2c72e958b82b9373c13739c9f14009c]</td>
|
|
<td>[14ff2dfec8578f5f6838c4d6a77a86789afe5382]</td>
|
|
<td>[f2bfdfba137836e5bb03bb4fa7a9cadedc080b6fb066bc300750bc7cece257f3d952d7fd91ec317e09ad2f676051c0de]</td>
|
|
<td>[60ed9f6519b4cac617fb0968380c618b09bad399799632c112c864661d44e09aeb957482edba3fcb0de96ab61af5aef905a7548df21a72d3a6dc7d421e640bc4]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bcmail-jdk14-138.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>192035</td>
|
|
<td>e2c72e958b82b9373c13739c9f14009c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>14ff2dfec8578f5f6838c4d6a77a86789afe5382</td>
|
|
<td>f2bfdfba137836e5bb03bb4fa7a9cadedc080b6fb066bc300750bc7cece257f3d952d7fd91ec317e09ad2f676051c0de</td>
|
|
<td>60ed9f6519b4cac617fb0968380c618b09bad399799632c112c864661d44e09aeb957482edba3fcb0de96ab61af5aef905a7548df21a72d3a6dc7d421e640bc4</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-03 01:02:11 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>387c409da5f22f77cc7fbb0573725479735b7be82d5222adf27f95c32d216f83</td>
|
|
<td>[68a33f79adaf7aae4bae834a]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_NVR2]</td>
|
|
<td>[I-NNVRMANAGE]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\__PSScriptPolicyTest_bcrnu3px.2x4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T14:57:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.210]</td>
|
|
<td>[172.17.250.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bcrnu3px.2x4.ps1</td>
|
|
<td>C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\</td>
|
|
<td></td>
|
|
<td>82</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:57:56 +0000 UTC</td>
|
|
<td>2025-08-18 14:57:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:58:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>386fb9fefc2fb12d818524ec24b17da4af6f60f65ab46d19559debde3b35d34a</td>
|
|
<td>[68a3187c68080fcb17789d1a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikmcgc3u.bvf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:11:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikmcgc3u.bvf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:11:38 +0000 UTC</td>
|
|
<td>2025-08-18 12:11:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:11:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38658fc457cb062f25a6d2cc2d3f4f09c2b6124808493dcc3d4cd0c1f83693fe</td>
|
|
<td>[68a5bdfb54e99efcaf1f8dba]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\tmpEXO_zeon5nwa.typ.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:14Z]</td>
|
|
<td>[9d8a18d3a880992b126f3dd17953b974]</td>
|
|
<td>[6bb542e32d192bbae6733b08f789135c8ec45195]</td>
|
|
<td>[074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800]</td>
|
|
<td>[c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_zeon5nwa.typ.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\</td>
|
|
<td></td>
|
|
<td>2317071</td>
|
|
<td>9d8a18d3a880992b126f3dd17953b974</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:22:13 +0000 UTC</td>
|
|
<td>2025-08-20 12:22:13 +0000 UTC</td>
|
|
<td>6bb542e32d192bbae6733b08f789135c8ec45195</td>
|
|
<td>074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800</td>
|
|
<td>c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672</td>
|
|
<td>2025-08-20 12:22:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3835813efce6ebbdfdf7f3ba1c8f247707bb0b9440f8ef4ce8c504d3471524f3</td>
|
|
<td>[68a472a799ad3734d804e2db]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-bridge-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[bc1d0f4235f20ce8864eac37c0a3f9d4]</td>
|
|
<td>[fbe0ddb2479947b626488a9782a6cf10358a5316]</td>
|
|
<td>[b98b2ca9d261f7370056251a990fedd02aaee6b77b02ea6dcb3c15abe2c8944359f624731a6d3883b3964df1812ef357]</td>
|
|
<td>[18d4b260311c45a66d244d997a27d0da262afd273f209b6d6cb16026d6ee4562a2a09e1f9749dc404ff193b0e5bb81be6613b9cf7fa79790cd306a53f2581fe2]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-bridge-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>695968</td>
|
|
<td>bc1d0f4235f20ce8864eac37c0a3f9d4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>fbe0ddb2479947b626488a9782a6cf10358a5316</td>
|
|
<td>b98b2ca9d261f7370056251a990fedd02aaee6b77b02ea6dcb3c15abe2c8944359f624731a6d3883b3964df1812ef357</td>
|
|
<td>18d4b260311c45a66d244d997a27d0da262afd273f209b6d6cb16026d6ee4562a2a09e1f9749dc404ff193b0e5bb81be6613b9cf7fa79790cd306a53f2581fe2</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:08:29 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>382316c0afc6d7d32fee0b4c79c925a641feceaa99a2d6eb0ad98837cfca0098</td>
|
|
<td>[68a16162e584c22c75f72ecb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MIntGTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vowrvir1.zyf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:58:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vowrvir1.zyf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:58:03 +0000 UTC</td>
|
|
<td>2025-08-17 04:58:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:58:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37f8f5baccac320025e4005fff81ee9450f58762f2482b2d8124aa926fd8e0d2</td>
|
|
<td>[68a51fae0e8ba9c7b816e25c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_msc5vhgd.1kv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:06:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_msc5vhgd.1kv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:06:44 +0000 UTC</td>
|
|
<td>2025-08-20 01:06:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:06:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37dd404326012449bea2fd9f621015f7ac963703300830b1a7a1b1a9990d7348</td>
|
|
<td>[68a472b1b022648922e23570]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmPeerStorageGroupApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[3f105e0abae2a8df645bbda1c96f7268]</td>
|
|
<td>[9e7258c3f6743f5bb9ab4447c1333096b27ce752]</td>
|
|
<td>[62c39ff35a323693c947260526c73d7ef56ec22c7438daca67281b663247237465f5bc8865eaac9cff27e12cea2abff4]</td>
|
|
<td>[012df513b36aa7755b2c65f8d0c5342a89b2f2d862dcb2b45bb7e3d458b134c8f692f42d6283fff4e19e73d73a5716f71317aa89d5d4a7a5267192552514b299]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmPeerStorageGroupApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>772267</td>
|
|
<td>3f105e0abae2a8df645bbda1c96f7268</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>9e7258c3f6743f5bb9ab4447c1333096b27ce752</td>
|
|
<td>62c39ff35a323693c947260526c73d7ef56ec22c7438daca67281b663247237465f5bc8865eaac9cff27e12cea2abff4</td>
|
|
<td>012df513b36aa7755b2c65f8d0c5342a89b2f2d862dcb2b45bb7e3d458b134c8f692f42d6283fff4e19e73d73a5716f71317aa89d5d4a7a5267192552514b299</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37b56e0bca875191ee27659359aecd65ee5e5833e6bc19b044442533ce78bff2</td>
|
|
<td>[68a48674c4cb2500be692645]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Entities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:54Z]</td>
|
|
<td>[115d4be1403b934451bb9297167cb005]</td>
|
|
<td>[4252f6cecd12bc6bc9da84e1180aabd9f0dfe591]</td>
|
|
<td>[fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8]</td>
|
|
<td>[729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities</td>
|
|
<td>23040</td>
|
|
<td>115d4be1403b934451bb9297167cb005</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>4252f6cecd12bc6bc9da84e1180aabd9f0dfe591</td>
|
|
<td>fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8</td>
|
|
<td>729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37973c4d4f335faef35c48b7934647201ca7416711b3134bf73278153d73c79d</td>
|
|
<td>[68a472b1b022648922e23573]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmThresholdAlertApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[4ea8ffb426d665355f047dcaa9eb48c8]</td>
|
|
<td>[c7e0d40fc89f16091c63eb293baa8a1f3ae86203]</td>
|
|
<td>[85fedcfad9317f835dd297e277990113eb7dd678d2af3378815742caacd6276395f144a9a9f4e3bebd1b150592828e31]</td>
|
|
<td>[9032c2aa5245972d6beaa6c06391e82904eae9283c06202a41c2b3d967266bd8a392b3b060a8c5dd7f3b52a5f8d342444ef0ea0cca197350e3603234a20d6553]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmThresholdAlertApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>72100</td>
|
|
<td>4ea8ffb426d665355f047dcaa9eb48c8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>c7e0d40fc89f16091c63eb293baa8a1f3ae86203</td>
|
|
<td>85fedcfad9317f835dd297e277990113eb7dd678d2af3378815742caacd6276395f144a9a9f4e3bebd1b150592828e31</td>
|
|
<td>9032c2aa5245972d6beaa6c06391e82904eae9283c06202a41c2b3d967266bd8a392b3b060a8c5dd7f3b52a5f8d342444ef0ea0cca197350e3603234a20d6553</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37964b88bbc9fb3258e7706bec8a095b69e2d98d18644191a95d997a6928d61b</td>
|
|
<td>[68a523949cec397f02de9f5c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Google.ProtocolBuffers.Serialization.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[98a8f79e5645ea95b7726493e931315a]</td>
|
|
<td>[86842c68a759bae9ee3fa1703973342cf88cff77]</td>
|
|
<td>[82e22bbdd37efb510b22078750491664e7c33e3ba190247fa6a953b33404f1dcbedf00c20a1a0d490facbc1369983bc1]</td>
|
|
<td>[d9205a5799eef7a4f7d702cd51961868a0732d373ed99709cd094b6278ef2b2e34a3694ee3801f61afc87b32dfbf186feea010d2d096c318dac449081abd27e3]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Google.ProtocolBuffers.Serialization.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ProtocolBuffers</td>
|
|
<td>57856</td>
|
|
<td>98a8f79e5645ea95b7726493e931315a</td>
|
|
<td>ProtocolBuffers</td>
|
|
<td>2.4.1.555</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>86842c68a759bae9ee3fa1703973342cf88cff77</td>
|
|
<td>82e22bbdd37efb510b22078750491664e7c33e3ba190247fa6a953b33404f1dcbedf00c20a1a0d490facbc1369983bc1</td>
|
|
<td>d9205a5799eef7a4f7d702cd51961868a0732d373ed99709cd094b6278ef2b2e34a3694ee3801f61afc87b32dfbf186feea010d2d096c318dac449081abd27e3</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 20:11:03 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 07:07:07.573 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3784cb0ecd01dcaca0d860cdc5fa6cefc5a66bf272faab0e32e8e010fa29a878</td>
|
|
<td>[68a5c689292e6715a31a0a25]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\qsettings32.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:58:48Z]</td>
|
|
<td>[83acc2e8f5f8dc5029693cdf91758312]</td>
|
|
<td>[8e09408e67c73503f0914d87779309194743b02a]</td>
|
|
<td>[8fa823cc28cfe9b62f66d4aef11e2b8a9c59c3700e5f42fef3b9fbf2464c98ade6eae33bb1cba134ee6ff0f2eca1f313]</td>
|
|
<td>[e6516b2fc2f4bdea47c6f121ab6d5b8a6b4d2056ba6c1706cd7595afcea8c7d5ae85caae863e2cc47e735588f4f5411251bc478cb9b6a662c9877bc8cc14207f]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>qsettings32.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\</td>
|
|
<td>qsettings32</td>
|
|
<td>41014</td>
|
|
<td>83acc2e8f5f8dc5029693cdf91758312</td>
|
|
<td>QS/1 Data Systems qsettings32</td>
|
|
<td>0, 0, 1, 20</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2020-05-15 13:49:38 +0000 UTC</td>
|
|
<td>8e09408e67c73503f0914d87779309194743b02a</td>
|
|
<td>8fa823cc28cfe9b62f66d4aef11e2b8a9c59c3700e5f42fef3b9fbf2464c98ade6eae33bb1cba134ee6ff0f2eca1f313</td>
|
|
<td>e6516b2fc2f4bdea47c6f121ab6d5b8a6b4d2056ba6c1706cd7595afcea8c7d5ae85caae863e2cc47e735588f4f5411251bc478cb9b6a662c9877bc8cc14207f</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-11-09 13:46:57 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>378451dd833761309947110ca8079fa3b6c1ad60a87feb1c235c423640d82be7</td>
|
|
<td>[68a23709d838072c28f2c580]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uuh0mg2w.eid.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:09:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_uuh0mg2w.eid.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:09:32 +0000 UTC</td>
|
|
<td>2025-08-17 20:09:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:09:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3742126367753aaa1e94fbbc1c0f86375127f0024d89b5f22406b39dc7082c02</td>
|
|
<td>[68a48674c4cb2500be692607, 68a48674c4cb2500be69261d]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[253a5be96bc1ef00690a3397f704cbe2]</td>
|
|
<td>[c15efe63cb85ec86abe7a6be8d185207ec6a7df4]</td>
|
|
<td>[1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517]</td>
|
|
<td>[c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog</td>
|
|
<td>148192</td>
|
|
<td>253a5be96bc1ef00690a3397f704cbe2</td>
|
|
<td>Serilog</td>
|
|
<td>2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-04-24 05:03:44 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>c15efe63cb85ec86abe7a6be8d185207ec6a7df4</td>
|
|
<td>1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517</td>
|
|
<td>c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c873753c906fb01e21cf7bcf337e6fa474ed3ef1e9ccc508c198a7aa4f2842d</td>
|
|
<td>[68a4710327010168d4b669b8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x3h3gz1y.44q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:41:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_x3h3gz1y.44q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:41:36 +0000 UTC</td>
|
|
<td>2025-08-19 12:41:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:41:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c821227f2dc92e0c1de7a26082facf9b0e85a2b2e3b225fab87dc6edb34453e</td>
|
|
<td>[68a3b07b89708f7e107efed0]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\qtdzz51j.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>qtdzz51j.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ba6c727c92b41483a366d4b2fd01ef6e3a8ceb7be816e024f8a0d5faf856473</td>
|
|
<td>[68a34b98a6132bf659cce5a9, 68a34df0b71eea1289980a0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T15:47:09Z, 2025-08-18T15:58:03Z]</td>
|
|
<td>[804fa0b65d9ba3c4d4cec6e4d310d70d]</td>
|
|
<td>[f23e8bbf5af98bc0c2c2df7790dea8b5db238598]</td>
|
|
<td>[f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89]</td>
|
|
<td>[c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AIUniWksNET.exe</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Access It!</td>
|
|
<td>22830592</td>
|
|
<td>804fa0b65d9ba3c4d4cec6e4d310d70d</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>f23e8bbf5af98bc0c2c2df7790dea8b5db238598</td>
|
|
<td>f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89</td>
|
|
<td>c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e</td>
|
|
<td>2025-06-09 21:58:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ba0dde62898ed08dc4f55cbed827a684b970fc9f43d69de9560c7bf9dc14cd4</td>
|
|
<td>[68a5c71fb45a26b65db7a290]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_ISUser.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\02010125001WsgInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:01:11Z]</td>
|
|
<td>[3ef6f1c756c57e30a9fd0e227865981f]</td>
|
|
<td>[d61460d652ba2e0997e708d97b6aba533084732c]</td>
|
|
<td>[a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783]</td>
|
|
<td>[5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_ISUser.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\</td>
|
|
<td></td>
|
|
<td>94208</td>
|
|
<td>3ef6f1c756c57e30a9fd0e227865981f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:10 +0000 UTC</td>
|
|
<td>2023-03-22 15:26:00 +0000 UTC</td>
|
|
<td>d61460d652ba2e0997e708d97b6aba533084732c</td>
|
|
<td>a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783</td>
|
|
<td>5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4</td>
|
|
<td>2025-08-20 13:01:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3b8f553d303e73365438a3420b0500b2be0c1bfd956792c327142ebb8944b62e</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce4, 68a6afe50e0f3bd8deac4cf3, 68a6afe50e0f3bd8deac4d27, 68a6afe50e0f3bd8deac4d35, 68a6afe50e0f3bd8deac4d55, 68a6afe50e0f3bd8deac4d75, 68a6afe50e0f3bd8deac4d95, 68a6afe50e0f3bd8deac4db5, 68a6afe50e0f3bd8deac4dd5, 68a6afe50e0f3bd8deac4df5, 68a6afe50e0f3bd8deac4e15, 68a6afe50e0f3bd8deac4e35, 68a6afe50e0f3bd8deac4e54, 68a6afe50e0f3bd8deac4e75, 68a6afe50e0f3bd8deac4e95, 68a6afe50e0f3bd8deac4ec6, 68a6afe50e0f3bd8deac4ed5, 68a6afe50e0f3bd8deac4ef5, 68a6afe50e0f3bd8deac4f15, 68a6afe50e0f3bd8deac4f35, 68a6afe50e0f3bd8deac4f5f, 68a6afe50e0f3bd8deac4f7f, 68a6afe50e0f3bd8deac4f9f, 68a6afe50e0f3bd8deac4fbf, 68a6afe50e0f3bd8deac4fdf, 68a6afe50e0f3bd8deac4fff, 68a6afe50e0f3bd8deac501f, 68a6afe50e0f3bd8deac503f, 68a6afe50e0f3bd8deac505f, 68a6afe50e0f3bd8deac507f, 68a6afe50e0f3bd8deac50a9, 68a6afe50e0f3bd8deac50c9, 68a6afe50e0f3bd8deac50e9, 68a6afe50e0f3bd8deac5113, 68a6afe50e0f3bd8deac5133, 68a6afe50e0f3bd8deac5153, 68a6afe50e0f3bd8deac517d, 68a6afe50e0f3bd8deac519d, 68a6afe50e0f3bd8deac51bd, 68a6afe50e0f3bd8deac51de, 68a6afe50e0f3bd8deac5210, 68a6afe50e0f3bd8deac5227, 68a6afe50e0f3bd8deac523e, 68a6afe50e0f3bd8deac525e, 68a6afe50e0f3bd8deac5292, 68a6afe50e0f3bd8deac52b2, 68a6afe50e0f3bd8deac52d2, 68a6afe50e0f3bd8deac52f2, 68a6afe50e0f3bd8deac5312, 68a6afe50e0f3bd8deac5332, 68a6afe50e0f3bd8deac5352, 68a6afe50e0f3bd8deac5372, 68a6afe50e0f3bd8deac5398, 68a6afe50e0f3bd8deac53b4, 68a6afe50e0f3bd8deac53d7, 68a6afe50e0f3bd8deac53f7, 68a6afe50e0f3bd8deac5418, 68a6afe50e0f3bd8deac5432, 68a6afe50e0f3bd8deac5457, 68a6afe50e0f3bd8deac5478, 68a6afe50e0f3bd8deac5498, 68a6afe50e0f3bd8deac54b8, 68a6afe50e0f3bd8deac54d8, 68a6afe50e0f3bd8deac54f8, 68a6afe50e0f3bd8deac5518, 68a6afe50e0f3bd8deac5538, 68a6afe50e0f3bd8deac5562, 68a6afe50e0f3bd8deac5582, 68a6afe50e0f3bd8deac55a2, 68a6afe50e0f3bd8deac55c2, 68a6afe50e0f3bd8deac55e2, 68a6afe50e0f3bd8deac5602, 68a6afe50e0f3bd8deac5622, 68a6afe50e0f3bd8deac5651, 68a6afe50e0f3bd8deac5672, 68a6afe50e0f3bd8deac56a0, 68a6afe50e0f3bd8deac56c0, 68a6afe50e0f3bd8deac56d7, 68a6afe50e0f3bd8deac56ff, 68a6afe50e0f3bd8deac571a, 68a6afe50e0f3bd8deac5740, 68a6afe50e0f3bd8deac5773, 68a6afe50e0f3bd8deac5786, 68a6afe50e0f3bd8deac57b4, 68a6afe50e0f3bd8deac57ca, 68a6afe50e0f3bd8deac57f4, 68a6afe50e0f3bd8deac5808, 68a6afe50e0f3bd8deac5821, 68a6afe50e0f3bd8deac584a, 68a6afe50e0f3bd8deac5872, 68a6afe50e0f3bd8deac5887, 68a6afe50e0f3bd8deac58b9, 68a6afe50e0f3bd8deac58ca, 68a6afe50e0f3bd8deac58f9, 68a6afe50e0f3bd8deac5904, 68a6afe50e0f3bd8deac593b, 68a6afe50e0f3bd8deac594a, 68a6afe50e0f3bd8deac596a, 68a6afe50e0f3bd8deac5981, 68a6afe50e0f3bd8deac59a9, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeImageGenerator.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[e1352cbba570b86480377cd17ade44ea]</td>
|
|
<td>[aecca08a5aa4454630dbcaa2801f5e5a6ca728f7]</td>
|
|
<td>[33486932710f84a58f63ce2ac6b1aa98a16983aaeb617586aee49468f57812f7f56fffff12e36f7c42da0b1b41bd2405]</td>
|
|
<td>[3fc334ee5fab473ca1976e34ebd1f25a8d61f725c0966d61de6c6062fd331ed22258019ade821813499cfe64c04289256b5e5fe3f21a12c1e4b397addf6cb833]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeImageGenerator.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>726016</td>
|
|
<td>e1352cbba570b86480377cd17ade44ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:00:59 +0000 UTC</td>
|
|
<td>aecca08a5aa4454630dbcaa2801f5e5a6ca728f7</td>
|
|
<td>33486932710f84a58f63ce2ac6b1aa98a16983aaeb617586aee49468f57812f7f56fffff12e36f7c42da0b1b41bd2405</td>
|
|
<td>3fc334ee5fab473ca1976e34ebd1f25a8d61f725c0966d61de6c6062fd331ed22258019ade821813499cfe64c04289256b5e5fe3f21a12c1e4b397addf6cb833</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3b79fa3b8774cf773d2be2b43838690be854b013fb8c2d9bd2f37f785e4ae026</td>
|
|
<td>[68a522d623123fde9545058b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0ssyhuf.33a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:20:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_x0ssyhuf.33a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:20:16 +0000 UTC</td>
|
|
<td>2025-08-20 01:20:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:20:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3afb843f0e4918d554f9be37562cb7b547975a9abd11f4fc7cd4dce50291a15a</td>
|
|
<td>[68a339e2be5adbffe584e4b9]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\__PSScriptPolicyTest_fbdcuvfi.npc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T14:34:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fbdcuvfi.npc.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:34:00 +0000 UTC</td>
|
|
<td>2025-08-18 14:34:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:34:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ac0ce5ad33b643488f75945b7140ef3ec2b3f990b038636bdc2d0cd4c8d29e4</td>
|
|
<td>[68a738d4754bb57d3ad736db]</td>
|
|
<td>[2]</td>
|
|
<td>[cm10308]</td>
|
|
<td>[UH-VAS-01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\vocera\server\vocera-tray.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.911]</td>
|
|
<td>["C:\vocera\server\vocera-tray.exe" -noconsole]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-21T15:18:35Z]</td>
|
|
<td>[28eb80287cf5e0f85be5ad9e8cdabc43]</td>
|
|
<td>[9b1c8a18a8bf9b733b14e96e3dc5a662f2a97950]</td>
|
|
<td>[1ad20074b394c294ee9ccdd20e82014b6229b4f23077269a7aa5952806f5c8a6cba8ab331bb4029ddf30ee9275c7988e]</td>
|
|
<td>[59fce4ccdcb6909b2e6f4dd15d33fe72f87cd6aaaed832386a4b58ba66618298f707de466b0783f037e1342c8b2d6989c9386e68cfad424f55d85555142e81ad]</td>
|
|
<td>[10.21.0.116]</td>
|
|
<td>[10.21.0.116]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vocera-tray.exe</td>
|
|
<td>C:\vocera\server\</td>
|
|
<td>Vocera Tray Process</td>
|
|
<td>179200</td>
|
|
<td>28eb80287cf5e0f85be5ad9e8cdabc43</td>
|
|
<td>vocera-t Application</td>
|
|
<td>5.3.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-04-08 14:58:48 +0000 UTC</td>
|
|
<td>2019-04-08 14:58:48 +0000 UTC</td>
|
|
<td>9b1c8a18a8bf9b733b14e96e3dc5a662f2a97950</td>
|
|
<td>1ad20074b394c294ee9ccdd20e82014b6229b4f23077269a7aa5952806f5c8a6cba8ab331bb4029ddf30ee9275c7988e</td>
|
|
<td>59fce4ccdcb6909b2e6f4dd15d33fe72f87cd6aaaed832386a4b58ba66618298f707de466b0783f037e1342c8b2d6989c9386e68cfad424f55d85555142e81ad</td>
|
|
<td>2025-08-04 15:31:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3a724546eaf82269dbb7d3bdfb06e468c774707620a80d0b604ae73ee51b77c5</td>
|
|
<td>[68a1e030cd200d10d4db6ee9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tzowfqkz.l4d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:59:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tzowfqkz.l4d.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:59:07 +0000 UTC</td>
|
|
<td>2025-08-17 13:59:07 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:59:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3a407dfeb5281ff9d41a4db1b4939a108c99fb10a4ca16c15f0f3e20407edefa</td>
|
|
<td>[68a523949cec397f02de9f5b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Google.ProtocolBuffers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[2d2b20eef8c443aa8fc2219a7ee4dbc3]</td>
|
|
<td>[431d2b680edc2f6d89fa4dc0997707dc554094da]</td>
|
|
<td>[d96ef42801499403ac7140d83eb619ea4d53edf84609c97329a6f38b84b0c1ff474c968f7f584f3fc0329f8467d340e3]</td>
|
|
<td>[abce8dca80ba4fe0ab1dbd56813e00a8ca1e2e9a69f4e555abfd84df8d06610226147847fe6926bf7e683d92b62828e0fdffed3df5ee580d89c48e80c2146637]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Google.ProtocolBuffers.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ProtocolBuffers</td>
|
|
<td>323072</td>
|
|
<td>2d2b20eef8c443aa8fc2219a7ee4dbc3</td>
|
|
<td>ProtocolBuffers</td>
|
|
<td>2.4.1.555</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>431d2b680edc2f6d89fa4dc0997707dc554094da</td>
|
|
<td>d96ef42801499403ac7140d83eb619ea4d53edf84609c97329a6f38b84b0c1ff474c968f7f584f3fc0329f8467d340e3</td>
|
|
<td>abce8dca80ba4fe0ab1dbd56813e00a8ca1e2e9a69f4e555abfd84df8d06610226147847fe6926bf7e683d92b62828e0fdffed3df5ee580d89c48e80c2146637</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-01 23:33:28 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:54:46.884 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39bbb6b1fcd1c8a929c0111fa2ebcc2fbf66c2ab7b987badcb37459a05e14b72</td>
|
|
<td>[68a48674c4cb2500be69260a, 68a48674c4cb2500be692620]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.File.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[be27dd9f311cd665785bbdeaea480d98]</td>
|
|
<td>[af0cfabc15f87dcc8e37b65d70480600a7bf5cb9]</td>
|
|
<td>[ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5]</td>
|
|
<td>[4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.File.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>43256</td>
|
|
<td>be27dd9f311cd665785bbdeaea480d98</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-06-25 13:00:48 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>af0cfabc15f87dcc8e37b65d70480600a7bf5cb9</td>
|
|
<td>ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5</td>
|
|
<td>4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39babfe5a257c3f70a0122f469eb5d455f108d92ef6ed29c2671d11c8af07ca3</td>
|
|
<td>[68a4631d55f0b006fedad272]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\tmpEXO_ymugosv2.gkz.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:16Z]</td>
|
|
<td>[25f6f28a796e9a16e24dbc1f4b571fcd]</td>
|
|
<td>[432556ecdc36601d6a9fac7cf788ef1d3e80e6d4]</td>
|
|
<td>[59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738]</td>
|
|
<td>[6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_ymugosv2.gkz.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\</td>
|
|
<td></td>
|
|
<td>2317071</td>
|
|
<td>25f6f28a796e9a16e24dbc1f4b571fcd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:42:15 +0000 UTC</td>
|
|
<td>2025-08-19 11:42:15 +0000 UTC</td>
|
|
<td>432556ecdc36601d6a9fac7cf788ef1d3e80e6d4</td>
|
|
<td>59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738</td>
|
|
<td>6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc</td>
|
|
<td>2025-08-19 11:42:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39a4a59bc23add47d95ef4a9da5ed8297c27af52f2849a0c391ab0bec771bfb9</td>
|
|
<td>[68a523a99ba7c92b34976f99]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ToolbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[aa7a6652a4a923356890ebff6458a56b]</td>
|
|
<td>[6d5e975aa1d77df18c0af44663d1624e8bd1b7e3]</td>
|
|
<td>[215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32]</td>
|
|
<td>[05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ToolbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>18432</td>
|
|
<td>aa7a6652a4a923356890ebff6458a56b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>6d5e975aa1d77df18c0af44663d1624e8bd1b7e3</td>
|
|
<td>215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32</td>
|
|
<td>05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3962fb481c6c37dca73c6af8cfd745879ad812345f38fa82eedad254bcc9fd4a</td>
|
|
<td>[68a7117b9fa59e7ea79359fb]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_peak]</td>
|
|
<td>[i-npeak01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\252 - MA Enrollment\EGScript1.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:30:42Z]</td>
|
|
<td>[de0b8d59823167dd3dd07ea725105c76]</td>
|
|
<td>[3bcd62b837b680062b3964c4d0af63e12411d994]</td>
|
|
<td>[e97b11649641098b56c5c92dbbd476b29b98c334ab9dc54feac562442a674d4c8a159800facd84e3e37fad1697e7cb63]</td>
|
|
<td>[d23470974c158d1f5cbf4a3d0366838639cc693e4a5beeba1c6fb0262967717592f4247f9378d602a769bac67ee3d47876ea4597c886a027f4a5258ce41d409a]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EGScript1.vbs</td>
|
|
<td>\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\252 - MA Enrollment\</td>
|
|
<td></td>
|
|
<td>1690</td>
|
|
<td>de0b8d59823167dd3dd07ea725105c76</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-19 20:56:41 +0000 UTC</td>
|
|
<td>2025-06-19 20:56:41 +0000 UTC</td>
|
|
<td>3bcd62b837b680062b3964c4d0af63e12411d994</td>
|
|
<td>e97b11649641098b56c5c92dbbd476b29b98c334ab9dc54feac562442a674d4c8a159800facd84e3e37fad1697e7cb63</td>
|
|
<td>d23470974c158d1f5cbf4a3d0366838639cc693e4a5beeba1c6fb0262967717592f4247f9378d602a769bac67ee3d47876ea4597c886a027f4a5258ce41d409a</td>
|
|
<td>2025-08-21 12:30:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>393e18eb0d052c6d349ad4cbe0448408e6bb2253e3e9f45d8430b420c388bd81</td>
|
|
<td>[68a472a799ad3734d804e2da]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-awt-util-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:35Z]</td>
|
|
<td>[ee45236e45c1bdaeee4979c79e6c68e6]</td>
|
|
<td>[652badd31839669cfa5f01442f8569fbecd21e8f]</td>
|
|
<td>[677ab1f7d3e330a6d7bbc3d181394300e24e0d9a197834ac7b79250aba337a0e01879a029d5ac9319260683b56b209e4]</td>
|
|
<td>[51caee31c2d7ffde777f7f82ab9c7fb9bff07d8647389e9f33ec6c9310e8810c87e8bd14741869a50cc26eaf408285603382091d6a814aba44c587934cab2d4a]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-awt-util-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>422448</td>
|
|
<td>ee45236e45c1bdaeee4979c79e6c68e6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>652badd31839669cfa5f01442f8569fbecd21e8f</td>
|
|
<td>677ab1f7d3e330a6d7bbc3d181394300e24e0d9a197834ac7b79250aba337a0e01879a029d5ac9319260683b56b209e4</td>
|
|
<td>51caee31c2d7ffde777f7f82ab9c7fb9bff07d8647389e9f33ec6c9310e8810c87e8bd14741869a50cc26eaf408285603382091d6a814aba44c587934cab2d4a</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:00:15 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>390559b10f0df7e9467937b8aab35074299a2e8f481be7229a5152e3ffe7ed71</td>
|
|
<td>[68a1abecbfda59a8cbb3b139]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_vd4axank.0so.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:16:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vd4axank.0so.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:16:01 +0000 UTC</td>
|
|
<td>2025-08-17 10:16:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:16:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>40bc530593f9173e90aff5cd000c8cb185ebf851f9617b131d43f81989a9ad41</td>
|
|
<td>[68a472b1b022648922e2357e]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\itext-2.1.5.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[a42254f61f65ec0bbfca66193196ca9d]</td>
|
|
<td>[a25c4c425ebf812c65184e81d4c84d22e8641b35]</td>
|
|
<td>[ab94412c5142eaa0faabe3246cb64803b341407c07d2f5824a575eb7de003f72699ca244dcfbf262e5934e2d5f792389]</td>
|
|
<td>[2d9f53d478a3497617961d8868f1c291ebf0252fc0fff8c664887be24fd326b617aa89e8e3f14303832088467e8f9a21d023a59853b598518d35ec1db45bd322]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>iText-2.1.5.jar</td>
|
|
<td>C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>1117661</td>
|
|
<td>a42254f61f65ec0bbfca66193196ca9d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-18 18:38:18 +0000 UTC</td>
|
|
<td>2021-02-09 20:57:00 +0000 UTC</td>
|
|
<td>a25c4c425ebf812c65184e81d4c84d22e8641b35</td>
|
|
<td>ab94412c5142eaa0faabe3246cb64803b341407c07d2f5824a575eb7de003f72699ca244dcfbf262e5934e2d5f792389</td>
|
|
<td>2d9f53d478a3497617961d8868f1c291ebf0252fc0fff8c664887be24fd326b617aa89e8e3f14303832088467e8f9a21d023a59853b598518d35ec1db45bd322</td>
|
|
<td>2025-08-08 17:07:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-26 10:40:05 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 17:11:03.174 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>409361e2925b82cbf6cfda29f317520ff097d1d57da407655d436ed30c234c83</td>
|
|
<td>[68a1c38b973b3b5b863775cc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_r1zh4xco.ihx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:56:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_r1zh4xco.ihx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:56:52 +0000 UTC</td>
|
|
<td>2025-08-17 11:56:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:56:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>408d1d3e00f66c7c097415bd83df1faf13c1b569544f912c5338b77d9670d9c5</td>
|
|
<td>[68a223f72bb592d298740955]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hhahwsla.xvw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:48:17Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hhahwsla.xvw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:48:17 +0000 UTC</td>
|
|
<td>2025-08-17 18:48:17 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:48:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4050bae7cd6a7c189962cc5b8c79f8c21cb51a602b7059580ed2639dfc3e4b6c</td>
|
|
<td>[68a25f08a862a9b86d2b3e0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\cm4vi1nn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cm4vi1nn.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3fd6123c84aa2ee51ad22f9dd1a1c58f111163f5dd88b2bb6bed125d924bb8f0</td>
|
|
<td>[68a2c431b2390923232c295a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b1tu0kxe.c1z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:11:49Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b1tu0kxe.c1z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:11:49 +0000 UTC</td>
|
|
<td>2025-08-18 06:11:49 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3f4d26d2d34d6363bb0c37b814b606eb085dd4e3e56de1acc3e76b03795ad41e</td>
|
|
<td>[68a71d98771132224a617f7d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Event Server\VideoOS.UI.Common.WPF.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP7C7E~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[f0903894f6fc8beb71b547ccaaad08a8]</td>
|
|
<td>[05e7c18d360e478b82dd4be7b27b9e8186a3fa09]</td>
|
|
<td>[4f161f73a0193eae199aacf8c4ab06403fe7286924dd549cc6705dffcdf4fb69f0565238db89afd7289a5243876fd129]</td>
|
|
<td>[c599cf0fac3fe56121fb1bc5eacf2e8227d9e48a28d610fd45592943225bda08a83c6b6c5037b26177ba6547ade6bbdd144da9b335ea7ac9d90e520bef261636]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.UI.Common.WPF.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Event Server\</td>
|
|
<td>Common WPF</td>
|
|
<td>1626112</td>
|
|
<td>f0903894f6fc8beb71b547ccaaad08a8</td>
|
|
<td>VideoOS</td>
|
|
<td>20.2.1928.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-01 19:25:28 +0000 UTC</td>
|
|
<td>2020-05-01 19:25:28 +0000 UTC</td>
|
|
<td>05e7c18d360e478b82dd4be7b27b9e8186a3fa09</td>
|
|
<td>4f161f73a0193eae199aacf8c4ab06403fe7286924dd549cc6705dffcdf4fb69f0565238db89afd7289a5243876fd129</td>
|
|
<td>c599cf0fac3fe56121fb1bc5eacf2e8227d9e48a28d610fd45592943225bda08a83c6b6c5037b26177ba6547ade6bbdd144da9b335ea7ac9d90e520bef261636</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-11 13:26:54 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3f307e3d89f6577b8a0da2aa01b182740d6e157ee29c09338dc0f206c4a73ed0</td>
|
|
<td>[68a34b98a6132bf659cce5b7, 68a34df0b71eea1289980a1c]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataEntities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[23f4c4bf3f3744246e5d5a9e7a94a624]</td>
|
|
<td>[d5847e3644ee656be1d90f885a09ecadd39c7073]</td>
|
|
<td>[d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d]</td>
|
|
<td>[56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.DataEntities.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Data Entities</td>
|
|
<td>3763712</td>
|
|
<td>23f4c4bf3f3744246e5d5a9e7a94a624</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:48 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:48 +0000 UTC</td>
|
|
<td>d5847e3644ee656be1d90f885a09ecadd39c7073</td>
|
|
<td>d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d</td>
|
|
<td>56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3f1b19d863fe5465ce545c4b8d093cff1a7d4196615f002f775e75020c5dafd9</td>
|
|
<td>[68a5d4b82ee390c0e8baf302]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_501hqqj5.bkq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:59:18Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_501hqqj5.bkq.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:59:18 +0000 UTC</td>
|
|
<td>2025-08-20 13:59:18 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:59:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ef437ab8a91bb07396f993eb1b443ed52f2f878e4c147b7a765d21366286724</td>
|
|
<td>[68a472a799ad3734d804e2d7]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>["C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-19T12:48:34Z]</td>
|
|
<td>[ac40dff88cd86949564533d4f5287f9e]</td>
|
|
<td>[6caf9afb09910475ace60c4e392fea305e9b3732]</td>
|
|
<td>[9e10faeb4f5a1b06dbbaf01ac68ca0de7eca5e1f8db1152d64762ba16fcd0c41f1236c575cb1ab9fce0e834116a74592]</td>
|
|
<td>[993036a8fe3277e35f383b0745250c3eac1944cab5e7ad190aeec21b54b1cb1f78392c95d4f588dfb556fb601eddb03e2199888b68efb8c5dc4e4f399904b95b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EnterpriseClient.exe</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\</td>
|
|
<td>Dell Storage Manager Client</td>
|
|
<td>12285399</td>
|
|
<td>ac40dff88cd86949564533d4f5287f9e</td>
|
|
<td>Dell Storage Manager Client</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>6caf9afb09910475ace60c4e392fea305e9b3732</td>
|
|
<td>9e10faeb4f5a1b06dbbaf01ac68ca0de7eca5e1f8db1152d64762ba16fcd0c41f1236c575cb1ab9fce0e834116a74592</td>
|
|
<td>993036a8fe3277e35f383b0745250c3eac1944cab5e7ad190aeec21b54b1cb1f78392c95d4f588dfb556fb601eddb03e2199888b68efb8c5dc4e4f399904b95b</td>
|
|
<td>2025-03-20 18:48:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-30 14:25:21 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 19:13:39 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ed751253cac2e36e658b51aadd1c769514ba9f17d8ad49a9d80100e2741564a</td>
|
|
<td>[68a4ccd13efa8341e1766c86]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3eb85a6d8d93e0d3ee61087dfb0427718c11cba113e404d84a4e203359470984</td>
|
|
<td>[68a4d176f9567d58ffcb80f3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3d4881f311273e05e78c1fa3cf266ae0c57ed5af21815a74e6e67eec4a25a155</td>
|
|
<td>[68a472b1b022648922e2359e]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\saaj-impl-1.4.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[5309e6caa579acbcd2fcb34403cca27c]</td>
|
|
<td>[6bfb1664ab42506a6547a3972395ea3f5b59ef6c]</td>
|
|
<td>[420714d9662dd30451b9a27a0a5977c43f487b53d1e5f7fa50057b5eb9917b8e9cc6aa7896d6ebd75bfd60b1e7d60739]</td>
|
|
<td>[962ff03e03aeb0ac98172634b7b8027942561317d411d9d8ec821881c5e5040d2f1c9648dda8658327ad4326c82c9db5c5920f2a817459576c1732684f03764f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>saaj-impl-1.4.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\saaj-impl-1.4.0.jar-8295c14d5d975fef\</td>
|
|
<td></td>
|
|
<td>498924</td>
|
|
<td>5309e6caa579acbcd2fcb34403cca27c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>6bfb1664ab42506a6547a3972395ea3f5b59ef6c</td>
|
|
<td>420714d9662dd30451b9a27a0a5977c43f487b53d1e5f7fa50057b5eb9917b8e9cc6aa7896d6ebd75bfd60b1e7d60739</td>
|
|
<td>962ff03e03aeb0ac98172634b7b8027942561317d411d9d8ec821881c5e5040d2f1c9648dda8658327ad4326c82c9db5c5920f2a817459576c1732684f03764f</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-05 22:12:43 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 18:13:03.59 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ceb6eeb14c4401bc1e6e8c3322b3cb8776c6cb09fa38cd6237a60b0c334e3a7</td>
|
|
<td>[68a737ea9e9b12dd92373d92]</td>
|
|
<td>[2]</td>
|
|
<td>[jm10132]</td>
|
|
<td>[i-nZiggy]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\jm10132\Downloads\WinMerge\Merge7z\Merge7z.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Takashi Sawanaka]</td>
|
|
<td>[C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T15:13:31Z]</td>
|
|
<td>[6ccc8fbf39e19177b030852a232dc947]</td>
|
|
<td>[13b6a2aab7693fe4cdae031dff28e261648f0783]</td>
|
|
<td>[ba35ca36f1c5ee02830d88915ed30206daa785d0f04c28a91b252c53f0aee4c192f67208412fc8caea6bec9c68b909b4]</td>
|
|
<td>[f3e4b92aabd74ed5b025990b48603b8c3adf63d6888fb7ae799216ddf4f6421676eccf14e4371049e9fe29f230ca916cff86d720fc08863eb951b54f3e75337a]</td>
|
|
<td>[172.17.20.2]</td>
|
|
<td>[172.17.20.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Merge7z.dll</td>
|
|
<td>C:\Users\jm10132\Downloads\WinMerge\Merge7z\</td>
|
|
<td>7-Zip GUI</td>
|
|
<td>331080</td>
|
|
<td>6ccc8fbf39e19177b030852a232dc947</td>
|
|
<td>7-Zip</td>
|
|
<td>25.00</td>
|
|
<td>Takashi Sawanaka</td>
|
|
<td>2025-07-20 18:49:52 +0000 UTC</td>
|
|
<td>2025-08-13 19:37:35 +0000 UTC</td>
|
|
<td>13b6a2aab7693fe4cdae031dff28e261648f0783</td>
|
|
<td>ba35ca36f1c5ee02830d88915ed30206daa785d0f04c28a91b252c53f0aee4c192f67208412fc8caea6bec9c68b909b4</td>
|
|
<td>f3e4b92aabd74ed5b025990b48603b8c3adf63d6888fb7ae799216ddf4f6421676eccf14e4371049e9fe29f230ca916cff86d720fc08863eb951b54f3e75337a</td>
|
|
<td>2025-08-13 19:38:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-04 13:46:59 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-12 21:05:55.355 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3cd049c2f8c5bdb6c368fb84bca681b13665b252ba5028e71ad65d5879480dff</td>
|
|
<td>[68a16556adb18f56bab6ec7c, 68a2b4a8c289c4a5fdc2edaf, 68a4085529d877e962e90ae6, 68a557e71e5d7a1efef2595b, 68a6a990a81c561389c37865]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG1B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[efcc66337aaed727c34450475323c64d]</td>
|
|
<td>[9e1f8b6df794cb9dced363dc53ce3f6a6cc46052]</td>
|
|
<td>[607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834]</td>
|
|
<td>[07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG1B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>efcc66337aaed727c34450475323c64d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:30 +0000 UTC</td>
|
|
<td>2023-06-01 14:34:59 +0000 UTC</td>
|
|
<td>9e1f8b6df794cb9dced363dc53ce3f6a6cc46052</td>
|
|
<td>607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834</td>
|
|
<td>07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c997a11c3fb8b43a3a8faa23c2e227ff786768b4d03cd0e0bfc9e74d09a02ec</td>
|
|
<td>[68a712752561fbf503357df6]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_a3m010sw.ls4\tmpEXO_a3m010sw.ls4.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:30:56Z]</td>
|
|
<td>[d63ffcfd086ac879d9ff2e5bc4f61d3e]</td>
|
|
<td>[8f83e7083c5f6bf7b367844e330f255d4d32608a]</td>
|
|
<td>[33b170f3d3854fa7fe2b718f62e4ed763b742ce9299bb2297b6115a26e32af4e38c67bfd8ce96c7a103bf13a43e945a0]</td>
|
|
<td>[2ba9ff311d2364071b689ee845d1a60135b68218fa461fd6e97d4c03e985766b8d3a2077b2944af6172cb524c9cd1268defca522233efb1d4f0db26ed71ad4aa]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_a3m010sw.ls4.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_a3m010sw.ls4\</td>
|
|
<td></td>
|
|
<td>2317071</td>
|
|
<td>d63ffcfd086ac879d9ff2e5bc4f61d3e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:30:55 +0000 UTC</td>
|
|
<td>2025-08-21 12:30:55 +0000 UTC</td>
|
|
<td>8f83e7083c5f6bf7b367844e330f255d4d32608a</td>
|
|
<td>33b170f3d3854fa7fe2b718f62e4ed763b742ce9299bb2297b6115a26e32af4e38c67bfd8ce96c7a103bf13a43e945a0</td>
|
|
<td>2ba9ff311d2364071b689ee845d1a60135b68218fa461fd6e97d4c03e985766b8d3a2077b2944af6172cb524c9cd1268defca522233efb1d4f0db26ed71ad4aa</td>
|
|
<td>2025-08-21 12:35:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c8e1ab5ca374a7ba51b0820a46058e1d7e0c62ee95328846b7303f270189c16</td>
|
|
<td>[68a3146b5f0c41860c8c84fa, 68a3146b5f0c41860c8c8557]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[3a6789c5b85c6996587dd3ec235bf1d9]</td>
|
|
<td>[df72469849f10e2db9f7ff195431d0810d0b8e64]</td>
|
|
<td>[a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15]</td>
|
|
<td>[81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>9627</td>
|
|
<td>3a6789c5b85c6996587dd3ec235bf1d9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>df72469849f10e2db9f7ff195431d0810d0b8e64</td>
|
|
<td>a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15</td>
|
|
<td>81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>12a5ca9322fea13fcb43d129b87ba2be1d566650185bf5def00b2e4602a17256</td>
|
|
<td>[68a19c6991a4554163504734, 68a2ecdfe7265ab6e4a25092, 68a43e759d6f6b2d5e445385, 68a5900679c659b659e73766, 68a6e1a6b5d7c1b5d0de7e65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nPharmguard]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Smiths Medical\IISLogMaintain.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T09:00:00Z, 2025-08-18T09:00:01Z, 2025-08-19T09:00:00Z, 2025-08-20T09:00:00Z, 2025-08-21T09:00:00Z]</td>
|
|
<td>[95fb67e179d4e07ec247bb9f783bc905]</td>
|
|
<td>[85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e]</td>
|
|
<td>[b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98]</td>
|
|
<td>[74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c]</td>
|
|
<td>[172.17.22.222]</td>
|
|
<td>[172.17.22.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IISLogMaintain.bat</td>
|
|
<td>C:\Program Files\Smiths Medical\</td>
|
|
<td></td>
|
|
<td>147</td>
|
|
<td>95fb67e179d4e07ec247bb9f783bc905</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-08-07 16:11:14 +0000 UTC</td>
|
|
<td>2016-10-31 22:24:18 +0000 UTC</td>
|
|
<td>85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e</td>
|
|
<td>b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98</td>
|
|
<td>74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c</td>
|
|
<td>2025-08-09 09:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>127668c98e4a256a396efc19add7a3d570fc1f0a411a4012199f7c630851145c</td>
|
|
<td>[68a31a7af7c31bbfe169b9b0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bcpjzu5b.dhj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:20:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bcpjzu5b.dhj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:20:04 +0000 UTC</td>
|
|
<td>2025-08-18 12:20:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:20:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>115b14a02b91fb03cb1866d6b311d33cd5518a9d8524dd63a14f19571e420404</td>
|
|
<td>[68a472a799ad3734d804e2f1]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcprov-jdk15on-1.50.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[7d922548538cffd44a862fe6ce9574b1]</td>
|
|
<td>[be504b4901d75cbe129a178f5830e6c358ec214c]</td>
|
|
<td>[90f386fa10e4654b8da70f51ba815635a9534524e8672265072a7ffe9fc44714f8b945d0438e267479c5663006421bfa]</td>
|
|
<td>[ea0e006829bbc78bb2eb5187302e18462a9e953b1ca4ac3d843f3362ab1cd38a134cdbbf1b85fab147d0637d6e9270d3c800e262c398a9200e56e744fef2f9aa]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bcprov-jdk15on-1.50.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>2732684</td>
|
|
<td>7d922548538cffd44a862fe6ce9574b1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>be504b4901d75cbe129a178f5830e6c358ec214c</td>
|
|
<td>90f386fa10e4654b8da70f51ba815635a9534524e8672265072a7ffe9fc44714f8b945d0438e267479c5663006421bfa</td>
|
|
<td>ea0e006829bbc78bb2eb5187302e18462a9e953b1ca4ac3d843f3362ab1cd38a134cdbbf1b85fab147d0637d6e9270d3c800e262c398a9200e56e744fef2f9aa</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-11-27 06:21:55 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.136 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>11355cec155129d0343a44512cb9c601d96f9014d7a3a1a5fc7ead8e84d003dc</td>
|
|
<td>[68a7177f3667c32a076fb94c]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\BootstrapperCore.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[2025-08-21T12:56:21Z]</td>
|
|
<td>[6720b58841b9217a2960c7f2d2b8ce2d]</td>
|
|
<td>[7c9ef10cdefb942eaf533bc02d064c6b5a43483f]</td>
|
|
<td>[2212c17269cc61a9b12a818335c0eccced8d2c230465935d4bd3c28f396428eafd47a573676ef90cb611ab6b4f79d895]</td>
|
|
<td>[2bda7a55788f141e84a765b64e2412040a3eba98fa82dec426662a2d3bced0f3704fa342050662fc5aa6dff5283e5d621489899d559338ed24626062cb53dd09]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BootstrapperCore.dll</td>
|
|
<td>C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\</td>
|
|
<td>Managed Bootstrapper Application (WiX)</td>
|
|
<td>77824</td>
|
|
<td>6720b58841b9217a2960c7f2d2b8ce2d</td>
|
|
<td>Windows Installer XML Toolset</td>
|
|
<td>3.8.1128.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2014-04-09 14:14:20 +0000 UTC</td>
|
|
<td>2014-04-09 14:14:20 +0000 UTC</td>
|
|
<td>7c9ef10cdefb942eaf533bc02d064c6b5a43483f</td>
|
|
<td>2212c17269cc61a9b12a818335c0eccced8d2c230465935d4bd3c28f396428eafd47a573676ef90cb611ab6b4f79d895</td>
|
|
<td>2bda7a55788f141e84a765b64e2412040a3eba98fa82dec426662a2d3bced0f3704fa342050662fc5aa6dff5283e5d621489899d559338ed24626062cb53dd09</td>
|
|
<td>2025-08-21 12:56:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-13 23:19:28 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-20 16:09:34.191 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43df47ba68eed66ab11246db13bc7b31ce6a7345d897026e6c20a7fa3ebb7038</td>
|
|
<td>[68a3146b5f0c41860c8c8535, 68a3146b5f0c41860c8c8571]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ssl.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d3f760e4ce4ce87a49a770a3b4d8ea4e]</td>
|
|
<td>[bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be]</td>
|
|
<td>[34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df]</td>
|
|
<td>[75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ssl.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>65200</td>
|
|
<td>d3f760e4ce4ce87a49a770a3b4d8ea4e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be</td>
|
|
<td>34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df</td>
|
|
<td>75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43dd5ded2e7c88e811aed98d1b1b0ebab058cbdaa9e97214c4cd1b2d576f9ea5</td>
|
|
<td>[68a306a5ba5832f49fe9cf45]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2CCMPS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[561d8fef62b027dbc970310dc4a16b68]</td>
|
|
<td>[715a7b7cbf6de6ddbdea57bb088b26338e530541]</td>
|
|
<td>[1060254931436909e2e8d0d3ab548c02e43c57cb0ed4e985a969a633306a3906c7a44f5865c482f8447643c1fc4d6864]</td>
|
|
<td>[ffba9a5ffe7be34ae156950f7abb7df299648ab8637ad6fdcc03af08ae0972471919ea98e89624ad23d9a20d07a81177120317a4546c2924a4eedbb7ee81a97b]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DI2CCMPS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>561d8fef62b027dbc970310dc4a16b68</td>
|
|
<td></td>
|
|
<td>1.1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:09 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>715a7b7cbf6de6ddbdea57bb088b26338e530541</td>
|
|
<td>1060254931436909e2e8d0d3ab548c02e43c57cb0ed4e985a969a633306a3906c7a44f5865c482f8447643c1fc4d6864</td>
|
|
<td>ffba9a5ffe7be34ae156950f7abb7df299648ab8637ad6fdcc03af08ae0972471919ea98e89624ad23d9a20d07a81177120317a4546c2924a4eedbb7ee81a97b</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:34:46 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43b1b8f830df33fef0fc4f5c10069ac655b83937012cf73ad55bad235238bc97</td>
|
|
<td>[68a47171d049740da00e3073]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:43:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:43:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>436d5ae5ca7125b3a71d8c26b32dfa31d18f7a54e3919e8eaa7005aed2458567</td>
|
|
<td>[68a48674c4cb2500be692613, 68a48674c4cb2500be692629]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerGen.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[1ca814e6162846973fb2c387d0b9fb3c]</td>
|
|
<td>[0db114a6b28dc4baf9b46f724e3f679f31903ddc]</td>
|
|
<td>[4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d]</td>
|
|
<td>[6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>108824</td>
|
|
<td>1ca814e6162846973fb2c387d0b9fb3c</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:48:24 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>0db114a6b28dc4baf9b46f724e3f679f31903ddc</td>
|
|
<td>4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d</td>
|
|
<td>6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>435ee201c192051b39808d6c2b43f508964332cb8ec8cd3525ff91195836c7ab</td>
|
|
<td>[68a25fb2e970d941642e7ee2, 68a25fb2e970d941642e7eef, 68a3b2cf09045b56b2a707ba, 68a3b2cf09045b56b2a707c7, 68a502e12ae1a61fbf4caf18, 68a502e12ae1a61fbf4caf25, 68a65489c4cae84feadc5718, 68a65489c4cae84feadc5725]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\updateTeppAsync.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[c76d82f132b8d7a6894397fe800ccf29]</td>
|
|
<td>[1d49d94cd6122a10fe449a097c2745bf084b7c60]</td>
|
|
<td>[958d5d8516f19d877d164b5899a840a817e99447ed7c201a7a9d25f471e5018cb4b6ce1e17048dc5cf275dfc9633cae9]</td>
|
|
<td>[7ea89c44345ef4ea03566fb1e0f6225e1d76749ad01fdc77dcd9712eb356b13f9e2cc8f1c364f60260b8fcd69d508c2af54e52317976bcf2d114fd657efb9908]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>updateTeppAsync.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\</td>
|
|
<td></td>
|
|
<td>4699</td>
|
|
<td>c76d82f132b8d7a6894397fe800ccf29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 19:42:27 +0000 UTC</td>
|
|
<td>2023-04-10 15:39:06 +0000 UTC</td>
|
|
<td>1d49d94cd6122a10fe449a097c2745bf084b7c60</td>
|
|
<td>958d5d8516f19d877d164b5899a840a817e99447ed7c201a7a9d25f471e5018cb4b6ce1e17048dc5cf275dfc9633cae9</td>
|
|
<td>7ea89c44345ef4ea03566fb1e0f6225e1d76749ad01fdc77dcd9712eb356b13f9e2cc8f1c364f60260b8fcd69d508c2af54e52317976bcf2d114fd657efb9908</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-10 17:28:22 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4353f8a13eba82d152c814e120093ca90e1ca6ff9ddfc069f20f90b77097664b</td>
|
|
<td>[68a472a799ad3734d804e2ec]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-xml-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[bc4ff58bfcea7628e160c0601711d11e]</td>
|
|
<td>[104615ba0f67a463bb70e2638d87e158c882ae79]</td>
|
|
<td>[812e6986d48fc3174148417d2f01f28d41ec14c76262ed1d6cf2b98030c54b9c14c7e928158f4a22ae4544ee44f18e7f]</td>
|
|
<td>[0bf0afac3699ffaef9548b33ea491f08aa257770622267cf8bb87f9caa45afc5b7023abca65fc215016bf39e8ce4fbfb3d240bf62e9c5da69fc48fd9c55b24b6]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-xml-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>33497</td>
|
|
<td>bc4ff58bfcea7628e160c0601711d11e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>104615ba0f67a463bb70e2638d87e158c882ae79</td>
|
|
<td>812e6986d48fc3174148417d2f01f28d41ec14c76262ed1d6cf2b98030c54b9c14c7e928158f4a22ae4544ee44f18e7f</td>
|
|
<td>0bf0afac3699ffaef9548b33ea491f08aa257770622267cf8bb87f9caa45afc5b7023abca65fc215016bf39e8ce4fbfb3d240bf62e9c5da69fc48fd9c55b24b6</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-08-25 02:07:22 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>42e566b4052546e3dff1eadc7074fe9c78c7a23247ad65d4b2d5682a99be3ed0</td>
|
|
<td>[68a16bd60756fe54a9918fa6, 68a2149cb58debea69d7c751, 68a2bd5ff793a9057f329c0c, 68a3663261f8067c48423ebf, 68a40efceddb3a9f1a71a608, 68a4b7cd36bc5d38057e236d]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cares.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[4de26bd98f5b002370bb3332692dbf66]</td>
|
|
<td>[54751e33aea7127bf9e82ad6efe87cbbfc27c009]</td>
|
|
<td>[364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d]</td>
|
|
<td>[8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cares.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>c-ares Shared Library</td>
|
|
<td>174904</td>
|
|
<td>4de26bd98f5b002370bb3332692dbf66</td>
|
|
<td>The c-ares library</td>
|
|
<td>1.27.0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>54751e33aea7127bf9e82ad6efe87cbbfc27c009</td>
|
|
<td>364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d</td>
|
|
<td>8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:35 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>42e12d5d94581be6c15385db2bba021bc3e0991f2a12e654e3d818e763df17b2</td>
|
|
<td>[68a472a799ad3734d804e2de]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-css-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[dd6c88f4ee7378ef02c734fa2d8842aa]</td>
|
|
<td>[2be539a021bfb638880a7394ad5d5a7403fbe3c9]</td>
|
|
<td>[36abc7be855fb950534bb1af5e2cdea005600abf2febbfe64073f5e81a25e497b1fe86f4fe21dccfb8eae933e2635d6c]</td>
|
|
<td>[8945c31be37aa68a4c669c72e720b0fb82e7e2d9b1cf12a1e7fe9821e3e6cf5294bd6d72541560dab72f792e71f431f1b149be601a6d64cf2c40aca544aec1db]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-css-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>325399</td>
|
|
<td>dd6c88f4ee7378ef02c734fa2d8842aa</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2be539a021bfb638880a7394ad5d5a7403fbe3c9</td>
|
|
<td>36abc7be855fb950534bb1af5e2cdea005600abf2febbfe64073f5e81a25e497b1fe86f4fe21dccfb8eae933e2635d6c</td>
|
|
<td>8945c31be37aa68a4c669c72e720b0fb82e7e2d9b1cf12a1e7fe9821e3e6cf5294bd6d72541560dab72f792e71f431f1b149be601a6d64cf2c40aca544aec1db</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:09:27 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>42dbe93c2eb99e3258531295ef0a821bf6e90b6c91b1216c874f45cbc064b24d</td>
|
|
<td>[68a3146b5f0c41860c8c853b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\shutil.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[a07e5e1d630d60e8a5bf81782809e650]</td>
|
|
<td>[a139b5b35604435be902c8cce6e3431a01122151]</td>
|
|
<td>[a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0]</td>
|
|
<td>[db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>shutil.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>67520</td>
|
|
<td>a07e5e1d630d60e8a5bf81782809e650</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>a139b5b35604435be902c8cce6e3431a01122151</td>
|
|
<td>a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0</td>
|
|
<td>db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>422ff53244750a3f619a88e8a3a82ef6119bb87ad85214fba800b335ae7bb687</td>
|
|
<td>[68a55c701c90616dc58121dd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2afljjje.gan.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:26:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2afljjje.gan.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:26:06 +0000 UTC</td>
|
|
<td>2025-08-20 05:26:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:26:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4101060247b3a6159f3d9826ef4f8368054ead4d6057410efc98469566b6231c</td>
|
|
<td>[68a34b98a6132bf659cce5bf, 68a34df0b71eea1289980a24]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Windows7.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:18Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[0613e501a12cb41dcf8cd8b411161b80]</td>
|
|
<td>[02b47b0828b36e9087f52247e888028bfbd26ff5]</td>
|
|
<td>[89ed1852c1440db35eef47bc9ba86b1152b710d6fe39da717b37c1ec0d8479124fa540f1c7d2125c3884a1ea6fbd6327]</td>
|
|
<td>[a142dfb014434b3d0eda509f3fb482c90b5f148c1c54213bf170cfbe54278c1256b2d95c1942cc4aa47b56d039ab11c52af8b7204f0fa0beb8955cb5f258b6a9]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Windows7.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Windows7</td>
|
|
<td>564736</td>
|
|
<td>0613e501a12cb41dcf8cd8b411161b80</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>02b47b0828b36e9087f52247e888028bfbd26ff5</td>
|
|
<td>89ed1852c1440db35eef47bc9ba86b1152b710d6fe39da717b37c1ec0d8479124fa540f1c7d2125c3884a1ea6fbd6327</td>
|
|
<td>a142dfb014434b3d0eda509f3fb482c90b5f148c1c54213bf170cfbe54278c1256b2d95c1942cc4aa47b56d039ab11c52af8b7204f0fa0beb8955cb5f258b6a9</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:15 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>40ea93c6fd6397e89e2299bd791d3b19282ef70a83631dc8cc8e0bb167a7a71d</td>
|
|
<td>[68a34b98a6132bf659cce5c3, 68a34df0b71eea1289980a28]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceContract.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:21Z, 2025-08-18T15:58:10Z]</td>
|
|
<td>[8ceb6248045a8320552178fc2f0da3ba]</td>
|
|
<td>[9a061be943e235b4c9992167d13dcda524afc3d4]</td>
|
|
<td>[4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740]</td>
|
|
<td>[73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.ServiceContract.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Access Control Service Contract</td>
|
|
<td>141312</td>
|
|
<td>8ceb6248045a8320552178fc2f0da3ba</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:18 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:18 +0000 UTC</td>
|
|
<td>9a061be943e235b4c9992167d13dcda524afc3d4</td>
|
|
<td>4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740</td>
|
|
<td>73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>443c185fe4063ccd7cfde69c8edfeb13cbfa38ea8f5b0376091d4aa34374a6b1</td>
|
|
<td>[68a4ea6392c32cf0fcea4869]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nWHL-CTX-02]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gw13nbaw.an1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T21:19:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gw13nbaw.an1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:19:26 +0000 UTC</td>
|
|
<td>2025-08-19 21:19:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 21:19:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>443be458dfdb7480c2d2a40f454a2b7e5f9ec12ad259b14dcd47472009439658</td>
|
|
<td>[68a3b568d0e193c254e786f8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_30f65d1bc44749cebb0bca5da1468193.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T23:21:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_30f65d1bc44749cebb0bca5da1468193.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:21:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a</td>
|
|
<td>[68a472b1b022648922e2357f]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-core-asl-1.9.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[319c49a4304e3fa9fe3cd8dcfc009d37]</td>
|
|
<td>[3c304d70f42f832e0a86d45bd437f692129299a4]</td>
|
|
<td>[26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f]</td>
|
|
<td>[11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jackson-core-asl-1.9.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>232248</td>
|
|
<td>319c49a4304e3fa9fe3cd8dcfc009d37</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>3c304d70f42f832e0a86d45bd437f692129299a4</td>
|
|
<td>26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f</td>
|
|
<td>11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-04 00:46:31 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 12:40:40.528 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>440079dc739fd6291ff06a190feaf77af3f297e5e47dd010391427408ed28738</td>
|
|
<td>[68a3146b5f0c41860c8c84fc, 68a3146b5f0c41860c8c854a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\copy.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[33fe159d65601e2b1e1c4a751edcfa0e]</td>
|
|
<td>[daf07ab39da555cfee521467dc63f4eae2918da0]</td>
|
|
<td>[f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428]</td>
|
|
<td>[081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>copy.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>10634</td>
|
|
<td>33fe159d65601e2b1e1c4a751edcfa0e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>daf07ab39da555cfee521467dc63f4eae2918da0</td>
|
|
<td>f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428</td>
|
|
<td>081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>145b126185eb42beb5366b5d471b48d5698210a0e64a1cc0c1e8144071e98569</td>
|
|
<td>[68a55cde636cfc7814189cce]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_efld4jwd.fx5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:27:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_efld4jwd.fx5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:27:53 +0000 UTC</td>
|
|
<td>2025-08-20 05:27:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:27:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>141dbcf08788c469ba3d747db24400108920ec7fb03ce8e7847a0d537bec5c38</td>
|
|
<td>[68a50589eadcd7cce3f5d686]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-1BA45DA5-154D-4207-8ED3-5352625CA0B3\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-19T23:11:52Z]</td>
|
|
<td>[97a7cc2a8414b3679444b968b6b029b0]</td>
|
|
<td>[64783c7c1b6a38235cd866c2446599867f6ee497]</td>
|
|
<td>[98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225]</td>
|
|
<td>[301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>97a7cc2a8414b3679444b968b6b029b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:11:52 +0000 UTC</td>
|
|
<td>2025-08-19 23:11:52 +0000 UTC</td>
|
|
<td>64783c7c1b6a38235cd866c2446599867f6ee497</td>
|
|
<td>98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225</td>
|
|
<td>301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a</td>
|
|
<td>2025-08-19 23:15:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>141374e33be99768611a2d42b9d33571a0c5b9763beca9c2dc90900d8cc8f767</td>
|
|
<td>[68a472b1b022648922e23586]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.xml.soap-api-1.4.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[fb8bbe2cdda8ff7bd945fcb9f0f6b61c]</td>
|
|
<td>[667ef2eee594ca7e05a1cbe0b37a428f7b57778f]</td>
|
|
<td>[46ffb2747c3c2c7b0209d049dec81534b82c44399a133b1dcae2859a5fe1e3189691e216ab0820101f177eb49140e095]</td>
|
|
<td>[359293d81529080015f79663ed8adb4a0245de99aa8ab427f57cceaa222622ada80763728fd9473eacd0e70bd24d1a5e8737ded0ade7c510b73ecd30da284109]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>javax.xml.soap-api-1.4.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>46111</td>
|
|
<td>fb8bbe2cdda8ff7bd945fcb9f0f6b61c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>667ef2eee594ca7e05a1cbe0b37a428f7b57778f</td>
|
|
<td>46ffb2747c3c2c7b0209d049dec81534b82c44399a133b1dcae2859a5fe1e3189691e216ab0820101f177eb49140e095</td>
|
|
<td>359293d81529080015f79663ed8adb4a0245de99aa8ab427f57cceaa222622ada80763728fd9473eacd0e70bd24d1a5e8737ded0ade7c510b73ecd30da284109</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-25 04:51:21 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13f52f377f7b08e6179b3b9b305e9723d8c96ef5fe9f85dd455610a7b8b31844</td>
|
|
<td>[68a65386dfe30ebba74d31c9]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\mims2lvt.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-20T23:00:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mims2lvt.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 23:00:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13d2884626fe8588a24e0cec74ab305a961c96afef3e60bbfbf506407767ea46</td>
|
|
<td>[68a269db7d044cbfa4a5a343]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-I-FAMELASTIC]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yyej1nxr.c5v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T23:46:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yyej1nxr.c5v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:46:24 +0000 UTC</td>
|
|
<td>2025-08-17 23:46:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:46:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13b1777cf27f93b4e69672bab176bbd3bdb3ba595873714a1b697739dac76125</td>
|
|
<td>[68a5c81947601aee5f76e915, 68a5c9d7599432010e418bcc]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\LTDIS12n.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe]</td>
|
|
<td>[2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z]</td>
|
|
<td>[dc01de0348cb0b9b9e6fbe13dd2cafc9]</td>
|
|
<td>[c36b7707733d6edb6b9637ad30a687e54cdbcc8e]</td>
|
|
<td>[73907360c0e58fe9f77d43bb4d56dd73849f9e2899a8197d79aea76bd78bd8fe04b43d2bb7225640aa7d0c81c976855e]</td>
|
|
<td>[f24db24d00fdab87c88f85daf0b848c506eaa139f84182ece5f7ed329fec8648ac5e9d881999dcf9e04227bf58a3897f5ade6b25204f6b714301675cccbc7d14]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LTDIS12n.dll</td>
|
|
<td>E:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>278528</td>
|
|
<td>dc01de0348cb0b9b9e6fbe13dd2cafc9</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>12.1.0.020</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-14 13:01:36 +0000 UTC</td>
|
|
<td>2001-04-30 20:52:30 +0000 UTC</td>
|
|
<td>c36b7707733d6edb6b9637ad30a687e54cdbcc8e</td>
|
|
<td>73907360c0e58fe9f77d43bb4d56dd73849f9e2899a8197d79aea76bd78bd8fe04b43d2bb7225640aa7d0c81c976855e</td>
|
|
<td>f24db24d00fdab87c88f85daf0b848c506eaa139f84182ece5f7ed329fec8648ac5e9d881999dcf9e04227bf58a3897f5ade6b25204f6b714301675cccbc7d14</td>
|
|
<td>2025-07-17 16:15:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-19 05:01:49 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>137f566c237c53bf6a59b349eb49fd635f4c8542b19024a4706ed912ec4c84c5</td>
|
|
<td>[68a60636046f9961fe8098a7]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast4]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\__PSScriptPolicyTest_wl5srk2d.2vs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T17:30:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wl5srk2d.2vs.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 17:30:29 +0000 UTC</td>
|
|
<td>2025-08-20 17:30:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 17:30:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>137e5a5cb2ade0a22a101541c06e699d054d556a9fdfb5f921e49aeb84c4c441</td>
|
|
<td>[68a3146b5f0c41860c8c84ff, 68a3146b5f0c41860c8c854b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\datetime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[54cb321c2eed002f565e6528ea807a30]</td>
|
|
<td>[568adbd741f0b5367410f189ae092931a364959d]</td>
|
|
<td>[50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82]</td>
|
|
<td>[9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>datetime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>419</td>
|
|
<td>54cb321c2eed002f565e6528ea807a30</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>568adbd741f0b5367410f189ae092931a364959d</td>
|
|
<td>50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82</td>
|
|
<td>9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13667a217d2a70dc86e0f82fe2473bcbf2ad1d99fd00dc412ad72d8d06d076ff</td>
|
|
<td>[68a3146b5f0c41860c8c8510, 68a3146b5f0c41860c8c8563]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\feedparser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[be27a5f36419634606677e6fa71aa08d]</td>
|
|
<td>[cbecf541ea0883be47c01dcaefc6dbea7d643dde]</td>
|
|
<td>[531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961]</td>
|
|
<td>[22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>feedparser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>20575</td>
|
|
<td>be27a5f36419634606677e6fa71aa08d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>cbecf541ea0883be47c01dcaefc6dbea7d643dde</td>
|
|
<td>531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961</td>
|
|
<td>22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>131f32cd150eaa3c1bffc62780d3e3ce2ae34f91c6710e83d9bfa95dff8cc2a3</td>
|
|
<td>[68a70bf158372bc3075d1d4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Plugins\ListOutOfService.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:07:06Z]</td>
|
|
<td>[4f68c546bee47a5cc27ac372a45b9603]</td>
|
|
<td>[99ed9ade505e7af286e568d57fc4362d0ea74984]</td>
|
|
<td>[526828335a21eb27ffc946cdbb0e16d2653153c9ed7d598f786e535f16081d43b298811d38a052cb414951547596968a]</td>
|
|
<td>[d70f2f276f1a20e6e35e0ab2030f7f622c0b1c8dd5b6b11f7899e80bfc11110a6148de303c0c78fd5872571bdf8090e1055b0ad9494cb67bd0e0fb402e6afb90]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ListOutOfService.dll</td>
|
|
<td>C:\Program Files\Yabe\Plugins\</td>
|
|
<td>ListOutOfService Yabe Plugin</td>
|
|
<td>10240</td>
|
|
<td>4f68c546bee47a5cc27ac372a45b9603</td>
|
|
<td>ListOutOfService</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-01-17 11:17:44 +0000 UTC</td>
|
|
<td>99ed9ade505e7af286e568d57fc4362d0ea74984</td>
|
|
<td>526828335a21eb27ffc946cdbb0e16d2653153c9ed7d598f786e535f16081d43b298811d38a052cb414951547596968a</td>
|
|
<td>d70f2f276f1a20e6e35e0ab2030f7f622c0b1c8dd5b6b11f7899e80bfc11110a6148de303c0c78fd5872571bdf8090e1055b0ad9494cb67bd0e0fb402e6afb90</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-25 18:29:05 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>130c2ee92e030b98e7c97f59010f244dd5dd381c38901ff1780f154bff8cb14d</td>
|
|
<td>[68a472b1b022648922e2356c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmDisasterRecoveryApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[72028a15f40c592ec85392959bc55c88]</td>
|
|
<td>[5a373b8e0a46aeadc0ded6ec0c60e770df09e1ce]</td>
|
|
<td>[4c9eb11f092f91804c836571af914214bbb661378423de5e9ecd840a0f902301a10a83ff617ad2d626667fd1524e4fc8]</td>
|
|
<td>[d683d36d68038f210d7cc846ca6a529051e7ea40e19d3688b160d1da9e4375f2cbda01881105be72f479d20a35fca3e8aa7c77e3ad7959f032bb556e95118c8c]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmDisasterRecoveryApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>174382</td>
|
|
<td>72028a15f40c592ec85392959bc55c88</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>5a373b8e0a46aeadc0ded6ec0c60e770df09e1ce</td>
|
|
<td>4c9eb11f092f91804c836571af914214bbb661378423de5e9ecd840a0f902301a10a83ff617ad2d626667fd1524e4fc8</td>
|
|
<td>d683d36d68038f210d7cc846ca6a529051e7ea40e19d3688b160d1da9e4375f2cbda01881105be72f479d20a35fca3e8aa7c77e3ad7959f032bb556e95118c8c</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>12d861e4fb434e98ce0c5f91301a6025b5a84a108ba9a4b8644e730419eae5af</td>
|
|
<td>[68a5239e621d09b2b1ed5e44]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MenuMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z]</td>
|
|
<td>[0c0d3646da06ec03465d50305002b13e]</td>
|
|
<td>[478f57ff589dfbfe82f1d5326355a3a624d4f778]</td>
|
|
<td>[9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de]</td>
|
|
<td>[ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MenuMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>16384</td>
|
|
<td>0c0d3646da06ec03465d50305002b13e</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>478f57ff589dfbfe82f1d5326355a3a624d4f778</td>
|
|
<td>9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de</td>
|
|
<td>ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46701d9aa111f855f742a1544930a7dcbb453d7e400c2509b89fa6fb6aaa6563</td>
|
|
<td>[68a472a799ad3734d804e2f5]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\com.lowagie.text-2.1.7.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[af7c1521ab58701d3a0cadc29ef3d15a]</td>
|
|
<td>[18d4c7c2014447eacfd00c65c717b3cfc422407b]</td>
|
|
<td>[f9efd08b2c96024a152c7232b040a09c3c6a8a9b682fb238012535e2bda610af6d9fc256868388cc5784e79cf75ec427]</td>
|
|
<td>[cc2357d50e9eb53dcc9e03fc7ffc2fdc0b13dd50cfd221cafc19d3a6160da332bd2834a52f7423be62a543b577bfdea12b1cd5a3242c4fb396cbe17ab7bfd64b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>com.lowagie.text-2.1.7.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\eclipse\birt\main\</td>
|
|
<td></td>
|
|
<td>1782376</td>
|
|
<td>af7c1521ab58701d3a0cadc29ef3d15a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:23 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>18d4c7c2014447eacfd00c65c717b3cfc422407b</td>
|
|
<td>f9efd08b2c96024a152c7232b040a09c3c6a8a9b682fb238012535e2bda610af6d9fc256868388cc5784e79cf75ec427</td>
|
|
<td>cc2357d50e9eb53dcc9e03fc7ffc2fdc0b13dd50cfd221cafc19d3a6160da332bd2834a52f7423be62a543b577bfdea12b1cd5a3242c4fb396cbe17ab7bfd64b</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-11-30 11:29:28 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:58:11.933 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4663e033c1f188ed66d3c413064bfa104f6c307ed10a918afd2b8373130a779a</td>
|
|
<td>[68a5c73d93b6924af299afe6]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\Disk1\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:01:48Z]</td>
|
|
<td>[a06ed9fcd8f114e270aa64c46063d8c3]</td>
|
|
<td>[e091914d4e2ba90e468ef4e13420bed24146bac6]</td>
|
|
<td>[05facc5d4c8fd7ffa4ce1050b01b7ef4543ddf16eba14eea40f7f45ffc444d9b47b821f8e1b28506bf86adb2af0d6cc8]</td>
|
|
<td>[46393550796bc8211ecd96e31ccb5bf65c437d6d1857d548dbd8836192aa6b299feefb617b59fc9c7a251cb259c6dc477f17d044d201621ad315b06db5749102]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>552214</td>
|
|
<td>a06ed9fcd8f114e270aa64c46063d8c3</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2025-04-14 15:20:00 +0000 UTC</td>
|
|
<td>e091914d4e2ba90e468ef4e13420bed24146bac6</td>
|
|
<td>05facc5d4c8fd7ffa4ce1050b01b7ef4543ddf16eba14eea40f7f45ffc444d9b47b821f8e1b28506bf86adb2af0d6cc8</td>
|
|
<td>46393550796bc8211ecd96e31ccb5bf65c437d6d1857d548dbd8836192aa6b299feefb617b59fc9c7a251cb259c6dc477f17d044d201621ad315b06db5749102</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-15 06:16:41 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>45ebe14be4b8b1a28b0494879eb3f86d0ce75b64526d5c99226a3bd8722976d7</td>
|
|
<td>[68a5c8eceb9e7b7716dce1fd, 68a5ca39b5df6e9c598d9a0f, 68a5ca39b5df6e9c598d9a1c, 68a5ccf2ddfdba423e488632, 68a5ccf2ddfdba423e488640, 68a5ccf2ddfdba423e48864e, 68a5ccf2ddfdba423e48865b, 68a5ccf2ddfdba423e488668, 68a5ccf2ddfdba423e488675, 68a5ccf2ddfdba423e488682, 68a5ccf2ddfdba423e48868f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LoggingCommandFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[d1e99aa074468f7f34690bd52397bce3]</td>
|
|
<td>[62b9e06417fe78123179ee9ec61e717cf1f033ea]</td>
|
|
<td>[cd3e9a6558fadc190a141ecf4064dbad653e321134bba8d17a05c03968d9b620d0da6a5e131ed821c61f7f8c7c9fcac3]</td>
|
|
<td>[23744c7d1144fa516a3548edf43a733f8490586626b8f8904e95efc6e2affb593334e3306ae8e2f34b4a5308df1d9cd98954c5e5b399139ac8d04adf7ac4c727]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LoggingCommandFunctions.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>18543</td>
|
|
<td>d1e99aa074468f7f34690bd52397bce3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:41 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>62b9e06417fe78123179ee9ec61e717cf1f033ea</td>
|
|
<td>cd3e9a6558fadc190a141ecf4064dbad653e321134bba8d17a05c03968d9b620d0da6a5e131ed821c61f7f8c7c9fcac3</td>
|
|
<td>23744c7d1144fa516a3548edf43a733f8490586626b8f8904e95efc6e2affb593334e3306ae8e2f34b4a5308df1d9cd98954c5e5b399139ac8d04adf7ac4c727</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:16 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>45adf7f6c69c60c4dc4bae33e1b2af87209b219c55f17426027f900f4e4a9cdd</td>
|
|
<td>[68a3146b5f0c41860c8c8508, 68a3146b5f0c41860c8c855b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\urllib\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7ac8f76f913878aafc40578f712b8cdb]</td>
|
|
<td>[2dd3dd047d90b42752ad03421277a6445bc35f04]</td>
|
|
<td>[21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0]</td>
|
|
<td>[fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\urllib\__pycache__\</td>
|
|
<td></td>
|
|
<td>143</td>
|
|
<td>7ac8f76f913878aafc40578f712b8cdb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2dd3dd047d90b42752ad03421277a6445bc35f04</td>
|
|
<td>21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0</td>
|
|
<td>fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4584f98f1d747e4aea53cea83804037bbdfb1b342fd04183804e2616fe24274e</td>
|
|
<td>[68a5239e621d09b2b1ed5e5a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[0c2246ee9abc192383fb19860c142559]</td>
|
|
<td>[743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94]</td>
|
|
<td>[5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6]</td>
|
|
<td>[b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>6656</td>
|
|
<td>0c2246ee9abc192383fb19860c142559</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94</td>
|
|
<td>5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6</td>
|
|
<td>b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>45680ffb69374abd7c201a9028af08fea837786ba94a5b5eeab41f630c2c36b6</td>
|
|
<td>[68a5c75b90b41db8c2ac6a0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\QS1\QDirect\QDirect.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[D:\QS1\QDirect\QDirect.exe]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T13:02:09Z]</td>
|
|
<td>[9abc4b5190e5b957e41335dd525011d9]</td>
|
|
<td>[437a4efdcd877e98bb417c6f4b3b66a59ffb4ba8]</td>
|
|
<td>[1e48e15c192c34738d0fef20729da71894f752f9d4576f08ffe197273bfbab283b749eb6f38fc3aaef7e7f8a6e5cdb6a]</td>
|
|
<td>[dcd008fe470e024e7fa3e88ec17f37ca34235d72a767918108435869709c201d75efd3931f1f5c4a42efd6d7b932c90f369316bc7cf0206a8a90b0b7206dd083]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QDirect.exe</td>
|
|
<td>D:\QS1\QDirect\</td>
|
|
<td>QDirect</td>
|
|
<td>409600</td>
|
|
<td>9abc4b5190e5b957e41335dd525011d9</td>
|
|
<td>QS/1 Data Systems QRouter</td>
|
|
<td>2, 0, 0, 2</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:07:32 +0000 UTC</td>
|
|
<td>2012-10-16 14:06:36 +0000 UTC</td>
|
|
<td>437a4efdcd877e98bb417c6f4b3b66a59ffb4ba8</td>
|
|
<td>1e48e15c192c34738d0fef20729da71894f752f9d4576f08ffe197273bfbab283b749eb6f38fc3aaef7e7f8a6e5cdb6a</td>
|
|
<td>dcd008fe470e024e7fa3e88ec17f37ca34235d72a767918108435869709c201d75efd3931f1f5c4a42efd6d7b932c90f369316bc7cf0206a8a90b0b7206dd083</td>
|
|
<td>2025-08-20 13:02:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-02-12 08:12:00 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:05:52.276 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4562218ded432a9a34e515a5fb320438734199dfc95ee019d1a527271e89202c</td>
|
|
<td>[68a55d602bb4c4aef6ea39bd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Jackson]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1s3kxuc.1b0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:30:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s1s3kxuc.1b0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:30:00 +0000 UTC</td>
|
|
<td>2025-08-20 05:30:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:30:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>453486eb8a7efac6fb88de6df7d8ab54f042c3c7344c842f641fa006a0cfaac4</td>
|
|
<td>[68a189d9de5d48d3c147792c, 68a2dadb3dc591405ef57c41, 68a42cd899e203b32835f07d, 68a57e117df58485104aee22, 68a6cfb1b9028d5922ad93bf]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[ivOSCCCRS]</td>
|
|
<td>[IVOSCCCRS]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:40:49Z, 2025-08-18T07:40:47Z, 2025-08-19T07:40:47Z, 2025-08-20T07:40:47Z, 2025-08-21T07:40:47Z]</td>
|
|
<td>[a29fb1288a2dd2d0c972e30105a63175]</td>
|
|
<td>[15d2a944519f3b805ee4b99667fde4b9668a147d]</td>
|
|
<td>[45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5]</td>
|
|
<td>[41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a]</td>
|
|
<td>[172.17.21.71]</td>
|
|
<td>[172.17.21.71]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2973</td>
|
|
<td>a29fb1288a2dd2d0c972e30105a63175</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:35:14 +0000 UTC</td>
|
|
<td>2022-03-01 18:17:44 +0000 UTC</td>
|
|
<td>15d2a944519f3b805ee4b99667fde4b9668a147d</td>
|
|
<td>45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5</td>
|
|
<td>41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a</td>
|
|
<td>2025-08-09 07:40:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4501ed01ec29f06c2d1989aa6ef3f08a3b7d285924f453c84565cc43aba296ce</td>
|
|
<td>[68a5148159ddbe2cd55af622]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_740b673dcc864dc7858bc48f64edbaf4.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_740b673dcc864dc7858bc48f64edbaf4.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>44f9ad23efffcc78362a47f3e2ba1f9b47cc174f01ef1284f605cc30cda15cea</td>
|
|
<td>[68a511cf5bc894dc77f9eaa6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_f6a35165c321489a9856b32c2808949d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:07:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_f6a35165c321489a9856b32c2808949d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>44e564c6b36b57fa94cdcddbc11e741ffddf976ec407ac94c772bea6666f5b34</td>
|
|
<td>[68a3146b5f0c41860c8c8504, 68a3146b5f0c41860c8c852a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_parser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[51480655d8c23400bade8fc5c8ab7092]</td>
|
|
<td>[0b0c8a12ff3634c2e31a68e7afb12b0d246588ea]</td>
|
|
<td>[76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb]</td>
|
|
<td>[8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_parser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>43572</td>
|
|
<td>51480655d8c23400bade8fc5c8ab7092</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>0b0c8a12ff3634c2e31a68e7afb12b0d246588ea</td>
|
|
<td>76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb</td>
|
|
<td>8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>449e8a25a86ea09ff6984ffb9d98d3dd1152b50e34ef9aeb4f5a2117594ee7ba</td>
|
|
<td>[68a5c8eceb9e7b7716dce1fc, 68a5ca39b5df6e9c598d9a0e, 68a5ca39b5df6e9c598d9a1b, 68a5ccf2ddfdba423e488631, 68a5ccf2ddfdba423e48863f, 68a5ccf2ddfdba423e48864d, 68a5ccf2ddfdba423e48865a, 68a5ccf2ddfdba423e488667, 68a5ccf2ddfdba423e488674, 68a5ccf2ddfdba423e488681, 68a5ccf2ddfdba423e48868e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LocalizationFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[0249a234b6eaf0c424b7309b0ef40e73]</td>
|
|
<td>[f531803907c734b2ae865443dea0b050cb608f45]</td>
|
|
<td>[f05edcccfa92c97c35572cdaf50d0205d1b00e7dd686393f3a097143f00ab87493b268f774c4e61b917133ff4bc2d5ca]</td>
|
|
<td>[3026a52ac4a92bf27bc0814adaaa2a8627ac99e93b4de932d711a79434ebdbd617de93ddea49dd5ee3094db6a44466f31bcbc44535a94a7850e2715a236e0b94]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LocalizationFunctions.ps1</td>
|
|
<td>C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>5544</td>
|
|
<td>0249a234b6eaf0c424b7309b0ef40e73</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-07-08 16:27:53 +0000 UTC</td>
|
|
<td>2024-06-18 17:58:02 +0000 UTC</td>
|
|
<td>f531803907c734b2ae865443dea0b050cb608f45</td>
|
|
<td>f05edcccfa92c97c35572cdaf50d0205d1b00e7dd686393f3a097143f00ab87493b268f774c4e61b917133ff4bc2d5ca</td>
|
|
<td>3026a52ac4a92bf27bc0814adaaa2a8627ac99e93b4de932d711a79434ebdbd617de93ddea49dd5ee3094db6a44466f31bcbc44535a94a7850e2715a236e0b94</td>
|
|
<td>2025-04-16 18:42:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:02 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-16 18:46:05.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>449602d55728262839bba25ac5fd518a4eed743e7a365de4d1558e9b0a4a4753</td>
|
|
<td>[68a306a5ba5832f49fe9cf32]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CMSGDLL.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:35Z]</td>
|
|
<td>[72d218628b9377e310e9816caff1746e]</td>
|
|
<td>[222f26ea5539cccc50a8e1ac8b244e67db07c214]</td>
|
|
<td>[e0019f2af4492c8704ac702db8d1e3c966d34bb33e32a56acd1416103e639972fb2972c0016975125312e248e09eb0dd]</td>
|
|
<td>[2e9ebe8065224fdaa90543ad0254cc3b5b82f27ce21d8c752cdc110766cde3f23bdde0732f940486a409987d781905645a75d065039b1af5ea6af9c5e000bb88]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CMSGDLL.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>14848</td>
|
|
<td>72d218628b9377e310e9816caff1746e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:04 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>222f26ea5539cccc50a8e1ac8b244e67db07c214</td>
|
|
<td>e0019f2af4492c8704ac702db8d1e3c966d34bb33e32a56acd1416103e639972fb2972c0016975125312e248e09eb0dd</td>
|
|
<td>2e9ebe8065224fdaa90543ad0254cc3b5b82f27ce21d8c752cdc110766cde3f23bdde0732f940486a409987d781905645a75d065039b1af5ea6af9c5e000bb88</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 16:53:39 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>448a0031998f7af8ce396b15c8432b788f34b1b698f89edace1448bcbd3de7d8</td>
|
|
<td>[68a1651841c74f595c525e6b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i1vxbppv.2g2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:13:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_i1vxbppv.2g2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:13:52 +0000 UTC</td>
|
|
<td>2025-08-17 05:13:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:14:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4476ba89b76ca08da779d8ea36322d55ae008641cc2e9a811aa72834c7e7b4c9</td>
|
|
<td>[68a472b1b022648922e23579]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\flying-saucer-core-9.0.5.D2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:40Z]</td>
|
|
<td>[d7373f0c4b5a55968b69217ca7802811]</td>
|
|
<td>[5ac2b648d836d5e9a1004a7ca844b06bac06e280]</td>
|
|
<td>[1a506177a15356d89957bba9e010f44b03e8aed69672037e53fe0a30c76fedf459d2770d36bea90bcf73f3c568078fca]</td>
|
|
<td>[d7be05cd6a7c9409d94e7ee9f17ebf5bfebe1b66541b34c60de489639d96b2efd717c2b9f0ec3a4df8595ac1165eeb58bd11147a511209d00d2ec4564f1649bc]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>flying-saucer-core-9.0.5.D2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>1179057</td>
|
|
<td>d7373f0c4b5a55968b69217ca7802811</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>5ac2b648d836d5e9a1004a7ca844b06bac06e280</td>
|
|
<td>1a506177a15356d89957bba9e010f44b03e8aed69672037e53fe0a30c76fedf459d2770d36bea90bcf73f3c568078fca</td>
|
|
<td>d7be05cd6a7c9409d94e7ee9f17ebf5bfebe1b66541b34c60de489639d96b2efd717c2b9f0ec3a4df8595ac1165eeb58bd11147a511209d00d2ec4564f1649bc</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-11 12:21:19 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4469255053c3419cb7051ccc31010918a1a9dac527fe2c10bcf33d95bfbc699e</td>
|
|
<td>[68a3146b5f0c41860c8c8501, 68a3146b5f0c41860c8c855a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\utils.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[1c9f352ef2dc6107635c941c2692875a]</td>
|
|
<td>[7dac4531071eeb0f6c989789b241fd935231bb43]</td>
|
|
<td>[0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78]</td>
|
|
<td>[dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utils.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>16103</td>
|
|
<td>1c9f352ef2dc6107635c941c2692875a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>7dac4531071eeb0f6c989789b241fd935231bb43</td>
|
|
<td>0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78</td>
|
|
<td>dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4937e31e371e07aafc2b6401c5f039faf292b0b3dcac6d8a7b7bad10e1561040</td>
|
|
<td>[68a4732a87eb8c73e6aa5a6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a51riren.tsa.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:50:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a51riren.tsa.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:50:44 +0000 UTC</td>
|
|
<td>2025-08-19 12:50:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:50:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>491b8bd4fad8b9cc62cec4a250351477c886070eaf3a3abc35cf10aa0719772e</td>
|
|
<td>[68a245a63bd5d44dfa80605b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikauudym.nih.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:08:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikauudym.nih.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:08:25 +0000 UTC</td>
|
|
<td>2025-08-17 21:08:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:12:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>490e4c588921a4516985398ef928a4796d02dcbab6984d7bbd8a56fecb665d42</td>
|
|
<td>[68a347664fc9cc000172429d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_klxrtpvo.jas.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T15:31:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_klxrtpvo.jas.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:31:42 +0000 UTC</td>
|
|
<td>2025-08-18 15:31:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:31:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48dd119b22d9e9f12a4086afc7afa9d4cc5e9ab43294342fa54531f763c0dddc</td>
|
|
<td>[68a17f8b3d3e59587db04d3d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fb0tna5.obn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:06:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3fb0tna5.obn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:06:44 +0000 UTC</td>
|
|
<td>2025-08-17 07:06:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:06:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48a182856395bc38e81ae27cbfa36e1949f5cc7eafe208356e9381e8c18a4f45</td>
|
|
<td>[68a50d0bba435d26b71e5005]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rerrl1la.l5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T23:47:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rerrl1la.l5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:47:13 +0000 UTC</td>
|
|
<td>2025-08-19 23:47:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:47:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>489f1bbaa35649da04ffcd7ee66ad611b107b06afb4cfd919d36a186a3059188</td>
|
|
<td>[68a22f92c12f0e944e5d68ef]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f3m5l1ce.ht1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:37:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_f3m5l1ce.ht1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:37:48 +0000 UTC</td>
|
|
<td>2025-08-17 19:37:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:37:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4888b61d694a7954e94a695ea563c5f4ba2e359ba1b69183743e27075bd018e3</td>
|
|
<td>[68a70bf158372bc3075d1d4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Plugins\FindPrioritiesGlobal.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:07:06Z]</td>
|
|
<td>[834483fa3b274bb181244b80f21e2b33]</td>
|
|
<td>[8f0dec6e7eea4ce8d59d8a5bb3763525792085a4]</td>
|
|
<td>[cfc556cfe1f57ade366c391364f45ae3f6e6929894bde5d4206fc91dd3feaff2c62bc8912c0addd315f6308fec83d413]</td>
|
|
<td>[0ec2209922e323577530890b3cf430d98b0b2cbefcff93bb335fc41803e14abd77e7ac4a5246a7c68dc42713dd8823035345b4db650226ded04af13575d26f1f]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindPrioritiesGlobal.dll</td>
|
|
<td>C:\Program Files\Yabe\Plugins\</td>
|
|
<td>FindPrioritiesGlobal</td>
|
|
<td>35840</td>
|
|
<td>834483fa3b274bb181244b80f21e2b33</td>
|
|
<td>FindPrioritiesGlobal</td>
|
|
<td>1.3.4.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-01-17 11:17:44 +0000 UTC</td>
|
|
<td>8f0dec6e7eea4ce8d59d8a5bb3763525792085a4</td>
|
|
<td>cfc556cfe1f57ade366c391364f45ae3f6e6929894bde5d4206fc91dd3feaff2c62bc8912c0addd315f6308fec83d413</td>
|
|
<td>0ec2209922e323577530890b3cf430d98b0b2cbefcff93bb335fc41803e14abd77e7ac4a5246a7c68dc42713dd8823035345b4db650226ded04af13575d26f1f</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-25 18:29:05 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4818a0297cff2e7386a18a84c2c3bb66709c591669de6ab221e9c8e84561582c</td>
|
|
<td>[68a16bd60756fe54a9918fa9, 68a2149cb58debea69d7c754, 68a2bd5ff793a9057f329c0f, 68a3663261f8067c48423ec2, 68a40efceddb3a9f1a71a60b, 68a4b7cd36bc5d38057e2370]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zDiagnostic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[9efc68196d98f658640751c4762d005b]</td>
|
|
<td>[be6cd4a37d595a950c683b19744430ae3e2dac02]</td>
|
|
<td>[091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904]</td>
|
|
<td>[7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zDiagnostic.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2399032</td>
|
|
<td>9efc68196d98f658640751c4762d005b</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>be6cd4a37d595a950c683b19744430ae3e2dac02</td>
|
|
<td>091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904</td>
|
|
<td>7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:43 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47e046a893fbffe1108f63752b752d62771a255d6f67bdbdb1071eb843b0b0b2</td>
|
|
<td>[68a5646930f6badf50727f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_wjvwcszi.j0w.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-20T06:00:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wjvwcszi.j0w.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-20 06:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 06:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47defea512c04bef937dc343eb7d484d41d313d5fff6b06df628bc0c3ae43c7e</td>
|
|
<td>[68a544017e5aedf6dd6fa528]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikf4hxcy.y0e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T03:41:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikf4hxcy.y0e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 03:41:43 +0000 UTC</td>
|
|
<td>2025-08-20 03:41:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 03:41:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47d7f70f6e4544111d873b85d126334d5376cda93f44463620545a5afb127224</td>
|
|
<td>[68a3146b5f0c41860c8c8542, 68a3146b5f0c41860c8c8573]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\socketserver.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[a8399241bb8bb7845b245b8b45caa424]</td>
|
|
<td>[5919c36160ce0593f1446305e684e923f91ace99]</td>
|
|
<td>[d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b]</td>
|
|
<td>[566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>socketserver.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>34517</td>
|
|
<td>a8399241bb8bb7845b245b8b45caa424</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>5919c36160ce0593f1446305e684e923f91ace99</td>
|
|
<td>d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b</td>
|
|
<td>566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47270658f0796373095f1e46a93e2733bf8e6989b1a8726b7720106c3e9f031b</td>
|
|
<td>[68a4fa7b385976ad39245b9d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\ProgramData\Package Cache\2393A74FE27E42E37E258ADF79A39EBD8E3A0933\ForceScheduleReboot.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe]</td>
|
|
<td>[C:\Windows\Temp\{3DC0FF38-2812-41C0-94A3-517D5D56E856}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe]</td>
|
|
<td>[2025-08-19T22:27:20Z]</td>
|
|
<td>[b0a3e46068181df35695c9bba8751933]</td>
|
|
<td>[2393a74fe27e42e37e258adf79a39ebd8e3a0933]</td>
|
|
<td>[7bfe1e8e74569fc88b331b3af94fee6723297a363194408db41b79aa48c9f160ea007e2474cafa032c1f9837e8b1657a]</td>
|
|
<td>[005d8d396d1cb2cdb745b6e7615e3ef153c472f61656e1db2037e8a9a3a584bca6f43474a1753e98ed92bce7d7aa76be611a9989de0b2ca872d7dde507945dde]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ForceScheduleReboot.bat</td>
|
|
<td>C:\ProgramData\Package Cache\2393A74FE27E42E37E258ADF79A39EBD8E3A0933\</td>
|
|
<td></td>
|
|
<td>223</td>
|
|
<td>b0a3e46068181df35695c9bba8751933</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>2393a74fe27e42e37e258adf79a39ebd8e3a0933</td>
|
|
<td>7bfe1e8e74569fc88b331b3af94fee6723297a363194408db41b79aa48c9f160ea007e2474cafa032c1f9837e8b1657a</td>
|
|
<td>005d8d396d1cb2cdb745b6e7615e3ef153c472f61656e1db2037e8a9a3a584bca6f43474a1753e98ed92bce7d7aa76be611a9989de0b2ca872d7dde507945dde</td>
|
|
<td>2025-08-19 22:28:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-05 13:26:47 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 22:31:07.186 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46d408f5c75a3494b1a5c7f8247be80a57da4b1f537a3e235d060f24f56351bf</td>
|
|
<td>[68a34b98a6132bf659cce5c1, 68a34df0b71eea1289980a26]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceConnector.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:18Z, 2025-08-18T15:58:08Z]</td>
|
|
<td>[ed3277338add7a694a7fc9d05affc2f7]</td>
|
|
<td>[ff0307d1794a13aa530762c41c8bb569a520d46a]</td>
|
|
<td>[2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916]</td>
|
|
<td>[2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.ServiceConnector.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Access Control Service Connector</td>
|
|
<td>242176</td>
|
|
<td>ed3277338add7a694a7fc9d05affc2f7</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:57 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:57 +0000 UTC</td>
|
|
<td>ff0307d1794a13aa530762c41c8bb569a520d46a</td>
|
|
<td>2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916</td>
|
|
<td>2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46baf1723a7b0a56fca54012a44a4fd0ab65fb89d928dce80e00920d3da9a01a</td>
|
|
<td>[68a48b263469bcd052351305]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhl1gdaz.dy1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T14:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lhl1gdaz.dy1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 14:33:06 +0000 UTC</td>
|
|
<td>2025-08-19 14:33:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 14:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46aff86b1ea482105057d001984bf68e1c6ea6c6f592b69b96a15a4527194c32</td>
|
|
<td>[68a6afe50e0f3bd8deac4d00, 68a6afe50e0f3bd8deac4d14, 68a6afe50e0f3bd8deac4d41, 68a6afe50e0f3bd8deac4d62, 68a6afe50e0f3bd8deac4d82, 68a6afe50e0f3bd8deac4da2, 68a6afe50e0f3bd8deac4dc2, 68a6afe50e0f3bd8deac4de3, 68a6afe50e0f3bd8deac4e01, 68a6afe50e0f3bd8deac4e22, 68a6afe50e0f3bd8deac4e42, 68a6afe50e0f3bd8deac4e62, 68a6afe50e0f3bd8deac4e82, 68a6afe50e0f3bd8deac4ea2, 68a6afe50e0f3bd8deac4eb2, 68a6afe50e0f3bd8deac4ee2, 68a6afe50e0f3bd8deac4f02, 68a6afe50e0f3bd8deac4f22, 68a6afe50e0f3bd8deac4f42, 68a6afe50e0f3bd8deac4f6c, 68a6afe50e0f3bd8deac4f8c, 68a6afe50e0f3bd8deac4fad, 68a6afe50e0f3bd8deac4fcc, 68a6afe50e0f3bd8deac4fec, 68a6afe50e0f3bd8deac500c, 68a6afe50e0f3bd8deac502c, 68a6afe50e0f3bd8deac504c, 68a6afe50e0f3bd8deac506c, 68a6afe50e0f3bd8deac508c, 68a6afe50e0f3bd8deac50b5, 68a6afe50e0f3bd8deac50d6, 68a6afe50e0f3bd8deac50f6, 68a6afe50e0f3bd8deac5121, 68a6afe50e0f3bd8deac5140, 68a6afe50e0f3bd8deac5160, 68a6afe50e0f3bd8deac518a, 68a6afe50e0f3bd8deac51aa, 68a6afe50e0f3bd8deac51ca, 68a6afe50e0f3bd8deac51ea, 68a6afe50e0f3bd8deac51fd, 68a6afe50e0f3bd8deac5214, 68a6afe50e0f3bd8deac524b, 68a6afe50e0f3bd8deac526b, 68a6afe50e0f3bd8deac527f, 68a6afe50e0f3bd8deac529f, 68a6afe50e0f3bd8deac52bf, 68a6afe50e0f3bd8deac52df, 68a6afe50e0f3bd8deac52ff, 68a6afe50e0f3bd8deac531f, 68a6afe50e0f3bd8deac533f, 68a6afe50e0f3bd8deac535f, 68a6afe50e0f3bd8deac537f, 68a6afe50e0f3bd8deac53a4, 68a6afe50e0f3bd8deac53bf, 68a6afe50e0f3bd8deac53e4, 68a6afe50e0f3bd8deac5404, 68a6afe50e0f3bd8deac5425, 68a6afe50e0f3bd8deac5440, 68a6afe50e0f3bd8deac5464, 68a6afe50e0f3bd8deac5484, 68a6afe50e0f3bd8deac54a5, 68a6afe50e0f3bd8deac54c5, 68a6afe50e0f3bd8deac54e5, 68a6afe50e0f3bd8deac5505, 68a6afe50e0f3bd8deac5525, 68a6afe50e0f3bd8deac5545, 68a6afe50e0f3bd8deac556f, 68a6afe50e0f3bd8deac558f, 68a6afe50e0f3bd8deac55af, 68a6afe50e0f3bd8deac55cf, 68a6afe50e0f3bd8deac55ef, 68a6afe50e0f3bd8deac560e, 68a6afe50e0f3bd8deac562f, 68a6afe50e0f3bd8deac5638, 68a6afe50e0f3bd8deac565f, 68a6afe50e0f3bd8deac567f, 68a6afe50e0f3bd8deac56ad, 68a6afe50e0f3bd8deac56cc, 68a6afe50e0f3bd8deac56e4, 68a6afe50e0f3bd8deac570c, 68a6afe50e0f3bd8deac5727, 68a6afe50e0f3bd8deac574d, 68a6afe50e0f3bd8deac577f, 68a6afe50e0f3bd8deac5794, 68a6afe50e0f3bd8deac57a1, 68a6afe50e0f3bd8deac57d7, 68a6afe50e0f3bd8deac57e0, 68a6afe50e0f3bd8deac5814, 68a6afe50e0f3bd8deac582d, 68a6afe50e0f3bd8deac5856, 68a6afe50e0f3bd8deac587e, 68a6afe50e0f3bd8deac5897, 68a6afe50e0f3bd8deac58a7, 68a6afe50e0f3bd8deac58d7, 68a6afe50e0f3bd8deac58e7, 68a6afe50e0f3bd8deac5911, 68a6afe50e0f3bd8deac5928, 68a6afe50e0f3bd8deac5956, 68a6afe50e0f3bd8deac5977, 68a6afe50e0f3bd8deac598c, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-pngturbo-10-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[4083ee8a826b363e3191ff929612e3af]</td>
|
|
<td>[e6008a05b95bb14896ff69231b2ca0d2a8f64a59]</td>
|
|
<td>[8f4e7e68e36b2d472c5495510487ae9c732ccbf87f36b3e7bfc1df77997f98aac6a490e666cef782e8a98a43cd2afef5]</td>
|
|
<td>[7692153bbead7a82e1ceaeea974a7fdd0d35f1d841353fe414a3dd95ab0839a9dbcd041e9b4ba646d743ef7f7dc2e46fc327189f77e2bd808b294afbbbbad452]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-pngturbo-10-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-pngturbo-10-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>109056</td>
|
|
<td>4083ee8a826b363e3191ff929612e3af</td>
|
|
<td>CIP-PNGTurbo</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-20 05:16:21 +0000 UTC</td>
|
|
<td>e6008a05b95bb14896ff69231b2ca0d2a8f64a59</td>
|
|
<td>8f4e7e68e36b2d472c5495510487ae9c732ccbf87f36b3e7bfc1df77997f98aac6a490e666cef782e8a98a43cd2afef5</td>
|
|
<td>7692153bbead7a82e1ceaeea974a7fdd0d35f1d841353fe414a3dd95ab0839a9dbcd041e9b4ba646d743ef7f7dc2e46fc327189f77e2bd808b294afbbbbad452</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4698d9455955cd75c09ba12cffbc46e561afb67dae454c6d4cfaa21e481639f9</td>
|
|
<td>[68a16bd60756fe54a9918f94, 68a2149cb58debea69d7c73c, 68a2bd5ff793a9057f329bfd, 68a3663261f8067c48423eac, 68a40efceddb3a9f1a71a5f8, 68a4b7cd36bc5d38057e235a]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\tp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[849f202bfe27a29199a8365d73f3079b]</td>
|
|
<td>[47561e1037201d35a1a22df95bbf0c1e6660d03b]</td>
|
|
<td>[b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033]</td>
|
|
<td>[be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tp.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Transport Module</td>
|
|
<td>2134328</td>
|
|
<td>849f202bfe27a29199a8365d73f3079b</td>
|
|
<td>Zoom Video Call</td>
|
|
<td>1, 0, 2012, 1222</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>47561e1037201d35a1a22df95bbf0c1e6660d03b</td>
|
|
<td>b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033</td>
|
|
<td>be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:02 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4bc305aa68c31d34a4ad18874c34792451dd19c8a60493021c251866469bd26f</td>
|
|
<td>[68a5239e621d09b2b1ed5e59]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellEng.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[239e31ca812fad5e2f5203f7b8f5ab80]</td>
|
|
<td>[d50aeb2d4fd31525703893f7311ea78fa7f8d2af]</td>
|
|
<td>[3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e]</td>
|
|
<td>[0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellEng.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>87552</td>
|
|
<td>239e31ca812fad5e2f5203f7b8f5ab80</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>d50aeb2d4fd31525703893f7311ea78fa7f8d2af</td>
|
|
<td>3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e</td>
|
|
<td>0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b879975722f606898213bb8e96ba9186e845132251b03c60488f253608cc541</td>
|
|
<td>[68a4b0fb13fac5171eeef0d9]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Profile.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:09Z]</td>
|
|
<td>[2dc079d8aa2d792a07ec17ff40d80cdf]</td>
|
|
<td>[bed9acdfa41b77b37f4a56dd3c28617d47333087]</td>
|
|
<td>[35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f]</td>
|
|
<td>[a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.Profile.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.Profile</td>
|
|
<td>10752</td>
|
|
<td>2dc079d8aa2d792a07ec17ff40d80cdf</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:01 +0000 UTC</td>
|
|
<td>bed9acdfa41b77b37f4a56dd3c28617d47333087</td>
|
|
<td>35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f</td>
|
|
<td>a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b7d94f99c341f6b208ec7b9c84579162f1279c148b2433bf5a016ed3c652bf5</td>
|
|
<td>[68a253db1b160b4afaf47a6f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_132cbouk.vde.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:12:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_132cbouk.vde.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:12:37 +0000 UTC</td>
|
|
<td>2025-08-17 22:12:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:12:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b7c8dd878264bd4ab913b0cfe3e28bdf82fa81757e8cb8b373202e265cdbdbc</td>
|
|
<td>[68a472b1b022648922e2357b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\gmbal-api-only-3.1.0-b001.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:40Z]</td>
|
|
<td>[5c18e371a6ef8dd3608d74396ece0d29]</td>
|
|
<td>[3502c55c7ad2085ece6b38202b5169dd9177e0a2]</td>
|
|
<td>[6de0086ffc2193f7796536b51c560d8914665813b9653460995a44d74dc40ef27c97ac827fd40c1401aa0a83aa40a5dc]</td>
|
|
<td>[d4ccbdb7cc9f9d841b3ffbd6672affc429b5d4b01322ce8efc5563d0bc9aa91c3fd8f84ccf5f61bf5bc51cc1413b48fc30fa1084aa460ef37cacd22fc67c874f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>gmbal-api-only-3.1.0-b001.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\gmbal-api-only-3.1.0-b001.jar-aaeaa49eaccbace5\</td>
|
|
<td></td>
|
|
<td>21820</td>
|
|
<td>5c18e371a6ef8dd3608d74396ece0d29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:10 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:10 +0000 UTC</td>
|
|
<td>3502c55c7ad2085ece6b38202b5169dd9177e0a2</td>
|
|
<td>6de0086ffc2193f7796536b51c560d8914665813b9653460995a44d74dc40ef27c97ac827fd40c1401aa0a83aa40a5dc</td>
|
|
<td>d4ccbdb7cc9f9d841b3ffbd6672affc429b5d4b01322ce8efc5563d0bc9aa91c3fd8f84ccf5f61bf5bc51cc1413b48fc30fa1084aa460ef37cacd22fc67c874f</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-01 18:36:06 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b531ac5e9be73d2038e308c44155f559181f17c50b985ca80a99908c38fa3d5</td>
|
|
<td>[68a306a5ba5832f49fe9cf42]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\BORLNDMM.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[ded1c6d9dedad4357cb852524b195e81]</td>
|
|
<td>[1304f8c2ee6eeeee037fba24ebd081b687a4803f]</td>
|
|
<td>[b7edc789fb8b23920762761db7d078c4808f59f15767ae9017556000908dce798d0ed5767f27917f618fc1a467206d76]</td>
|
|
<td>[9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BORLNDMM.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Borland Memory Manager</td>
|
|
<td>18944</td>
|
|
<td>ded1c6d9dedad4357cb852524b195e81</td>
|
|
<td>Borland Memory Manager</td>
|
|
<td>4.00</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:02 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>1304f8c2ee6eeeee037fba24ebd081b687a4803f</td>
|
|
<td>b7edc789fb8b23920762761db7d078c4808f59f15767ae9017556000908dce798d0ed5767f27917f618fc1a467206d76</td>
|
|
<td>9569d3823c610460c1713a3598402e6ccd8912e2be3f77bae365cd65340f0a6931f7d9637fa824812e211ed1c66b8dc09c06b60dc52d1d7b810ec86250954350</td>
|
|
<td>2025-04-30 20:02:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-28 10:12:26 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b38348ebaf6360d8bf0ce8dead8fe5f6f79a2833a41152004876136b2b16d27</td>
|
|
<td>[68a5601c347a6435334e42e9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-EXTHSW-NP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zst5e0yo.1ev.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:41:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zst5e0yo.1ev.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:41:39 +0000 UTC</td>
|
|
<td>2025-08-20 05:41:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:41:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b26c40495a3de4c3fa37e30e815a7908ed30d11328fcfe48fef638974fb8053</td>
|
|
<td>[68a3584898af4cd66a2f37c4]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:43:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 16:43:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b1ff1eeb076783944f448eaaa429d6c11f708d81d5926ad6700e7db10eeea21</td>
|
|
<td>[68a306a5ba5832f49fe9cf5e]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CFGDATAC.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:38Z]</td>
|
|
<td>[ff92531474032c443db2e603c974f48c]</td>
|
|
<td>[c106e0d6b7e5de14982d8f6b2bd393d41a8e981e]</td>
|
|
<td>[e7babeb1d64f89c47223239cb828797c29c89e4235dc0e79af937964528a7d884f045404d4cfe6c98424509d35572e35]</td>
|
|
<td>[1042c372c03b854e08a86c5dc29444b117653ab000660fee2148f4de486775756d4d10681e895256c789f7c07c9158c936225a871751ad3a9f1622854716f86f]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CFGDATAC.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>47104</td>
|
|
<td>ff92531474032c443db2e603c974f48c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:04 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>c106e0d6b7e5de14982d8f6b2bd393d41a8e981e</td>
|
|
<td>e7babeb1d64f89c47223239cb828797c29c89e4235dc0e79af937964528a7d884f045404d4cfe6c98424509d35572e35</td>
|
|
<td>1042c372c03b854e08a86c5dc29444b117653ab000660fee2148f4de486775756d4d10681e895256c789f7c07c9158c936225a871751ad3a9f1622854716f86f</td>
|
|
<td>2025-04-30 20:03:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 16:49:46 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4af3d3e1a71f70b731ca3aaa9e00cc505835f9f8574e257760dd8679cf51ea32</td>
|
|
<td>[68a16bd60756fe54a9918f99, 68a2149cb58debea69d7c745, 68a2bd5ff793a9057f329c00, 68a3663261f8067c48423eb3, 68a40efceddb3a9f1a71a5fb, 68a4b7cd36bc5d38057e2361]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libssl-3-zm.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[ca33cbd72c623d073b7401dd2473ae85]</td>
|
|
<td>[fa6724135804a2757d2fb34956f45b537a70debc]</td>
|
|
<td>[fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf]</td>
|
|
<td>[61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libssl-3-zm.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>1340216</td>
|
|
<td>ca33cbd72c623d073b7401dd2473ae85</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>3.3.3</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>fa6724135804a2757d2fb34956f45b537a70debc</td>
|
|
<td>fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf</td>
|
|
<td>61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:30 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ac59fdee4dd5f083a560ae4686293bbd9550ec94e644f8ff713baeea5e5a3d2</td>
|
|
<td>[68a48674c4cb2500be692637, 68a48674c4cb2500be692649]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.Console.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.Console.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z]</td>
|
|
<td>[464f86757541fc0d1b1a1b1124fed46c]</td>
|
|
<td>[e1ca526585b1042ebcf66e1bd743ab614a936b13]</td>
|
|
<td>[19e583d7bc735a1ffa253b3ae5a2a9b9a8efe26ffd89cfc17ce772e4b3132c020499913d9155f3e2cb5202e6003b7e62]</td>
|
|
<td>[f4675b2899a5cb3df43a9805043c3c14f99fb6ddbafa7d4f68b007d2ebafb148b02d57f3b322324cdc4e234cb64165b9005579d8d8153821d4416e96c2814a3c]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Console.dll</td>
|
|
<td>C:\ProgramData\chocolatey\lib\IdentityManagement_App\Content\WebPub\FederationHelperCore\</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>34304</td>
|
|
<td>464f86757541fc0d1b1a1b1124fed46c</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>4.0.1-main-37f02f5</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-12 20:05:24 +0000 UTC</td>
|
|
<td>2024-10-22 09:32:58 +0000 UTC</td>
|
|
<td>e1ca526585b1042ebcf66e1bd743ab614a936b13</td>
|
|
<td>19e583d7bc735a1ffa253b3ae5a2a9b9a8efe26ffd89cfc17ce772e4b3132c020499913d9155f3e2cb5202e6003b7e62</td>
|
|
<td>f4675b2899a5cb3df43a9805043c3c14f99fb6ddbafa7d4f68b007d2ebafb148b02d57f3b322324cdc4e234cb64165b9005579d8d8153821d4416e96c2814a3c</td>
|
|
<td>2025-06-12 20:06:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-28 02:24:09 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-12 20:11:15.307 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4abbc5d52aab572ad70f83554ba366e983412e57f527af95fd19758503a03f3c</td>
|
|
<td>[68a472b1b022648922e2359d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\resolver-20050927.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[96d75a90d89ff0cb6b96282171a212de]</td>
|
|
<td>[ee4db4a5f15cbdb453808c2839f08240ac231e46]</td>
|
|
<td>[a339f8e7d6e6c5c6b16190c14bfc62de1994634274982a2a41eb60883c5840b1c1412ac9628a2f97ab1137427e0eb458]</td>
|
|
<td>[5ea1113dc37e76aa7e6b9e9353c5bd9a526573ed14c6eeeb86f4a2b1cd4c4cc9ba38a399b8637583301a9c79a0253d3ee21ef3ba645e06cd8d45deccb901cf13]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>resolver-20050927.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\resolver-20050927.jar-1693c6cca6b6fc7c\</td>
|
|
<td></td>
|
|
<td>68177</td>
|
|
<td>96d75a90d89ff0cb6b96282171a212de</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>ee4db4a5f15cbdb453808c2839f08240ac231e46</td>
|
|
<td>a339f8e7d6e6c5c6b16190c14bfc62de1994634274982a2a41eb60883c5840b1c1412ac9628a2f97ab1137427e0eb458</td>
|
|
<td>5ea1113dc37e76aa7e6b9e9353c5bd9a526573ed14c6eeeb86f4a2b1cd4c4cc9ba38a399b8637583301a9c79a0253d3ee21ef3ba645e06cd8d45deccb901cf13</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-18 11:00:56 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55</td>
|
|
<td>[68a306a5ba5832f49fe9cf40]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SSLEAY32.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[d34ecd24706dcfff478fe6fbe79026a9]</td>
|
|
<td>[e11540244a99a5d7c95643f14cce042de1710ac7]</td>
|
|
<td>[3f238caecc824e583257c41a70097cfe04b6f50ed044fbf13a96aa11c00a14ffdc69afeb14ef2fcd444302c7286690c5]</td>
|
|
<td>[16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SSLEAY32.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td>OpenSSL Shared Library</td>
|
|
<td>337920</td>
|
|
<td>d34ecd24706dcfff478fe6fbe79026a9</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.0.2o</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>e11540244a99a5d7c95643f14cce042de1710ac7</td>
|
|
<td>3f238caecc824e583257c41a70097cfe04b6f50ed044fbf13a96aa11c00a14ffdc69afeb14ef2fcd444302c7286690c5</td>
|
|
<td>16de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-19 09:54:13 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4a4bca6394ecb7c89998665738f714eae195f2af789f5199519bcea198d35b9b</td>
|
|
<td>[68a4855388937a93ff144376]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Business.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[c23e03a9447ffd1ae2634f27db7037d8]</td>
|
|
<td>[8b33abb44d4f0eecd09b614fe804d39ffe899723]</td>
|
|
<td>[2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b]</td>
|
|
<td>[49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Business.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Business</td>
|
|
<td>11264</td>
|
|
<td>c23e03a9447ffd1ae2634f27db7037d8</td>
|
|
<td>Stryker.iBedServer.Authentication.Business</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>8b33abb44d4f0eecd09b614fe804d39ffe899723</td>
|
|
<td>2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b</td>
|
|
<td>49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>49c49c951820ed06d4a24a61e8443334ec50fa7680dee0335976053409408760</td>
|
|
<td>[68a306a5ba5832f49fe9cf3a]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SPELLCHK.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[d70c351c368378ef6901d535dfbd81b3]</td>
|
|
<td>[dccb5917a53c3c907e9d64fc7380179e90b654ab]</td>
|
|
<td>[435b9d50666053db41dc82179efc67c5118167d7e7107d6d19cfa9a17283285cc540ee0f8ba2c244a888c3ccd9b34629]</td>
|
|
<td>[2fb3587dedc40b09c9c5231b3889c891ce4a03276cfe99573ac2f69dcfefd79038f3547b17d13ffc9c5ef91b64cf550f31967275279d877d206f49095224f0a1]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SPELLCHK.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>196096</td>
|
|
<td>d70c351c368378ef6901d535dfbd81b3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:36 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>dccb5917a53c3c907e9d64fc7380179e90b654ab</td>
|
|
<td>435b9d50666053db41dc82179efc67c5118167d7e7107d6d19cfa9a17283285cc540ee0f8ba2c244a888c3ccd9b34629</td>
|
|
<td>2fb3587dedc40b09c9c5231b3889c891ce4a03276cfe99573ac2f69dcfefd79038f3547b17d13ffc9c5ef91b64cf550f31967275279d877d206f49095224f0a1</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:06:55 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>49a8600cbf79c3541172933dac9ca2a8f8b7c0cbbdc073b3c93ed25d6997797a</td>
|
|
<td>[68a472a799ad3734d804e2eb]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-util-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[240edaad133eb5f973c252fbb99db897]</td>
|
|
<td>[a6d07d042ae8c8343eadd125d9eb76e25ffd908a]</td>
|
|
<td>[556ba42389ff92e26ea6b926fa82a51ccc1ac0e067ccc20d4ec65c24cf7b823f8f47f0d6c26d6b738c5308ccc634464c]</td>
|
|
<td>[4d956150ab2d9981395d9659f209a0184ac00e3b16994d241d5f3f605476226c33579fbf1d107785f318ac17490ed022275fa4cbf6b524055c06d4f593bfb633]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-util-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>127209</td>
|
|
<td>240edaad133eb5f973c252fbb99db897</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>a6d07d042ae8c8343eadd125d9eb76e25ffd908a</td>
|
|
<td>556ba42389ff92e26ea6b926fa82a51ccc1ac0e067ccc20d4ec65c24cf7b823f8f47f0d6c26d6b738c5308ccc634464c</td>
|
|
<td>4d956150ab2d9981395d9659f209a0184ac00e3b16994d241d5f3f605476226c33579fbf1d107785f318ac17490ed022275fa4cbf6b524055c06d4f593bfb633</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:38:11 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4981674c47464828ef5ce68676567b7e58693b1c04b582996b90f732345f4e39</td>
|
|
<td>[68a28bda3bdcd0703f76f643, 68a3dfd9dd64bcf44b32b6dd, 68a533cd7c33c0fb7b88c885]</td>
|
|
<td>[2]</td>
|
|
<td>[xpressions]</td>
|
|
<td>[vm-vmail]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\xpressions\UnixTime.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-18T02:09:45Z, 2025-08-19T02:17:38Z, 2025-08-20T02:28:10Z]</td>
|
|
<td>[d6a0f55ebc26152cad33d2fe7190e8e6]</td>
|
|
<td>[bda6893fc902aad8ca74e2e942eae107c172a458]</td>
|
|
<td>[8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719]</td>
|
|
<td>[05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnixTime.vbs</td>
|
|
<td>C:\Users\xpressions\</td>
|
|
<td></td>
|
|
<td>58</td>
|
|
<td>d6a0f55ebc26152cad33d2fe7190e8e6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-16 02:25:49 +0000 UTC</td>
|
|
<td>2025-08-16 02:25:49 +0000 UTC</td>
|
|
<td>bda6893fc902aad8ca74e2e942eae107c172a458</td>
|
|
<td>8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719</td>
|
|
<td>05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d</td>
|
|
<td>2025-08-16 02:25:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ed5fa8236f9cfb27c05d1405db5ddd8c9c8e9c008f8315f1728753361749256</td>
|
|
<td>[68a4893274c73cd555336ec5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gfqx553s.ed0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2274.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T14:24:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gfqx553s.ed0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 14:24:41 +0000 UTC</td>
|
|
<td>2025-08-19 14:24:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 14:24:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ec5a20b06f30a4643063c89804b78887d0a3f1705da59076aa1374691ae49c0</td>
|
|
<td>[68a25fb2e970d941642e7ed8, 68a25fb2e970d941642e7ee5, 68a3b2cf09045b56b2a707b0, 68a3b2cf09045b56b2a707bd, 68a502e12ae1a61fbf4caf0e, 68a502e12ae1a61fbf4caf1b, 68a65489c4cae84feadc570e, 68a65489c4cae84feadc571b]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\dbatools.library.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:04Z, 2025-08-20T23:00:14Z]</td>
|
|
<td>[83b05d20cf1ac5d2691bd9e2bc7293ee]</td>
|
|
<td>[29965b7d9a477168b9868cc8c2102d6a093e6964]</td>
|
|
<td>[d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033]</td>
|
|
<td>[1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.library.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\</td>
|
|
<td></td>
|
|
<td>18766</td>
|
|
<td>83b05d20cf1ac5d2691bd9e2bc7293ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 18:35:33 +0000 UTC</td>
|
|
<td>2024-03-09 14:53:38 +0000 UTC</td>
|
|
<td>29965b7d9a477168b9868cc8c2102d6a093e6964</td>
|
|
<td>d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033</td>
|
|
<td>1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d</td>
|
|
<td>2025-08-08 23:00:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4e2cea78b34123526cff3e94c9cd8c533e10df41799247146d9a9583c74d20c3</td>
|
|
<td>[68a514b3a5eadadbdc4ca182]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_77050390c5844e31a367846b79e99309.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:55Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_77050390c5844e31a367846b79e99309.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:20:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4d49559254a5035a13e657665d5e0e1b4da967f700a4493ca7bc6edd9ade451e</td>
|
|
<td>[68a306a5ba5832f49fe9cf34]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FILEDLGS.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:35Z]</td>
|
|
<td>[b8f99dd187b6de49d00009b099029cbc]</td>
|
|
<td>[a5671b5b78e9ae980626ce0b26bbd38d9769a7e7]</td>
|
|
<td>[f940c25be544da7ee3eeb15d1a809b73edc1578624b3845a92b42cd77f266bca7425d8ae15500b310cccaa4cd6931bdd]</td>
|
|
<td>[cd02601c1c65a0de43345532241242d4e78b08b238507656e98bc72f003f876723b444f92f5a1b727082205e30e9a2e750bf272ad88b414bc64325c214a87a85]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FILEDLGS.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>File Dialogs</td>
|
|
<td>15360</td>
|
|
<td>b8f99dd187b6de49d00009b099029cbc</td>
|
|
<td>FileDlgs.DLL</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:13 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>a5671b5b78e9ae980626ce0b26bbd38d9769a7e7</td>
|
|
<td>f940c25be544da7ee3eeb15d1a809b73edc1578624b3845a92b42cd77f266bca7425d8ae15500b310cccaa4cd6931bdd</td>
|
|
<td>cd02601c1c65a0de43345532241242d4e78b08b238507656e98bc72f003f876723b444f92f5a1b727082205e30e9a2e750bf272ad88b414bc64325c214a87a85</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:51:10 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4cf01886aee1fd82aef2cbb0b7ec1caf4a4f69efa8e128f9dd9e540a261cb8bc</td>
|
|
<td>[68a4cbc3a139fdab1dc0f326]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n11iz22n.3le.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:08:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_n11iz22n.3le.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:08:42 +0000 UTC</td>
|
|
<td>2025-08-19 19:08:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:08:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ced9da1a70b4fd59d55f65240d65f560035933ce37eacd3557dbb1545f68036</td>
|
|
<td>[68a472b1b022648922e2356d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmEnterpriseManagerApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[920f9f1eb15b248b888e38aeeed475b9]</td>
|
|
<td>[feb6bc875550ca17f816acd2d6ffa8e181428966]</td>
|
|
<td>[534cf0972da19cfff1e9c8e1cc66dd10995cc7f28a6209d62e7f3766495142814890d86b2cbe06913f0ce1cc06e249e9]</td>
|
|
<td>[8275e57854e826779279c4b361f68b87a45cbdaf82d00ed6594832e7d0cc73445cb157f57d91a10fc8bae2c7a65c277c17a7aa611a99c601c3c521be452fc2da]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmEnterpriseManagerApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>567979</td>
|
|
<td>920f9f1eb15b248b888e38aeeed475b9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>feb6bc875550ca17f816acd2d6ffa8e181428966</td>
|
|
<td>534cf0972da19cfff1e9c8e1cc66dd10995cc7f28a6209d62e7f3766495142814890d86b2cbe06913f0ce1cc06e249e9</td>
|
|
<td>8275e57854e826779279c4b361f68b87a45cbdaf82d00ed6594832e7d0cc73445cb157f57d91a10fc8bae2c7a65c277c17a7aa611a99c601c3c521be452fc2da</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ce80737e5e1fdd0b599eecf559f84406387d644ed5bbe4479a6a6c5f9a04e18</td>
|
|
<td>[68a240e2a1b8ffa7235b0746]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_lrof04w0.wuh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:51:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lrof04w0.wuh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:51:38 +0000 UTC</td>
|
|
<td>2025-08-17 20:51:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:51:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4cbc7fefb55e1e392d9da7cece48d8f6cef3a7d170ce265dbf944c554c9d4766</td>
|
|
<td>[68a5c7518a82efb8e85802e9]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\QDirect.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\02000201001QDirectInst.exe]</td>
|
|
<td>[2025-08-20T13:02:04Z]</td>
|
|
<td>[4d89cf5c855230c85d0439c354f32173]</td>
|
|
<td>[c89bcd6fc648b7997e8edbba17794ad8f0011ab1]</td>
|
|
<td>[7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6]</td>
|
|
<td>[c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QDirect.msi</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\</td>
|
|
<td></td>
|
|
<td>1529344</td>
|
|
<td>4d89cf5c855230c85d0439c354f32173</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>c89bcd6fc648b7997e8edbba17794ad8f0011ab1</td>
|
|
<td>7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6</td>
|
|
<td>c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e</td>
|
|
<td>2025-08-20 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ca6416cc9a1d517cee067878b1f93990aad6f2363b3ce6efea6de07086d1798</td>
|
|
<td>[68a311cdc2d0d6e3eb77f219]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindUsersByEmployee ID.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[1c10957d91c1c61393c79b698897c1e9]</td>
|
|
<td>[c188186442dcc7eb7f2cad3d4f49eaa481502366]</td>
|
|
<td>[11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596]</td>
|
|
<td>[b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindUsersByEmployee ID.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>4886</td>
|
|
<td>1c10957d91c1c61393c79b698897c1e9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-24 16:17:59 +0000 UTC</td>
|
|
<td>2023-03-24 17:06:27 +0000 UTC</td>
|
|
<td>c188186442dcc7eb7f2cad3d4f49eaa481502366</td>
|
|
<td>11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596</td>
|
|
<td>b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c855b375b56b1a5ace47ab9d2cc02f369a72c87fad3bc8e47d6286187d96319</td>
|
|
<td>[68a4cc4fe7cc38673861dc6d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\v1w0tmgy.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:11:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>v1w0tmgy.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:11:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c6b87954491f5f17be15f6fcde7c781665111072dcf88df0d6faa465755d210</td>
|
|
<td>[68a472b1b022648922e23599]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\pdf-renderer-0.9.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[064ab82a7e19145f3e6bb0cb388d8321]</td>
|
|
<td>[866085e60f32f863c58b4a767449e54700153a64]</td>
|
|
<td>[639d53580acb97028591b75b396502337daf7a7fce8709a64184d980fec71e48acf176cd2036a75e33add4ffdee4035e]</td>
|
|
<td>[bbe7715bc915bae5a9c7cdd99bd663b7d8a644f1725f64d275e05bda947b5f9ad19e01b24012f7c1dc9b7512fadae53a40fa560fa69a0e6a5d81aef86b06ca90]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pdf-renderer-0.9.1.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>2115478</td>
|
|
<td>064ab82a7e19145f3e6bb0cb388d8321</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>866085e60f32f863c58b4a767449e54700153a64</td>
|
|
<td>639d53580acb97028591b75b396502337daf7a7fce8709a64184d980fec71e48acf176cd2036a75e33add4ffdee4035e</td>
|
|
<td>bbe7715bc915bae5a9c7cdd99bd663b7d8a644f1725f64d275e05bda947b5f9ad19e01b24012f7c1dc9b7512fadae53a40fa560fa69a0e6a5d81aef86b06ca90</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-07-07 00:38:34 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c301be468518755aa67998c549dd4eea2ba0895fb55a26e1a8a885964c1299e</td>
|
|
<td>[68a1c9ccf996ce857d01e734]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ail1oddw.4b4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:23:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ail1oddw.4b4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:23:32 +0000 UTC</td>
|
|
<td>2025-08-17 12:23:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:23:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c1fe405524586b09643b46738f06ab76006a4516a1830cf43f2db9af291a70b</td>
|
|
<td>[68a51e78b5a781145bf61337]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe"]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T01:01:38Z]</td>
|
|
<td>[4842e91bd9b7b98c4c699839dd969142]</td>
|
|
<td>[b658ce9655e9cf14aec4089ae2a1c257ea24eb19]</td>
|
|
<td>[cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861]</td>
|
|
<td>[67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DataCaptorIS.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\</td>
|
|
<td>DataCaptor Interface Server Service</td>
|
|
<td>297696</td>
|
|
<td>4842e91bd9b7b98c4c699839dd969142</td>
|
|
<td>DataCaptor</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:03:50 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>b658ce9655e9cf14aec4089ae2a1c257ea24eb19</td>
|
|
<td>cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861</td>
|
|
<td>67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480</td>
|
|
<td>2025-08-20 01:01:44 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c1993c3e9fd16b800a7edd4bc609db0c260fafef99cee9a08d7ed744ef5ca4d</td>
|
|
<td>[68a306a5ba5832f49fe9cf5b]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DATEGRID.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[5837f084f90fe26946031157fd0d0e98]</td>
|
|
<td>[c2773dc1acaaffb2b76864c8bae5cc8e1c747f73]</td>
|
|
<td>[56dd21a5dc90bf7c44450fc49a7e057e536ed45b2d491780007b5529c59311bd4b57d4a4541cd3443b38b1e9ff1bb192]</td>
|
|
<td>[094356d11936ebbd28242eb1da2bb7053c07f75de4e95ca24d9ff758c94333e1c5eec1ef2422f27d125f0d444561a1fdd9b85a2b472ebb62a40812b422ff319a]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DATEGRID.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>92160</td>
|
|
<td>5837f084f90fe26946031157fd0d0e98</td>
|
|
<td>DateGrid</td>
|
|
<td>1.4.2.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:08 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>c2773dc1acaaffb2b76864c8bae5cc8e1c747f73</td>
|
|
<td>56dd21a5dc90bf7c44450fc49a7e057e536ed45b2d491780007b5529c59311bd4b57d4a4541cd3443b38b1e9ff1bb192</td>
|
|
<td>094356d11936ebbd28242eb1da2bb7053c07f75de4e95ca24d9ff758c94333e1c5eec1ef2422f27d125f0d444561a1fdd9b85a2b472ebb62a40812b422ff319a</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2016-07-20 01:29:46 +0000 UTC</td>
|
|
<td>55</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4beef0a40f3e16f017b5ae7603974118c0724286142c2e0762b3d61af4e8ddca</td>
|
|
<td>[68a17a76fbb9bccd45249578]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u0tfw4sf.bjl.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_u0tfw4sf.bjl.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:58 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:45:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4be293b05c924a01de67686fe37b1a3961e423289f3f56b8f100e16b38f29fad</td>
|
|
<td>[68a310c9ea022246fae9eedd]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Set-Get-Aduser.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[892ec401133ec2f633b3c3b4a87e6e35]</td>
|
|
<td>[090b95a5979287aa7e50cd2d968d60c7b8f67eb6]</td>
|
|
<td>[ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1]</td>
|
|
<td>[1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Set-Get-Aduser.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>11880</td>
|
|
<td>892ec401133ec2f633b3c3b4a87e6e35</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:22 +0000 UTC</td>
|
|
<td>2025-08-15 20:51:43 +0000 UTC</td>
|
|
<td>090b95a5979287aa7e50cd2d968d60c7b8f67eb6</td>
|
|
<td>ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1</td>
|
|
<td>1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec</td>
|
|
<td>2025-08-18 11:38:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51e79c52db0f5cd87ea13b0fbb6a91ac30aa575dfb29f8f44ac29abdcb4b309c</td>
|
|
<td>[68a472a799ad3734d804e2fc]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\dnsjava-2.1.7.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[ba007fcb9d931542e9999c6d428e9d15]</td>
|
|
<td>[441ce0c012497bf338147c8853365f955f51b9bd]</td>
|
|
<td>[d0ee1d3e92dfed3e74c37c2a635e8971fc5e1e174012246a36c77d604911dc77885cd88fd5ee8aac8ec7f30b46e2b08f]</td>
|
|
<td>[80908a212d88e58f5d89415b81ea046d4ffcae9f310aba6b989ec55d068365c2cac713dd2d5398165a0c869abd01611168d5a052aaa188da20b3e6a708b1b881]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dnsjava-2.1.7.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>306090</td>
|
|
<td>ba007fcb9d931542e9999c6d428e9d15</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>441ce0c012497bf338147c8853365f955f51b9bd</td>
|
|
<td>d0ee1d3e92dfed3e74c37c2a635e8971fc5e1e174012246a36c77d604911dc77885cd88fd5ee8aac8ec7f30b46e2b08f</td>
|
|
<td>80908a212d88e58f5d89415b81ea046d4ffcae9f310aba6b989ec55d068365c2cac713dd2d5398165a0c869abd01611168d5a052aaa188da20b3e6a708b1b881</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-09-15 04:09:12 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51de8bfc6a2a76476999a622438c5986131049e7095fc14dd4734df5db71c0be</td>
|
|
<td>[68a31b2e462d6e1d77adb9b0]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:59Z]</td>
|
|
<td>[aff7146174f1a92841e0ba8ecf07708c]</td>
|
|
<td>[a6725b789d65d1a13bee0697a4813d334aabb024]</td>
|
|
<td>[73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5]</td>
|
|
<td>[9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>aff7146174f1a92841e0ba8ecf07708c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:58 +0000 UTC</td>
|
|
<td>a6725b789d65d1a13bee0697a4813d334aabb024</td>
|
|
<td>73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5</td>
|
|
<td>9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef</td>
|
|
<td>2025-08-18 12:23:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51bb008368ece95516e70566f7d14bff4fddd7ff903586efea47f9072f0d6c2e</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce3, 68a6afe50e0f3bd8deac4cf2, 68a6afe50e0f3bd8deac4d26, 68a6afe50e0f3bd8deac4d34, 68a6afe50e0f3bd8deac4d54, 68a6afe50e0f3bd8deac4d74, 68a6afe50e0f3bd8deac4d94, 68a6afe50e0f3bd8deac4db4, 68a6afe50e0f3bd8deac4dd4, 68a6afe50e0f3bd8deac4df4, 68a6afe50e0f3bd8deac4e14, 68a6afe50e0f3bd8deac4e34, 68a6afe50e0f3bd8deac4e57, 68a6afe50e0f3bd8deac4e74, 68a6afe50e0f3bd8deac4e94, 68a6afe50e0f3bd8deac4ec5, 68a6afe50e0f3bd8deac4ed4, 68a6afe50e0f3bd8deac4ef4, 68a6afe50e0f3bd8deac4f14, 68a6afe50e0f3bd8deac4f34, 68a6afe50e0f3bd8deac4f5e, 68a6afe50e0f3bd8deac4f7e, 68a6afe50e0f3bd8deac4f9e, 68a6afe50e0f3bd8deac4fbe, 68a6afe50e0f3bd8deac4fde, 68a6afe50e0f3bd8deac4ffe, 68a6afe50e0f3bd8deac501e, 68a6afe50e0f3bd8deac503e, 68a6afe50e0f3bd8deac505e, 68a6afe50e0f3bd8deac507e, 68a6afe50e0f3bd8deac50a8, 68a6afe50e0f3bd8deac50c8, 68a6afe50e0f3bd8deac50e8, 68a6afe50e0f3bd8deac5112, 68a6afe50e0f3bd8deac5132, 68a6afe50e0f3bd8deac5152, 68a6afe50e0f3bd8deac517c, 68a6afe50e0f3bd8deac519c, 68a6afe50e0f3bd8deac51bc, 68a6afe50e0f3bd8deac51dd, 68a6afe50e0f3bd8deac520f, 68a6afe50e0f3bd8deac5226, 68a6afe50e0f3bd8deac523d, 68a6afe50e0f3bd8deac525d, 68a6afe50e0f3bd8deac5291, 68a6afe50e0f3bd8deac52b1, 68a6afe50e0f3bd8deac52d1, 68a6afe50e0f3bd8deac52f1, 68a6afe50e0f3bd8deac5311, 68a6afe50e0f3bd8deac5331, 68a6afe50e0f3bd8deac5351, 68a6afe50e0f3bd8deac5371, 68a6afe50e0f3bd8deac5397, 68a6afe50e0f3bd8deac53b2, 68a6afe50e0f3bd8deac53d6, 68a6afe50e0f3bd8deac53f6, 68a6afe50e0f3bd8deac5417, 68a6afe50e0f3bd8deac5431, 68a6afe50e0f3bd8deac5456, 68a6afe50e0f3bd8deac5477, 68a6afe50e0f3bd8deac5497, 68a6afe50e0f3bd8deac54b7, 68a6afe50e0f3bd8deac54d7, 68a6afe50e0f3bd8deac54f7, 68a6afe50e0f3bd8deac5517, 68a6afe50e0f3bd8deac5537, 68a6afe50e0f3bd8deac5561, 68a6afe50e0f3bd8deac5581, 68a6afe50e0f3bd8deac55a1, 68a6afe50e0f3bd8deac55c1, 68a6afe50e0f3bd8deac55e1, 68a6afe50e0f3bd8deac5601, 68a6afe50e0f3bd8deac5621, 68a6afe50e0f3bd8deac5650, 68a6afe50e0f3bd8deac5671, 68a6afe50e0f3bd8deac569f, 68a6afe50e0f3bd8deac56bf, 68a6afe50e0f3bd8deac56d6, 68a6afe50e0f3bd8deac56fe, 68a6afe50e0f3bd8deac5719, 68a6afe50e0f3bd8deac573f, 68a6afe50e0f3bd8deac5772, 68a6afe50e0f3bd8deac5785, 68a6afe50e0f3bd8deac57b2, 68a6afe50e0f3bd8deac57c9, 68a6afe50e0f3bd8deac57f3, 68a6afe50e0f3bd8deac5807, 68a6afe50e0f3bd8deac5820, 68a6afe50e0f3bd8deac5849, 68a6afe50e0f3bd8deac5871, 68a6afe50e0f3bd8deac5886, 68a6afe50e0f3bd8deac58b8, 68a6afe50e0f3bd8deac58c9, 68a6afe50e0f3bd8deac58f8, 68a6afe50e0f3bd8deac5903, 68a6afe50e0f3bd8deac593a, 68a6afe50e0f3bd8deac5949, 68a6afe50e0f3bd8deac5969, 68a6afe50e0f3bd8deac5980, 68a6afe50e0f3bd8deac59a8, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeSurfaceRenderer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[709ae0b977b88c6b464d071705afd1b1]</td>
|
|
<td>[f3077103844526974301b20e8c9ee384bf4ca165]</td>
|
|
<td>[713a587cc88a36d2a69e3f4d6e05bcd7ae311f428881e144df1292bb33b14b8c541615c0bdc5c57aff2dbd84a932b019]</td>
|
|
<td>[6432c1cd0dc1346e064d87c33b9407204085add25f332cca15278c887e9beda29d917b6cf8e788776cd64012238742c880b2a65222ab91b80fed5fe11e390443]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeSurfaceRenderer.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>915456</td>
|
|
<td>709ae0b977b88c6b464d071705afd1b1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:01:08 +0000 UTC</td>
|
|
<td>f3077103844526974301b20e8c9ee384bf4ca165</td>
|
|
<td>713a587cc88a36d2a69e3f4d6e05bcd7ae311f428881e144df1292bb33b14b8c541615c0bdc5c57aff2dbd84a932b019</td>
|
|
<td>6432c1cd0dc1346e064d87c33b9407204085add25f332cca15278c887e9beda29d917b6cf8e788776cd64012238742c880b2a65222ab91b80fed5fe11e390443</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51487b1d0106a1cba0f366382670dcbc556aec3967d9b90eadb81a25b1cb73b6</td>
|
|
<td>[68a472b1b022648922e23595]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mdnsjava-2.2.0-b4.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[996c6c22fb40d5c32fb9489c25eed721]</td>
|
|
<td>[6951865590da9a04705901809186dd51016a22e8]</td>
|
|
<td>[e38d41039c4acccb0bd25632c6d3302a4130ea30ada2c267aaa9d5a27ee1577f38bf299478058e3307a5fc5d90cfd16c]</td>
|
|
<td>[5ab30f96443d3a5ef5e8833b148ce0b0a82b41b78baba4faef6af1be272a5c0ddd8eb8ecb8730f50748d59bea28ac32facf50bc6828823ac7bef6e349ea85d56]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mdnsjava-2.2.0-b4.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\posick\mDNS\main\</td>
|
|
<td></td>
|
|
<td>138111</td>
|
|
<td>996c6c22fb40d5c32fb9489c25eed721</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:13 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>6951865590da9a04705901809186dd51016a22e8</td>
|
|
<td>e38d41039c4acccb0bd25632c6d3302a4130ea30ada2c267aaa9d5a27ee1577f38bf299478058e3307a5fc5d90cfd16c</td>
|
|
<td>5ab30f96443d3a5ef5e8833b148ce0b0a82b41b78baba4faef6af1be272a5c0ddd8eb8ecb8730f50748d59bea28ac32facf50bc6828823ac7bef6e349ea85d56</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:51 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5142d86c71c334bad9b37b907cf90abedbeadd7c1fbb7d60e606a68d22ee5bda</td>
|
|
<td>[68a17a3a664e386e865decd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eykp4qxi.sdo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eykp4qxi.sdo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:05 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:44:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5129f60cbae666db5bb5c417239fd41121ff15600a36410bc83b92e6bdbeec39</td>
|
|
<td>[68a34b98a6132bf659cce5b3, 68a34df0b71eea1289980a18]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.GridView.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[0fcd86e341fbfceb9360df94e6e6607a]</td>
|
|
<td>[d84fdf7b01fd6dd7e1665d696bdf28a5dfa2a075]</td>
|
|
<td>[215c7f95a174ddf9eb94126dbc02f17c0be6892da6deff419f443ffafada7ca7c6720698ddd9f0cdeda8d025f31f5382]</td>
|
|
<td>[5e0069620a64e43f8e8b57cc98b68eddf95fac0d3f702d5985f904ec30aa74c702db818390366edcfc48271d7571b938afa6fff129c2966acebcf1dff20d2367]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.GridView.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.GridView</td>
|
|
<td>1681920</td>
|
|
<td>0fcd86e341fbfceb9360df94e6e6607a</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:00 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:00 +0000 UTC</td>
|
|
<td>d84fdf7b01fd6dd7e1665d696bdf28a5dfa2a075</td>
|
|
<td>215c7f95a174ddf9eb94126dbc02f17c0be6892da6deff419f443ffafada7ca7c6720698ddd9f0cdeda8d025f31f5382</td>
|
|
<td>5e0069620a64e43f8e8b57cc98b68eddf95fac0d3f702d5985f904ec30aa74c702db818390366edcfc48271d7571b938afa6fff129c2966acebcf1dff20d2367</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-15 05:23:16 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5123ab35482a1dcca7c83332b37568cc696aee9f9e8bbcad2a654014d7364d75</td>
|
|
<td>[68a15a274601a96260694483]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0ucap4f1.ghu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:27:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0ucap4f1.ghu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:27:10 +0000 UTC</td>
|
|
<td>2025-08-17 04:27:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:27:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5105aafd20d9944f9076e24f001c0da20c64943ae969583811bcee3f504ac44c</td>
|
|
<td>[68a18cc514e7a0de47067714, 68a2de4c24b13c178e1e1496, 68a42ff2cfdf5d300631abd0, 68a5818b1ea96109fbbc885a, 68a6d336fae8f75d18a38566]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-EBO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\eBO\eBO_stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T08:00:01Z]</td>
|
|
<td>[deb1a8bcca660fac053336c625030dfd]</td>
|
|
<td>[11893c3ae1af058fb5c6c5d724fe1df21338f9fc]</td>
|
|
<td>[8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa]</td>
|
|
<td>[c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>eBO_stop.bat</td>
|
|
<td>D:\eClinicalWorks\eBO\</td>
|
|
<td></td>
|
|
<td>12</td>
|
|
<td>deb1a8bcca660fac053336c625030dfd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 20:05:12 +0000 UTC</td>
|
|
<td>2021-07-04 20:05:12 +0000 UTC</td>
|
|
<td>11893c3ae1af058fb5c6c5d724fe1df21338f9fc</td>
|
|
<td>8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa</td>
|
|
<td>c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2</td>
|
|
<td>2025-08-09 08:00:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</td>
|
|
<td>[68a472a799ad3734d804e2fa]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-lang-2.6.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[4d5c1693079575b362edf41500630bbd]</td>
|
|
<td>[0ce1edb914c94ebc388f086c6827e8bdeec71ac2]</td>
|
|
<td>[9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90]</td>
|
|
<td>[4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>commons-lang-2.6.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\apache\commons\lang\main\</td>
|
|
<td></td>
|
|
<td>284220</td>
|
|
<td>4d5c1693079575b362edf41500630bbd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:16 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>0ce1edb914c94ebc388f086c6827e8bdeec71ac2</td>
|
|
<td>9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</td>
|
|
<td>4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 10:37:29 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-11 00:50:11.475 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>50391527cb36dfceeab0bb805595d1547ffd82ddea9edac51e6aba51ac9414aa</td>
|
|
<td>[68a4ccc785b914a60d739e4f, 68a4ce1fc826337212f53bec, 68a4d07753a851daf11e6937, 68a4d07753a851daf11e694c, 68a4d2d1ff2b441b8442812f, 68a4d2d1ff2b441b84428144]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\Win32.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[2bc97f533732bd5d15bf8138c411a9fe]</td>
|
|
<td>[54c6081b4a286a6d67cca3435d3c10d9cf6156c3]</td>
|
|
<td>[d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba]</td>
|
|
<td>[1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Win32.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\</td>
|
|
<td></td>
|
|
<td>40448</td>
|
|
<td>2bc97f533732bd5d15bf8138c411a9fe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:50 +0000 UTC</td>
|
|
<td>54c6081b4a286a6d67cca3435d3c10d9cf6156c3</td>
|
|
<td>d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba</td>
|
|
<td>1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>501c23a8773ba342043991d4b182144224043dd4d31b8277b12dfbe3f90b7229</td>
|
|
<td>[68a472a799ad3734d804e2f6]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CommonLibrary-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[e45d8e0bcf5f5211080e6b2c818e789c]</td>
|
|
<td>[5d1c83e5cd11aef17ca21c748eb6afa8df398f87]</td>
|
|
<td>[c0bd6d23cb09e471d867936614605883ae06ace2e154ed66f0f7597a3279ecff08a007d9731f222298e88a89be7a286d]</td>
|
|
<td>[39d5dfc10c417017810315ddca05cb956fcbc2bb17fa11867c13be07a98d98eee79569f0ae98a70e53357835cbeacf20f057d2ff28475b740e7b047eba2acf7b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CommonLibrary-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\com\compellent\common\commonlibrary\main\</td>
|
|
<td></td>
|
|
<td>380244</td>
|
|
<td>e45d8e0bcf5f5211080e6b2c818e789c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:54:57 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>5d1c83e5cd11aef17ca21c748eb6afa8df398f87</td>
|
|
<td>c0bd6d23cb09e471d867936614605883ae06ace2e154ed66f0f7597a3279ecff08a007d9731f222298e88a89be7a286d</td>
|
|
<td>39d5dfc10c417017810315ddca05cb956fcbc2bb17fa11867c13be07a98d98eee79569f0ae98a70e53357835cbeacf20f057d2ff28475b740e7b047eba2acf7b</td>
|
|
<td>2025-03-28 16:06:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:58:11.933 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4fe777ba7af0edac6e91e842302d7de7c476d0608ee4719c62cba23884121376</td>
|
|
<td>[68a326a0535549e009a51dcf]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_gqc0q3rf.x2b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:11:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gqc0q3rf.x2b.ps1</td>
|
|
<td>C:\Users\be10045\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:11:57 +0000 UTC</td>
|
|
<td>2025-08-18 13:11:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:12:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4fa0b4ddeed831597e0a0301e37344443cea83904d99b4e24b13286070c399e3</td>
|
|
<td>[68a3146b5f0c41860c8c851c, 68a3146b5f0c41860c8c856b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\charset.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[ba03f33735350044c3fc13f73c1d9e98]</td>
|
|
<td>[7229c271c838fece9643486a3126e4537be0b291]</td>
|
|
<td>[a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0]</td>
|
|
<td>[dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>charset.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>14907</td>
|
|
<td>ba03f33735350044c3fc13f73c1d9e98</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>7229c271c838fece9643486a3126e4537be0b291</td>
|
|
<td>a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0</td>
|
|
<td>dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4f8dd5d3925e84c5bd149cbee8cb8871196d4b32acaf73a9e35250e1e6f0d1ed</td>
|
|
<td>[68a6afe50e0f3bd8deac4d07, 68a6afe50e0f3bd8deac4d1b, 68a6afe50e0f3bd8deac4d49, 68a6afe50e0f3bd8deac4d69, 68a6afe50e0f3bd8deac4d89, 68a6afe50e0f3bd8deac4da9, 68a6afe50e0f3bd8deac4dc9, 68a6afe50e0f3bd8deac4de9, 68a6afe50e0f3bd8deac4e09, 68a6afe50e0f3bd8deac4e29, 68a6afe50e0f3bd8deac4e49, 68a6afe50e0f3bd8deac4e69, 68a6afe50e0f3bd8deac4e89, 68a6afe50e0f3bd8deac4ea9, 68a6afe50e0f3bd8deac4eb9, 68a6afe50e0f3bd8deac4ee9, 68a6afe50e0f3bd8deac4f09, 68a6afe50e0f3bd8deac4f29, 68a6afe50e0f3bd8deac4f49, 68a6afe50e0f3bd8deac4f73, 68a6afe50e0f3bd8deac4f93, 68a6afe50e0f3bd8deac4fb3, 68a6afe50e0f3bd8deac4fd3, 68a6afe50e0f3bd8deac4ff3, 68a6afe50e0f3bd8deac5013, 68a6afe50e0f3bd8deac5033, 68a6afe50e0f3bd8deac5053, 68a6afe50e0f3bd8deac5073, 68a6afe50e0f3bd8deac5093, 68a6afe50e0f3bd8deac50bd, 68a6afe50e0f3bd8deac50dc, 68a6afe50e0f3bd8deac50fd, 68a6afe50e0f3bd8deac5127, 68a6afe50e0f3bd8deac5147, 68a6afe50e0f3bd8deac5167, 68a6afe50e0f3bd8deac5191, 68a6afe50e0f3bd8deac51b1, 68a6afe50e0f3bd8deac51d1, 68a6afe50e0f3bd8deac51f2, 68a6afe50e0f3bd8deac5204, 68a6afe50e0f3bd8deac521b, 68a6afe50e0f3bd8deac5252, 68a6afe50e0f3bd8deac5272, 68a6afe50e0f3bd8deac5286, 68a6afe50e0f3bd8deac52a6, 68a6afe50e0f3bd8deac52c6, 68a6afe50e0f3bd8deac52e6, 68a6afe50e0f3bd8deac5306, 68a6afe50e0f3bd8deac5326, 68a6afe50e0f3bd8deac5346, 68a6afe50e0f3bd8deac5366, 68a6afe50e0f3bd8deac5386, 68a6afe50e0f3bd8deac53ac, 68a6afe50e0f3bd8deac53c9, 68a6afe50e0f3bd8deac53ec, 68a6afe50e0f3bd8deac540b, 68a6afe50e0f3bd8deac542c, 68a6afe50e0f3bd8deac5446, 68a6afe50e0f3bd8deac546c, 68a6afe50e0f3bd8deac548c, 68a6afe50e0f3bd8deac54ac, 68a6afe50e0f3bd8deac54cc, 68a6afe50e0f3bd8deac54ec, 68a6afe50e0f3bd8deac550c, 68a6afe50e0f3bd8deac552c, 68a6afe50e0f3bd8deac554c, 68a6afe50e0f3bd8deac5576, 68a6afe50e0f3bd8deac5596, 68a6afe50e0f3bd8deac55b6, 68a6afe50e0f3bd8deac55d6, 68a6afe50e0f3bd8deac55f6, 68a6afe50e0f3bd8deac5616, 68a6afe50e0f3bd8deac5636, 68a6afe50e0f3bd8deac5666, 68a6afe50e0f3bd8deac5686, 68a6afe50e0f3bd8deac5694, 68a6afe50e0f3bd8deac56b4, 68a6afe50e0f3bd8deac56d4, 68a6afe50e0f3bd8deac56ec, 68a6afe50e0f3bd8deac5714, 68a6afe50e0f3bd8deac572e, 68a6afe50e0f3bd8deac5754, 68a6afe50e0f3bd8deac575d, 68a6afe50e0f3bd8deac579c, 68a6afe50e0f3bd8deac57a8, 68a6afe50e0f3bd8deac57dd, 68a6afe50e0f3bd8deac57e8, 68a6afe50e0f3bd8deac581c, 68a6afe50e0f3bd8deac5835, 68a6afe50e0f3bd8deac585e, 68a6afe50e0f3bd8deac5866, 68a6afe50e0f3bd8deac589c, 68a6afe50e0f3bd8deac58af, 68a6afe50e0f3bd8deac58de, 68a6afe50e0f3bd8deac58e8, 68a6afe50e0f3bd8deac5918, 68a6afe50e0f3bd8deac592f, 68a6afe50e0f3bd8deac595e, 68a6afe50e0f3bd8deac597e, 68a6afe50e0f3bd8deac5995, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\libssl-1_1-x64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:47Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[d65e539989913a7b14a884d1ba70fc58]</td>
|
|
<td>[fcfb133f637410f11ee45c8e881843a36438d363]</td>
|
|
<td>[f048e011a639d160c093b09b24a11e5458f5cba4297edb4c41c11fb1ed302b1e59c0e86f579d3c6c545cd512263af402]</td>
|
|
<td>[c3cf018c4446bc106f2b66078a4ae48f87eeeaefe9c739eaf7b3d8b749dd32a88a892ad9d04dda273516022e8c7c74ddfab0dd8bef26a6609f83af77aae2d2a7]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libssl-1_1-x64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>685056</td>
|
|
<td>d65e539989913a7b14a884d1ba70fc58</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1d</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:46 +0000 UTC</td>
|
|
<td>2023-03-07 00:33:42 +0000 UTC</td>
|
|
<td>fcfb133f637410f11ee45c8e881843a36438d363</td>
|
|
<td>f048e011a639d160c093b09b24a11e5458f5cba4297edb4c41c11fb1ed302b1e59c0e86f579d3c6c545cd512263af402</td>
|
|
<td>c3cf018c4446bc106f2b66078a4ae48f87eeeaefe9c739eaf7b3d8b749dd32a88a892ad9d04dda273516022e8c7c74ddfab0dd8bef26a6609f83af77aae2d2a7</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ee74b8165e39d490e8c0becd7eaf99a725211af6a972ae8652268e41c9b91e6</td>
|
|
<td>[68a178be850d7bbc2e6ff246]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cn0wtlxx.tc3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:37:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cn0wtlxx.tc3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:37:39 +0000 UTC</td>
|
|
<td>2025-08-17 06:37:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ee3b6db9e68711663695d7c7c9fbef7ff2d8f524523e78c11e8ba51082ac2d2</td>
|
|
<td>[68a16cdf801a1582a9ec932b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hBMCCure]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ycrk34bx.lm0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:47:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ycrk34bx.lm0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:47:03 +0000 UTC</td>
|
|
<td>2025-08-17 05:47:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:47:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5592943ead1aff645f47491b2d6ffc8ef4321ac3057298636b873231e9892588</td>
|
|
<td>[68a5c7e76397242bf73fa413]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_Talis1]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_Jnt_Talis1\Desktop\MDI_Install_DeployAgent_NEW.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:04:30Z]</td>
|
|
<td>[4528d629d40aac35051da0522f52607b]</td>
|
|
<td>[4cd808677a3e168b90608c51a9306e76db5213b4]</td>
|
|
<td>[31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135]</td>
|
|
<td>[d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MDI_Install_DeployAgent_NEW.ps1</td>
|
|
<td>C:\Users\ca_Jnt_Talis1\Desktop\</td>
|
|
<td></td>
|
|
<td>6587</td>
|
|
<td>4528d629d40aac35051da0522f52607b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:53 +0000 UTC</td>
|
|
<td>2025-08-20 13:03:03 +0000 UTC</td>
|
|
<td>4cd808677a3e168b90608c51a9306e76db5213b4</td>
|
|
<td>31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135</td>
|
|
<td>d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54</td>
|
|
<td>2025-08-20 13:04:39 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5590daef95c358df33daea533ac2d818d6da44abc4e20cf97985c177d9807934</td>
|
|
<td>[68a3146b5f0c41860c8c850e, 68a3146b5f0c41860c8c8561]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\client.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[548e8b8a392268a48e6aeb8779be88db]</td>
|
|
<td>[648361765ba0a4093c5dcfb5aa2c8d556e224203]</td>
|
|
<td>[e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef]</td>
|
|
<td>[ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>client.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>58011</td>
|
|
<td>548e8b8a392268a48e6aeb8779be88db</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>648361765ba0a4093c5dcfb5aa2c8d556e224203</td>
|
|
<td>e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef</td>
|
|
<td>ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>550a66f3624ef25c40cbff924e56b0b269b0ac5d28da318e3e433cefd79761db</td>
|
|
<td>[68a1e1f3d67e8d114640fa37]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jfvzuzyk.al2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:06:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jfvzuzyk.al2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:06:38 +0000 UTC</td>
|
|
<td>2025-08-17 14:06:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:06:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55096d9d5b8d2540a0fe037e6704e0234d11b5a1f0a574cfdd576a6b0352dc57</td>
|
|
<td>[68a532147b5869d075ea1a64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aijcft55.e2m.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:25:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aijcft55.e2m.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:25:14 +0000 UTC</td>
|
|
<td>2025-08-20 02:25:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:25:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>53fb85b73c86e90e48c14c8f5163b1459465f0b15fb03e3eb2e62f05dbd2f1ec</td>
|
|
<td>[68a17d282a5df80b055ee0ee]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrbm4rto.beq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:56:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xrbm4rto.beq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:56:37 +0000 UTC</td>
|
|
<td>2025-08-17 06:56:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:56:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>53d05f355b9570288a1107872f00b3159ebaf4a39cb844a07eb17855ad4285f1</td>
|
|
<td>[68a3536f4c961e0e97663798]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-MYLA-01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\shutdown_pointer.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\gpscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T16:23:04Z]</td>
|
|
<td>[5d8e141e0db6caceb5cd8b4ca1970ab0]</td>
|
|
<td>[8b7779bbead93a6cb490c37182ae0af405e88595]</td>
|
|
<td>[92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9]</td>
|
|
<td>[47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9]</td>
|
|
<td>[10.101.100.201]</td>
|
|
<td>[10.101.100.201]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>shutdown_pointer.cmd</td>
|
|
<td>C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\</td>
|
|
<td></td>
|
|
<td>60</td>
|
|
<td>5d8e141e0db6caceb5cd8b4ca1970ab0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-10-29 12:58:12 +0000 UTC</td>
|
|
<td>2019-10-28 19:17:11 +0000 UTC</td>
|
|
<td>8b7779bbead93a6cb490c37182ae0af405e88595</td>
|
|
<td>92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9</td>
|
|
<td>47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9</td>
|
|
<td>2025-08-18 16:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>539dae55d02bd0e7939fe5ca3ca52297b8925b555acabc714583dc7c80a94b0a</td>
|
|
<td>[68a3146b5f0c41860c8c84f0, 68a3146b5f0c41860c8c8528]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\types.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[c61242d8c34df5630927662930df1721]</td>
|
|
<td>[c178f5b9a7f198f2422663096de0f578bf4bee02]</td>
|
|
<td>[e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68]</td>
|
|
<td>[f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>types.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15551</td>
|
|
<td>c61242d8c34df5630927662930df1721</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c178f5b9a7f198f2422663096de0f578bf4bee02</td>
|
|
<td>e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68</td>
|
|
<td>f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>538aaac7ab964e222a42e6f216ffa10fba939d6c13e4d1921e947f8d5c6c42c7</td>
|
|
<td>[68a472b1b022648922e2358b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxws-rt-2.3.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[44f8bf34fd897657d6b35540c6dfafa9]</td>
|
|
<td>[1bb06944d0d9927c3eb4a1890766e55ff61e12de]</td>
|
|
<td>[7b2a3800cc558ec8ca1e7b8dc35e3904b150e90c9a1b8e00b0be38d187c4e7fbb9ae5ed22291266d111f9be2c956f00b]</td>
|
|
<td>[7746e52bfe94810e8ec33052420a1f0e5275ac189cc25231d6df29545749abcb2107408413121629eca8bc05d283d9b6c0bbd156d147b5a96a17d17010311f44]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jaxws-rt-2.3.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxws-rt-2.3.0.jar-6bc05a4c8fd1b9b6\</td>
|
|
<td></td>
|
|
<td>2613698</td>
|
|
<td>44f8bf34fd897657d6b35540c6dfafa9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>1bb06944d0d9927c3eb4a1890766e55ff61e12de</td>
|
|
<td>7b2a3800cc558ec8ca1e7b8dc35e3904b150e90c9a1b8e00b0be38d187c4e7fbb9ae5ed22291266d111f9be2c956f00b</td>
|
|
<td>7746e52bfe94810e8ec33052420a1f0e5275ac189cc25231d6df29545749abcb2107408413121629eca8bc05d283d9b6c0bbd156d147b5a96a17d17010311f44</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-04-25 10:35:19 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>532f364361b515f31c6fd2fcfd4bc56bce053839b3cd82583d1e1065c42952ce</td>
|
|
<td>[68a474562c8d6a03c3aa568b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etihzaoc.pjw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:55:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_etihzaoc.pjw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:55:46 +0000 UTC</td>
|
|
<td>2025-08-19 12:55:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:55:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>52e40b2ea19d7d3459d718528d448f408f7597e4f53ab6475e81a78f4f07d7a5</td>
|
|
<td>[68a311cdc2d0d6e3eb77f209]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Check-O365-Licenses-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[b71ecdb3e3640257f8fba06e498dd845]</td>
|
|
<td>[a9ee5167e3a5da2f78e3c0c617d8920302d65991]</td>
|
|
<td>[a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400]</td>
|
|
<td>[50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Check-O365-Licenses-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>12437</td>
|
|
<td>b71ecdb3e3640257f8fba06e498dd845</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-11 18:05:12 +0000 UTC</td>
|
|
<td>2025-06-11 18:45:00 +0000 UTC</td>
|
|
<td>a9ee5167e3a5da2f78e3c0c617d8920302d65991</td>
|
|
<td>a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400</td>
|
|
<td>50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>52cb9bab4938352f585b879a1fbdd975c84c563bf9852ba99171f4a75c31cb29</td>
|
|
<td>[68a3146b5f0c41860c8c8522, 68a3146b5f0c41860c8c856d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\quopri.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[b1e988eb0ac59301e3a28829017cff3a]</td>
|
|
<td>[5b2ece43d31e183cfcc3fdb11681eda045ff797e]</td>
|
|
<td>[7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a]</td>
|
|
<td>[c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>quopri.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>9568</td>
|
|
<td>b1e988eb0ac59301e3a28829017cff3a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>5b2ece43d31e183cfcc3fdb11681eda045ff797e</td>
|
|
<td>7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a</td>
|
|
<td>c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>526cdad144861612c9204c2d07f008b0668e413d4be922b2c5893f8ce1c035d3</td>
|
|
<td>[68a34b98a6132bf659cce5b0, 68a34df0b71eea1289980a15]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\TelerikCommon.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[089098628bd484650d2fc8551c606c44]</td>
|
|
<td>[b8b45370b643a7f6a81c270f3d81ca84bd0849de]</td>
|
|
<td>[1a175527f0e3eed47731531c2b758f9b2956a8a2fc846adf749fcda44270689efa357c5cd0cec87513bda37b2b002e7e]</td>
|
|
<td>[ae462a88ff5266f6d4000e131e3f83804e5ef9eee9bb69fc0ab2932135ac14994fc97e5b4a4d021fde190c649054f3c592223c884751da4f3b05a2923090e95d]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>TelerikCommon.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.Common</td>
|
|
<td>913920</td>
|
|
<td>089098628bd484650d2fc8551c606c44</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:03 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:03 +0000 UTC</td>
|
|
<td>b8b45370b643a7f6a81c270f3d81ca84bd0849de</td>
|
|
<td>1a175527f0e3eed47731531c2b758f9b2956a8a2fc846adf749fcda44270689efa357c5cd0cec87513bda37b2b002e7e</td>
|
|
<td>ae462a88ff5266f6d4000e131e3f83804e5ef9eee9bb69fc0ab2932135ac14994fc97e5b4a4d021fde190c649054f3c592223c884751da4f3b05a2923090e95d</td>
|
|
<td>2025-06-09 21:58:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-08 07:49:43 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5227d0069ee05e485e62e216897870d9d5e9e1ba9ef645d7736411fdbf648045</td>
|
|
<td>[68a470efd203a904885c685b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\InstallerActions.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:41:13Z]</td>
|
|
<td>[a3916319c269dd817403b77d46195618]</td>
|
|
<td>[36029cc7e756d590e7c89d05ad9ef5365152cf15]</td>
|
|
<td>[785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9]</td>
|
|
<td>[df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallerActions.dll</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\bin\</td>
|
|
<td>InstallerActions</td>
|
|
<td>79360</td>
|
|
<td>a3916319c269dd817403b77d46195618</td>
|
|
<td>InstallerActions</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:44 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:44 +0000 UTC</td>
|
|
<td>36029cc7e756d590e7c89d05ad9ef5365152cf15</td>
|
|
<td>785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9</td>
|
|
<td>df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27</td>
|
|
<td>2025-05-02 01:14:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5216ed10b9145fcc817400bb870a1097078168392f930c7b86d810268c80c642</td>
|
|
<td>[68a3146b5f0c41860c8c8541]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\lzma.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[048ad5d2b543b3a83d0ec6e1f3d9fa4b]</td>
|
|
<td>[bd383b952354b3c24afc76cae8c79ff6ddecf4d3]</td>
|
|
<td>[6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75]</td>
|
|
<td>[f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>lzma.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15726</td>
|
|
<td>048ad5d2b543b3a83d0ec6e1f3d9fa4b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>bd383b952354b3c24afc76cae8c79ff6ddecf4d3</td>
|
|
<td>6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75</td>
|
|
<td>f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51f865b57ed83f9f9a7098c0a8a52bf04a707bfc57fb627199a2c3f4872ed2a3</td>
|
|
<td>[68a59cc78e54cccae2680af6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_2f02889eb87340149837d95c1c42807d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-20T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_2f02889eb87340149837d95c1c42807d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 10:00:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51ed5f6e70b195d67ed614ea3f7f2298f65b369ee54d93d6ec2d3ea2471cf106</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce2, 68a6afe50e0f3bd8deac4cf1, 68a6afe50e0f3bd8deac4d25, 68a6afe50e0f3bd8deac4d33, 68a6afe50e0f3bd8deac4d53, 68a6afe50e0f3bd8deac4d73, 68a6afe50e0f3bd8deac4d93, 68a6afe50e0f3bd8deac4db3, 68a6afe50e0f3bd8deac4dd3, 68a6afe50e0f3bd8deac4df3, 68a6afe50e0f3bd8deac4e13, 68a6afe50e0f3bd8deac4e33, 68a6afe50e0f3bd8deac4e53, 68a6afe50e0f3bd8deac4e73, 68a6afe50e0f3bd8deac4e93, 68a6afe50e0f3bd8deac4ec4, 68a6afe50e0f3bd8deac4ed3, 68a6afe50e0f3bd8deac4ef3, 68a6afe50e0f3bd8deac4f13, 68a6afe50e0f3bd8deac4f33, 68a6afe50e0f3bd8deac4f5d, 68a6afe50e0f3bd8deac4f7d, 68a6afe50e0f3bd8deac4f9d, 68a6afe50e0f3bd8deac4fbd, 68a6afe50e0f3bd8deac4fdd, 68a6afe50e0f3bd8deac4ffd, 68a6afe50e0f3bd8deac501d, 68a6afe50e0f3bd8deac503d, 68a6afe50e0f3bd8deac505d, 68a6afe50e0f3bd8deac507d, 68a6afe50e0f3bd8deac50a7, 68a6afe50e0f3bd8deac50c7, 68a6afe50e0f3bd8deac50e7, 68a6afe50e0f3bd8deac5111, 68a6afe50e0f3bd8deac5131, 68a6afe50e0f3bd8deac5151, 68a6afe50e0f3bd8deac517b, 68a6afe50e0f3bd8deac519b, 68a6afe50e0f3bd8deac51bb, 68a6afe50e0f3bd8deac51dc, 68a6afe50e0f3bd8deac520e, 68a6afe50e0f3bd8deac5225, 68a6afe50e0f3bd8deac523c, 68a6afe50e0f3bd8deac525c, 68a6afe50e0f3bd8deac5290, 68a6afe50e0f3bd8deac52b0, 68a6afe50e0f3bd8deac52d0, 68a6afe50e0f3bd8deac52f0, 68a6afe50e0f3bd8deac5310, 68a6afe50e0f3bd8deac5330, 68a6afe50e0f3bd8deac5350, 68a6afe50e0f3bd8deac5370, 68a6afe50e0f3bd8deac5396, 68a6afe50e0f3bd8deac53b1, 68a6afe50e0f3bd8deac53d5, 68a6afe50e0f3bd8deac53f5, 68a6afe50e0f3bd8deac5416, 68a6afe50e0f3bd8deac5430, 68a6afe50e0f3bd8deac5455, 68a6afe50e0f3bd8deac5476, 68a6afe50e0f3bd8deac5496, 68a6afe50e0f3bd8deac54b6, 68a6afe50e0f3bd8deac54d6, 68a6afe50e0f3bd8deac54f6, 68a6afe50e0f3bd8deac5516, 68a6afe50e0f3bd8deac5536, 68a6afe50e0f3bd8deac5560, 68a6afe50e0f3bd8deac5580, 68a6afe50e0f3bd8deac55a0, 68a6afe50e0f3bd8deac55c0, 68a6afe50e0f3bd8deac55e0, 68a6afe50e0f3bd8deac5600, 68a6afe50e0f3bd8deac5620, 68a6afe50e0f3bd8deac564f, 68a6afe50e0f3bd8deac5670, 68a6afe50e0f3bd8deac569e, 68a6afe50e0f3bd8deac56be, 68a6afe50e0f3bd8deac56f5, 68a6afe50e0f3bd8deac56fd, 68a6afe50e0f3bd8deac5718, 68a6afe50e0f3bd8deac573e, 68a6afe50e0f3bd8deac5771, 68a6afe50e0f3bd8deac5784, 68a6afe50e0f3bd8deac57b1, 68a6afe50e0f3bd8deac57c8, 68a6afe50e0f3bd8deac57f2, 68a6afe50e0f3bd8deac5806, 68a6afe50e0f3bd8deac583e, 68a6afe50e0f3bd8deac5848, 68a6afe50e0f3bd8deac5870, 68a6afe50e0f3bd8deac5885, 68a6afe50e0f3bd8deac58b7, 68a6afe50e0f3bd8deac58c8, 68a6afe50e0f3bd8deac58f7, 68a6afe50e0f3bd8deac5902, 68a6afe50e0f3bd8deac5938, 68a6afe50e0f3bd8deac5948, 68a6afe50e0f3bd8deac5968, 68a6afe50e0f3bd8deac599f, 68a6afe50e0f3bd8deac59a7, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeVolumeRenderer2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[5acbb3147cf6c40585981c46bfd13750]</td>
|
|
<td>[cc7f12d9377958b5f0b08fcf5fe117add972a0c0]</td>
|
|
<td>[ae16394bafad430433798d3db252b544363f3d6dcaa61206749626f253a56bdd055f545bb586ad7942a6dc778a911f63]</td>
|
|
<td>[6f8ad8e6bb3b82b70ae1965e8004485acc0e3241704c8b52dfd124ebf628f56ddc09a4b5d8e688f98718a6d062991704ed206df2c5f32b419a4c1be301de532a]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeVolumeRenderer2.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>6577664</td>
|
|
<td>5acbb3147cf6c40585981c46bfd13750</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:04:12 +0000 UTC</td>
|
|
<td>cc7f12d9377958b5f0b08fcf5fe117add972a0c0</td>
|
|
<td>ae16394bafad430433798d3db252b544363f3d6dcaa61206749626f253a56bdd055f545bb586ad7942a6dc778a911f63</td>
|
|
<td>6f8ad8e6bb3b82b70ae1965e8004485acc0e3241704c8b52dfd124ebf628f56ddc09a4b5d8e688f98718a6d062991704ed206df2c5f32b419a4c1be301de532a</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57bfa899aa02376e3b3450f27683fc6ff601584d9d7d432312bfab377d96b35a</td>
|
|
<td>[68a4eb5df910568724168d54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nWHL-CTX-02]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ypcgscah.ojh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T21:23:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ypcgscah.ojh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:23:38 +0000 UTC</td>
|
|
<td>2025-08-19 21:23:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 21:23:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57acbdadf9dad29661be02b96dc230f82033fd5e1bfb258784dfb08ade1146f6</td>
|
|
<td>[68a311cdc2d0d6e3eb77f217]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-wineventdata_Function.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[c5e63465e3e5ef417a8804e3fdd5929e]</td>
|
|
<td>[2e014b8ec3ff07d43c5d73c42c9eb51def6b8c11]</td>
|
|
<td>[0c3de8d1d8bab0b99d2dc946d15f69b44dfdb30bbc29e2725b2c5216512b078fa776c2c67cb0d65bdd21989aaa5d6961]</td>
|
|
<td>[1e015cf2acf3bcf53202d8ddbffd830d4643e3dbe8513a9f5c3fcd3f79dfddce7cc832a55bddbf0089c863d51152fadd2881995303ac4a0b3efb17b969e39498]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>get-wineventdata_Function.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3139</td>
|
|
<td>c5e63465e3e5ef417a8804e3fdd5929e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-13 13:29:11 +0000 UTC</td>
|
|
<td>2023-03-13 13:29:11 +0000 UTC</td>
|
|
<td>2e014b8ec3ff07d43c5d73c42c9eb51def6b8c11</td>
|
|
<td>0c3de8d1d8bab0b99d2dc946d15f69b44dfdb30bbc29e2725b2c5216512b078fa776c2c67cb0d65bdd21989aaa5d6961</td>
|
|
<td>1e015cf2acf3bcf53202d8ddbffd830d4643e3dbe8513a9f5c3fcd3f79dfddce7cc832a55bddbf0089c863d51152fadd2881995303ac4a0b3efb17b969e39498</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-10-20 07:05:07 +0000 UTC</td>
|
|
<td>50</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-12 11:50:53.298 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5793a03b357f93cc7563eddd8c1c3dce648597006e786b502613255bfc3bf3fa</td>
|
|
<td>[68a712755b61675b68bb04aa]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_buhx13sy.v0f\tmp_buhx13sy.v0f.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:31:14Z]</td>
|
|
<td>[c2f581c553300ff18e03314e4c76a311]</td>
|
|
<td>[fb95e2655adfd25a45501567e78fbea8cab50206]</td>
|
|
<td>[928346995e88399775ea0da9a0bf1e6002a123274b175facf613eefe5ade31e78e09ff1ccd6b1eced09c651a847b447c]</td>
|
|
<td>[d17ddfb4cfc403350af6153e48b35f8dfea134deead9c7954a2f2f0b1f8d96a3b5d62194284532f37ad51b6a6fd273090dd5dabadd0300f0e6e446f6d0f90e0e]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_buhx13sy.v0f.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_buhx13sy.v0f\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>c2f581c553300ff18e03314e4c76a311</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:31:13 +0000 UTC</td>
|
|
<td>2025-08-21 12:31:14 +0000 UTC</td>
|
|
<td>fb95e2655adfd25a45501567e78fbea8cab50206</td>
|
|
<td>928346995e88399775ea0da9a0bf1e6002a123274b175facf613eefe5ade31e78e09ff1ccd6b1eced09c651a847b447c</td>
|
|
<td>d17ddfb4cfc403350af6153e48b35f8dfea134deead9c7954a2f2f0b1f8d96a3b5d62194284532f37ad51b6a6fd273090dd5dabadd0300f0e6e446f6d0f90e0e</td>
|
|
<td>2025-08-21 12:35:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>572e12789d1b3b49b172c9d284d902986647e527ae6c11904cc99079b42625ef</td>
|
|
<td>[68a3209bdb4bb30ce9fad5ac]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\tmpEXO_xktvp1ff.kqf.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:13Z]</td>
|
|
<td>[9dbf39fe1a5381187ab341506970b134]</td>
|
|
<td>[f9a6304e4715a8409551f6752844ea809a561092]</td>
|
|
<td>[710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485]</td>
|
|
<td>[2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_xktvp1ff.kqf.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\</td>
|
|
<td></td>
|
|
<td>2316948</td>
|
|
<td>9dbf39fe1a5381187ab341506970b134</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:46:12 +0000 UTC</td>
|
|
<td>2025-08-18 12:46:12 +0000 UTC</td>
|
|
<td>f9a6304e4715a8409551f6752844ea809a561092</td>
|
|
<td>710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485</td>
|
|
<td>2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c</td>
|
|
<td>2025-08-18 12:46:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>572aba4a05c13be1d8b3e6086687424b92a310d7d60203a9a13dca05306ff291</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce8, 68a6afe50e0f3bd8deac4cf7, 68a6afe50e0f3bd8deac4d0b, 68a6afe50e0f3bd8deac4d39, 68a6afe50e0f3bd8deac4d59, 68a6afe50e0f3bd8deac4d79, 68a6afe50e0f3bd8deac4d99, 68a6afe50e0f3bd8deac4db9, 68a6afe50e0f3bd8deac4dd9, 68a6afe50e0f3bd8deac4df9, 68a6afe50e0f3bd8deac4e19, 68a6afe50e0f3bd8deac4e39, 68a6afe50e0f3bd8deac4e59, 68a6afe50e0f3bd8deac4e79, 68a6afe50e0f3bd8deac4e99, 68a6afe50e0f3bd8deac4eca, 68a6afe50e0f3bd8deac4ed9, 68a6afe50e0f3bd8deac4ef9, 68a6afe50e0f3bd8deac4f19, 68a6afe50e0f3bd8deac4f39, 68a6afe50e0f3bd8deac4f63, 68a6afe50e0f3bd8deac4f83, 68a6afe50e0f3bd8deac4fa3, 68a6afe50e0f3bd8deac4fc3, 68a6afe50e0f3bd8deac4fe3, 68a6afe50e0f3bd8deac5003, 68a6afe50e0f3bd8deac5023, 68a6afe50e0f3bd8deac5043, 68a6afe50e0f3bd8deac5063, 68a6afe50e0f3bd8deac5083, 68a6afe50e0f3bd8deac50ad, 68a6afe50e0f3bd8deac50cd, 68a6afe50e0f3bd8deac50ed, 68a6afe50e0f3bd8deac5117, 68a6afe50e0f3bd8deac5137, 68a6afe50e0f3bd8deac5157, 68a6afe50e0f3bd8deac5181, 68a6afe50e0f3bd8deac51a1, 68a6afe50e0f3bd8deac51c1, 68a6afe50e0f3bd8deac51e2, 68a6afe50e0f3bd8deac51f4, 68a6afe50e0f3bd8deac522b, 68a6afe50e0f3bd8deac5242, 68a6afe50e0f3bd8deac5262, 68a6afe50e0f3bd8deac5276, 68a6afe50e0f3bd8deac5296, 68a6afe50e0f3bd8deac52b6, 68a6afe50e0f3bd8deac52d6, 68a6afe50e0f3bd8deac52f6, 68a6afe50e0f3bd8deac5316, 68a6afe50e0f3bd8deac5336, 68a6afe50e0f3bd8deac5356, 68a6afe50e0f3bd8deac5376, 68a6afe50e0f3bd8deac539c, 68a6afe50e0f3bd8deac53b8, 68a6afe50e0f3bd8deac53dc, 68a6afe50e0f3bd8deac53fb, 68a6afe50e0f3bd8deac541c, 68a6afe50e0f3bd8deac5436, 68a6afe50e0f3bd8deac545c, 68a6afe50e0f3bd8deac547c, 68a6afe50e0f3bd8deac549c, 68a6afe50e0f3bd8deac54bc, 68a6afe50e0f3bd8deac54dc, 68a6afe50e0f3bd8deac54fc, 68a6afe50e0f3bd8deac551c, 68a6afe50e0f3bd8deac553c, 68a6afe50e0f3bd8deac5566, 68a6afe50e0f3bd8deac5586, 68a6afe50e0f3bd8deac55a6, 68a6afe50e0f3bd8deac55c6, 68a6afe50e0f3bd8deac55e6, 68a6afe50e0f3bd8deac5606, 68a6afe50e0f3bd8deac5626, 68a6afe50e0f3bd8deac5655, 68a6afe50e0f3bd8deac5676, 68a6afe50e0f3bd8deac56a4, 68a6afe50e0f3bd8deac56c4, 68a6afe50e0f3bd8deac56dc, 68a6afe50e0f3bd8deac5704, 68a6afe50e0f3bd8deac571e, 68a6afe50e0f3bd8deac5744, 68a6afe50e0f3bd8deac5777, 68a6afe50e0f3bd8deac578a, 68a6afe50e0f3bd8deac57b8, 68a6afe50e0f3bd8deac57ce, 68a6afe50e0f3bd8deac57f8, 68a6afe50e0f3bd8deac580c, 68a6afe50e0f3bd8deac5825, 68a6afe50e0f3bd8deac584e, 68a6afe50e0f3bd8deac5876, 68a6afe50e0f3bd8deac588c, 68a6afe50e0f3bd8deac58be, 68a6afe50e0f3bd8deac58ce, 68a6afe50e0f3bd8deac58fd, 68a6afe50e0f3bd8deac5908, 68a6afe50e0f3bd8deac593f, 68a6afe50e0f3bd8deac594e, 68a6afe50e0f3bd8deac596e, 68a6afe50e0f3bd8deac5985, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeTransport.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[bfb01f84a232e0fe7a6556c57aa9e2a3]</td>
|
|
<td>[611af44307011599a69f76d0e5f817e19685188d]</td>
|
|
<td>[31e047889d1ed66eac5e8befd833d28fbed2a837d59c25e541a0f96fdd7a5f580bcefa823c96ef6274179330af6cf3a5]</td>
|
|
<td>[69cf3847ffdf423a68bbc659db76fe967fcf7e2a5de28e6871e7512a73e6fb06a23523a2f814031225ce98ee0304de53964c85e08538e8ed6735c6f249c8efa1]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeTransport.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>382464</td>
|
|
<td>bfb01f84a232e0fe7a6556c57aa9e2a3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 02:58:22 +0000 UTC</td>
|
|
<td>611af44307011599a69f76d0e5f817e19685188d</td>
|
|
<td>31e047889d1ed66eac5e8befd833d28fbed2a837d59c25e541a0f96fdd7a5f580bcefa823c96ef6274179330af6cf3a5</td>
|
|
<td>69cf3847ffdf423a68bbc659db76fe967fcf7e2a5de28e6871e7512a73e6fb06a23523a2f814031225ce98ee0304de53964c85e08538e8ed6735c6f249c8efa1</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56ed5281697b1b3f0d4a02c56da40a350c650de6070953109d23c821ebf6c438</td>
|
|
<td>[68a3146b5f0c41860c8c8518, 68a3146b5f0c41860c8c8536]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\struct.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[f2392beeb6895c05392b617d9556162e]</td>
|
|
<td>[ceabc4d9e357b4e80d13f612480cad73d04827ff]</td>
|
|
<td>[8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e]</td>
|
|
<td>[6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>struct.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>333</td>
|
|
<td>f2392beeb6895c05392b617d9556162e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>ceabc4d9e357b4e80d13f612480cad73d04827ff</td>
|
|
<td>8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e</td>
|
|
<td>6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56e5500ac59d874c2f28b3141c3e7b0dea5a5db01f7b86c167d905b29499aa67</td>
|
|
<td>[68a25efe3635347d5469494d]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_ybuwjehe.dy2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ybuwjehe.dy2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:00:03 +0000 UTC</td>
|
|
<td>2025-08-17 23:00:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56d1a755466328027aaea1d9a6e449868f1b7dc45b532b9627a3626f67ca91d9</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21c]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\MailBoxFolderPermissionsO365-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[44133f691b3ffa11118c549f31a652a9]</td>
|
|
<td>[646cbcf0e29f58d55a2ea858476b30fbe73db5e3]</td>
|
|
<td>[8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94]</td>
|
|
<td>[0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MailBoxFolderPermissionsO365-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>66064</td>
|
|
<td>44133f691b3ffa11118c549f31a652a9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-18 16:43:45 +0000 UTC</td>
|
|
<td>2025-07-18 20:48:14 +0000 UTC</td>
|
|
<td>646cbcf0e29f58d55a2ea858476b30fbe73db5e3</td>
|
|
<td>8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94</td>
|
|
<td>0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56d0f79bbdbff4255d2d70d497607968271b3065b3f96765a6211a8ba1b8bcb5</td>
|
|
<td>[68a16bd60756fe54a9918fa5, 68a2149cb58debea69d7c750, 68a2bd5ff793a9057f329c0b, 68a3663261f8067c48423ebe, 68a40efceddb3a9f1a71a607, 68a4b7cd36bc5d38057e236c]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNet.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[021ad60cb0c6b2defe570821010f08c8]</td>
|
|
<td>[e2be2678bb68af4e0a5eb2ca709140e7e48261ad]</td>
|
|
<td>[9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a]</td>
|
|
<td>[b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNet.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2385720</td>
|
|
<td>021ad60cb0c6b2defe570821010f08c8</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>e2be2678bb68af4e0a5eb2ca709140e7e48261ad</td>
|
|
<td>9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a</td>
|
|
<td>b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:48 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5666833c44ff8d0b36e7f71e54af218b78a5ba053c7503d40bc32ec06670f74c</td>
|
|
<td>[68a1620c21c43447a35c861d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\tmp_owxdn3xb.e3x.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:54Z]</td>
|
|
<td>[d4c8d2aa51d9c4ce7f5ac425a43d50fc]</td>
|
|
<td>[533de221c9395696648b3311a61d6fef1fd6cdc6]</td>
|
|
<td>[4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd]</td>
|
|
<td>[e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_owxdn3xb.e3x.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\</td>
|
|
<td></td>
|
|
<td>4669570</td>
|
|
<td>d4c8d2aa51d9c4ce7f5ac425a43d50fc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:54 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:54 +0000 UTC</td>
|
|
<td>533de221c9395696648b3311a61d6fef1fd6cdc6</td>
|
|
<td>4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd</td>
|
|
<td>e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14</td>
|
|
<td>2025-08-17 05:01:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5</td>
|
|
<td>[68a4e8a1ad898641af98fd96, 68a4f315247c4b5c9ccb9232, 68a4fcd0011d94a251a4ef32, 68a4fcd0011d94a251a4ef3c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109, ReevesJoe]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\UserInfo.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\UserInfo.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T21:53:42Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:43Z]</td>
|
|
<td>[7579ade7ae1747a31960a228ce02e666]</td>
|
|
<td>[8ec8571a296737e819dcf86353a43fcf8ec63351]</td>
|
|
<td>[df1f0dcdffcfe1abc23ac518971852a29eda849f33c631ccba1f681f2bf1a036e679f1cbccf66561158a70bf797e5ab5]</td>
|
|
<td>[a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UserInfo.dll</td>
|
|
<td>C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\</td>
|
|
<td></td>
|
|
<td>4096</td>
|
|
<td>7579ade7ae1747a31960a228ce02e666</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-01 11:53:38 +0000 UTC</td>
|
|
<td>2025-07-01 11:53:38 +0000 UTC</td>
|
|
<td>8ec8571a296737e819dcf86353a43fcf8ec63351</td>
|
|
<td>df1f0dcdffcfe1abc23ac518971852a29eda849f33c631ccba1f681f2bf1a036e679f1cbccf66561158a70bf797e5ab5</td>
|
|
<td>a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b</td>
|
|
<td>2025-07-01 11:53:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-30 02:10:26 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-01 11:55:24.484 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56345098973877435c409c861dcd1c0a01d636c6eb4fb3aafba575aabcdddf7d</td>
|
|
<td>[68a306a5ba5832f49fe9cf3f]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPRUNNR.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[a07ebac32cb6aa556f52a531953999a8]</td>
|
|
<td>[2d9974a3a8a1a945858207b15feff349f66cc5fc]</td>
|
|
<td>[72960b0023e0465ec069cb0375dcf6b180e9d1388570b47d5ffa9dc9b5906d4017829f443ac17f4c47e96065c6f4079e]</td>
|
|
<td>[30e70408a3b1d9278796e946d64701c9ba0bd98b7da8ea4d30caf6d2faddec25d59b4edb37640e199bb45222f7fa25dc38ab783a800a502dcc3687d7f81361bf]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>APPRUNNR.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td></td>
|
|
<td>21504</td>
|
|
<td>a07ebac32cb6aa556f52a531953999a8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2d9974a3a8a1a945858207b15feff349f66cc5fc</td>
|
|
<td>72960b0023e0465ec069cb0375dcf6b180e9d1388570b47d5ffa9dc9b5906d4017829f443ac17f4c47e96065c6f4079e</td>
|
|
<td>30e70408a3b1d9278796e946d64701c9ba0bd98b7da8ea4d30caf6d2faddec25d59b4edb37640e199bb45222f7fa25dc38ab783a800a502dcc3687d7f81361bf</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 05:02:19 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5633d05634543f25d6da937e89a8c8fa057b9213148d90451127ffc4301bb0db</td>
|
|
<td>[68a1620c21c43447a35c861c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\tmpEXO_fs3h0x0e.vmj.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:48Z]</td>
|
|
<td>[c33129b61d70032a71a5b5dfb9053472]</td>
|
|
<td>[789b7d25c519e94a20cdd9521a608e5d129a4a01]</td>
|
|
<td>[9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9]</td>
|
|
<td>[86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_fs3h0x0e.vmj.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>c33129b61d70032a71a5b5dfb9053472</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:47 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:47 +0000 UTC</td>
|
|
<td>789b7d25c519e94a20cdd9521a608e5d129a4a01</td>
|
|
<td>9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9</td>
|
|
<td>86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa</td>
|
|
<td>2025-08-17 05:01:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55cd58c247e720424b4ca5499424a0a70bffbb96ce9c7063e4807f4c41a3569b</td>
|
|
<td>[68a166949dc690ff0657c725]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0xiwecyf.da0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:20:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0xiwecyf.da0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:20:13 +0000 UTC</td>
|
|
<td>2025-08-17 05:20:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:20:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55bf09ca2ad1c7643f8b49514febf0c748f5027daaaddbbff35c433a2dcc1fb5</td>
|
|
<td>[68a3146b5f0c41860c8c850f, 68a3146b5f0c41860c8c8562]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\parser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[2927d376429456be4172708564560b31]</td>
|
|
<td>[fed7f1ad061029797867412a130d3c2873860dc7]</td>
|
|
<td>[b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5]</td>
|
|
<td>[d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>parser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>6522</td>
|
|
<td>2927d376429456be4172708564560b31</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>fed7f1ad061029797867412a130d3c2873860dc7</td>
|
|
<td>b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5</td>
|
|
<td>d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>559962435a5d919bc46d5a3da16ee74629a31e2a50d9431c1bbe64d54f42df52</td>
|
|
<td>[68a6ffe7c290e3c86ac5713f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vvtkmsccm]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\is-N95IH.tmp\plateform-installer-vilink-control-panel-1.0.0.9-setup.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>["C:\Windows\TEMP\is-N95IH.tmp\plateform-installer-vilink-control-panel-1.0.0.9-setup.tmp" /SL5="$1B4600D8,24872467,217088,D:\biomerieux\programs\VILINK\Agent\installer\VilinkControlPanel\plateform-installer-vilink-control-panel-1.0.0.9-setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\biomerieux\programs\VILINK\Agent\installer\VilinkControlPanel\plateform-installer-vilink-control-panel-1.0.0.9-setup.exe]</td>
|
|
<td>[C:\Windows\SysWOW64\wscript.exe]</td>
|
|
<td>[2025-08-21T11:15:46Z]</td>
|
|
<td>[07c32cefbaccc6db96daf39775955c12]</td>
|
|
<td>[88b3b6ade18e9d2590e8a69336e89575d4668dde]</td>
|
|
<td>[56f24102c1a692fa91706f0685b1a9883556715c1b42d11e1dd6004e409346d0b0e48c88ba7092ffe197aa481a1ac8ae]</td>
|
|
<td>[bdf70142099a6d7c97440f63d39d5ec26e4674880c468a536ac083dd1fbd42c6e99162314371485afb345e66f58268c42afa55aeb34cc2975a9cf1b1e7dd6b4b]</td>
|
|
<td>[172.17.21.241]</td>
|
|
<td>[172.17.21.241]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BciConnectUserScripting_2.3.14-1_setup.tmp</td>
|
|
<td>C:\Users\bmx_admin.I-NCCMCMYLAHELP\AppData\Local\Temp\2\is-35876.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>1271296</td>
|
|
<td>07c32cefbaccc6db96daf39775955c12</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-19 19:38:05 +0000 UTC</td>
|
|
<td>2025-05-19 19:38:06 +0000 UTC</td>
|
|
<td>88b3b6ade18e9d2590e8a69336e89575d4668dde</td>
|
|
<td>56f24102c1a692fa91706f0685b1a9883556715c1b42d11e1dd6004e409346d0b0e48c88ba7092ffe197aa481a1ac8ae</td>
|
|
<td>bdf70142099a6d7c97440f63d39d5ec26e4674880c468a536ac083dd1fbd42c6e99162314371485afb345e66f58268c42afa55aeb34cc2975a9cf1b1e7dd6b4b</td>
|
|
<td>2025-05-19 19:38:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 12:49:26 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-19 19:42:31.037 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5978ee4cce13c15c2093be18ee2e64a99dc4c05ba4d07165da3e15b7b4f1eb8b</td>
|
|
<td>[68a35866879570e8d652377c]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\title MS license.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:44:13Z]</td>
|
|
<td>[b55e3844f3b472627497819e0ebcf127]</td>
|
|
<td>[ac0628a583d75844c56aee0e6aac159ad0e8a73e]</td>
|
|
<td>[1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303]</td>
|
|
<td>[b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>title MS license.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>749</td>
|
|
<td>b55e3844f3b472627497819e0ebcf127</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 16:43:21 +0000 UTC</td>
|
|
<td>2025-08-18 16:43:21 +0000 UTC</td>
|
|
<td>ac0628a583d75844c56aee0e6aac159ad0e8a73e</td>
|
|
<td>1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303</td>
|
|
<td>b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d</td>
|
|
<td>2025-08-18 16:44:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59494928170e51ca4e76b4519106dcbe83fa1abd8afea4829f610d24d5d74318</td>
|
|
<td>[68a5239e621d09b2b1ed5e5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[caf160ccadc9a873ce2932cbd7153a2f]</td>
|
|
<td>[c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e]</td>
|
|
<td>[ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb]</td>
|
|
<td>[3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.CommLayerBase.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.CommLayerBase</td>
|
|
<td>22016</td>
|
|
<td>caf160ccadc9a873ce2932cbd7153a2f</td>
|
|
<td>Stanley.Infra.CommLayerBase</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e</td>
|
|
<td>ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb</td>
|
|
<td>3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5942868729a8ee08ff7cbf9bebadba8511ee0a857a428516603e503a966b4f91</td>
|
|
<td>[68a472b1b022648922e235aa]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\vsphere-sdk-5-5.1.0.em.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[b37c92ab1347be3678e9bbb17948251c]</td>
|
|
<td>[7571bfbda5bb1df7af50a88648e676bfbfd0e95a]</td>
|
|
<td>[61bcd73cebc60b3e9ea04601bf95c167d171afa1dd14c97b1e408510affd24e85410d67ad2a1f0ac6bd24c2fe93c69b1]</td>
|
|
<td>[6ee6687b2e085b41b936e312fefa14d91c58080ff8a5f8c8b1a8120a69d7045dfbcd4076d0776e965a6881caf54aa48fdff7cc9c5d030d8e1c7bbfe02c016ce9]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vsphere-sdk-5-5.1.0.em.1.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>6946874</td>
|
|
<td>b37c92ab1347be3678e9bbb17948251c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>7571bfbda5bb1df7af50a88648e676bfbfd0e95a</td>
|
|
<td>61bcd73cebc60b3e9ea04601bf95c167d171afa1dd14c97b1e408510affd24e85410d67ad2a1f0ac6bd24c2fe93c69b1</td>
|
|
<td>6ee6687b2e085b41b936e312fefa14d91c58080ff8a5f8c8b1a8120a69d7045dfbcd4076d0776e965a6881caf54aa48fdff7cc9c5d030d8e1c7bbfe02c016ce9</td>
|
|
<td>2025-03-28 16:04:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:51 +0000 UTC</td>
|
|
<td>49</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>593552ffea3c5823c6602478b5002a7c525fd904a3c44f1abe4065c22edfac73</td>
|
|
<td>[68a472a799ad3734d804e2fd]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\dom4j-1.6.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[4d8f51d3fe3900efc6e395be48030d6d]</td>
|
|
<td>[5d3ccc056b6f056dbf0dddfdf43894b9065a8f94]</td>
|
|
<td>[45ce7646d803623e8c88f2d5d0ede16d8006a9fd8dedb01290eeee9376a77cce005073d490dda205766457fe73e22f10]</td>
|
|
<td>[e3737ef4a1551e46410916fcda298a629b2681d7469ceaafffd668e6055d9c0e795bc9d12ea3300d218981d5aa5b2f38bb2e641211997c962e6086068f62ad67]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dom4j-1.6.1.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>313898</td>
|
|
<td>4d8f51d3fe3900efc6e395be48030d6d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>5d3ccc056b6f056dbf0dddfdf43894b9065a8f94</td>
|
|
<td>45ce7646d803623e8c88f2d5d0ede16d8006a9fd8dedb01290eeee9376a77cce005073d490dda205766457fe73e22f10</td>
|
|
<td>e3737ef4a1551e46410916fcda298a629b2681d7469ceaafffd668e6055d9c0e795bc9d12ea3300d218981d5aa5b2f38bb2e641211997c962e6086068f62ad67</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-11-24 04:50:43 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 12:50:45.352 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59043ff80f6a43b4041d20cac0cea712e7426eb429ff93ceb25bb906bf0421d7</td>
|
|
<td>[68a25c5f2155d94949889b12]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d354we2i.k1a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:48:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_d354we2i.k1a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:48:59 +0000 UTC</td>
|
|
<td>2025-08-17 22:48:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:49:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>58dce40e6df00d144312adf4ce30825dbc55246ef28b7972d3e44e9024b1e875</td>
|
|
<td>[68a306a5ba5832f49fe9cf31]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\WINUI.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:35Z]</td>
|
|
<td>[d6950c201ff3f4cd902557e947e844d0]</td>
|
|
<td>[84ede93d15fb6aad17cf5b6e5b9ee2f66a07f5e7]</td>
|
|
<td>[d5eeb6d990f7169bed7d2a2b33e3d91d26eb21405fddd4b731e0932053a1efe98d57aa3f29be4e3dce65701fd194cdb0]</td>
|
|
<td>[d88e68a2efbb1421e217eca7f7785f5bb60c6657fd3bd608f2f87925a3757744a3299d30f1a0fac5b36a3d29e7d3d01fad8fc1e1c7f0a83819ec67f979eef700]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WINUI.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Win UI DLL</td>
|
|
<td>49152</td>
|
|
<td>d6950c201ff3f4cd902557e947e844d0</td>
|
|
<td>WinUI</td>
|
|
<td>1.8</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:44 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>84ede93d15fb6aad17cf5b6e5b9ee2f66a07f5e7</td>
|
|
<td>d5eeb6d990f7169bed7d2a2b33e3d91d26eb21405fddd4b731e0932053a1efe98d57aa3f29be4e3dce65701fd194cdb0</td>
|
|
<td>d88e68a2efbb1421e217eca7f7785f5bb60c6657fd3bd608f2f87925a3757744a3299d30f1a0fac5b36a3d29e7d3d01fad8fc1e1c7f0a83819ec67f979eef700</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:08:07 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>58bd329a2f3e91c545a51d2496f9660013865b6e43a08bf00c716aad755c140d</td>
|
|
<td>[68a1642f671392a6ca40e556, 68a2b3ef86404a813dc06ef6, 68a4059c5671ca7f23589560, 68a558aca07fa49408288e49, 68a6a8f326e2a7ae27aa5353]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[VM-ASCNEO]</td>
|
|
<td>[C:\Users\postgres\AppData\Local\Temp\pgaE191.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga17CB.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga46D0.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga7EEE.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pgaAC0F.tmp\1_1.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\pgAgent\bin\pgagent.exe]</td>
|
|
<td>[2025-08-17T05:00:05Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z, 2025-08-21T05:00:01Z]</td>
|
|
<td>[3b96b328a2af3ad82dc1a2afa0d21ab9]</td>
|
|
<td>[069383cc28c4fa363d2b34d2bc4475e618cf40ba]</td>
|
|
<td>[68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b]</td>
|
|
<td>[a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>1_1.bat</td>
|
|
<td>C:\Users\postgres\AppData\Local\Temp\pgaF3EB.tmp\</td>
|
|
<td></td>
|
|
<td>48</td>
|
|
<td>3b96b328a2af3ad82dc1a2afa0d21ab9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-09 05:00:01 +0000 UTC</td>
|
|
<td>2025-08-09 05:00:01 +0000 UTC</td>
|
|
<td>069383cc28c4fa363d2b34d2bc4475e618cf40ba</td>
|
|
<td>68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b</td>
|
|
<td>a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>58a84e74187774df56fb3d1a63888b1ca4b677a6106dcef639d6c147d5fc4123</td>
|
|
<td>[68a4a57a7ce66434aa8e4a9d]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Export UPNfromADGroup.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.869]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:25:27Z]</td>
|
|
<td>[b39139c6d58f98b8c3bb0727a23239b0]</td>
|
|
<td>[e4496e1ce928ef22c55c8d7ec42f207ca624febf]</td>
|
|
<td>[f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245]</td>
|
|
<td>[2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Export UPNfromADGroup.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>169</td>
|
|
<td>b39139c6d58f98b8c3bb0727a23239b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-01 14:45:37 +0000 UTC</td>
|
|
<td>2024-08-01 14:45:37 +0000 UTC</td>
|
|
<td>e4496e1ce928ef22c55c8d7ec42f207ca624febf</td>
|
|
<td>f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245</td>
|
|
<td>2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07</td>
|
|
<td>2025-08-19 16:25:30 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>589581756bd4704aab790e73d2b0e243ca68e8501bbb066b3da56904ab3d0090</td>
|
|
<td>[68a472d954bfa55540708aa4]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\SuperPutty\SuperPuttyLauncherUpdater.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T12:49:27Z]</td>
|
|
<td>[f448f27c617c2b801a51a55fdae3fedf]</td>
|
|
<td>[6138d8b99e5f09905ace2e145b7c494c29f85cc1]</td>
|
|
<td>[77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76]</td>
|
|
<td>[d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SuperPuttyLauncherUpdater.ps1</td>
|
|
<td>C:\SuperPutty\</td>
|
|
<td></td>
|
|
<td>417</td>
|
|
<td>f448f27c617c2b801a51a55fdae3fedf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:27:27 +0000 UTC</td>
|
|
<td>2022-12-15 19:54:21 +0000 UTC</td>
|
|
<td>6138d8b99e5f09905ace2e145b7c494c29f85cc1</td>
|
|
<td>77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76</td>
|
|
<td>d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85</td>
|
|
<td>2025-08-19 12:49:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>586b77ca0fa977e7ca8acb449cb4a746425bd5d8b832f8d85afd67d16af47d21</td>
|
|
<td>[68a523949cec397f02de9f53]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[03f29f88600b91e2c0850ef5ba848be7]</td>
|
|
<td>[cacf863b314180019dcea5669f5a11593096d569]</td>
|
|
<td>[b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476]</td>
|
|
<td>[c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>39424</td>
|
|
<td>03f29f88600b91e2c0850ef5ba848be7</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>cacf863b314180019dcea5669f5a11593096d569</td>
|
|
<td>b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476</td>
|
|
<td>c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5839f7b693b43b0b85a9ed4ecb774b241a579d00377c6a1b14a8f6f67db70475</td>
|
|
<td>[68a3146b5f0c41860c8c84f2, 68a3146b5f0c41860c8c852f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\keyword.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[cf1385559e7ba1972e692e1e48af85b8]</td>
|
|
<td>[2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba]</td>
|
|
<td>[1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae]</td>
|
|
<td>[8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>keyword.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>1049</td>
|
|
<td>cf1385559e7ba1972e692e1e48af85b8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba</td>
|
|
<td>1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae</td>
|
|
<td>8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57f97af9aa938c09929719581541c0188b5e159ac9597204439c9d8ac677e8db</td>
|
|
<td>[68a176d3006fc2fefdc26def]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhlp02h0.wqr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:29:30Z]</td>
|
|
<td>[b13c3cadee294c4214cad7c499716e64]</td>
|
|
<td>[85d4df31ced5762f398b8d8621816c19fa4a46b6]</td>
|
|
<td>[8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574]</td>
|
|
<td>[ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lhlp02h0.wqr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>b13c3cadee294c4214cad7c499716e64</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:29:30 +0000 UTC</td>
|
|
<td>2025-08-17 06:29:30 +0000 UTC</td>
|
|
<td>85d4df31ced5762f398b8d8621816c19fa4a46b6</td>
|
|
<td>8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574</td>
|
|
<td>ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92</td>
|
|
<td>2025-08-17 06:29:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57f5fd43e2ee4ac8d1c9a89d8b1fc45d2996c3811b37d398d4e3b33324ce6160</td>
|
|
<td>[68a472b1b022648922e23571]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmServerAgentApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[e54eaf54569b3d273d893a6752bd6def]</td>
|
|
<td>[d5a2b4a8128a50d35c7b396d06e49f84b66dcb70]</td>
|
|
<td>[3c15f49836a2b1eb82f9462c0eaac16fd7d6281cdbf54fffaaa99cdeb86432ea41ef5128dc82bfe470ef320634ab6784]</td>
|
|
<td>[7947290dcaa68de2cf331ae775c7e84fad80594ab0a4d41442b4d53aff6e825921fcfe6203a9ea0207e4926b17741941da7f319436ab9e64534dba3c39ecd122]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmServerAgentApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>509308</td>
|
|
<td>e54eaf54569b3d273d893a6752bd6def</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>d5a2b4a8128a50d35c7b396d06e49f84b66dcb70</td>
|
|
<td>3c15f49836a2b1eb82f9462c0eaac16fd7d6281cdbf54fffaaa99cdeb86432ea41ef5128dc82bfe470ef320634ab6784</td>
|
|
<td>7947290dcaa68de2cf331ae775c7e84fad80594ab0a4d41442b4d53aff6e825921fcfe6203a9ea0207e4926b17741941da7f319436ab9e64534dba3c39ecd122</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57e4a7e4278f770db47071e08177a71056083a364ed18942e0f25de22027bb7d</td>
|
|
<td>[68a5c7518a82efb8e85802e8]</td>
|
|
<td>[2]</td>
|
|
<td>[sk10219sa]</td>
|
|
<td>[n-sktartarus]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\sk10219sa\AppData\Local\Temp\2\__PSScriptPolicyTest_hfonphxl.ba1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PowerShell\7\pwsh.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:01:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hfonphxl.ba1.ps1</td>
|
|
<td>C:\Users\sk10219sa\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57c4870f4f81b3d3af13d494c584e456a09e94bc3ccafc3bd8718a1401b5d1e8</td>
|
|
<td>[68a6afe50e0f3bd8deac4ceb, 68a6afe50e0f3bd8deac4d20, 68a6afe50e0f3bd8deac4d2d, 68a6afe50e0f3bd8deac4d4d, 68a6afe50e0f3bd8deac4d6e, 68a6afe50e0f3bd8deac4d8e, 68a6afe50e0f3bd8deac4dad, 68a6afe50e0f3bd8deac4dce, 68a6afe50e0f3bd8deac4dee, 68a6afe50e0f3bd8deac4e0d, 68a6afe50e0f3bd8deac4e2e, 68a6afe50e0f3bd8deac4e4f, 68a6afe50e0f3bd8deac4e6d, 68a6afe50e0f3bd8deac4e8d, 68a6afe50e0f3bd8deac4ebe, 68a6afe50e0f3bd8deac4ece, 68a6afe50e0f3bd8deac4eee, 68a6afe50e0f3bd8deac4f0d, 68a6afe50e0f3bd8deac4f2d, 68a6afe50e0f3bd8deac4f58, 68a6afe50e0f3bd8deac4f78, 68a6afe50e0f3bd8deac4f98, 68a6afe50e0f3bd8deac4fb7, 68a6afe50e0f3bd8deac4fd8, 68a6afe50e0f3bd8deac4ff7, 68a6afe50e0f3bd8deac5018, 68a6afe50e0f3bd8deac5038, 68a6afe50e0f3bd8deac5057, 68a6afe50e0f3bd8deac5079, 68a6afe50e0f3bd8deac50a2, 68a6afe50e0f3bd8deac50c3, 68a6afe50e0f3bd8deac50e2, 68a6afe50e0f3bd8deac510c, 68a6afe50e0f3bd8deac512b, 68a6afe50e0f3bd8deac514b, 68a6afe50e0f3bd8deac5176, 68a6afe50e0f3bd8deac5195, 68a6afe50e0f3bd8deac51b5, 68a6afe50e0f3bd8deac51d6, 68a6afe50e0f3bd8deac5208, 68a6afe50e0f3bd8deac521f, 68a6afe50e0f3bd8deac5236, 68a6afe50e0f3bd8deac5256, 68a6afe50e0f3bd8deac528a, 68a6afe50e0f3bd8deac52ac, 68a6afe50e0f3bd8deac52ca, 68a6afe50e0f3bd8deac52eb, 68a6afe50e0f3bd8deac530c, 68a6afe50e0f3bd8deac532a, 68a6afe50e0f3bd8deac534b, 68a6afe50e0f3bd8deac536a, 68a6afe50e0f3bd8deac538b, 68a6afe50e0f3bd8deac5390, 68a6afe50e0f3bd8deac53cc, 68a6afe50e0f3bd8deac53d0, 68a6afe50e0f3bd8deac53ef, 68a6afe50e0f3bd8deac5410, 68a6afe50e0f3bd8deac544b, 68a6afe50e0f3bd8deac5450, 68a6afe50e0f3bd8deac5470, 68a6afe50e0f3bd8deac5493, 68a6afe50e0f3bd8deac54b1, 68a6afe50e0f3bd8deac54d0, 68a6afe50e0f3bd8deac54f0, 68a6afe50e0f3bd8deac5511, 68a6afe50e0f3bd8deac5532, 68a6afe50e0f3bd8deac555b, 68a6afe50e0f3bd8deac557c, 68a6afe50e0f3bd8deac559b, 68a6afe50e0f3bd8deac55ba, 68a6afe50e0f3bd8deac55da, 68a6afe50e0f3bd8deac55fa, 68a6afe50e0f3bd8deac561a, 68a6afe50e0f3bd8deac5646, 68a6afe50e0f3bd8deac566a, 68a6afe50e0f3bd8deac5698, 68a6afe50e0f3bd8deac56b8, 68a6afe50e0f3bd8deac56f0, 68a6afe50e0f3bd8deac56f8, 68a6afe50e0f3bd8deac5732, 68a6afe50e0f3bd8deac5738, 68a6afe50e0f3bd8deac576b, 68a6afe50e0f3bd8deac5780, 68a6afe50e0f3bd8deac57ac, 68a6afe50e0f3bd8deac57c2, 68a6afe50e0f3bd8deac57ec, 68a6afe50e0f3bd8deac5800, 68a6afe50e0f3bd8deac583a, 68a6afe50e0f3bd8deac5842, 68a6afe50e0f3bd8deac586a, 68a6afe50e0f3bd8deac5880, 68a6afe50e0f3bd8deac58b2, 68a6afe50e0f3bd8deac58c2, 68a6afe50e0f3bd8deac58f2, 68a6afe50e0f3bd8deac591c, 68a6afe50e0f3bd8deac5934, 68a6afe50e0f3bd8deac5942, 68a6afe50e0f3bd8deac5963, 68a6afe50e0f3bd8deac5999, 68a6afe50e0f3bd8deac59a2, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeImage.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[8f3d6dd127542b9cd3a7082f7fedce25]</td>
|
|
<td>[a77c8154f5880d7d65ac70b2986043d173c0a730]</td>
|
|
<td>[19fa15aa2fafd1174c416592d00ff38d9da9d1ac63afd86da708533c1fd8e2f885b86a8059f051a8c72e896c8e38e7d4]</td>
|
|
<td>[1d49b31e0f601258664c6ef8d1c051a6276e367b92bd8eb440e90b9b99862ec8fd3fdf3e947ed215ef486d3b675eaf8cfd8c3e7082f2605c28dd8b325d00b0eb]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeImage.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>133120</td>
|
|
<td>8f3d6dd127542b9cd3a7082f7fedce25</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 02:59:41 +0000 UTC</td>
|
|
<td>a77c8154f5880d7d65ac70b2986043d173c0a730</td>
|
|
<td>19fa15aa2fafd1174c416592d00ff38d9da9d1ac63afd86da708533c1fd8e2f885b86a8059f051a8c72e896c8e38e7d4</td>
|
|
<td>1d49b31e0f601258664c6ef8d1c051a6276e367b92bd8eb440e90b9b99862ec8fd3fdf3e947ed215ef486d3b675eaf8cfd8c3e7082f2605c28dd8b325d00b0eb</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57c2ad231fad6089a113121215df9ce0552f0464144b761d79dd3e31e49d6f48</td>
|
|
<td>[68a311cdc2d0d6e3eb77f204]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\connect-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[2ed5355ca6098c511f5669abf5d613b6]</td>
|
|
<td>[1a3d8c611c6e70e3207d5ca6f373a20cdd227b78]</td>
|
|
<td>[37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c]</td>
|
|
<td>[d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>connect-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>6375</td>
|
|
<td>2ed5355ca6098c511f5669abf5d613b6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:51:50 +0000 UTC</td>
|
|
<td>2025-04-02 12:02:50 +0000 UTC</td>
|
|
<td>1a3d8c611c6e70e3207d5ca6f373a20cdd227b78</td>
|
|
<td>37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c</td>
|
|
<td>d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5e72fdf4d0debe90136d17c636dea6bd5fa14c8e3ba3091f42ea62ef14f01b8d</td>
|
|
<td>[68a6afe50e0f3bd8deac4cfc, 68a6afe50e0f3bd8deac4d0f, 68a6afe50e0f3bd8deac4d3e, 68a6afe50e0f3bd8deac4d5e, 68a6afe50e0f3bd8deac4d7d, 68a6afe50e0f3bd8deac4d9d, 68a6afe50e0f3bd8deac4dbd, 68a6afe50e0f3bd8deac4ddd, 68a6afe50e0f3bd8deac4dfd, 68a6afe50e0f3bd8deac4e1d, 68a6afe50e0f3bd8deac4e3d, 68a6afe50e0f3bd8deac4e5d, 68a6afe50e0f3bd8deac4e7d, 68a6afe50e0f3bd8deac4e9d, 68a6afe50e0f3bd8deac4eaf, 68a6afe50e0f3bd8deac4edd, 68a6afe50e0f3bd8deac4efd, 68a6afe50e0f3bd8deac4f1d, 68a6afe50e0f3bd8deac4f3d, 68a6afe50e0f3bd8deac4f67, 68a6afe50e0f3bd8deac4f87, 68a6afe50e0f3bd8deac4fa7, 68a6afe50e0f3bd8deac4fc7, 68a6afe50e0f3bd8deac4fe7, 68a6afe50e0f3bd8deac5007, 68a6afe50e0f3bd8deac5027, 68a6afe50e0f3bd8deac5047, 68a6afe50e0f3bd8deac5067, 68a6afe50e0f3bd8deac5087, 68a6afe50e0f3bd8deac50b2, 68a6afe50e0f3bd8deac50d3, 68a6afe50e0f3bd8deac50f1, 68a6afe50e0f3bd8deac511b, 68a6afe50e0f3bd8deac513b, 68a6afe50e0f3bd8deac515b, 68a6afe50e0f3bd8deac5185, 68a6afe50e0f3bd8deac51a5, 68a6afe50e0f3bd8deac51c5, 68a6afe50e0f3bd8deac51e6, 68a6afe50e0f3bd8deac51f8, 68a6afe50e0f3bd8deac5230, 68a6afe50e0f3bd8deac5246, 68a6afe50e0f3bd8deac5266, 68a6afe50e0f3bd8deac527b, 68a6afe50e0f3bd8deac529a, 68a6afe50e0f3bd8deac52ba, 68a6afe50e0f3bd8deac52db, 68a6afe50e0f3bd8deac52fa, 68a6afe50e0f3bd8deac531a, 68a6afe50e0f3bd8deac533a, 68a6afe50e0f3bd8deac535a, 68a6afe50e0f3bd8deac537a, 68a6afe50e0f3bd8deac53a1, 68a6afe50e0f3bd8deac53bc, 68a6afe50e0f3bd8deac53e1, 68a6afe50e0f3bd8deac53ff, 68a6afe50e0f3bd8deac5420, 68a6afe50e0f3bd8deac543b, 68a6afe50e0f3bd8deac5461, 68a6afe50e0f3bd8deac5480, 68a6afe50e0f3bd8deac54a0, 68a6afe50e0f3bd8deac54c0, 68a6afe50e0f3bd8deac54e0, 68a6afe50e0f3bd8deac5500, 68a6afe50e0f3bd8deac5520, 68a6afe50e0f3bd8deac5540, 68a6afe50e0f3bd8deac556a, 68a6afe50e0f3bd8deac558a, 68a6afe50e0f3bd8deac55aa, 68a6afe50e0f3bd8deac55cb, 68a6afe50e0f3bd8deac55ea, 68a6afe50e0f3bd8deac560b, 68a6afe50e0f3bd8deac562a, 68a6afe50e0f3bd8deac565a, 68a6afe50e0f3bd8deac567a, 68a6afe50e0f3bd8deac568b, 68a6afe50e0f3bd8deac56a8, 68a6afe50e0f3bd8deac56c8, 68a6afe50e0f3bd8deac56e1, 68a6afe50e0f3bd8deac5709, 68a6afe50e0f3bd8deac5723, 68a6afe50e0f3bd8deac5748, 68a6afe50e0f3bd8deac577c, 68a6afe50e0f3bd8deac5791, 68a6afe50e0f3bd8deac57bc, 68a6afe50e0f3bd8deac57d2, 68a6afe50e0f3bd8deac57fd, 68a6afe50e0f3bd8deac5811, 68a6afe50e0f3bd8deac582a, 68a6afe50e0f3bd8deac5857, 68a6afe50e0f3bd8deac587a, 68a6afe50e0f3bd8deac5891, 68a6afe50e0f3bd8deac58a2, 68a6afe50e0f3bd8deac58d2, 68a6afe50e0f3bd8deac58e2, 68a6afe50e0f3bd8deac590c, 68a6afe50e0f3bd8deac5926, 68a6afe50e0f3bd8deac5953, 68a6afe50e0f3bd8deac5973, 68a6afe50e0f3bd8deac5989, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-core-16-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[1a592e0ad9f647e3984e9c98f5daf88a]</td>
|
|
<td>[5cbed0d3e4e068a6d1f51877cc9ac7b2f5f34f15]</td>
|
|
<td>[ce6947f96ac3d9e9dc98dd4bae6b5a6d9f7dc5d7d8427b56b8d4fd2ad03252e228b9317e82fcd66c651dfa43ea4af4b8]</td>
|
|
<td>[4130bcc8dc8f10ea35556ceb6f0e08dfe988e32105fd323f5a58866bae39c1b721cf7d459f1f953e9af148ae3aaf6822b9d44f7fba378d4256dc7b44f78644ab]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-core-16-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-core-16-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>4436480</td>
|
|
<td>1a592e0ad9f647e3984e9c98f5daf88a</td>
|
|
<td>CIP</td>
|
|
<td>1.6.5.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-13 05:53:38 +0000 UTC</td>
|
|
<td>5cbed0d3e4e068a6d1f51877cc9ac7b2f5f34f15</td>
|
|
<td>ce6947f96ac3d9e9dc98dd4bae6b5a6d9f7dc5d7d8427b56b8d4fd2ad03252e228b9317e82fcd66c651dfa43ea4af4b8</td>
|
|
<td>4130bcc8dc8f10ea35556ceb6f0e08dfe988e32105fd323f5a58866bae39c1b721cf7d459f1f953e9af148ae3aaf6822b9d44f7fba378d4256dc7b44f78644ab</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5e455451e13e287c4d2bfb59325a352b61cdce7953692d39ff3fde8f521ae157</td>
|
|
<td>[68a1c9fe26ef4c5d33d741b6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4ryswf2w.ra1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:24:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4ryswf2w.ra1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:24:23 +0000 UTC</td>
|
|
<td>2025-08-17 12:24:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:24:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5d387d2e15f03476d77944294631e3cc91a5fe0b476f2eba113954298e9d3411</td>
|
|
<td>[68a72d39787594c630b4edf1]</td>
|
|
<td>[2]</td>
|
|
<td>[sk10219sa]</td>
|
|
<td>[n-sktartarus]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\Notepad++Portable\Notepad++Portable.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>["E:\Notepad++Portable\Notepad++Portable.exe" ]</td>
|
|
<td>[Rare Ideas LLC]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-21T14:23:05Z]</td>
|
|
<td>[28093d7d974260d18def08f16063699c]</td>
|
|
<td>[af4a95a5aff1595a9d4cb7367acb330479b60208]</td>
|
|
<td>[63cc4facc189d1667491a2df7cfd86e73d9c101a56d0a39169b252a39b71a33173a5215df7e1e52745c3264c3512e4ea]</td>
|
|
<td>[421d5f0ba036eba9ba4cb3ce1c0250383f770299b361ab059b5e98ef5bdd98efdc7d5ed5125d1c7e34eef6217709239efc218b29697c323c601e4ccdfb2b58d4]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Notepad++Portable.exe</td>
|
|
<td>E:\Notepad++Portable\</td>
|
|
<td>Notepad++ Portable (PortableApps.com Launcher)</td>
|
|
<td>309744</td>
|
|
<td>28093d7d974260d18def08f16063699c</td>
|
|
<td>Notepad++ Portable</td>
|
|
<td>2.2.2.0</td>
|
|
<td>Rare Ideas LLC</td>
|
|
<td>2021-12-23 14:16:25 +0000 UTC</td>
|
|
<td>2020-03-25 21:21:10 +0000 UTC</td>
|
|
<td>af4a95a5aff1595a9d4cb7367acb330479b60208</td>
|
|
<td>63cc4facc189d1667491a2df7cfd86e73d9c101a56d0a39169b252a39b71a33173a5215df7e1e52745c3264c3512e4ea</td>
|
|
<td>421d5f0ba036eba9ba4cb3ce1c0250383f770299b361ab059b5e98ef5bdd98efdc7d5ed5125d1c7e34eef6217709239efc218b29697c323c601e4ccdfb2b58d4</td>
|
|
<td>2025-07-29 12:25:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-05 05:15:59 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-29 12:30:21.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5d01fc9d29c18726538eee8972df20e160e6a9e2beb0f05ecc50f823fdb330c7</td>
|
|
<td>[68a501fb7a753eb605659392]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_2jpi5rl5.43j.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2jpi5rl5.43j.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:00:03 +0000 UTC</td>
|
|
<td>2025-08-19 23:00:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5cd6bec8ee21373838f1a1072495ae8e3b328563e40bd645686b228630adc1b2</td>
|
|
<td>[68a1938ae03173a283ad7807]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2honujtp.dwp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:32:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2honujtp.dwp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:32:01 +0000 UTC</td>
|
|
<td>2025-08-17 08:32:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:32:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5cd31ea066ade2576e7c363f81054730ae80821624c80fff09ba94c411e97b72</td>
|
|
<td>[68a6afe50e0f3bd8deac4f53, 68a6afe50e0f3bd8deac509d, 68a6afe50e0f3bd8deac5107, 68a6afe50e0f3bd8deac5171, 68a6afe50e0f3bd8deac5556, 68a6afe50e0f3bd8deac564e, 68a6afe50e0f3bd8deac5767, 68a6afe50e0f3bd8deac5d31, 68a6afe50e0f3bd8deac5db2, 68a6afe50e0f3bd8deac5ef1]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\icudt53.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[e9d093372e0aa6d09225cf91b691a32f]</td>
|
|
<td>[3f6181e15eb6108f31eea589bbb3c5fdb2901312]</td>
|
|
<td>[5dc37f945218107912cb9b4f7ad3c07b02fe6b649305e3cd6122e826382defb558b27f086d3e2f8750c74f4a432d7b8c]</td>
|
|
<td>[5f9a97a1b2dd60c5c217fdff237137f39405f98f292a86a69c88b39f3b9bd3cf31206252562ae369a0997f4a9ad849df8fe2f6534d209498bf6aa1506e7645a6]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>icudt53.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>ICU Data DLL</td>
|
|
<td>21529088</td>
|
|
<td>e9d093372e0aa6d09225cf91b691a32f</td>
|
|
<td>International Components for Unicode</td>
|
|
<td>53, 1, 0, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:22 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:37 +0000 UTC</td>
|
|
<td>3f6181e15eb6108f31eea589bbb3c5fdb2901312</td>
|
|
<td>5dc37f945218107912cb9b4f7ad3c07b02fe6b649305e3cd6122e826382defb558b27f086d3e2f8750c74f4a432d7b8c</td>
|
|
<td>5f9a97a1b2dd60c5c217fdff237137f39405f98f292a86a69c88b39f3b9bd3cf31206252562ae369a0997f4a9ad849df8fe2f6534d209498bf6aa1506e7645a6</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2022-09-21 15:47:05 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 06:40:28.291 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c742d86087c450491cc0f16495345ebb8370e5ee270c9cb9a41ff4d6a025a7f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f208]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\MSGraph-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[3d8ddd6c9c73fc785f2dc328bb9f2ebe]</td>
|
|
<td>[b081f7516433c926509b9956d80b8bde72db7f74]</td>
|
|
<td>[59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc]</td>
|
|
<td>[4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MSGraph-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>4650</td>
|
|
<td>3d8ddd6c9c73fc785f2dc328bb9f2ebe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-04 16:00:03 +0000 UTC</td>
|
|
<td>2025-08-08 16:03:32 +0000 UTC</td>
|
|
<td>b081f7516433c926509b9956d80b8bde72db7f74</td>
|
|
<td>59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc</td>
|
|
<td>4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c623c30f0f4df4ae5f86ae7fcbdbb06dd130f24b338735f5a9976e4946ea25a</td>
|
|
<td>[68a51e6e706e3d7436cc664e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe"]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T01:01:27Z]</td>
|
|
<td>[c856c6a75a00d53167951d3206715225]</td>
|
|
<td>[f8c8f8250c03f193ca35ff3c600e067a0533d85f]</td>
|
|
<td>[fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad]</td>
|
|
<td>[798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\Neuron Server\</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService</td>
|
|
<td>21216</td>
|
|
<td>c856c6a75a00d53167951d3206715225</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:08:04 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>f8c8f8250c03f193ca35ff3c600e067a0533d85f</td>
|
|
<td>fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad</td>
|
|
<td>798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6</td>
|
|
<td>2025-08-20 01:01:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c4d2817d99c1de0b6f825cb3a0030bcfe697672c3b920dd4a85939c97a460bc</td>
|
|
<td>[68a1a3e8ae65e4e5452ad826]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_igsbqipt.nzy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:41:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_igsbqipt.nzy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:41:56 +0000 UTC</td>
|
|
<td>2025-08-17 09:41:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5bf9e5548e81c3ee09ecb53ead92a28a1d2094b11f3de1a72e78bb835d6e755a</td>
|
|
<td>[68a5239e621d09b2b1ed5e48]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[f2ac8256579118dfa592ae6c06393f67]</td>
|
|
<td>[f293eeba2fbafe1e52e80a39365616ca358484d6]</td>
|
|
<td>[d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9]</td>
|
|
<td>[75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>27136</td>
|
|
<td>f2ac8256579118dfa592ae6c06393f67</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>f293eeba2fbafe1e52e80a39365616ca358484d6</td>
|
|
<td>d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9</td>
|
|
<td>75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5b939020b95632adfc62fe42ad783696ed198f085ab2f3e1c1de32faa07e7b89</td>
|
|
<td>[68a523949cec397f02de9f45]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Apache.NMS.ActiveMQ.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[4cbe7eb55afd1512a22b5e4aa867ca46]</td>
|
|
<td>[b58a69e1ca1aded3260a4de5f2e44d8fd4ff692d]</td>
|
|
<td>[5081846ebab713dc85bdaf49797e34bb376a100d0a9a76e010d8fa11303770b6434d23918b0c3f5adfcfe8dfd430f36d]</td>
|
|
<td>[123b325c044c001915614cc8911c073ecf146c3ee34c98f73c5bdd226fce627cd346a0bbf729c668eed5ac1f3e16d5d971e60a3ea373babfb2d36ef067d84d4c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Apache.NMS.ActiveMQ.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Apache NMS for ActiveMQ Class Library</td>
|
|
<td>721920</td>
|
|
<td>4cbe7eb55afd1512a22b5e4aa867ca46</td>
|
|
<td>Apache NMS for ActiveMQ Class Library</td>
|
|
<td>1.6.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:14 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:14 +0000 UTC</td>
|
|
<td>b58a69e1ca1aded3260a4de5f2e44d8fd4ff692d</td>
|
|
<td>5081846ebab713dc85bdaf49797e34bb376a100d0a9a76e010d8fa11303770b6434d23918b0c3f5adfcfe8dfd430f36d</td>
|
|
<td>123b325c044c001915614cc8911c073ecf146c3ee34c98f73c5bdd226fce627cd346a0bbf729c668eed5ac1f3e16d5d971e60a3ea373babfb2d36ef067d84d4c</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2016-11-02 11:57:52 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5b8e3aeec520fb97107e50abdf1f33dba021e6385ace51b9aacbe3161e418125</td>
|
|
<td>[68a523949cec397f02de9f4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\caching.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[4d40957c49945c3871b53bda5e7c22d3]</td>
|
|
<td>[7b5821614de77201a478240c8c468031e458623d]</td>
|
|
<td>[b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1]</td>
|
|
<td>[a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>caching.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>caching</td>
|
|
<td>19456</td>
|
|
<td>4d40957c49945c3871b53bda5e7c22d3</td>
|
|
<td>caching</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>7b5821614de77201a478240c8c468031e458623d</td>
|
|
<td>b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1</td>
|
|
<td>a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5b5749e19ca32ad429018e253c40621d84544eced490d75bf3ee7f84343e0c28</td>
|
|
<td>[68a2263198ac9267ed12be6d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2uejqjh1.2yt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:57:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2uejqjh1.2yt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:57:44 +0000 UTC</td>
|
|
<td>2025-08-17 18:57:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:57:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5a305cf3c8c6fee6d48f5fc09ba2f530d9e959b9bb1a6e485bbfb077021495a9</td>
|
|
<td>[68a4b0fb13fac5171eeef0da]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.Contracts.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:10Z]</td>
|
|
<td>[ad5552d4c204409a6b6e24fbabee1bad]</td>
|
|
<td>[d72232bb811610c471658c6d946bdf1c214f024e]</td>
|
|
<td>[fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597]</td>
|
|
<td>[eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Pegasus.Contracts.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Pegasus.Contratcs</td>
|
|
<td>37888</td>
|
|
<td>ad5552d4c204409a6b6e24fbabee1bad</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:12 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:47 +0000 UTC</td>
|
|
<td>d72232bb811610c471658c6d946bdf1c214f024e</td>
|
|
<td>fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597</td>
|
|
<td>eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59aae000bb01010f781af45b77817f924e75d97a1abf8d67454238536b84aca7</td>
|
|
<td>[68a311cdc2d0d6e3eb77f212]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Find AD group like.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[5f27bfc20834874273ef6c0b60856d71]</td>
|
|
<td>[54dcc7f884056915280b76cfd26dd39e9bdf56cd]</td>
|
|
<td>[a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa]</td>
|
|
<td>[0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Find AD group like.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3343</td>
|
|
<td>5f27bfc20834874273ef6c0b60856d71</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-06-22 13:27:40 +0000 UTC</td>
|
|
<td>2025-08-07 16:54:52 +0000 UTC</td>
|
|
<td>54dcc7f884056915280b76cfd26dd39e9bdf56cd</td>
|
|
<td>a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa</td>
|
|
<td>0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>597f8e06a67d2f6f27dd04a2e98ccb2a6fe248fa2140229e33ff827fef62158f</td>
|
|
<td>[68a472a799ad3734d804e2fe]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmApiConnectionApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[424f1f6e59635ac9b1bb9244519f4110]</td>
|
|
<td>[acd3e574702ffd475a0d774ad10f46098166fe01]</td>
|
|
<td>[2ee362d4c8f86196d2e2aaaaa3db8f0d94f8c02b074b59d4f3f2b68d31d3b28bb52030cb5b5330e1795bfa1ce6106664]</td>
|
|
<td>[020c03474f4f231a90e388830ff52374f1625ff78b40aebb7f718055deceb40a4208733fdecd5e0a19f8bccad9f2afd936b51f25ec22143b45d364b04b263b9b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmApiConnectionApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>30870</td>
|
|
<td>424f1f6e59635ac9b1bb9244519f4110</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>acd3e574702ffd475a0d774ad10f46098166fe01</td>
|
|
<td>2ee362d4c8f86196d2e2aaaaa3db8f0d94f8c02b074b59d4f3f2b68d31d3b28bb52030cb5b5330e1795bfa1ce6106664</td>
|
|
<td>020c03474f4f231a90e388830ff52374f1625ff78b40aebb7f718055deceb40a4208733fdecd5e0a19f8bccad9f2afd936b51f25ec22143b45d364b04b263b9b</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>63178e50147e68d87e5539903a8ff70649d8b48178c12c67b29204d48b493f64</td>
|
|
<td>[68a33942217b2edb9722dd82]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SCCMSrvF1]</td>
|
|
<td>[vm-cfgsms1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\TRA524D.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[@"C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe" "C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\Deleted_dp-potomac.wvuhs.com_2025-08-18_10.20.25.log"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe]</td>
|
|
<td>[C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\cmtrace.exe]</td>
|
|
<td>[2025-08-18T14:31:20Z]</td>
|
|
<td>[90d37bd9d4d05fae38e2513b99131a05]</td>
|
|
<td>[79bee9f3cd48fa8566cf44cc61818309652e8a8a]</td>
|
|
<td>[875bef6017239529422d10d803c5afb70da710ccec82cd9f8d4bbf0359862400057f7960c861a191186660eef4bbd0e6]</td>
|
|
<td>[3f83ba5bd4aea11965e2879f7830b491e5dbbb1e9431575f0ffb75c7fd5e023c1152ae98ef2a0ceb8f616a8dd02e6a3ab335b5c631ea04d7fa55fc7b94eedb98]</td>
|
|
<td>[172.25.18.240]</td>
|
|
<td>[172.25.18.240]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>TRA524D.tmp</td>
|
|
<td>C:\Users\CA_Jnt_SCCMSrvF1\AppData\Local\Temp\5\</td>
|
|
<td>CMTrace_x86.exe</td>
|
|
<td>342528</td>
|
|
<td>90d37bd9d4d05fae38e2513b99131a05</td>
|
|
<td>Endpoint Configuration Manager</td>
|
|
<td>5.00.8913.1000</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:31:20 +0000 UTC</td>
|
|
<td>2025-08-18 14:31:20 +0000 UTC</td>
|
|
<td>79bee9f3cd48fa8566cf44cc61818309652e8a8a</td>
|
|
<td>875bef6017239529422d10d803c5afb70da710ccec82cd9f8d4bbf0359862400057f7960c861a191186660eef4bbd0e6</td>
|
|
<td>3f83ba5bd4aea11965e2879f7830b491e5dbbb1e9431575f0ffb75c7fd5e023c1152ae98ef2a0ceb8f616a8dd02e6a3ab335b5c631ea04d7fa55fc7b94eedb98</td>
|
|
<td>2025-08-18 14:31:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-04 15:49:38 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-08-18 14:36:03.769 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>627c742c10d1e559675ca18c49a9c75c6a54bb2f78fd59b024eba139907117d5</td>
|
|
<td>[68a711499561d65d16a01763]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_peak]</td>
|
|
<td>[i-npeak01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\343 - Par Non Par Contracts\EGScript1.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:30:00Z]</td>
|
|
<td>[1bc244476356653ed1458b0e9e1dd89f]</td>
|
|
<td>[924422bc3fa001cb145b6f0f05702b72c2b9e160]</td>
|
|
<td>[0b26bc53b9ea42d401a9edead2312aab21ca3bb915c0d7ec3c4719f8a73537e0b6326b67d25708683daacc7e1dbd627e]</td>
|
|
<td>[8b2cc9167be42bbb0ca3b6bd9c9bf6c275550b2de7f757385bea48c255c04ab90f1a00d1bca21e74150474f732746a2064449bd9f0b5936f5879c83b3c65cd75]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EGScript1.vbs</td>
|
|
<td>\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\343 - Par Non Par Contracts\</td>
|
|
<td></td>
|
|
<td>2768</td>
|
|
<td>1bc244476356653ed1458b0e9e1dd89f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-10 14:37:36 +0000 UTC</td>
|
|
<td>2025-07-10 14:37:36 +0000 UTC</td>
|
|
<td>924422bc3fa001cb145b6f0f05702b72c2b9e160</td>
|
|
<td>0b26bc53b9ea42d401a9edead2312aab21ca3bb915c0d7ec3c4719f8a73537e0b6326b67d25708683daacc7e1dbd627e</td>
|
|
<td>8b2cc9167be42bbb0ca3b6bd9c9bf6c275550b2de7f757385bea48c255c04ab90f1a00d1bca21e74150474f732746a2064449bd9f0b5936f5879c83b3c65cd75</td>
|
|
<td>2025-08-21 12:30:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>62024863eaffd84b599b90a47e2a9a4751a30ff0a683ad8fe6ee34a88d5ec438</td>
|
|
<td>[68a180e9582a53738bf6196b, 68a2d270bd2fe14956418886, 68a42433cb394578e09d7013, 68a575b4037e225cd9e58524, 68a6c515c0d894da1f16e0c6]</td>
|
|
<td>[2]</td>
|
|
<td>[IT.HelpDesk]</td>
|
|
<td>[PCH-BGSwap]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\WS_FTP_Scripts\Movessi_837.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:32Z, 2025-08-18T07:00:27Z, 2025-08-19T07:00:27Z, 2025-08-20T07:00:27Z, 2025-08-21T07:00:27Z]</td>
|
|
<td>[284c1cdb556927de4b3a316643ffc87d]</td>
|
|
<td>[e410568d05b9af3418141d325b55cb697d99ac21]</td>
|
|
<td>[65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85]</td>
|
|
<td>[723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Movessi_837.bat</td>
|
|
<td>C:\WS_FTP_Scripts\</td>
|
|
<td></td>
|
|
<td>134</td>
|
|
<td>284c1cdb556927de4b3a316643ffc87d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-03 21:55:11 +0000 UTC</td>
|
|
<td>2022-02-03 22:01:36 +0000 UTC</td>
|
|
<td>e410568d05b9af3418141d325b55cb697d99ac21</td>
|
|
<td>65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85</td>
|
|
<td>723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d</td>
|
|
<td>2025-08-09 07:04:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>61c454565af854e76d5943f53653ca500099259a820b93a35b185241f31ec214</td>
|
|
<td>[68a737ea9e9b12dd92373d91]</td>
|
|
<td>[2]</td>
|
|
<td>[jm10132]</td>
|
|
<td>[i-nZiggy]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>["C:\Users\jm10132\Downloads\WinMerge\WinMergeU.exe" ]</td>
|
|
<td>[Takashi Sawanaka]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-21T15:13:02Z]</td>
|
|
<td>[6a22378e4c43881c3fc7516d23e216e5]</td>
|
|
<td>[a73393dacbbd991bf8ea719b9ed326c96ba800ae]</td>
|
|
<td>[b94ace357f5248fc256cea762091f9b4c65b0edfc29af69b0eeaacd47013a6eddb528fb4ee9c671c654c222114a2e9b3]</td>
|
|
<td>[2abadb04850ccf6ee19c2e30d053a76fd6c4c0461abe97735c05c3d7f242b69e2929242d95cbb2c6817a7261f2d54a07e0a79d32fe98227099fd21711319ba46]</td>
|
|
<td>[172.17.20.2]</td>
|
|
<td>[172.17.20.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WinMergeU.exe</td>
|
|
<td>C:\Users\jm10132\Downloads\WinMerge\</td>
|
|
<td>WinMerge</td>
|
|
<td>6182728</td>
|
|
<td>6a22378e4c43881c3fc7516d23e216e5</td>
|
|
<td>WinMerge</td>
|
|
<td>2.16.50.0</td>
|
|
<td>Takashi Sawanaka</td>
|
|
<td>2025-07-28 02:50:58 +0000 UTC</td>
|
|
<td>2025-08-13 19:37:17 +0000 UTC</td>
|
|
<td>a73393dacbbd991bf8ea719b9ed326c96ba800ae</td>
|
|
<td>b94ace357f5248fc256cea762091f9b4c65b0edfc29af69b0eeaacd47013a6eddb528fb4ee9c671c654c222114a2e9b3</td>
|
|
<td>2abadb04850ccf6ee19c2e30d053a76fd6c4c0461abe97735c05c3d7f242b69e2929242d95cbb2c6817a7261f2d54a07e0a79d32fe98227099fd21711319ba46</td>
|
|
<td>2025-08-13 19:38:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-30 17:52:30 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-12 21:05:55.355 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>618e006472ca01d731c88eef0c521bfa2eafe4fa529cb278522e94cd4a227601</td>
|
|
<td>[68a472a799ad3734d804e2e2]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-gui-util-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[e6a0ae656197c7d2042a823421721c0c]</td>
|
|
<td>[26c84e7c1d05a43d83683ffaa842d6fafa24eba9]</td>
|
|
<td>[baf82143523de9dbb4bfd1a568b5d358de605bf395a0b9dd230815a767d2e3b27e0499f683e20e86de893aca30f02b3e]</td>
|
|
<td>[5746e06b5b7d988a66f1cd66b8d11a4c822b0b10608b8511fd92f0635a270826d598fb17dc6c3575999b085c44b87041aa9a8913fc8e98ae2a5ff91b7f06ee49]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-gui-util-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>172897</td>
|
|
<td>e6a0ae656197c7d2042a823421721c0c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>26c84e7c1d05a43d83683ffaa842d6fafa24eba9</td>
|
|
<td>baf82143523de9dbb4bfd1a568b5d358de605bf395a0b9dd230815a767d2e3b27e0499f683e20e86de893aca30f02b3e</td>
|
|
<td>5746e06b5b7d988a66f1cd66b8d11a4c822b0b10608b8511fd92f0635a270826d598fb17dc6c3575999b085c44b87041aa9a8913fc8e98ae2a5ff91b7f06ee49</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-11 05:23:29 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>61343f806096e4fc91407dc38a85cf399bdcdd696d1d405476f1207533ded21a</td>
|
|
<td>[68a4ccc785b914a60d739e4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>612d9fd82e677d16ceb970c0db3db940e645c7623f9972b3514165de961736ae</td>
|
|
<td>[68a48674c4cb2500be692646, 68a48674c4cb2500be692653]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.SwaggerUI.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.SwaggerUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:54Z, 2025-08-19T14:08:13Z]</td>
|
|
<td>[a5a7e03b78cfa550c2bb230847503da0]</td>
|
|
<td>[345c6b6c08da999f7819345ddcb5ecbe9ac5cd99]</td>
|
|
<td>[96a5ed695339154a791e72920d5b76e93239a6553959612ffe0dcb749f2636a662aab00d7a1158ce9730340707a53c3d]</td>
|
|
<td>[bbd844477e3f7a69f66cf39d4f523038e1f9601387a297b534ad0dcb2d3bd6405f7007b25da474565ccc65b8546943cd76011334087c72f8a4de133683128890]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>3253248</td>
|
|
<td>a5a7e03b78cfa550c2bb230847503da0</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-01-11 11:49:02 +0000 UTC</td>
|
|
<td>2023-01-11 11:49:02 +0000 UTC</td>
|
|
<td>345c6b6c08da999f7819345ddcb5ecbe9ac5cd99</td>
|
|
<td>96a5ed695339154a791e72920d5b76e93239a6553959612ffe0dcb749f2636a662aab00d7a1158ce9730340707a53c3d</td>
|
|
<td>bbd844477e3f7a69f66cf39d4f523038e1f9601387a297b534ad0dcb2d3bd6405f7007b25da474565ccc65b8546943cd76011334087c72f8a4de133683128890</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-15 22:16:12 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 14:11:01.183 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>60f0e85181d3b53d78e9e6ecebe0ab722314b06b9c192ee5f7cd901c436979d1</td>
|
|
<td>[68a3146b5f0c41860c8c8507, 68a3146b5f0c41860c8c852d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\functools.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[74324067d7541c3433020bf331282bae]</td>
|
|
<td>[36705cffb70e444b9521d2e7d5b3e1d6a65770f8]</td>
|
|
<td>[231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740]</td>
|
|
<td>[3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>functools.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>42627</td>
|
|
<td>74324067d7541c3433020bf331282bae</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>36705cffb70e444b9521d2e7d5b3e1d6a65770f8</td>
|
|
<td>231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740</td>
|
|
<td>3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>60e451f72cdbb8e0e9ea32540baf67cd8fd5d6cedbd7a85ac28ac61581589702</td>
|
|
<td>[68a235831d100d9bbeccc36f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iuw52xms.vda.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:03:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iuw52xms.vda.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:03:04 +0000 UTC</td>
|
|
<td>2025-08-17 20:03:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:03:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6075b77d8dc01b2c8b4d17ba6e0d36189e63f6af58ebebbe688034a0f03649ba</td>
|
|
<td>[68a50205736560052fcd1832]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\vfluk3hv.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vfluk3hv.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>601e017b57a87b714d691bb19b0d53984f1d1a66f227ceb8bbc2e8a8d63617c7</td>
|
|
<td>[68a3274a2bbf81532b7d73f6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ksxmyi50.q5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:14:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ksxmyi50.q5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:14:47 +0000 UTC</td>
|
|
<td>2025-08-18 13:14:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:14:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5ff7a1185865259b9baf0f0104fc3ed86f434c0b3543d6503a21ea4f10f3a204</td>
|
|
<td>[68a472a799ad3734d804e2f4]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CmlUiLibrary-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[419e7e870299e91eb47af36c89899910]</td>
|
|
<td>[b7b4fbfd2c5528a6c4086109c8d3694b5e885e63]</td>
|
|
<td>[5169233f20fc3d2d79b27a369cbe0221ecc8a9ce74b4e431475a09b94b1bddbbfc4c77f59278e70618e06e520c4c0ffb]</td>
|
|
<td>[54a829e37109a32370fd9bfeb4447aacf5ca9a6f6f16a5c8004167dacd77c7615d33fe9d875a6570177a9d324f7d9830466c722d6cb5944f12864ffb901a097f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CmlUiLibrary-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\temp\temp370e6ec670be35ca\content-f6ee56d340fd144d\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>12995294</td>
|
|
<td>419e7e870299e91eb47af36c89899910</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>2021-12-22 05:40:22 +0000 UTC</td>
|
|
<td>b7b4fbfd2c5528a6c4086109c8d3694b5e885e63</td>
|
|
<td>5169233f20fc3d2d79b27a369cbe0221ecc8a9ce74b4e431475a09b94b1bddbbfc4c77f59278e70618e06e520c4c0ffb</td>
|
|
<td>54a829e37109a32370fd9bfeb4447aacf5ca9a6f6f16a5c8004167dacd77c7615d33fe9d875a6570177a9d324f7d9830466c722d6cb5944f12864ffb901a097f</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:50 +0000 UTC</td>
|
|
<td>52</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f569870e905db236ba305ca0da4cfd820ef82f59ef451505ab6c93239f84eb0</td>
|
|
<td>[68a1a492a55ce8c2d93b813d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae1fymez.nje.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:44:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ae1fymez.nje.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:44:46 +0000 UTC</td>
|
|
<td>2025-08-17 09:44:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:44:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f4e6697d29e9da65f102eb5281347669f297da17c779c3d98c498fec0d902ed</td>
|
|
<td>[68a3146b5f0c41860c8c8500, 68a3146b5f0c41860c8c8559]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[0961f322c725036a4b676715ca3df2ea]</td>
|
|
<td>[0503b6748380bbc9aabe03713ace8ac2e7225770]</td>
|
|
<td>[5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422]</td>
|
|
<td>[0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>1895</td>
|
|
<td>0961f322c725036a4b676715ca3df2ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>0503b6748380bbc9aabe03713ace8ac2e7225770</td>
|
|
<td>5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422</td>
|
|
<td>0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5eb4e339d92213bf88a05a9ae0fbfa5c9be2cba35b15033f9750537527ebbbb7</td>
|
|
<td>[68a1dc8ef7acbde1f06aea97]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nqjmeb4k.jw4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:43:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nqjmeb4k.jw4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:43:33 +0000 UTC</td>
|
|
<td>2025-08-17 13:43:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:43:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5e7633f5e5b6b6041b509141acde2aa6ad4f374355e20abcf89530fb344d21f6</td>
|
|
<td>[68a48674c4cb2500be692644, 68a48674c4cb2500be692652]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Polly.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Polly.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:52Z, 2025-08-19T14:08:11Z]</td>
|
|
<td>[d76a3e8624e92779aeb0117980afa4fe]</td>
|
|
<td>[ecc065d3f48010e19c5e80164efc8e0966fc9e46]</td>
|
|
<td>[5375644cd6a15e66b74f4eb7ca1584ca1f966259accc4268596c681e8d387f1904d78027f8403ac1ff1bf6b3d20d3cde]</td>
|
|
<td>[c83160de543d74ba0e6e97d8a69a877e923867595b9cd32a934d2e19879a5426e73d494583c4ed9a7ade92ab987b2b0917978186f7b1bf259d922418f29400c4]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Polly.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Polly</td>
|
|
<td>275456</td>
|
|
<td>d76a3e8624e92779aeb0117980afa4fe</td>
|
|
<td>Polly</td>
|
|
<td>7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-01-17 18:25:08 +0000 UTC</td>
|
|
<td>2022-01-17 18:25:08 +0000 UTC</td>
|
|
<td>ecc065d3f48010e19c5e80164efc8e0966fc9e46</td>
|
|
<td>5375644cd6a15e66b74f4eb7ca1584ca1f966259accc4268596c681e8d387f1904d78027f8403ac1ff1bf6b3d20d3cde</td>
|
|
<td>c83160de543d74ba0e6e97d8a69a877e923867595b9cd32a934d2e19879a5426e73d494583c4ed9a7ade92ab987b2b0917978186f7b1bf259d922418f29400c4</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-12 13:14:32 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 04:08:59.643 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65e36fe2679c2a738bce1f11bc44f5ecaccc0b2aa794481e9a3da95fee273829</td>
|
|
<td>[68a193ce4e3c049885d2ea95, 68a2e554dc234255d3b8e587, 68a436fbf3463c41a9aea0b7, 68a588945ea9afa580b255da, 68a6da3eb10fd4be868c71e7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-EBO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\eBO\eBO_start.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:30:01Z, 2025-08-18T08:30:01Z, 2025-08-19T08:30:01Z, 2025-08-20T08:30:01Z, 2025-08-21T08:30:01Z]</td>
|
|
<td>[c08203060d93393af38d1b3c2740552f]</td>
|
|
<td>[1b371466fbd5c6f1ea33373992b920991adbecc9]</td>
|
|
<td>[544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c]</td>
|
|
<td>[2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>eBO_start.bat</td>
|
|
<td>D:\eClinicalWorks\eBO\</td>
|
|
<td></td>
|
|
<td>13</td>
|
|
<td>c08203060d93393af38d1b3c2740552f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 20:04:47 +0000 UTC</td>
|
|
<td>2021-07-04 20:04:47 +0000 UTC</td>
|
|
<td>1b371466fbd5c6f1ea33373992b920991adbecc9</td>
|
|
<td>544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c</td>
|
|
<td>2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d</td>
|
|
<td>2025-08-09 08:30:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65c33dc9b24a5e5f6cacae62680641582894749c7bf16c951032ef92f3e12a60</td>
|
|
<td>[68a472b1b022648922e23591]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-core-2.17.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[da06f4ab7faebc965ae04d0ba92be715]</td>
|
|
<td>[fe6e7a32c1228884b9691a744f953a55d0dd8ead]</td>
|
|
<td>[f001c7d6e4443b7876a151b4e706591c1db7ceec982d24507d239f6658c70bd736897b4fbdde1014af1f4dc12c220c76]</td>
|
|
<td>[e28fa0f1cbac0d925055b4c89de3c1f7293a001574b8479b7ae912dff051ed35477847509d70586a3b7637f0f529f701235766abdfc755f261a2aaf6dc2a70b8]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4j-core-2.17.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>1789339</td>
|
|
<td>da06f4ab7faebc965ae04d0ba92be715</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>fe6e7a32c1228884b9691a744f953a55d0dd8ead</td>
|
|
<td>f001c7d6e4443b7876a151b4e706591c1db7ceec982d24507d239f6658c70bd736897b4fbdde1014af1f4dc12c220c76</td>
|
|
<td>e28fa0f1cbac0d925055b4c89de3c1f7293a001574b8479b7ae912dff051ed35477847509d70586a3b7637f0f529f701235766abdfc755f261a2aaf6dc2a70b8</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-15 21:56:36 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65aae2d587ee1ea71d61262951090e49fe23de56242c8a9a51976e6be146f58f</td>
|
|
<td>[68a5239e621d09b2b1ed5e57]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Reporter.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[2f985088066c429f7ded59c429f9e3b1]</td>
|
|
<td>[568bfe5a3fbd545ef448b1853b52848299c8e64b]</td>
|
|
<td>[e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644]</td>
|
|
<td>[f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Reporter.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Reporter</td>
|
|
<td>12288</td>
|
|
<td>2f985088066c429f7ded59c429f9e3b1</td>
|
|
<td>Reporter</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:18 +0000 UTC</td>
|
|
<td>568bfe5a3fbd545ef448b1853b52848299c8e64b</td>
|
|
<td>e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644</td>
|
|
<td>f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65a2347c4995585d251164ecd8671674e75bc0d429b15e08feb49912b0389663</td>
|
|
<td>[68a306a5ba5832f49fe9cf61]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\responseloader.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:47:34Z]</td>
|
|
<td>[3960a43ddaa5d76217cee3edfd8cb9cb]</td>
|
|
<td>[2f6b0ecda88a62c631b875a15ca36d926419aca3]</td>
|
|
<td>[650baf192b45e9971ae47df8651a4b85241d4e840aef1a09f2d42d1f60affaed4445f03c62e1661161a1e16b3427815a]</td>
|
|
<td>[ea5105592501c4aec6a6e73d22e69b8366e25907fb66fe91bbfcbf5558abb390fc93b820179b2831e9bfe8cc2a6138de9af338fb590af10615f8383fbde20560]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>responseloader.dll</td>
|
|
<td>C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\</td>
|
|
<td></td>
|
|
<td>185856</td>
|
|
<td>3960a43ddaa5d76217cee3edfd8cb9cb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:44:37 +0000 UTC</td>
|
|
<td>2024-10-23 17:06:51 +0000 UTC</td>
|
|
<td>2f6b0ecda88a62c631b875a15ca36d926419aca3</td>
|
|
<td>650baf192b45e9971ae47df8651a4b85241d4e840aef1a09f2d42d1f60affaed4445f03c62e1661161a1e16b3427815a</td>
|
|
<td>ea5105592501c4aec6a6e73d22e69b8366e25907fb66fe91bbfcbf5558abb390fc93b820179b2831e9bfe8cc2a6138de9af338fb590af10615f8383fbde20560</td>
|
|
<td>2025-05-01 10:47:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 22:40:51 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 10:52:15.581 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>654db9b5673ac13103fd728375f4f07b150f1ad7581db231c4852464dde28d7e</td>
|
|
<td>[68a1c1a2a2fc50ac4b0f3d54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nosccapp2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_za4tfwmo.5uv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:48:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_za4tfwmo.5uv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:48:48 +0000 UTC</td>
|
|
<td>2025-08-17 11:48:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:48:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6536f5e98cbead09f04f349e790d5138cd064acc602f927805d373d7a02cd4ec</td>
|
|
<td>[68a4b0fb13fac5171eeef0d4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>["C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T17:08:06Z]</td>
|
|
<td>[13d3058a8838596abc2f8a562eb926a0]</td>
|
|
<td>[55a6af07ae596cc5aca567ed04c8f723fe4efaaf]</td>
|
|
<td>[067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a]</td>
|
|
<td>[6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.exe</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI</td>
|
|
<td>46097920</td>
|
|
<td>13d3058a8838596abc2f8a562eb926a0</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:00 +0000 UTC</td>
|
|
<td>55a6af07ae596cc5aca567ed04c8f723fe4efaaf</td>
|
|
<td>067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a</td>
|
|
<td>6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6519fa21fd6c2089d9cd74a1c19e586b97cafa58b95e7f32cc8843106a52297f</td>
|
|
<td>[68a3146b5f0c41860c8c8554, 68a3146b5f0c41860c8c8579]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\token.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[7bfdfbbb892249eaf8c980f98d7c019e]</td>
|
|
<td>[192a5bf782608ebb77060023442b3dfaefec7dba]</td>
|
|
<td>[6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a]</td>
|
|
<td>[269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>token.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>3572</td>
|
|
<td>7bfdfbbb892249eaf8c980f98d7c019e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>192a5bf782608ebb77060023442b3dfaefec7dba</td>
|
|
<td>6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a</td>
|
|
<td>269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64dba8b2abfb2c9a3cadbc9da524592ca7d348251d7992a2b293d424333ddb11</td>
|
|
<td>[68a4ccc785b914a60d739e46, 68a4ce1fc826337212f53be6, 68a4d07753a851daf11e6930, 68a4d07753a851daf11e6943, 68a4d07753a851daf11e6949, 68a4d2d1ff2b441b84428128, 68a4d2d1ff2b441b8442813b, 68a4d2d1ff2b441b84428142]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl522.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[ece6e23c61bd350b773b221dd7117a0b]</td>
|
|
<td>[b82dd61eca567e878559410ec92fe5c1f4942827]</td>
|
|
<td>[12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae]</td>
|
|
<td>[95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>perl522.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>1513472</td>
|
|
<td>ece6e23c61bd350b773b221dd7117a0b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:15 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>b82dd61eca567e878559410ec92fe5c1f4942827</td>
|
|
<td>12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae</td>
|
|
<td>95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>647983ebde53e0501ff1af8ef6190dfeea5ccc64caf7dce808f1e3d98fb66a3c</td>
|
|
<td>[68a70bdc2a90344d346daef1, 68a70e2b4a120b2e9d00b325]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp, C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\is-CMQT5.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>["C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp" /SL5="$2401DC,1853735,721408,C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" , "C:\Users\SVC_SL~1\AppData\Local\Temp\is-CMQT5.tmp\SetupYabe_v2.1.0.tmp" /SL5="$302FE,1853735,721408,C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" /SPAWNWND=$20300 /NOTIFYWND=$2401DC ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:06:44Z, 2025-08-21T12:06:47Z]</td>
|
|
<td>[84db4b4205f705da71471dc6ecc061f5]</td>
|
|
<td>[b90bac8c13a1553d58feef95a2c41c64118b29cf]</td>
|
|
<td>[44d2129f7239fbe6c437a504ae3718a96fb9deb9b85374a5d46f096cdacb50af89cba21c0efdd76a24784a5c91d663eb]</td>
|
|
<td>[c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SetupYabe_v2.1.0.tmp</td>
|
|
<td>C:\Users\SVC_SL_ControlSystem\AppData\Local\Temp\13\is-00LB0.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2535424</td>
|
|
<td>84db4b4205f705da71471dc6ecc061f5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:06:43 +0000 UTC</td>
|
|
<td>2025-08-21 12:06:43 +0000 UTC</td>
|
|
<td>b90bac8c13a1553d58feef95a2c41c64118b29cf</td>
|
|
<td>44d2129f7239fbe6c437a504ae3718a96fb9deb9b85374a5d46f096cdacb50af89cba21c0efdd76a24784a5c91d663eb</td>
|
|
<td>c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a</td>
|
|
<td>2025-08-21 12:06:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 03:07:05 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64777527feb80342cffb4fa4eb4c083aeef79259506dd17882b418e63a6cfe9a</td>
|
|
<td>[68a523949cec397f02de9f4d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CellsDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[3247209b37912925bc215dfdd852765d]</td>
|
|
<td>[f0f111857ad27804276dd06ebea2124265752b99]</td>
|
|
<td>[fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b]</td>
|
|
<td>[639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CellsDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>CellsDiagPlugIn</td>
|
|
<td>16896</td>
|
|
<td>3247209b37912925bc215dfdd852765d</td>
|
|
<td>CellsDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:00 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:00 +0000 UTC</td>
|
|
<td>f0f111857ad27804276dd06ebea2124265752b99</td>
|
|
<td>fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b</td>
|
|
<td>639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>645bee92ba4e9f32ddfdd9f8519dc1b9f9ff0b0a8e87e342f08d39da77e499a9</td>
|
|
<td>[68a4e8a1ad898641af98fd95, 68a4fcd0011d94a251a4ef31]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>["C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe" /S /SELECT_UTILITIES=1]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z]</td>
|
|
<td>[47fa5f0670cf191d066e5dfbf4f4ee70]</td>
|
|
<td>[db9d441c209fb28b7c07286a74fe000738304dac]</td>
|
|
<td>[d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf]</td>
|
|
<td>[514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tap-windows.exe</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>256240</td>
|
|
<td>47fa5f0670cf191d066e5dfbf4f4ee70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 13:41:08 +0000 UTC</td>
|
|
<td>2016-04-21 13:41:08 +0000 UTC</td>
|
|
<td>db9d441c209fb28b7c07286a74fe000738304dac</td>
|
|
<td>d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf</td>
|
|
<td>514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 13:19:27 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>641cf25502584cfd76bde4c4df4b299e84826bd93ef0a6ba031e6c05e4eca12e</td>
|
|
<td>[68a472a799ad3734d804e2ea]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-transcoder-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[9a0436daac0071db0ce4e7d4c39f5119]</td>
|
|
<td>[6836769a03abf9cec50f4ed668c57753a962771d]</td>
|
|
<td>[862b4d6a52863f26ef6ac2cf618caf3efa4a2598cc00387325c41ae0ff73b584591c59298875fec313c54ae37507d6f7]</td>
|
|
<td>[bdd5a4010858d7cf509d014262577364de5e8da96f76d75bad101608779b5586f439d44ac9e8c435ed13fd947d2333710a4ace543ac32225f6e52211063f2b83]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-transcoder-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>128581</td>
|
|
<td>9a0436daac0071db0ce4e7d4c39f5119</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>6836769a03abf9cec50f4ed668c57753a962771d</td>
|
|
<td>862b4d6a52863f26ef6ac2cf618caf3efa4a2598cc00387325c41ae0ff73b584591c59298875fec313c54ae37507d6f7</td>
|
|
<td>bdd5a4010858d7cf509d014262577364de5e8da96f76d75bad101608779b5586f439d44ac9e8c435ed13fd947d2333710a4ace543ac32225f6e52211063f2b83</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-05-10 22:57:54 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64108cd7e8f9191dd24c6cd52bf90bb7c6d83435b247310d7b235f4e6e4462d0</td>
|
|
<td>[68a3146b5f0c41860c8c84e6, 68a3146b5f0c41860c8c8519]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[c2cdf437a74a8110e8c8e31d70476eac]</td>
|
|
<td>[6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d]</td>
|
|
<td>[b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5]</td>
|
|
<td>[61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>6025</td>
|
|
<td>c2cdf437a74a8110e8c8e31d70476eac</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d</td>
|
|
<td>b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5</td>
|
|
<td>61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>635dda72c3c6e62d4ca2ad23babcab4ebc80d20f98bc19f81a80f2c519820e2d</td>
|
|
<td>[68a18e5a59acceacbe55b00f, 68a2ddd9e2924f584cca6bdc, 68a4315a5c922431d0b72ae7, 68a580dc948b28af3ee1a272, 68a6d26c64b8e723a68e47ca]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_idbadge]</td>
|
|
<td>[i-nVM-IDBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\New DBCleaner\DatabaseCleaner.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:02Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z, 2025-08-21T08:00:02Z]</td>
|
|
<td>[34fef7d2fff558162f7cf87d74aa8e03]</td>
|
|
<td>[35cd5aa7a5316f7e59b9f0481592a65ba3c32548]</td>
|
|
<td>[11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6]</td>
|
|
<td>[8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55]</td>
|
|
<td>[172.17.251.92]</td>
|
|
<td>[172.17.251.92]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DatabaseCleaner.bat</td>
|
|
<td>C:\New DBCleaner\</td>
|
|
<td></td>
|
|
<td>4103</td>
|
|
<td>34fef7d2fff558162f7cf87d74aa8e03</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-12-13 19:59:10 +0000 UTC</td>
|
|
<td>2023-04-03 20:05:46 +0000 UTC</td>
|
|
<td>35cd5aa7a5316f7e59b9f0481592a65ba3c32548</td>
|
|
<td>11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6</td>
|
|
<td>8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55</td>
|
|
<td>2025-08-09 08:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6339ff3a3b98f030ee18cb09698e5e48159211697d8c5d4849d1d022e1cece46</td>
|
|
<td>[68a5e5e6f3ba24788e4c61e7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\drivers\VirtFile.sys]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2298.891]</td>
|
|
<td>[]</td>
|
|
<td>[Symantec Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[2025-08-20T15:02:32Z]</td>
|
|
<td>[b6385c9cba13a1beaa7f38625bc0d803]</td>
|
|
<td>[ef0eeab606e4324fe12951421e21660416a99ea4]</td>
|
|
<td>[cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3]</td>
|
|
<td>[d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VirtFile.sys</td>
|
|
<td>C:\Windows\System32\drivers\</td>
|
|
<td>Allows granular display of back ups.</td>
|
|
<td>114848</td>
|
|
<td>b6385c9cba13a1beaa7f38625bc0d803</td>
|
|
<td>Symantec Backup Exec(TM) for Windows Servers</td>
|
|
<td>2.0.95</td>
|
|
<td>Symantec Corporation (Invalid Certificate Chain)</td>
|
|
<td>2013-06-11 19:10:48 +0000 UTC</td>
|
|
<td>2012-10-16 15:51:04 +0000 UTC</td>
|
|
<td>ef0eeab606e4324fe12951421e21660416a99ea4</td>
|
|
<td>cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3</td>
|
|
<td>d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a</td>
|
|
<td>2025-07-21 22:05:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-01-23 16:45:00 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-21 22:11:52.243 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>631c20f213e711cef26bbb9333315083fc002c886a177fc7a58baf239246b0fb</td>
|
|
<td>[68a3146b5f0c41860c8c854f, 68a3146b5f0c41860c8c8575]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\linecache.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[27d8b6c682f952b431b6828ff2909e5c]</td>
|
|
<td>[603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a]</td>
|
|
<td>[d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c]</td>
|
|
<td>[b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>linecache.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7150</td>
|
|
<td>27d8b6c682f952b431b6828ff2909e5c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a</td>
|
|
<td>d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c</td>
|
|
<td>b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fb8614c9264487aeb4520463d5be45b3de0f311e175fb7615ad95127046479c</td>
|
|
<td>[68a3146b5f0c41860c8c84f6, 68a3146b5f0c41860c8c8537]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\socket.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[faed5b0bdd655e08c6850bcf855f6058]</td>
|
|
<td>[d5a4515c70fa7338e895a47d73b6538dddb21cc9]</td>
|
|
<td>[54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b]</td>
|
|
<td>[cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>socket.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>42178</td>
|
|
<td>faed5b0bdd655e08c6850bcf855f6058</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>d5a4515c70fa7338e895a47d73b6538dddb21cc9</td>
|
|
<td>54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b</td>
|
|
<td>cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f3cafd07fecd666babef35d2e27c9be36744d46ccbadeffb332ac1c63fc20d4</td>
|
|
<td>[68a241462d53af320f145902]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tbmkjawl.w3u.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tbmkjawl.w3u.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:14 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f32a3469b8f540d07d0105e336eac117dcff5fb273826eb4893d4981ee5b3cb</td>
|
|
<td>[68a48674c4cb2500be692639, 68a48674c4cb2500be69264b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.AspNetCore.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.AspNetCore.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z]</td>
|
|
<td>[ae053b68b1c19eac4cbae026a9ad84cc]</td>
|
|
<td>[ea1ca08de3f100bf2b3d3781091d61284fda048a]</td>
|
|
<td>[30aa7083962df2e165fd16666677fbfb95bbd7f91c957e51c938f20386b21562ff34326ef1537c044c4f0c0678063f24]</td>
|
|
<td>[97d8f790cea8de9e3055890a12e87a9e91914100df76846d8a59e36bb18e3c6afca557b091639ef8120c90dce1db356d3b43b71c57c18b3a91c9e89d5cd4b071]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.AspNetCore.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>15872</td>
|
|
<td>ae053b68b1c19eac4cbae026a9ad84cc</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>5.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-16 03:02:56 +0000 UTC</td>
|
|
<td>2022-02-16 03:02:56 +0000 UTC</td>
|
|
<td>ea1ca08de3f100bf2b3d3781091d61284fda048a</td>
|
|
<td>30aa7083962df2e165fd16666677fbfb95bbd7f91c957e51c938f20386b21562ff34326ef1537c044c4f0c0678063f24</td>
|
|
<td>97d8f790cea8de9e3055890a12e87a9e91914100df76846d8a59e36bb18e3c6afca557b091639ef8120c90dce1db356d3b43b71c57c18b3a91c9e89d5cd4b071</td>
|
|
<td>2025-07-15 14:07:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-12 11:51:18 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 14:11:01.183 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f27d7cb7d073f90f2d5cbe8a7b5f84792b15eb9bd60301da2fdd7ac5a7a564a</td>
|
|
<td>[68a7177f3667c32a076fb94b]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\mbahost.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[2025-08-21T12:56:21Z]</td>
|
|
<td>[72aad48433f2fadff1369750cba0bf89]</td>
|
|
<td>[0bf372d38c34b2ae77e5769d89daaed033271932]</td>
|
|
<td>[268f26ff0ac963035bce15a46398134609d90f9aff897ac33265ffa8832e4590ec5ac26a64a035e812220bd07c660839]</td>
|
|
<td>[6a14a33a18380c79ceb6b5dcbd50f2d2ac595e2bf9269b45920ec2b7ca8d076a5732debbc3260e88931b4e588d3bcd25b832fd40588c60821f6092760e2167d3]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mbahost.dll</td>
|
|
<td>C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\</td>
|
|
<td>Managed Bootstrapper Application Host</td>
|
|
<td>79360</td>
|
|
<td>72aad48433f2fadff1369750cba0bf89</td>
|
|
<td>Windows Installer XML Toolset</td>
|
|
<td>3.8.1128.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2013-11-28 10:14:38 +0000 UTC</td>
|
|
<td>2013-11-28 10:14:38 +0000 UTC</td>
|
|
<td>0bf372d38c34b2ae77e5769d89daaed033271932</td>
|
|
<td>268f26ff0ac963035bce15a46398134609d90f9aff897ac33265ffa8832e4590ec5ac26a64a035e812220bd07c660839</td>
|
|
<td>6a14a33a18380c79ceb6b5dcbd50f2d2ac595e2bf9269b45920ec2b7ca8d076a5732debbc3260e88931b4e588d3bcd25b832fd40588c60821f6092760e2167d3</td>
|
|
<td>2025-08-21 12:56:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>679460da57016661bc7c99e017ac15af4d81c637657f23601d3bf8ac8fcab80f</td>
|
|
<td>[68a6afe50e0f3bd8deac4f4b, 68a6afe50e0f3bd8deac5095, 68a6afe50e0f3bd8deac50ff, 68a6afe50e0f3bd8deac5169, 68a6afe50e0f3bd8deac554e, 68a6afe50e0f3bd8deac5640, 68a6afe50e0f3bd8deac575f, 68a6afe50e0f3bd8deac5d28, 68a6afe50e0f3bd8deac5daa, 68a6afe50e0f3bd8deac5ee8]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>["C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5812", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5148", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "6060", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5216", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5680", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5408", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5256", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkbackend" "5360", "C:/Program Files/PostgreSQL/12/bin/postgres.exe" "--forkavworker" "5680"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\pg_ctl.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[92773de46e214bca7b2b53ffee34fee0]</td>
|
|
<td>[2cc732693d819e2fedeb1c3538cb8caf98dd4dbb]</td>
|
|
<td>[91e8cd14a5f77a79d194763038eb83e81c3556a2de1d574bb7ea2452f32d55ff7778d3eda8de633ec6ab0b451948bbed]</td>
|
|
<td>[02b0adf0ec0492cc432ed62f817b116564e4cac1f87e971632ba357d0e73cc9da7831348536e40ffaa7fc84d15ff411b8fd5022e7652f6a6757b017dccbd7ea7]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>postgres.exe</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>PostgreSQL Server</td>
|
|
<td>7420416</td>
|
|
<td>92773de46e214bca7b2b53ffee34fee0</td>
|
|
<td>PostgreSQL</td>
|
|
<td>12.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:21 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:37 +0000 UTC</td>
|
|
<td>2cc732693d819e2fedeb1c3538cb8caf98dd4dbb</td>
|
|
<td>91e8cd14a5f77a79d194763038eb83e81c3556a2de1d574bb7ea2452f32d55ff7778d3eda8de633ec6ab0b451948bbed</td>
|
|
<td>02b0adf0ec0492cc432ed62f817b116564e4cac1f87e971632ba357d0e73cc9da7831348536e40ffaa7fc84d15ff411b8fd5022e7652f6a6757b017dccbd7ea7</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2024-04-02 18:16:03 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:01:04.066 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>676696e9a002aa8048328f5a90f5701bb020206c47ed28490493c341fb4a9362</td>
|
|
<td>[68a5239e621d09b2b1ed5e58]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ServiceUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[75e9bc83737e8ac074c23a4855102d3e]</td>
|
|
<td>[efb997511f127d246a4abe1bcb83dd177283cef3]</td>
|
|
<td>[47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621]</td>
|
|
<td>[4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ServiceUtils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ServiceUtils</td>
|
|
<td>5632</td>
|
|
<td>75e9bc83737e8ac074c23a4855102d3e</td>
|
|
<td>ServiceUtils</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>efb997511f127d246a4abe1bcb83dd177283cef3</td>
|
|
<td>47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621</td>
|
|
<td>4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>675413a3d571393b0c220c2b15036a8bef01c048df4c30302082951b74043963</td>
|
|
<td>[68a3146b5f0c41860c8c8516, 68a3146b5f0c41860c8c8569]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\base64mime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[2b2542f960659edfdc9c44ec8f938ecf]</td>
|
|
<td>[2450e46ca73940aa558b6dd4c2658db3c6e9d229]</td>
|
|
<td>[9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c]</td>
|
|
<td>[3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>base64mime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>3982</td>
|
|
<td>2b2542f960659edfdc9c44ec8f938ecf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2450e46ca73940aa558b6dd4c2658db3c6e9d229</td>
|
|
<td>9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c</td>
|
|
<td>3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6745c612329bcbcf5d60ea434bbbed729fbfb3044b85ea1daf63168cd72a8378</td>
|
|
<td>[68a4ccc785b914a60d739e54, 68a4ce1fc826337212f53bf0, 68a4d07753a851daf11e693b, 68a4d07753a851daf11e6953, 68a4d2d1ff2b441b84428133, 68a4d2d1ff2b441b8442814a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\OLE.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[c25582d0ba9781b4cfaee35c30265a89]</td>
|
|
<td>[c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6]</td>
|
|
<td>[756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03]</td>
|
|
<td>[960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OLE.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\</td>
|
|
<td></td>
|
|
<td>95232</td>
|
|
<td>c25582d0ba9781b4cfaee35c30265a89</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:45 +0000 UTC</td>
|
|
<td>c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6</td>
|
|
<td>756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03</td>
|
|
<td>960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66fc3944b3051ff3f1d18dbe8db62d3f4dfedc8e026fe31384fbbca9c46b3565</td>
|
|
<td>[68a472a799ad3734d804e2e7]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-svg-dom-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[96e47bc8e217d178950c8d1aea036659]</td>
|
|
<td>[ccc87493a4074348b2e090b2ce7a3eccd4e8af44]</td>
|
|
<td>[1faf695a58c925fee9cf084c8f6f42570aaabd88fcc07c92e71c1076b5455628a276e46a6daa1ed1d2b7d0286cd888bf]</td>
|
|
<td>[8ea662f93d292ab4d3012b515ec5b003db34fbd8ac8744c18f0fe7fe3faa8230dee26b38c02716d6dc53846de14e6a785b428539c2834ccc66e8792268ef179d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-svg-dom-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>231948</td>
|
|
<td>96e47bc8e217d178950c8d1aea036659</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>ccc87493a4074348b2e090b2ce7a3eccd4e8af44</td>
|
|
<td>1faf695a58c925fee9cf084c8f6f42570aaabd88fcc07c92e71c1076b5455628a276e46a6daa1ed1d2b7d0286cd888bf</td>
|
|
<td>8ea662f93d292ab4d3012b515ec5b003db34fbd8ac8744c18f0fe7fe3faa8230dee26b38c02716d6dc53846de14e6a785b428539c2834ccc66e8792268ef179d</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:38:07 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66ca0acbcb6ad02b31c5d704cc07f5927e3c38e9b9c7187e1cc9d6e3902e7ba0</td>
|
|
<td>[68a523a99ba7c92b34976f9b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[e320f4994ce53c449d5a9121c61d7e48]</td>
|
|
<td>[ef0c8fc252698f38fd60036b728d7f67bf7074d0]</td>
|
|
<td>[6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe]</td>
|
|
<td>[d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnderlyingData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>UnderlyingData</td>
|
|
<td>212992</td>
|
|
<td>e320f4994ce53c449d5a9121c61d7e48</td>
|
|
<td>UnderlyingData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>ef0c8fc252698f38fd60036b728d7f67bf7074d0</td>
|
|
<td>6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe</td>
|
|
<td>d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66a8b44e63c47a088ba1953875ea5b2b0eb0769a23906405789b3bb01c9cf8dd</td>
|
|
<td>[68a472b1b022648922e235a6]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax-ex-1.7.8.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[bf9963c5574fdd6f69a927710ec1faf6]</td>
|
|
<td>[377077e4441cc46be5efde9de63efdf790a59cd7]</td>
|
|
<td>[c8e0708966c438ba981be813425e6b43bbbb032cdbbbf310d10159b9ef1087e03b5f50887fc7ccf9d0adc78759e8738d]</td>
|
|
<td>[90018af27d31c1ebb6cc2b0a9bbe7a5d6756e72feb94165c5ad2d00179a5e4fb7fd1b1f38f6838b55bb4d2e9332cae5cb14bcb21376dc21f79cfd45d190ef367]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>stax-ex-1.7.8.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\stax-ex-1.7.8.jar-af4ed41b26a9c9c3\</td>
|
|
<td></td>
|
|
<td>33721</td>
|
|
<td>bf9963c5574fdd6f69a927710ec1faf6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>377077e4441cc46be5efde9de63efdf790a59cd7</td>
|
|
<td>c8e0708966c438ba981be813425e6b43bbbb032cdbbbf310d10159b9ef1087e03b5f50887fc7ccf9d0adc78759e8738d</td>
|
|
<td>90018af27d31c1ebb6cc2b0a9bbe7a5d6756e72feb94165c5ad2d00179a5e4fb7fd1b1f38f6838b55bb4d2e9332cae5cb14bcb21376dc21f79cfd45d190ef367</td>
|
|
<td>2025-03-28 16:06:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-26 16:53:40 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:03:16.254 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66a7c58a048946967c97c8069fcee758ef27df1332efdd25bc395f970aa047ce</td>
|
|
<td>[68a4a66a77aec68de12158a1]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:28Z]</td>
|
|
<td>[81770ef45b8d159737e044b339977f15]</td>
|
|
<td>[3a12a57b41dfe8c522205a10420cba0e3c5f3147]</td>
|
|
<td>[beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea]</td>
|
|
<td>[c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2052</td>
|
|
<td>81770ef45b8d159737e044b339977f15</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:27 +0000 UTC</td>
|
|
<td>3a12a57b41dfe8c522205a10420cba0e3c5f3147</td>
|
|
<td>beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea</td>
|
|
<td>c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6</td>
|
|
<td>2025-08-19 16:29:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66a1912b4df1c32f92d326398253aaf513a587c9b820ebeadf0ba5e2b3bc0703</td>
|
|
<td>[68a1e4af1459697ae7b8a1fc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSwisslog]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5vmqoyzz.0lc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:18:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_5vmqoyzz.0lc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:18:14 +0000 UTC</td>
|
|
<td>2025-08-17 14:18:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:18:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66871d215d9b658f655d342e7fb104a541e57792b012584470f33832195fd5f9</td>
|
|
<td>[68a572d0a4efe9f49e2cb5ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Cluster\CauScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T07:00:00Z]</td>
|
|
<td>[cfaaf3aa63b88b2338b432dd4cde45ad]</td>
|
|
<td>[face75e7dc3b0cdf63652698d51e93b325872c4b]</td>
|
|
<td>[5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a]</td>
|
|
<td>[ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CauScript.cmd</td>
|
|
<td>C:\Windows\Cluster\</td>
|
|
<td></td>
|
|
<td>798</td>
|
|
<td>cfaaf3aa63b88b2338b432dd4cde45ad</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-07-24 17:11:13 +0000 UTC</td>
|
|
<td>2025-03-27 13:16:50 +0000 UTC</td>
|
|
<td>face75e7dc3b0cdf63652698d51e93b325872c4b</td>
|
|
<td>5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a</td>
|
|
<td>ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4</td>
|
|
<td>2025-08-13 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>665c0db974060c2dd20238cc5dfa62525214c41afdd9af5323ff71d73888c0ab</td>
|
|
<td>[68a231ae7d77b9bdafa93994]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0lu13bn4.pix.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:43:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0lu13bn4.pix.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:43:19 +0000 UTC</td>
|
|
<td>2025-08-17 19:43:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:46:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>664078f030aa3df98066673e611d90a158661c5b965a4e46de8de0953da177fb</td>
|
|
<td>[68a5c8eceb9e7b7716dce206, 68a5ccf2ddfdba423e488648]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1, C:\_work_devops_mdi\_temp\fceedb9f-ba6b-41c0-9ef2-a7e4bd4a6240.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:56Z, 2025-08-20T13:22:29Z]</td>
|
|
<td>[e1cedcd3667c280811e42f433dad71f9]</td>
|
|
<td>[748c14065c2144416d5ed03f50f5220e302fccc9]</td>
|
|
<td>[2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96]</td>
|
|
<td>[fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>963</td>
|
|
<td>e1cedcd3667c280811e42f433dad71f9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:56 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:56 +0000 UTC</td>
|
|
<td>748c14065c2144416d5ed03f50f5220e302fccc9</td>
|
|
<td>2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96</td>
|
|
<td>fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>690174fca51407afca08a38fc1a3127d3bbae65c869f3fb85c7234191b1fe8be</td>
|
|
<td>[68a34b98a6132bf659cce5b4, 68a34df0b71eea1289980a19]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Scheduler.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:14Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[38aa5e272191a742bfdd5b7f2f266b74]</td>
|
|
<td>[5bab004a3f0605f3ff88006f58975edae48cf028]</td>
|
|
<td>[35bb16c6611f615b058c815f483b8e5b08fc62e43a999d7c74f36f1f217d54d864e6d219c5133dbf6951008b3b925770]</td>
|
|
<td>[98319ac9ffbc679b636d67dccccfaac3dd0629b16c124ba12f0b03883223e7f095b38831f14ab2763a34d2273a86c443c368c5d5918f5a89ec5fc2a7d009cc89]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Scheduler.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Scheduler</td>
|
|
<td>986624</td>
|
|
<td>38aa5e272191a742bfdd5b7f2f266b74</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>5bab004a3f0605f3ff88006f58975edae48cf028</td>
|
|
<td>35bb16c6611f615b058c815f483b8e5b08fc62e43a999d7c74f36f1f217d54d864e6d219c5133dbf6951008b3b925770</td>
|
|
<td>98319ac9ffbc679b636d67dccccfaac3dd0629b16c124ba12f0b03883223e7f095b38831f14ab2763a34d2273a86c443c368c5d5918f5a89ec5fc2a7d009cc89</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-23 05:15:40 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>686df88dac104103d9df30377e187bfef2774b327f2725bd46546ccfa8f1c47d</td>
|
|
<td>[68a4cc59fc641401b4957020]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\3vrnzq1i.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:11:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>3vrnzq1i.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:11:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6863fe2234ffda46d9ca1fd9f15003f42b2191acdd10175e3f295523c0b35045</td>
|
|
<td>[68a15d35e038b834e144693e, 68a2ac48f8706bf2d8f3933a, 68a400602dba59b513ad7bed, 68a54f94d489f4294ecfa570, 68a6a0e16995404c84cfc656]</td>
|
|
<td>[2]</td>
|
|
<td>[cbord_support]</td>
|
|
<td>[I-HOdyssey]</td>
|
|
<td>[I-HODYSSEY]</td>
|
|
<td>[D:\CBORD Odyssey\PCS\EndOfDay\EndOfDay.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[D:\CBORD Odyssey\Shared\pTaskService.exe]</td>
|
|
<td>[2025-08-17T04:30:21Z, 2025-08-18T04:30:00Z, 2025-08-19T04:30:28Z, 2025-08-20T04:30:25Z, 2025-08-21T04:30:24Z]</td>
|
|
<td>[e60dc73b04d6e2accd1eeed6e2178d78]</td>
|
|
<td>[44b03d03b40ede397aa93727bb5464cf60e9d3fc]</td>
|
|
<td>[13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca]</td>
|
|
<td>[3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51]</td>
|
|
<td>[172.17.20.134]</td>
|
|
<td>[172.17.20.134]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EndOfDay.bat</td>
|
|
<td>D:\CBORD Odyssey\PCS\EndOfDay\</td>
|
|
<td></td>
|
|
<td>1565</td>
|
|
<td>e60dc73b04d6e2accd1eeed6e2178d78</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-04-26 20:58:04 +0000 UTC</td>
|
|
<td>2019-04-26 20:58:04 +0000 UTC</td>
|
|
<td>44b03d03b40ede397aa93727bb5464cf60e9d3fc</td>
|
|
<td>13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca</td>
|
|
<td>3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51</td>
|
|
<td>2025-08-09 04:30:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>67aa57138fb2461c734d2cb7424da10bf4ac7fa888cc6fe6d58cd22f2f4c7a4b</td>
|
|
<td>[68a306a5ba5832f49fe9cf52]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXCOMND4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[6affa08092f4119767fd135b25631186]</td>
|
|
<td>[991baf5f4b2b1db8262007ccd4446fafb3f41b48]</td>
|
|
<td>[404a8cc0255eb1ce1db2fe0668708484ce499b1cf1b0ab27d8941f47473d6c9929801eacc030fb24159e24491aef9195]</td>
|
|
<td>[723e4d98ffea65d4cd029e5678c4a64232719fc953225f04b138ba0b2e588ab7dca4b61f8e5377731e7fcae60a8c8d19fbd47430f49aed476be5912587ca015e]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DXCOMND4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express Common Library</td>
|
|
<td>32768</td>
|
|
<td>6affa08092f4119767fd135b25631186</td>
|
|
<td>ExpressCommon</td>
|
|
<td>1.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:10 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>991baf5f4b2b1db8262007ccd4446fafb3f41b48</td>
|
|
<td>404a8cc0255eb1ce1db2fe0668708484ce499b1cf1b0ab27d8941f47473d6c9929801eacc030fb24159e24491aef9195</td>
|
|
<td>723e4d98ffea65d4cd029e5678c4a64232719fc953225f04b138ba0b2e588ab7dca4b61f8e5377731e7fcae60a8c8d19fbd47430f49aed476be5912587ca015e</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:04:04 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10f86ca48d4a4bbb975aa700c731c3fbe72dd351a60c5f9c660cc27b3165175a</td>
|
|
<td>[68a202fd73f6d2c0d39cd925]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-Datsun]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w1kmz4zz.e0v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T16:27:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w1kmz4zz.e0v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 16:27:38 +0000 UTC</td>
|
|
<td>2025-08-17 16:27:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 16:27:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10ebe6a0312b109a25ec7ee49e67259c3a978954ef2c3f17d9a22bc5ced39037</td>
|
|
<td>[68a7177f3667c32a076fb94d]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{bf0d55ea-f272-49bc-8699-22fbdcc115a8}\.ba1\Microsoft.Deployment.WindowsInstaller.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[C:\Installs\SSMS-Setup-ENU.exe]</td>
|
|
<td>[2025-08-21T12:56:22Z]</td>
|
|
<td>[67d94c27e58f90670d807a9b5c54a3c6]</td>
|
|
<td>[84748405943ac408b70fe2ba3f5e945073d1c25f]</td>
|
|
<td>[d793a36091ca2e23067ad41caaf64e7a6ea054b93fb59cf3394acf2761f097131a2937bf76ea289950a109c151be687c]</td>
|
|
<td>[ffa43a10a24d637318d3d1c6ebb365d7d07f5f984314246a36526af6aa3a53343aa37651316b73df074bed4a38d1d9907059867f0607269bc6bc8228ff5652b2]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.Deployment.WindowsInstaller.dll</td>
|
|
<td>C:\Program Files (x86)\Varian\KeystoneServer\Services\</td>
|
|
<td></td>
|
|
<td>184320</td>
|
|
<td>67d94c27e58f90670d807a9b5c54a3c6</td>
|
|
<td>Windows Installer XML Toolset</td>
|
|
<td>3.8.1128.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-27 15:37:02 +0000 UTC</td>
|
|
<td>2023-07-27 15:37:02 +0000 UTC</td>
|
|
<td>84748405943ac408b70fe2ba3f5e945073d1c25f</td>
|
|
<td>d793a36091ca2e23067ad41caaf64e7a6ea054b93fb59cf3394acf2761f097131a2937bf76ea289950a109c151be687c</td>
|
|
<td>ffa43a10a24d637318d3d1c6ebb365d7d07f5f984314246a36526af6aa3a53343aa37651316b73df074bed4a38d1d9907059867f0607269bc6bc8228ff5652b2</td>
|
|
<td>2025-03-25 05:01:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10e5f469650750c7474b3b69bb70e0bf7e1ba02d7992bf570921d0c38a357b7b</td>
|
|
<td>[68a48674c4cb2500be69263a, 68a48674c4cb2500be69264c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Extensions.Hosting.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Extensions.Hosting.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[cb6f9a8bf1c98f6ab024081679d1d7dc]</td>
|
|
<td>[d7db34cf5d1cc66f246dc58ed82fdbc80e1d07c3]</td>
|
|
<td>[7b08635bfdc2a30c9904b932f1fc620f703c1afaa9a7f35ea3dd5eeb3387f588f15247cc4f384e3d81a6d0009ed8a24c]</td>
|
|
<td>[83583bcb40c37b555e7188a209aa5c8906ba05ed98f0c2df68f25e60f5565b78d81c482091825f76763eb8eac91cc55a8ad140e537ce82b568a3b8110c2c50d8]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Hosting.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>28160</td>
|
|
<td>cb6f9a8bf1c98f6ab024081679d1d7dc</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-09 03:00:30 +0000 UTC</td>
|
|
<td>2021-11-09 03:00:30 +0000 UTC</td>
|
|
<td>d7db34cf5d1cc66f246dc58ed82fdbc80e1d07c3</td>
|
|
<td>7b08635bfdc2a30c9904b932f1fc620f703c1afaa9a7f35ea3dd5eeb3387f588f15247cc4f384e3d81a6d0009ed8a24c</td>
|
|
<td>83583bcb40c37b555e7188a209aa5c8906ba05ed98f0c2df68f25e60f5565b78d81c482091825f76763eb8eac91cc55a8ad140e537ce82b568a3b8110c2c50d8</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-12 11:57:16 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 14:11:01.183 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10d3b4be55b51cd7d75db7a6179ea005060ad250fc67f908a2515511e97f6283</td>
|
|
<td>[68a18f8e881670216ff01e17]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n4vkfj3n.1xw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:15:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_n4vkfj3n.1xw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:15:02 +0000 UTC</td>
|
|
<td>2025-08-17 08:15:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:15:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10b8dc8870d330bca8e2f7ab2a3f366dc0e951964fdaa02fb79a0de8526201b3</td>
|
|
<td>[68a3146b5f0c41860c8c84fd, 68a3146b5f0c41860c8c8548]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\weakref.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[672f5710a5c0e63a57e702f409ba87b5]</td>
|
|
<td>[2c39e50335cb8cfb27988e48cf545ab17dbd2599]</td>
|
|
<td>[97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342]</td>
|
|
<td>[40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>weakref.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>31805</td>
|
|
<td>672f5710a5c0e63a57e702f409ba87b5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2c39e50335cb8cfb27988e48cf545ab17dbd2599</td>
|
|
<td>97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342</td>
|
|
<td>40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10a3a0d4b6d46ed74c59a7536a6da062d226d4e1f28392ce89c30f80ffc9f5c8</td>
|
|
<td>[68a71d98771132224a617f80]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.CommonUtilities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[ac896ef2b30378f9cb5b6ff678c262df]</td>
|
|
<td>[1f6da3f074110b7af3b640f987e8040f2c38c12c]</td>
|
|
<td>[17250bb6cd75fbada14f5b923c642abf4d87ea4e7e8921268d12cfdf61c03c07d10f003b23e16fb3e22b5f65e5b89d89]</td>
|
|
<td>[d697b25e23e0b99d5788ea525c6bd1f375b514ae7bca84157cd3a1127bb752684255f088fc2adf14af6407db6cf480630ef92ed45a8101dfe5b13cdca760c23c]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.CommonUtilities.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.CommonUtilities</td>
|
|
<td>18944</td>
|
|
<td>ac896ef2b30378f9cb5b6ff678c262df</td>
|
|
<td>VideoOS.Mobile.CommonUtilities</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:02:06 +0000 UTC</td>
|
|
<td>2020-05-11 15:02:06 +0000 UTC</td>
|
|
<td>1f6da3f074110b7af3b640f987e8040f2c38c12c</td>
|
|
<td>17250bb6cd75fbada14f5b923c642abf4d87ea4e7e8921268d12cfdf61c03c07d10f003b23e16fb3e22b5f65e5b89d89</td>
|
|
<td>d697b25e23e0b99d5788ea525c6bd1f375b514ae7bca84157cd3a1127bb752684255f088fc2adf14af6407db6cf480630ef92ed45a8101dfe5b13cdca760c23c</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-05-09 06:51:05 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>102efb3c86bcd94bf10deca9e787ba3c1bb2075279317413a85b785fb519c789</td>
|
|
<td>[68a306b93212f6d9ddadcb6e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Npcap\CheckStatus.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T10:55:39Z]</td>
|
|
<td>[ca8a429838083c351839c258679bc264]</td>
|
|
<td>[40e20b9cdde036e5078abc2467e8783dfffec199]</td>
|
|
<td>[3187b73f9f7073d23da97763f887a15d5b101fbbd9fabf04d5ac65e6a65bfda0d07c2eb0ce9a8e715789d78674285146]</td>
|
|
<td>[b8f50791440832d7d469749213c303c9115144112c0631273ec095d2844d01cb62057f406119460069041a6138341d42a7caa0c34a44185dd75e51e2449445f3]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckStatus.bat</td>
|
|
<td>C:\Program Files\Npcap\</td>
|
|
<td></td>
|
|
<td>815</td>
|
|
<td>ca8a429838083c351839c258679bc264</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-08-18 17:49:28 +0000 UTC</td>
|
|
<td>2022-08-18 17:49:28 +0000 UTC</td>
|
|
<td>40e20b9cdde036e5078abc2467e8783dfffec199</td>
|
|
<td>3187b73f9f7073d23da97763f887a15d5b101fbbd9fabf04d5ac65e6a65bfda0d07c2eb0ce9a8e715789d78674285146</td>
|
|
<td>b8f50791440832d7d469749213c303c9115144112c0631273ec095d2844d01cb62057f406119460069041a6138341d42a7caa0c34a44185dd75e51e2449445f3</td>
|
|
<td>2025-03-27 15:30:18 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-07 22:09:02 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 12:45:51.652 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>100ba8a777f29c39bd511d182240d5779f2ec78d48b344c0b32c4af550ab6242</td>
|
|
<td>[68a3b085a65533c1207e5252]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_trmfp0jd.et3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_trmfp0jd.et3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 23:00:14 +0000 UTC</td>
|
|
<td>2025-08-18 23:00:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ffa8ca52df3c1c314eff6938435b63edee719cf8d49e070754f828bf4d9152a</td>
|
|
<td>[68a4864ff17c458cfe4c9f0c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedV_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>["C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-19T14:02:43Z]</td>
|
|
<td>[080059864bbff2e06e9634408e045e62]</td>
|
|
<td>[34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c]</td>
|
|
<td>[1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544]</td>
|
|
<td>[ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.Vision.Watchdog.exe</td>
|
|
<td>C:\Stryker\Stryker Vision\Watchdog\</td>
|
|
<td>Stryker.Vision.Watchdog</td>
|
|
<td>138752</td>
|
|
<td>080059864bbff2e06e9634408e045e62</td>
|
|
<td>Stryker.Vision.Watchdog</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-25 19:13:22 +0000 UTC</td>
|
|
<td>2024-10-25 19:13:22 +0000 UTC</td>
|
|
<td>34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c</td>
|
|
<td>1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544</td>
|
|
<td>ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0</td>
|
|
<td>2025-05-20 14:57:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fc9daa55d2cc3e8f0c62e8d1d0dd9ea8058c1c1607d056e662217dfdc025b3a</td>
|
|
<td>[68a6afe50e0f3bd8deac4cec, 68a6afe50e0f3bd8deac4d21, 68a6afe50e0f3bd8deac4d30, 68a6afe50e0f3bd8deac4d4f, 68a6afe50e0f3bd8deac4d6f, 68a6afe50e0f3bd8deac4d8d, 68a6afe50e0f3bd8deac4daf, 68a6afe50e0f3bd8deac4dcf, 68a6afe50e0f3bd8deac4def, 68a6afe50e0f3bd8deac4e0f, 68a6afe50e0f3bd8deac4e2f, 68a6afe50e0f3bd8deac4e4d, 68a6afe50e0f3bd8deac4e6f, 68a6afe50e0f3bd8deac4e8f, 68a6afe50e0f3bd8deac4ec0, 68a6afe50e0f3bd8deac4ecf, 68a6afe50e0f3bd8deac4eef, 68a6afe50e0f3bd8deac4f0f, 68a6afe50e0f3bd8deac4f2f, 68a6afe50e0f3bd8deac4f59, 68a6afe50e0f3bd8deac4f79, 68a6afe50e0f3bd8deac4f99, 68a6afe50e0f3bd8deac4fb9, 68a6afe50e0f3bd8deac4fd9, 68a6afe50e0f3bd8deac4ff9, 68a6afe50e0f3bd8deac5019, 68a6afe50e0f3bd8deac5039, 68a6afe50e0f3bd8deac5059, 68a6afe50e0f3bd8deac5078, 68a6afe50e0f3bd8deac50a4, 68a6afe50e0f3bd8deac50c1, 68a6afe50e0f3bd8deac50e3, 68a6afe50e0f3bd8deac510d, 68a6afe50e0f3bd8deac512d, 68a6afe50e0f3bd8deac514d, 68a6afe50e0f3bd8deac5177, 68a6afe50e0f3bd8deac5197, 68a6afe50e0f3bd8deac51b7, 68a6afe50e0f3bd8deac51d8, 68a6afe50e0f3bd8deac520a, 68a6afe50e0f3bd8deac5220, 68a6afe50e0f3bd8deac5237, 68a6afe50e0f3bd8deac5258, 68a6afe50e0f3bd8deac528c, 68a6afe50e0f3bd8deac52ab, 68a6afe50e0f3bd8deac52cc, 68a6afe50e0f3bd8deac52ec, 68a6afe50e0f3bd8deac530a, 68a6afe50e0f3bd8deac532c, 68a6afe50e0f3bd8deac534c, 68a6afe50e0f3bd8deac536c, 68a6afe50e0f3bd8deac538c, 68a6afe50e0f3bd8deac5392, 68a6afe50e0f3bd8deac53cd, 68a6afe50e0f3bd8deac53d1, 68a6afe50e0f3bd8deac53f2, 68a6afe50e0f3bd8deac5412, 68a6afe50e0f3bd8deac544c, 68a6afe50e0f3bd8deac5454, 68a6afe50e0f3bd8deac5472, 68a6afe50e0f3bd8deac5491, 68a6afe50e0f3bd8deac54b2, 68a6afe50e0f3bd8deac54d2, 68a6afe50e0f3bd8deac54f1, 68a6afe50e0f3bd8deac5512, 68a6afe50e0f3bd8deac5531, 68a6afe50e0f3bd8deac555c, 68a6afe50e0f3bd8deac557b, 68a6afe50e0f3bd8deac559c, 68a6afe50e0f3bd8deac55bc, 68a6afe50e0f3bd8deac55dc, 68a6afe50e0f3bd8deac55fc, 68a6afe50e0f3bd8deac561c, 68a6afe50e0f3bd8deac5647, 68a6afe50e0f3bd8deac566d, 68a6afe50e0f3bd8deac569a, 68a6afe50e0f3bd8deac56ba, 68a6afe50e0f3bd8deac56f2, 68a6afe50e0f3bd8deac56f9, 68a6afe50e0f3bd8deac5733, 68a6afe50e0f3bd8deac573a, 68a6afe50e0f3bd8deac576d, 68a6afe50e0f3bd8deac578c, 68a6afe50e0f3bd8deac57b3, 68a6afe50e0f3bd8deac57c3, 68a6afe50e0f3bd8deac57ee, 68a6afe50e0f3bd8deac5801, 68a6afe50e0f3bd8deac583b, 68a6afe50e0f3bd8deac5844, 68a6afe50e0f3bd8deac586c, 68a6afe50e0f3bd8deac5881, 68a6afe50e0f3bd8deac58b3, 68a6afe50e0f3bd8deac58c4, 68a6afe50e0f3bd8deac58f3, 68a6afe50e0f3bd8deac591f, 68a6afe50e0f3bd8deac5939, 68a6afe50e0f3bd8deac5944, 68a6afe50e0f3bd8deac5964, 68a6afe50e0f3bd8deac599b, 68a6afe50e0f3bd8deac59a3, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeExtractor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[980a652ea7f8b6002b4f91b97f34af18]</td>
|
|
<td>[4163c04ec897641768a4a942a5485c511ca124d9]</td>
|
|
<td>[a118a969a8481df847bb9970182abf1a99a66466338cf52662a2dab7aeccd78bf38d64986d5069fbf6d426e38f69eae7]</td>
|
|
<td>[525f3ce02f05066c9370961c32f98bd70222a0701e022556262e4ed9a0dd0799246f2dacbb0da3e7623bd5fcce1ab74c9f4c521ab3758696367fdf76c8e927d5]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeExtractor.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>15641600</td>
|
|
<td>980a652ea7f8b6002b4f91b97f34af18</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:42 +0000 UTC</td>
|
|
<td>2023-06-16 03:00:51 +0000 UTC</td>
|
|
<td>4163c04ec897641768a4a942a5485c511ca124d9</td>
|
|
<td>a118a969a8481df847bb9970182abf1a99a66466338cf52662a2dab7aeccd78bf38d64986d5069fbf6d426e38f69eae7</td>
|
|
<td>525f3ce02f05066c9370961c32f98bd70222a0701e022556262e4ed9a0dd0799246f2dacbb0da3e7623bd5fcce1ab74c9f4c521ab3758696367fdf76c8e927d5</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fc35d2d6afaf1ed0ab607443617599e4b74b79171d41700d5e06c9ad5f9704b</td>
|
|
<td>[68a5239e621d09b2b1ed5e46]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfiguration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:32Z]</td>
|
|
<td>[760728e545154c92a8f96402d642c1d5]</td>
|
|
<td>[f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac]</td>
|
|
<td>[226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de]</td>
|
|
<td>[e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringConfiguration.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>34816</td>
|
|
<td>760728e545154c92a8f96402d642c1d5</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac</td>
|
|
<td>226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de</td>
|
|
<td>e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fc2a2df59b98cdead92680cfa9e0e56d54ae7ac3a0aa35470cf25c46702c7c7</td>
|
|
<td>[68a48674c4cb2500be692618, 68a48674c4cb2500be69262e]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.RuleLogic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[30a991d876163681c6baac37e99f0591]</td>
|
|
<td>[bb6e8c432d7c814f1164708197af529f0f4e2dc6]</td>
|
|
<td>[afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71]</td>
|
|
<td>[68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.RuleLogic.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.RuleLogic</td>
|
|
<td>39680</td>
|
|
<td>30a991d876163681c6baac37e99f0591</td>
|
|
<td>StrykerIOTAPI.RuleLogic</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>bb6e8c432d7c814f1164708197af529f0f4e2dc6</td>
|
|
<td>afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71</td>
|
|
<td>68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e2234d3a4ea5751ca873146767f568843a90928bc28eebca49bc165de79973c</td>
|
|
<td>[68a5c9dc84f2b6dc03121e9a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\QS1\191\NRX\191006004NRxH.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[D:\QS1\191\NRX\191006004NRxH.exe D:\QS1\191\NRX -OVERWRITE]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[2025-08-20T13:12:53Z]</td>
|
|
<td>[9c9155b29475b84dbbc5098f01246f2f]</td>
|
|
<td>[bf3a0754517f9135341015a03bad08b95131f4ea]</td>
|
|
<td>[263d503e0726f412b0af9d52322b1b7452fc754c17acf8900ca94f08af0025562240ef7e31c7997e382fe2cca499a387]</td>
|
|
<td>[4d1de78003444e5fab136b6dbd421b7f605be29fa811347ecbb9ad769b70b307922533d3bcfd4fe4185f65b74dd52d66c663738c59cdea2714192ac8db950cf0]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>191006004NRxH.exe</td>
|
|
<td>C:\QS1\191\NRX\</td>
|
|
<td>PKSFX® Command Line for Windows</td>
|
|
<td>43800997</td>
|
|
<td>9c9155b29475b84dbbc5098f01246f2f</td>
|
|
<td>PKSFX® Command Line for Windows</td>
|
|
<td>5, 0, 1, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:15:54 +0000 UTC</td>
|
|
<td>2010-10-07 17:14:31 +0000 UTC</td>
|
|
<td>bf3a0754517f9135341015a03bad08b95131f4ea</td>
|
|
<td>263d503e0726f412b0af9d52322b1b7452fc754c17acf8900ca94f08af0025562240ef7e31c7997e382fe2cca499a387</td>
|
|
<td>4d1de78003444e5fab136b6dbd421b7f605be29fa811347ecbb9ad769b70b307922533d3bcfd4fe4185f65b74dd52d66c663738c59cdea2714192ac8db950cf0</td>
|
|
<td>2025-07-17 16:16:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-05-10 17:30:39 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>3</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.10</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e19b707b0a5789b05e3db108b8aabf5c71f57923dc5713740c29f5684db6a74</td>
|
|
<td>[68a472a799ad3734d804e2f3]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\CmlUiCatalog-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[c46fd5bd0fbfd6d3fd9a4822cd3c5cad]</td>
|
|
<td>[36f6b268c7f15a1cc1c8e8f7560e12acf277d2ec]</td>
|
|
<td>[b1bd05eb9b47fe7766c911a6cb5da077677c150a7855a30c0dedc77857a71c7fc55e085879eb96e909841c58adcb844c]</td>
|
|
<td>[1ab2767e240df8fb19c613a20dae0453589fc052a1282c96221064fbde265257961ce8688a5e4b7b6ffcce30e3b443cabae7218746cc969bfcb4118cf4e63c3d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CmlUiCatalog-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\temp\temp370e6ec670be35ca\content-f6ee56d340fd144d\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>5997</td>
|
|
<td>c46fd5bd0fbfd6d3fd9a4822cd3c5cad</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>2021-12-22 05:39:24 +0000 UTC</td>
|
|
<td>36f6b268c7f15a1cc1c8e8f7560e12acf277d2ec</td>
|
|
<td>b1bd05eb9b47fe7766c911a6cb5da077677c150a7855a30c0dedc77857a71c7fc55e085879eb96e909841c58adcb844c</td>
|
|
<td>1ab2767e240df8fb19c613a20dae0453589fc052a1282c96221064fbde265257961ce8688a5e4b7b6ffcce30e3b443cabae7218746cc969bfcb4118cf4e63c3d</td>
|
|
<td>2025-03-28 16:06:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:49 +0000 UTC</td>
|
|
<td>52</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:03:16.254 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6ded799728a24a6abd426120e7192d1ce5af4ecb86f36f605d703a0aead15a61</td>
|
|
<td>[68a48674c4cb2500be692616, 68a48674c4cb2500be69262c]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.ServiceClient.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[0e468c88955fd864f98ac6f9e1bf50e6]</td>
|
|
<td>[13cc23e673a7d51e2124ba64e5f9f7727687f0d7]</td>
|
|
<td>[795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53]</td>
|
|
<td>[6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.ServiceClient.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.ServiceClient</td>
|
|
<td>23816</td>
|
|
<td>0e468c88955fd864f98ac6f9e1bf50e6</td>
|
|
<td>StrykerIOTAPI.ServiceClient</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>13cc23e673a7d51e2124ba64e5f9f7727687f0d7</td>
|
|
<td>795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53</td>
|
|
<td>6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6db5449ee568c1504716f5fa7c1b074a12100b0a5caca2a5f8a02d090f64a14c</td>
|
|
<td>[68a25fb2e970d941642e7ee3, 68a25fb2e970d941642e7ef0, 68a3b2cf09045b56b2a707bb, 68a3b2cf09045b56b2a707c8, 68a502e12ae1a61fbf4caf19, 68a502e12ae1a61fbf4caf26, 68a65489c4cae84feadc5719, 68a65489c4cae84feadc5726]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\dbatools-maintenance.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[e37e067b3a2afc2e41cd2a1f124f4862]</td>
|
|
<td>[d0f3b393783fe48b1c0d005c2df769a61b68bd28]</td>
|
|
<td>[bd9aa2eed04604544a3f68904dd5dd21c7558b13db16dff726b5da6a81bd6e728455c12ff6891a023bbbfd6677c5bb3d]</td>
|
|
<td>[371899b108dde51205255434ec56a5d8af8a0a8c04410e1e692356c7372da97e69b72a10aab1453df3b9ceb500758a6a5d47833f435cd917e915f39375b3230c]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools-maintenance.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\</td>
|
|
<td></td>
|
|
<td>1802</td>
|
|
<td>e37e067b3a2afc2e41cd2a1f124f4862</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 19:42:26 +0000 UTC</td>
|
|
<td>2023-04-10 15:39:06 +0000 UTC</td>
|
|
<td>d0f3b393783fe48b1c0d005c2df769a61b68bd28</td>
|
|
<td>bd9aa2eed04604544a3f68904dd5dd21c7558b13db16dff726b5da6a81bd6e728455c12ff6891a023bbbfd6677c5bb3d</td>
|
|
<td>371899b108dde51205255434ec56a5d8af8a0a8c04410e1e692356c7372da97e69b72a10aab1453df3b9ceb500758a6a5d47833f435cd917e915f39375b3230c</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-10 17:28:43 +0000 UTC</td>
|
|
<td>60</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d8ddab3bbac620056a40b6be82e5efedfb813709b61851da809e2ccc5fb30b5</td>
|
|
<td>[68a18baf8d4efec2d0bb92e3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nIC-HIC-PRD4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bxygly1j.3u1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:58:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bxygly1j.3u1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:58:38 +0000 UTC</td>
|
|
<td>2025-08-17 07:58:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:58:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d8d84c9c14201674d9a309f51e952cf148ad33cdb66507d9677ebf1b1e4432b</td>
|
|
<td>[68a5c661c3778510bbc82847]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\DataExportService\updater\Serilog.Sinks.File.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[2025-08-20T12:58:06Z]</td>
|
|
<td>[4c2b0737d9a73da09172d3c210b0265d]</td>
|
|
<td>[a35a98ec72154cc1d112f46bd177a7f043dbcd46]</td>
|
|
<td>[b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0]</td>
|
|
<td>[c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.File.dll</td>
|
|
<td>C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>28160</td>
|
|
<td>4c2b0737d9a73da09172d3c210b0265d</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>4.1.0-master-272085f+272085f4c9440e62448b65829ad35cc3dea15ab1</td>
|
|
<td>EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3</td>
|
|
<td>2023-10-20 19:06:01 +0000 UTC</td>
|
|
<td>2023-10-20 19:06:17 +0000 UTC</td>
|
|
<td>a35a98ec72154cc1d112f46bd177a7f043dbcd46</td>
|
|
<td>b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0</td>
|
|
<td>c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8</td>
|
|
<td>2025-03-24 14:02:17 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-28 01:13:07 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 02:18:37.703 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d5608ed1ffe605381b7fdaaa1845f721f1c31c27c74b69df9af47d0294b2894</td>
|
|
<td>[68a1b61f71b0825b526a1d75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oq5zqidg.eti.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:59:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_oq5zqidg.eti.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:59:29 +0000 UTC</td>
|
|
<td>2025-08-17 10:59:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:59:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d17c45fe4e843926f5d2728244f860ec044de86259fef8758dd6b2a69a83cbe</td>
|
|
<td>[68a164af314711b37247c0a2, 68a2b633bc43c5800255e661, 68a408552c9c833f6d66b3fa, 68a559867a66111383e972e5, 68a6ab388907e10b3b3c7b08]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\cg1A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[16212c7d9ea08699f15a1a4746990cdd]</td>
|
|
<td>[5ed1792245fbf6b311b2484bc6a6be49ea35e3d8]</td>
|
|
<td>[5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c]</td>
|
|
<td>[821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\cg1A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>16212c7d9ea08699f15a1a4746990cdd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>5ed1792245fbf6b311b2484bc6a6be49ea35e3d8</td>
|
|
<td>5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c</td>
|
|
<td>821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6c08bc17521b4e491191131a59f6670cea4cfde1602c1e4d68b7d48ade7c0df1</td>
|
|
<td>[68a232f86a75868d4aaa6d01]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zxalxqpu.45h.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:52:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zxalxqpu.45h.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:52:21 +0000 UTC</td>
|
|
<td>2025-08-17 19:52:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:52:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6b423a4e8f11dc5357d1cfa38ee2a42bae87a83126fe3363b4464e5120d33f8c</td>
|
|
<td>[68a472b1b022648922e235a4]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\sqljdbc-4.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[a99205071acbe2709103b971662992e0]</td>
|
|
<td>[ecc4bc5c567954cdd1acd3c5985555c8d0355bb0]</td>
|
|
<td>[c9dd220b83c6838543044a599206f2f9761e3ad9fc177263d2eca7b7274f14f111de6398b3d2886a3baee7f79ec998bb]</td>
|
|
<td>[96b77340e7bb8abfc5c5fc2e61cd3c9b9242f8b75926191b0f1011f7e065e60cb88554e2b3ad58bb8bb2895a39b7524927d6d16121c747f4992368720425c66a]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>sqljdbc-4.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>584207</td>
|
|
<td>a99205071acbe2709103b971662992e0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>ecc4bc5c567954cdd1acd3c5985555c8d0355bb0</td>
|
|
<td>c9dd220b83c6838543044a599206f2f9761e3ad9fc177263d2eca7b7274f14f111de6398b3d2886a3baee7f79ec998bb</td>
|
|
<td>96b77340e7bb8abfc5c5fc2e61cd3c9b9242f8b75926191b0f1011f7e065e60cb88554e2b3ad58bb8bb2895a39b7524927d6d16121c747f4992368720425c66a</td>
|
|
<td>2025-03-28 16:04:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-18 03:00:14 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6af5f698601eccacf6393599b96c9f79eccde18f8449701d812f695e369cda55</td>
|
|
<td>[68a472a799ad3734d804e2e8]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-svggen-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[edc7e4436781ddfae7a7ac39aef7761f]</td>
|
|
<td>[53364380c4fb33ba49ddf25a56852bf405f698df]</td>
|
|
<td>[73ec670565498516b46d93f45abc06014005efc905cd9d5e2dc07f666722aa399b7ed7079dc74762105c4e559bd7cd75]</td>
|
|
<td>[c2519ddbaab53123a5cbfaa04aa388de71996e1af97d51ccf9bb527ca320d7fe3f0d6d0badff4e8138b3b1b0ec3c150a894c9c06c3845318afbc7466395d5565]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-svggen-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>224908</td>
|
|
<td>edc7e4436781ddfae7a7ac39aef7761f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>53364380c4fb33ba49ddf25a56852bf405f698df</td>
|
|
<td>73ec670565498516b46d93f45abc06014005efc905cd9d5e2dc07f666722aa399b7ed7079dc74762105c4e559bd7cd75</td>
|
|
<td>c2519ddbaab53123a5cbfaa04aa388de71996e1af97d51ccf9bb527ca320d7fe3f0d6d0badff4e8138b3b1b0ec3c150a894c9c06c3845318afbc7466395d5565</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-05-10 22:57:55 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6aef072490cee258c32dff646f5e5318c5c7f222116119bcddba3d24ca99c288</td>
|
|
<td>[68a4ac67cfad262556985010]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Assessments\ADAssessment\run.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2278.870]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T16:51:08Z]</td>
|
|
<td>[c07996c3ee2580340e0ef67b322a7cab]</td>
|
|
<td>[0ecd81be989fcff13486833ffe5642dcb8f95d35]</td>
|
|
<td>[b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f]</td>
|
|
<td>[246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>run.cmd</td>
|
|
<td>C:\Assessments\ADAssessment\</td>
|
|
<td></td>
|
|
<td>237</td>
|
|
<td>c07996c3ee2580340e0ef67b322a7cab</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-08 15:51:08 +0000 UTC</td>
|
|
<td>2024-08-08 15:51:08 +0000 UTC</td>
|
|
<td>0ecd81be989fcff13486833ffe5642dcb8f95d35</td>
|
|
<td>b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f</td>
|
|
<td>246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93</td>
|
|
<td>2025-08-12 16:51:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a84610ee0fcaa82f8fc0b8c6799775fae29224adcc09328521c70d36559bb38</td>
|
|
<td>[68a1a6f6ab9b82ca8e55699b, 68a2f7b2b08830f3e9b0f829, 68a4496619bdd82aa6777765, 68a59b0fee561f972b16e39b, 68a6ecd65406f7e7d86b350f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-MICROS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\MICROS\Res\Pos\Scripts\Filemain.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\MICROS\Common\Bin\AutoSeqServ.exe]</td>
|
|
<td>[2025-08-17T09:45:02Z, 2025-08-18T09:45:01Z, 2025-08-19T09:45:02Z, 2025-08-20T09:45:04Z, 2025-08-21T09:45:02Z]</td>
|
|
<td>[d7c8f1b516611d9ca035742a0f006f04]</td>
|
|
<td>[ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe]</td>
|
|
<td>[8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc]</td>
|
|
<td>[78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a]</td>
|
|
<td>[172.17.20.133]</td>
|
|
<td>[172.17.20.133]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Filemain.bat</td>
|
|
<td>C:\MICROS\Res\Pos\Scripts\</td>
|
|
<td></td>
|
|
<td>11724</td>
|
|
<td>d7c8f1b516611d9ca035742a0f006f04</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-05-27 13:50:45 +0000 UTC</td>
|
|
<td>2015-01-16 19:03:22 +0000 UTC</td>
|
|
<td>ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe</td>
|
|
<td>8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc</td>
|
|
<td>78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a</td>
|
|
<td>2025-08-09 09:45:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a246071bce4f1e018078a46114367a68ac47c87a95ccc8d8f67825af57fe2c4</td>
|
|
<td>[68a1d28de9af155194d2aec4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\tmpEXO_fw3fz0us.dhn.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T13:00:51Z]</td>
|
|
<td>[82e97abd23c8de7a9b490694482f33dc]</td>
|
|
<td>[20a7a80fc89ad6ca536270ef77e7995348376274]</td>
|
|
<td>[133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405]</td>
|
|
<td>[e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_fw3fz0us.dhn.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>82e97abd23c8de7a9b490694482f33dc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:00:49 +0000 UTC</td>
|
|
<td>2025-08-17 13:00:49 +0000 UTC</td>
|
|
<td>20a7a80fc89ad6ca536270ef77e7995348376274</td>
|
|
<td>133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405</td>
|
|
<td>e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087</td>
|
|
<td>2025-08-17 13:01:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>69c42d8bdb9d71c6edc7232ef03f0414f57586ec996fe3f892b29bbaa698871f</td>
|
|
<td>[68a306a5ba5832f49fe9cf4b]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\HTMLVPRO.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[2c78a90f451f6c1830050fcda129db9e]</td>
|
|
<td>[8bdbc299064d759e22c575b8e339c82b41a4d44a]</td>
|
|
<td>[7e01c558bf73e2bd7b15315ebd03a13fd2d873e1eccda24bd218e8b378092b9eb137cf2acb6bb8a37ebc450b592de70a]</td>
|
|
<td>[7a585e3e3e2ead2585c3cf1ef23ae8f5369a93a4bcfb9bd33708d447254b4c93d4164470f3be027f742769857fb2f6a90cf38325e95b8090208fcdf67b37626f]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HTMLVPRO.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>FrameViewer</td>
|
|
<td>753664</td>
|
|
<td>2c78a90f451f6c1830050fcda129db9e</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:16 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>8bdbc299064d759e22c575b8e339c82b41a4d44a</td>
|
|
<td>7e01c558bf73e2bd7b15315ebd03a13fd2d873e1eccda24bd218e8b378092b9eb137cf2acb6bb8a37ebc450b592de70a</td>
|
|
<td>7a585e3e3e2ead2585c3cf1ef23ae8f5369a93a4bcfb9bd33708d447254b4c93d4164470f3be027f742769857fb2f6a90cf38325e95b8090208fcdf67b37626f</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:47:04 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>691a1c5b70ebf0b85877f67faa0e3d8ffca23df66e5b70fbc597785a8cc68004</td>
|
|
<td>[68a37d0917e07e4b1ee5b6ea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c0pz0nqf.kwc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2266.863]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:20:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_c0pz0nqf.kwc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:20:32 +0000 UTC</td>
|
|
<td>2025-08-18 19:20:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:20:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7180b610c1b42f95fcc13a2e684b7abefca30b30f8920a27ccc5546e91696361</td>
|
|
<td>[68a3146b5f0c41860c8c853e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\contextlib.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[c7c8787dc599c99b0745a0e0b8518991]</td>
|
|
<td>[31a5f241f37f656cc0bcd1f7e46ecc135a978a6c]</td>
|
|
<td>[8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d]</td>
|
|
<td>[c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>contextlib.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>30502</td>
|
|
<td>c7c8787dc599c99b0745a0e0b8518991</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>31a5f241f37f656cc0bcd1f7e46ecc135a978a6c</td>
|
|
<td>8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d</td>
|
|
<td>c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7180409b727c790197b600295cbeb2a6e0ad6c3847727c639eb7f2cdb0d8498b</td>
|
|
<td>[68a55dba9b5d03e81a1e7635]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bgtryg2w.3id.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:31:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bgtryg2w.3id.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:31:32 +0000 UTC</td>
|
|
<td>2025-08-20 05:31:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:31:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71770e0be96a94f3c36a7f68b4f629cba2a498ad66e8b55508596b9f250fcfff</td>
|
|
<td>[68a48674c4cb2500be69263b, 68a48674c4cb2500be69264d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Extensions.Logging.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Extensions.Logging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[680cea3f3f888a046d8ad7a524259ef1]</td>
|
|
<td>[98851d705ebfe840b979c4390d1e7a369c4aaea9]</td>
|
|
<td>[04d44c4874e0f0fe7716747bd3b1445c99f21621b073804d5ea6eab314e566c1981683435777b7e5e46a2b12546a7d16]</td>
|
|
<td>[ef8526b611c9ad6288549c859acf7f7ec77fc87f3eb2b5d320f0593d035e84fc23e1369c8868844543afa02bc76e59958027ceca29643db6905021efc364d20f]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Logging.dll</td>
|
|
<td>C:\ProgramData\Laurel Bridge Software\Compass\www\</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>17408</td>
|
|
<td>680cea3f3f888a046d8ad7a524259ef1</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>3.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>98851d705ebfe840b979c4390d1e7a369c4aaea9</td>
|
|
<td>04d44c4874e0f0fe7716747bd3b1445c99f21621b073804d5ea6eab314e566c1981683435777b7e5e46a2b12546a7d16</td>
|
|
<td>ef8526b611c9ad6288549c859acf7f7ec77fc87f3eb2b5d320f0593d035e84fc23e1369c8868844543afa02bc76e59958027ceca29643db6905021efc364d20f</td>
|
|
<td>2025-04-29 13:21:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-28 02:19:23 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-28 23:31:35.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7172f9bd46851da2b13c2a4453b256fd0c20124b9ad8e41a0173a7dbe902061f</td>
|
|
<td>[68a3408550f756d180107210]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Garrett]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vp0ubrbu.dgh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:02:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vp0ubrbu.dgh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:02:25 +0000 UTC</td>
|
|
<td>2025-08-18 15:02:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:02:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7141651941e1b1d78a349f0d54ceb767b3846890318b467b8f44fb3d2b5995fe</td>
|
|
<td>[68a1804bf8ae7dd3df476f07]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[VM-ASCNEO]</td>
|
|
<td>[C:\Users\postgres\AppData\Local\Temp\pgaABA6.tmp\2_2.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\pgAgent\bin\pgagent.exe]</td>
|
|
<td>[2025-08-17T07:00:01Z]</td>
|
|
<td>[849739b26d76f1e35ce128f843b7d476]</td>
|
|
<td>[3ba486d6253348b31f0a4eb255c38bc4a311e2ae]</td>
|
|
<td>[52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279]</td>
|
|
<td>[5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>2_2.bat</td>
|
|
<td>C:\Users\postgres\AppData\Local\Temp\pgaA9AB.tmp\</td>
|
|
<td></td>
|
|
<td>53</td>
|
|
<td>849739b26d76f1e35ce128f843b7d476</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-10 07:00:04 +0000 UTC</td>
|
|
<td>2025-08-10 07:00:04 +0000 UTC</td>
|
|
<td>3ba486d6253348b31f0a4eb255c38bc4a311e2ae</td>
|
|
<td>52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279</td>
|
|
<td>5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7</td>
|
|
<td>2025-08-10 07:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>712eb761bd555f0084bd8bd9050466ea7f8ffe721b77f8391d413576ed6b7062</td>
|
|
<td>[68a523a99ba7c92b34976fa1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.DataGrid.v7.0.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:45Z]</td>
|
|
<td>[2527beb82b6d9eac9edb2af8343cb087]</td>
|
|
<td>[f09d5a356a790f551d28d93d202f8c6cda9068b3]</td>
|
|
<td>[4eff932839dae6153a3e616e3c51d55e13f180a9090a9f346a21ec0c07b8853370abc71f14d596f1035040f35861d762]</td>
|
|
<td>[2b0d8601181e786af04c8719a78494e8cf26a1f6edc37763a44ec01e0e532499269a28945e80dda35946a480e3c180f80599e12c60b229342bf9c6c2ba1a8da6]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Xceed.Wpf.DataGrid.v7.0.XmlSerializers.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>359424</td>
|
|
<td>2527beb82b6d9eac9edb2af8343cb087</td>
|
|
<td></td>
|
|
<td>7.0.20452.13100</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>f09d5a356a790f551d28d93d202f8c6cda9068b3</td>
|
|
<td>4eff932839dae6153a3e616e3c51d55e13f180a9090a9f346a21ec0c07b8853370abc71f14d596f1035040f35861d762</td>
|
|
<td>2b0d8601181e786af04c8719a78494e8cf26a1f6edc37763a44ec01e0e532499269a28945e80dda35946a480e3c180f80599e12c60b229342bf9c6c2ba1a8da6</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-12-28 16:34:10 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>70fa7f0aa2feb397597b2785a4bfdb2c9cd36e0edb51f4f0dfe6ac086290ac86</td>
|
|
<td>[68a5c64d54e5003d1abde4c1, 68a5c77e05aa879ada66b41d, 68a5c77e05aa879ada66b423, 68a5c77e05aa879ada66b428, 68a5c77e05aa879ada66b42d, 68a5c77e05aa879ada66b431]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\isrt.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[b35dde51d14f9400e73196693148734e]</td>
|
|
<td>[9410c5268f5558e57d044780d0d5dcc7aa181299]</td>
|
|
<td>[373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde]</td>
|
|
<td>[6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>isrt.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\</td>
|
|
<td>InstallShield (R) RunTime DLL</td>
|
|
<td>208304</td>
|
|
<td>b35dde51d14f9400e73196693148734e</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:15 +0000 UTC</td>
|
|
<td>2006-05-17 14:21:20 +0000 UTC</td>
|
|
<td>9410c5268f5558e57d044780d0d5dcc7aa181299</td>
|
|
<td>373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde</td>
|
|
<td>6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-28 10:02:02 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7090012578e497459ba0272f5f77ea05b908814dd597eb04ecf09d2c66d08c56</td>
|
|
<td>[68a3e79bb5e28efad9fbee2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_188db70f606541b88ee2c950bdac4d70.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T02:55:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_188db70f606541b88ee2c950bdac4d70.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 02:55:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>702e1f3fedd238eb309fa93c899b2ef80102fa2cda74761f3ee41d67d71f0096</td>
|
|
<td>[68a162f2cceea19f4902f63e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lwo31b0u.sz1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:04:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lwo31b0u.sz1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:04:47 +0000 UTC</td>
|
|
<td>2025-08-17 05:04:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:04:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>702d6dfdfaf2bb946405b69f52fb90141a13c247618695af4eb7b4b3e1d4ffe0</td>
|
|
<td>[68a231c276615c5f335cfe2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fdl5e5o.cmj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:47:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3fdl5e5o.cmj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:47:10 +0000 UTC</td>
|
|
<td>2025-08-17 19:47:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:47:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6ff536c7f6ed2e96f08f189984ec0ef5969ec88730b604a463c6cec22e20a9cd</td>
|
|
<td>[68a16bd60756fe54a9918f8c, 68a2149cb58debea69d7c737, 68a2bd5ff793a9057f329bf3, 68a3663261f8067c48423ea5, 68a40efceddb3a9f1a71a5ee, 68a4b7cd36bc5d38057e2353]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\UIBase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[9eedaf27cc28bd73c5ff41c49961872d]</td>
|
|
<td>[6b1abcc8e82fe290522c3bbc48ae7e525aecd356]</td>
|
|
<td>[d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e]</td>
|
|
<td>[318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UIBase.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2006840</td>
|
|
<td>9eedaf27cc28bd73c5ff41c49961872d</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>6b1abcc8e82fe290522c3bbc48ae7e525aecd356</td>
|
|
<td>d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e</td>
|
|
<td>318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:00 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6fa36b743c48152e494d0ab2d1883621817ce58257ffbbc73994241e079bb356</td>
|
|
<td>[68a412e7ad89f01a7d4f2c8f]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_qswudxhc.vas.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-19T06:00:01Z]</td>
|
|
<td>[956c45ce00aedbd67f024fcd9158dab5]</td>
|
|
<td>[742e83c7348f268bad8519de65010e007851121d]</td>
|
|
<td>[1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3]</td>
|
|
<td>[d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qswudxhc.vas.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>956c45ce00aedbd67f024fcd9158dab5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-19 06:00:00 +0000 UTC</td>
|
|
<td>742e83c7348f268bad8519de65010e007851121d</td>
|
|
<td>1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3</td>
|
|
<td>d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3</td>
|
|
<td>2025-08-19 06:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6f05081186843f5328ff157cee06745cd568afada812e17939297cb100b649ef</td>
|
|
<td>[68a306a5ba5832f49fe9cf4a]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STSSCRN.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[f3a991692d902c02f7da0c91d24214b3]</td>
|
|
<td>[7d24236b7815000c3d1a7df5d10ad1969a6bf537]</td>
|
|
<td>[b79fe49b5a77196d9f9f5f43669e1ba3e687f3c885f72ab2a064af21a61760c7b3264eb1a14307c18ec1e8df6f0ecf88]</td>
|
|
<td>[16a84ba52cf9c7cef3579783d6a35ad08551afff82d7f324d8734419c28b2a5e3de9f9c0e1c7bff2d4c31a1e3c346d165cb2ba3fce811ec6fe7bef5ca2049ac9]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STSSCRN.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>f3a991692d902c02f7da0c91d24214b3</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>7d24236b7815000c3d1a7df5d10ad1969a6bf537</td>
|
|
<td>b79fe49b5a77196d9f9f5f43669e1ba3e687f3c885f72ab2a064af21a61760c7b3264eb1a14307c18ec1e8df6f0ecf88</td>
|
|
<td>16a84ba52cf9c7cef3579783d6a35ad08551afff82d7f324d8734419c28b2a5e3de9f9c0e1c7bff2d4c31a1e3c346d165cb2ba3fce811ec6fe7bef5ca2049ac9</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:44:36 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6ea1a88d5fbe3ac232cf791a85dea3d320507a0ad574f14d8e7f8c38243873a8</td>
|
|
<td>[68a1daa4f108115b20f5b273]</td>
|
|
<td>[2]</td>
|
|
<td>[jessie.pennington]</td>
|
|
<td>[PCHBUDGET]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Reboot.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T13:20:37Z]</td>
|
|
<td>[139e7b4e1efe37732f8e7e18c54f6979]</td>
|
|
<td>[80b52606828326f14a72dc07ed56794b859d3b1d]</td>
|
|
<td>[01fdcd22b0edcff6d62f1c8b96dbca5a0562fd18f44a53d354dd5c61352e4bf2350f721bd1384b6459049aca948be9ad]</td>
|
|
<td>[d311001bb9671a0222579ff4f2e7adf7bc563de3e89c8c886164420fa904b04b16f668f89f82956a0285e3bf7370c36c2553b55cfd8910754cb31c6cc5523431]</td>
|
|
<td>[10.20.20.116]</td>
|
|
<td>[10.20.20.116]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Reboot.bat</td>
|
|
<td>C:\</td>
|
|
<td></td>
|
|
<td>11</td>
|
|
<td>139e7b4e1efe37732f8e7e18c54f6979</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-08-13 13:23:09 +0000 UTC</td>
|
|
<td>2018-05-18 13:28:11 +0000 UTC</td>
|
|
<td>80b52606828326f14a72dc07ed56794b859d3b1d</td>
|
|
<td>01fdcd22b0edcff6d62f1c8b96dbca5a0562fd18f44a53d354dd5c61352e4bf2350f721bd1384b6459049aca948be9ad</td>
|
|
<td>d311001bb9671a0222579ff4f2e7adf7bc563de3e89c8c886164420fa904b04b16f668f89f82956a0285e3bf7370c36c2553b55cfd8910754cb31c6cc5523431</td>
|
|
<td>2025-08-10 13:24:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-21 09:45:58 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-10 13:27:54.314 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e9bf94501d732a882f9f6017f1e628d9eec703c87cda857b695201fad5feb4a</td>
|
|
<td>[68a5cc349d52e7a8b7af63d7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Talis\Atlas\temp\SetupDatabase.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:50Z]</td>
|
|
<td>[f45826be75a820fca461e3877f40f93a]</td>
|
|
<td>[a039f338905c85ada621455b1333be17f0bafe4a]</td>
|
|
<td>[7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f]</td>
|
|
<td>[330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SetupDatabase.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>1701</td>
|
|
<td>f45826be75a820fca461e3877f40f93a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:28 +0000 UTC</td>
|
|
<td>a039f338905c85ada621455b1333be17f0bafe4a</td>
|
|
<td>7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f</td>
|
|
<td>330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e99f8aea61200a8607767bebef8dd852f969d2a1801e29360bdca29220d4bf9</td>
|
|
<td>[68a1a186341538f20e730a04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p4dua1rf.kfd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:31:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_p4dua1rf.kfd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:31:41 +0000 UTC</td>
|
|
<td>2025-08-17 09:31:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:31:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7479b24d6a1ad5562f4525b27ae6d7236a46c9933806fb283119ba49a9bcf9f7</td>
|
|
<td>[68a5c8eceb9e7b7716dce1fb, 68a5ca39b5df6e9c598d9a0d, 68a5ca39b5df6e9c598d9a1a, 68a5ccf2ddfdba423e488630, 68a5ccf2ddfdba423e48863e, 68a5ccf2ddfdba423e48864c, 68a5ccf2ddfdba423e488659, 68a5ccf2ddfdba423e488666, 68a5ccf2ddfdba423e488673, 68a5ccf2ddfdba423e488680, 68a5ccf2ddfdba423e48868d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\LegacyFindFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[6cb293f0e74ba4f19582fe8086276969]</td>
|
|
<td>[a5c5cde053bc6283e02ec7837c442eebf7bba8d4]</td>
|
|
<td>[479d5cc855840f17715d9a131b1edc573e4f4daa52d2bd172f1d70052c1ae6121c45df1f6ae6c4efe88c77ce27a0d2a5]</td>
|
|
<td>[8881e108e1e82d02c86792edf7ee26d279211daefb1180ba9b31bc610ee65d5c5bf999b23a35770c7e63101c458db35d020a22615a1827dc0156077378ae9ecc]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LegacyFindFunctions.ps1</td>
|
|
<td>C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>11279</td>
|
|
<td>6cb293f0e74ba4f19582fe8086276969</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-07-08 16:27:52 +0000 UTC</td>
|
|
<td>2024-06-18 17:58:02 +0000 UTC</td>
|
|
<td>a5c5cde053bc6283e02ec7837c442eebf7bba8d4</td>
|
|
<td>479d5cc855840f17715d9a131b1edc573e4f4daa52d2bd172f1d70052c1ae6121c45df1f6ae6c4efe88c77ce27a0d2a5</td>
|
|
<td>8881e108e1e82d02c86792edf7ee26d279211daefb1180ba9b31bc610ee65d5c5bf999b23a35770c7e63101c458db35d020a22615a1827dc0156077378ae9ecc</td>
|
|
<td>2025-04-16 18:42:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:03 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-16 18:46:05.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74793ee7d4de7bcad44804c194370595b3b0d548bfc828c57576582be19bf54b</td>
|
|
<td>[68a1aa799d53099ced8133dc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\highcharts-export-server.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:00Z]</td>
|
|
<td>[3ac81a5a7a9c633b48029c9dc507bd9f]</td>
|
|
<td>[3e480f1ee8bff400c708645833df38ce4fa472fe]</td>
|
|
<td>[90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213]</td>
|
|
<td>[cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>highcharts-export-server.cmd</td>
|
|
<td>C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\</td>
|
|
<td></td>
|
|
<td>305</td>
|
|
<td>3ac81a5a7a9c633b48029c9dc507bd9f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-16 22:42:52 +0000 UTC</td>
|
|
<td>2023-05-16 22:42:52 +0000 UTC</td>
|
|
<td>3e480f1ee8bff400c708645833df38ce4fa472fe</td>
|
|
<td>90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213</td>
|
|
<td>cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4</td>
|
|
<td>2025-08-10 10:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>746001b9638c9979966e0b886bcd72105825eabc5c56d9e94521e8afe83fce98</td>
|
|
<td>[68a16bd60756fe54a9918faa, 68a2149cb58debea69d7c755, 68a2bd5ff793a9057f329c10, 68a3663261f8067c48423ec3, 68a40efceddb3a9f1a71a60c, 68a4b7cd36bc5d38057e2371]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetDiagnostic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[0333571cd1fe94145d29e4f8ee0412b9]</td>
|
|
<td>[0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663]</td>
|
|
<td>[b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958]</td>
|
|
<td>[a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNetDiagnostic.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>240440</td>
|
|
<td>0333571cd1fe94145d29e4f8ee0412b9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663</td>
|
|
<td>b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958</td>
|
|
<td>a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:07:17 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7424614171a04b6aa96afde3f4cd33390212c11fbbbdbd41498fad6d10439c42</td>
|
|
<td>[68a469467f8184e5222e6a4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_3ea4d31ef5e647b2b195425324bab514.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:08:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_3ea4d31ef5e647b2b195425324bab514.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:08:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>738d28284e023240ef65382c74ec40bf9a734d836835c7ef9cb91f97d1fbc3c8</td>
|
|
<td>[68a254df0dd861261676462f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_norjrfd4.bib.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:16:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_norjrfd4.bib.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:16:54 +0000 UTC</td>
|
|
<td>2025-08-17 22:16:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:17:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7344321f0385a0189d641d7a11371524b91327930bb8ebbef2dabd94bdac0ba8</td>
|
|
<td>[68a5c661c3778510bbc82848]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\DataExportService\updater\Serilog.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[2025-08-20T12:58:06Z]</td>
|
|
<td>[5ad091f31cfe9d0e1eb325c09a6440cc]</td>
|
|
<td>[8655ac00f4eb82dd0c9dc632b02642a3240633b9]</td>
|
|
<td>[a242a723070ae019854682215ebe1df8c180de33c75b9f076a9140c1e390f047b9ef481b01c079bd5c84c1904d78428f]</td>
|
|
<td>[0030f47ca6cfc53a0c2038792839e969a7e80a80669b9498b86ce27a34d49b67f530c09e6a20c79ad2e1b5073135edc46cc0665acbb1c9e2327c5d18da0dc1e6]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.dll</td>
|
|
<td>C:\Program Files (x86)\STERIS\SPM Client\</td>
|
|
<td>Serilog</td>
|
|
<td>126464</td>
|
|
<td>5ad091f31cfe9d0e1eb325c09a6440cc</td>
|
|
<td>Serilog</td>
|
|
<td>2.9.0-master-655778f+655778f74384f682d2c8705ab4883c39ef17e44d</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-21 21:49:23 +0000 UTC</td>
|
|
<td>2023-04-21 21:49:23 +0000 UTC</td>
|
|
<td>8655ac00f4eb82dd0c9dc632b02642a3240633b9</td>
|
|
<td>a242a723070ae019854682215ebe1df8c180de33c75b9f076a9140c1e390f047b9ef481b01c079bd5c84c1904d78428f</td>
|
|
<td>0030f47ca6cfc53a0c2038792839e969a7e80a80669b9498b86ce27a34d49b67f530c09e6a20c79ad2e1b5073135edc46cc0665acbb1c9e2327c5d18da0dc1e6</td>
|
|
<td>2025-04-25 13:03:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-28 01:12:55 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-25 04:12:10.57 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>733cd3305f02b6c0121a3e6f3cc04025a974834863f297619ac3721ba9e8745f</td>
|
|
<td>[68a5c64d54e5003d1abde4c3]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_Isuser.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z]</td>
|
|
<td>[c4d66e0d850df2f771743721b5b323cb]</td>
|
|
<td>[f6e1bd2e05df0f6b3601853367db493380ae9630]</td>
|
|
<td>[0537497989908ece1133221738c7cc2e55056962bbe7b55908fa9c87650394b9fc2ca52e9a6106cfab2b0193b45d1cf8]</td>
|
|
<td>[ce374d5cfcdd8dc2ec2375e3a457bf36ee899693662662fc7f0572ef54445ca8456c35725f4c0eae0d95f909610d119f6360533da4dcc42a339d2e73b74a551f]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_Isuser.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\</td>
|
|
<td></td>
|
|
<td>32768</td>
|
|
<td>c4d66e0d850df2f771743721b5b323cb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:57:41 +0000 UTC</td>
|
|
<td>2001-10-30 15:53:24 +0000 UTC</td>
|
|
<td>f6e1bd2e05df0f6b3601853367db493380ae9630</td>
|
|
<td>0537497989908ece1133221738c7cc2e55056962bbe7b55908fa9c87650394b9fc2ca52e9a6106cfab2b0193b45d1cf8</td>
|
|
<td>ce374d5cfcdd8dc2ec2375e3a457bf36ee899693662662fc7f0572ef54445ca8456c35725f4c0eae0d95f909610d119f6360533da4dcc42a339d2e73b74a551f</td>
|
|
<td>2025-08-20 12:57:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-05 23:33:49 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-08-20 13:00:50.983 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>72c74ec16b239cedb3a7a5f49ab164080d8b8d6594d6e7674d47f097fc7b81c3</td>
|
|
<td>[68a2415acd5be3d52d63a10e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_msorr1ae.sew.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_msorr1ae.sew.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:35 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>728f798cb1a5db0a13cf564ccbd4e4c1ff949fc578a23588a73b2e7a40a91f7f</td>
|
|
<td>[68a3146b5f0c41860c8c853d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\fnmatch.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[9fac8a18afd37269810c0599d6381114]</td>
|
|
<td>[c56472c5a615d096fc51a0c8db32ae5c62108803]</td>
|
|
<td>[69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a]</td>
|
|
<td>[7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>fnmatch.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>6810</td>
|
|
<td>9fac8a18afd37269810c0599d6381114</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c56472c5a615d096fc51a0c8db32ae5c62108803</td>
|
|
<td>69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a</td>
|
|
<td>7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7254988b1fc02f7d6881635ab44526a14464e28f16285193d837a2fb007739f8</td>
|
|
<td>[68a5c7657732fa5006a7acf1]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\QAUInst.exe]</td>
|
|
<td>[2025-08-20T13:02:23Z]</td>
|
|
<td>[d77b581d7efc817c18fef21d19a2e5f5]</td>
|
|
<td>[e24e70ce8aa23bb04abbf37ad02411777f6ea6e6]</td>
|
|
<td>[6fa4e922cd998820e0ee1d51bcc3d687e13674432b26303451711e2eb4c859b88bec5812c2b6c83d07a882dee1f15391]</td>
|
|
<td>[e394ce9f9d36ae00d6b6725f9743a5f7fc17a47489dfead1a7bc9ed15011a59429aef1b91dbebd784ba19e502946903610e3618e4ff9beb3bd3dca9aacf138a7]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>1547776</td>
|
|
<td>d77b581d7efc817c18fef21d19a2e5f5</td>
|
|
<td>InstallShield</td>
|
|
<td>29.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:02:23 +0000 UTC</td>
|
|
<td>2025-08-20 13:02:23 +0000 UTC</td>
|
|
<td>e24e70ce8aa23bb04abbf37ad02411777f6ea6e6</td>
|
|
<td>6fa4e922cd998820e0ee1d51bcc3d687e13674432b26303451711e2eb4c859b88bec5812c2b6c83d07a882dee1f15391</td>
|
|
<td>e394ce9f9d36ae00d6b6725f9743a5f7fc17a47489dfead1a7bc9ed15011a59429aef1b91dbebd784ba19e502946903610e3618e4ff9beb3bd3dca9aacf138a7</td>
|
|
<td>2025-08-20 13:02:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-07 13:39:23 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:05:52.276 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>72529d2bf03fe70ef1a26d7095716aa925bbf5f1f8c3c21fc222ec06eb64dc80</td>
|
|
<td>[68a523949cec397f02de9f5a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GeneralMatrix.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[f3ce9038d536f20980ca83185bd3288e]</td>
|
|
<td>[20c9e7b48fb5bc776066e5dc8f99f9ca128b006d]</td>
|
|
<td>[39b600ffc8832eeb79736f5c4811c0961c96c7dbdc1db0a2515fda3a1cd46d14abd4b4c191aef76406512ada6de6e93c]</td>
|
|
<td>[654a9773276a5ed217d30994214164a22c1a9e2b96d6b57a2998026356840d58159df86a6ae2dc8d98dd5b63278052e34fabb0386d59cf79a593931856a0a980]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GeneralMatrix.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>45056</td>
|
|
<td>f3ce9038d536f20980ca83185bd3288e</td>
|
|
<td></td>
|
|
<td>1.0.4254.23916</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>20c9e7b48fb5bc776066e5dc8f99f9ca128b006d</td>
|
|
<td>39b600ffc8832eeb79736f5c4811c0961c96c7dbdc1db0a2515fda3a1cd46d14abd4b4c191aef76406512ada6de6e93c</td>
|
|
<td>654a9773276a5ed217d30994214164a22c1a9e2b96d6b57a2998026356840d58159df86a6ae2dc8d98dd5b63278052e34fabb0386d59cf79a593931856a0a980</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-06-27 08:06:37 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7235dc5de7aef8308483b63e2c5c078a90d095ccd5f3156c2ed9ae89b322c9df</td>
|
|
<td>[68a17c189d49ad1bd9c4b8c8, 68a2cfae9ae51e4be825c7e3, 68a41f348cf879e8d23db673, 68a572add36d57a95b891e67, 68a6c42dc23cc368090acfb2]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[U-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:51:00Z, 2025-08-18T06:51:00Z, 2025-08-19T06:51:01Z, 2025-08-20T06:51:01Z, 2025-08-21T06:51:01Z]</td>
|
|
<td>[0a26ce7cf2e4c02915e778721ce44a21]</td>
|
|
<td>[143b0c534fd3539d647dcfaf6a2d108e43af8314]</td>
|
|
<td>[8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f]</td>
|
|
<td>[c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>userlist.bat</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>236</td>
|
|
<td>0a26ce7cf2e4c02915e778721ce44a21</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-17 13:21:40 +0000 UTC</td>
|
|
<td>2022-05-17 13:21:40 +0000 UTC</td>
|
|
<td>143b0c534fd3539d647dcfaf6a2d108e43af8314</td>
|
|
<td>8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f</td>
|
|
<td>c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>720267c540897db10c2b6a99b7967f86fcf6d1c0f6fb8a4b39422e38f85e9c69</td>
|
|
<td>[68a5239e621d09b2b1ed5e65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Native.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[5136ca4e3d39d8f9ee3870d6cd8e7db3]</td>
|
|
<td>[f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55]</td>
|
|
<td>[44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf]</td>
|
|
<td>[c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.PeCommServices.Native.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.PeCommServices.Native</td>
|
|
<td>34816</td>
|
|
<td>5136ca4e3d39d8f9ee3870d6cd8e7db3</td>
|
|
<td>Stanley.PeCommServices.Native</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:26 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:26 +0000 UTC</td>
|
|
<td>f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55</td>
|
|
<td>44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf</td>
|
|
<td>c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71afc8b3a19c1a3353abcff459034fe52f2c0160cd3f895966e196e237039ebd</td>
|
|
<td>[68a3146b5f0c41860c8c853f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\bz2.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[05c36e3f33744bd410b3b60ff06437b3]</td>
|
|
<td>[3bb9bf5aadd0e412054170f05be2eee25e7dcd09]</td>
|
|
<td>[765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e]</td>
|
|
<td>[657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bz2.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15173</td>
|
|
<td>05c36e3f33744bd410b3b60ff06437b3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>3bb9bf5aadd0e412054170f05be2eee25e7dcd09</td>
|
|
<td>765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e</td>
|
|
<td>657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71aa6db07375df25bd85f56968c13ae408973e021ef00026f759544a629c149c</td>
|
|
<td>[68a164141ed3a862f3f246f5, 68a2b5a2f6e54082fd90f248, 68a40742ca9c58cb5ddb32a1, 68a55680cbba54c28d7a3734, 68a6a823463142474b3bde42]</td>
|
|
<td>[2]</td>
|
|
<td>[bunker2]</td>
|
|
<td>[vm-OSVstats]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\bunker2\Desktop\BackUpZbase.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:23Z, 2025-08-18T05:00:23Z, 2025-08-19T05:00:23Z, 2025-08-20T05:00:23Z, 2025-08-21T05:00:23Z]</td>
|
|
<td>[ff5ef3ef0519c188c726abaf1c67cbfd]</td>
|
|
<td>[0d51e0760c23673c5aa81be4dca18e7ba8f45e22]</td>
|
|
<td>[d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba]</td>
|
|
<td>[5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba]</td>
|
|
<td>[172.17.251.140]</td>
|
|
<td>[172.17.251.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BackUpZbase.bat</td>
|
|
<td>C:\Users\bunker2\Desktop\</td>
|
|
<td></td>
|
|
<td>842</td>
|
|
<td>ff5ef3ef0519c188c726abaf1c67cbfd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-11-19 16:02:09 +0000 UTC</td>
|
|
<td>2019-12-02 16:07:03 +0000 UTC</td>
|
|
<td>0d51e0760c23673c5aa81be4dca18e7ba8f45e22</td>
|
|
<td>d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba</td>
|
|
<td>5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba</td>
|
|
<td>2025-08-09 05:00:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71899528418198443452afbed990e9e5d84f4e2f9b4711e89293c9ca2bc12ca5</td>
|
|
<td>[68a2c20aaafba12a4e8cc590]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mxicw2rz.bqc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:02:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mxicw2rz.bqc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:02:43 +0000 UTC</td>
|
|
<td>2025-08-18 06:02:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:02:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>784d1aa46b8e65a94b7e1aa0313334ae3050be72c0ddad08686af6ddf4687c79</td>
|
|
<td>[68a311cdc2d0d6e3eb77f207]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\ManagedFolderAssistant-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[d70cd1d2313f5bacb6a51a2c0ef09b70]</td>
|
|
<td>[45164857af19d47125730a74732f7630326beac4]</td>
|
|
<td>[be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f]</td>
|
|
<td>[0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ManagedFolderAssistant-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>10816</td>
|
|
<td>d70cd1d2313f5bacb6a51a2c0ef09b70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:57:12 +0000 UTC</td>
|
|
<td>2025-04-02 20:49:07 +0000 UTC</td>
|
|
<td>45164857af19d47125730a74732f7630326beac4</td>
|
|
<td>be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f</td>
|
|
<td>0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7830b20e1f8ae9e230de3156d17e98207f63cd6c63999ef912d40d4e99fb27a3</td>
|
|
<td>[68a311cdc2d0d6e3eb77f216]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-badpasswordsADUserBadPasswords.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[3b8629dc59dc96ce82adf91d1ab03739]</td>
|
|
<td>[7c3f23fa0bcac45de8bb40e38232e839f03eb158]</td>
|
|
<td>[e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2]</td>
|
|
<td>[14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>get-badpasswordsADUserBadPasswords.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>2702</td>
|
|
<td>3b8629dc59dc96ce82adf91d1ab03739</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-13 13:11:22 +0000 UTC</td>
|
|
<td>2025-06-09 20:40:05 +0000 UTC</td>
|
|
<td>7c3f23fa0bcac45de8bb40e38232e839f03eb158</td>
|
|
<td>e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2</td>
|
|
<td>14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7828bc8e30426a75ceff982346b5fe7b1c717029b0896c4cc7c394a40ec314c0</td>
|
|
<td>[68a3146b5f0c41860c8c84ed, 68a3146b5f0c41860c8c854c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\threading.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[40e4a5f923e5816ab2963846fb674c1e]</td>
|
|
<td>[c0d26d50e3483ae5651124f6918939ae692f3a7d]</td>
|
|
<td>[741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732]</td>
|
|
<td>[23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>threading.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>63210</td>
|
|
<td>40e4a5f923e5816ab2963846fb674c1e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c0d26d50e3483ae5651124f6918939ae692f3a7d</td>
|
|
<td>741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732</td>
|
|
<td>23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>77c0199279811333465d5e6a415262894f0b9094771a0107686bddc496a9110a</td>
|
|
<td>[68a514775cfd115be4b8dbd7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:18:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>77222e81cb7004e8c3e077aada02b555a3d38fb05b50c64afd36ca230a8fd5b9</td>
|
|
<td>[68a2a2b145e54eb8011b598f, 68a3f3b82b0ad9191f472697, 68a545ad1588ee149e3e4b0a, 68a6a04ba1132f2e5ae457de]</td>
|
|
<td>[2]</td>
|
|
<td>[jskwv]</td>
|
|
<td>[I-nMoveItXfer]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\MOVEitTransfer\Util\7z.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\MOVEitTransfer\Util\7z.exe]</td>
|
|
<td>[E:\MOVEitTransfer\Scheduler\DMZBackup.exe]</td>
|
|
<td>[2025-08-18T03:39:13Z, 2025-08-19T03:39:19Z, 2025-08-20T03:39:18Z, 2025-08-21T04:20:28Z]</td>
|
|
<td>[4e35a902ca8ed1c3d4551b1a470c4655]</td>
|
|
<td>[ad9a9b5dbe810a6d7ea2c8430c32417d87c5930c]</td>
|
|
<td>[dd80c08d8cb22e3d2592d03c738cf7adb065981e132bdbdd5d6fc60c0d147e7ab213d6eeb8d6eb2a57d5958383cc2ffb]</td>
|
|
<td>[c7966f892c1f81fbe6a2197bd229904d398a299c53c24586ca77f7f657529323e5a7260ed32da9701fce9989b0b9a2463cd45c5a5d77e56a1ea670e02e575a30]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7z.dll</td>
|
|
<td>C:\Program Files\7-Zip\</td>
|
|
<td>7z Plugin</td>
|
|
<td>1841664</td>
|
|
<td>4e35a902ca8ed1c3d4551b1a470c4655</td>
|
|
<td>7-Zip</td>
|
|
<td>23.01</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 18:50:02 +0000 UTC</td>
|
|
<td>2023-06-20 08:00:00 +0000 UTC</td>
|
|
<td>ad9a9b5dbe810a6d7ea2c8430c32417d87c5930c</td>
|
|
<td>dd80c08d8cb22e3d2592d03c738cf7adb065981e132bdbdd5d6fc60c0d147e7ab213d6eeb8d6eb2a57d5958383cc2ffb</td>
|
|
<td>c7966f892c1f81fbe6a2197bd229904d398a299c53c24586ca77f7f657529323e5a7260ed32da9701fce9989b0b9a2463cd45c5a5d77e56a1ea670e02e575a30</td>
|
|
<td>2025-04-11 17:08:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-02 12:10:48 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 17:11:21.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7705512d28fbbbbd6d047b1c60856bd3bc9f14ce39412ebd16be6b72d8bf5f7e</td>
|
|
<td>[68a3439c162cd6949b8bf655]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nsdprodconn1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cncncost.gsu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.856]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:15:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cncncost.gsu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:15:34 +0000 UTC</td>
|
|
<td>2025-08-18 15:15:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:15:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>766f9eeacde29ca3ebe85d8d233775dc8acba7a244dd24bc13896ec23d8c2c84</td>
|
|
<td>[68a48674c4cb2500be69260d, 68a48674c4cb2500be692623]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Logging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[1b4f4c9db2726c138f5ab17aaecd4d45]</td>
|
|
<td>[a35c56b96b73ff7667988001ac1b4a57ac024b9e]</td>
|
|
<td>[f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999]</td>
|
|
<td>[0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Logging.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>29448</td>
|
|
<td>1b4f4c9db2726c138f5ab17aaecd4d45</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>3.1.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-02 02:38:50 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>a35c56b96b73ff7667988001ac1b4a57ac024b9e</td>
|
|
<td>f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999</td>
|
|
<td>0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>76283fd44fdfd57f2619c0500a5c01ea6d5d7e14f96aa204a9734e25a78f4231</td>
|
|
<td>[68a472b1b022648922e23596]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mdnsjava-spi-2.2.0-b4.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[f8795e2b648b09970facf334b5196ddb]</td>
|
|
<td>[d4c0212e3adb724b53838dcfbe508c68b791e454]</td>
|
|
<td>[6984e0b8142de518754a9a45dafed6aed31f0253209ac9c7e1503d7ff30a3912a36d09c21340ff9da9a929d35957eecf]</td>
|
|
<td>[286b3bcce3ed11839fb63172c0f8a416607fd8fc8e5335eef92533c62bdc7ab85d8767b612b04fb62c1993908c4c946018d1ea42172b283647090c483a91f10e]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mdnsjava-spi-2.2.0-b4.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\posick\mDNS\main\</td>
|
|
<td></td>
|
|
<td>10412</td>
|
|
<td>f8795e2b648b09970facf334b5196ddb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:13 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>d4c0212e3adb724b53838dcfbe508c68b791e454</td>
|
|
<td>6984e0b8142de518754a9a45dafed6aed31f0253209ac9c7e1503d7ff30a3912a36d09c21340ff9da9a929d35957eecf</td>
|
|
<td>286b3bcce3ed11839fb63172c0f8a416607fd8fc8e5335eef92533c62bdc7ab85d8767b612b04fb62c1993908c4c946018d1ea42172b283647090c483a91f10e</td>
|
|
<td>2025-03-28 16:07:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:28:34.137 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>755edeaf25a424b1e2540116cb002ded313b73da1f426ac79c380a0f5a47d692</td>
|
|
<td>[68a3146b5f0c41860c8c8534, 68a3146b5f0c41860c8c8570]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\iterators.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[94d122a5aa89600a9822e6eecac2470a]</td>
|
|
<td>[b47d3670867d1edf3170e1871f654699ccdd6558]</td>
|
|
<td>[b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1]</td>
|
|
<td>[9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>iterators.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>2824</td>
|
|
<td>94d122a5aa89600a9822e6eecac2470a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>b47d3670867d1edf3170e1871f654699ccdd6558</td>
|
|
<td>b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1</td>
|
|
<td>9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74fe5996cba2af0f0d12f3dcb6c8a80a977bd795b4f37f0c62631dd542d77dcb</td>
|
|
<td>[68a4b0fb13fac5171eeef0d5]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.CustomControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:07Z]</td>
|
|
<td>[6f4525a325cda08abf1b18a472526ee3]</td>
|
|
<td>[9171e03c1c96b37f539557128a1c32d0d71c9dcf]</td>
|
|
<td>[b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2]</td>
|
|
<td>[1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.CustomControls.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.CustomControls</td>
|
|
<td>214528</td>
|
|
<td>6f4525a325cda08abf1b18a472526ee3</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:35 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:58 +0000 UTC</td>
|
|
<td>9171e03c1c96b37f539557128a1c32d0d71c9dcf</td>
|
|
<td>b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2</td>
|
|
<td>1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74f63a755ad1b7cc7ffdbd4d457a311b5fc3c773dc37766c345f749219f527b2</td>
|
|
<td>[68a25fb2e970d941642e7ee4, 68a25fb2e970d941642e7ef1, 68a3b2cf09045b56b2a707bc, 68a3b2cf09045b56b2a707c9, 68a502e12ae1a61fbf4caf1a, 68a502e12ae1a61fbf4caf27, 68a65489c4cae84feadc571a, 68a65489c4cae84feadc5727]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\type-extensions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:12Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[838211c05894e640796e49104f1b37a4]</td>
|
|
<td>[fbcc36198fa33af6404259160ffc57cf8a604f22]</td>
|
|
<td>[b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810]</td>
|
|
<td>[6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>type-extensions.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\</td>
|
|
<td></td>
|
|
<td>13106</td>
|
|
<td>838211c05894e640796e49104f1b37a4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:23 +0000 UTC</td>
|
|
<td>2024-03-16 13:33:46 +0000 UTC</td>
|
|
<td>fbcc36198fa33af6404259160ffc57cf8a604f22</td>
|
|
<td>b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810</td>
|
|
<td>6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-24 17:17:27 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74e7f5f7c92b26fd056281c791dafc0adc825c46f2be2bb409bc724a5d999be6</td>
|
|
<td>[68a2736e6af8de2f97a7ad5a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_acpxurdw.4re.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:27:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_acpxurdw.4re.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:27:16 +0000 UTC</td>
|
|
<td>2025-08-18 00:27:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:27:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2</td>
|
|
<td>[68a472b1b022648922e23581]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jackson-mapper-asl-1.9.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[1750f9c339352fc4b728d61b57171613]</td>
|
|
<td>[1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7]</td>
|
|
<td>[d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c]</td>
|
|
<td>[81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jackson-mapper-asl-1.9.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>780664</td>
|
|
<td>1750f9c339352fc4b728d61b57171613</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7</td>
|
|
<td>d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c</td>
|
|
<td>81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-18 09:17:01 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 12:40:40.528 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74b304758f2740e15c3cb9527df68a81ff9e28e90445ec205bf348877535259f</td>
|
|
<td>[68a523949cec397f02de9f54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[f3bffbe05c98add2b7078000a29f5e76]</td>
|
|
<td>[8fa6ea825802a4c5104ab136854f7134874d2a56]</td>
|
|
<td>[0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19]</td>
|
|
<td>[537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>120320</td>
|
|
<td>f3bffbe05c98add2b7078000a29f5e76</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>8fa6ea825802a4c5104ab136854f7134874d2a56</td>
|
|
<td>0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19</td>
|
|
<td>537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>749002e7e2d66cbc153077e70ef99bab1f03c4286b5e508ae413f4c53fbcb560</td>
|
|
<td>[68a2a5a1b819e527e88aea78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zaxf5awj.to1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:01:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zaxf5awj.to1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:01:34 +0000 UTC</td>
|
|
<td>2025-08-18 04:01:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:01:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>747a834bd4231d3cf7fa52e9313d5c65887b64533d4b8f563ab5f72357aae059</td>
|
|
<td>[68a2410ae6d83d3b939c50d9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tftt2g0n.emh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:52:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tftt2g0n.emh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:52:12 +0000 UTC</td>
|
|
<td>2025-08-17 20:52:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:52:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7cf57e422ac38f42c9017cfab4d88db4ae05235fce256c7644a8a98995f37bd9</td>
|
|
<td>[68a306a5ba5832f49fe9cf4d]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\POPUPCMP.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[4a6982ceaddf680df01c15c77e8eb3d9]</td>
|
|
<td>[b56a9d6e11c88e98c291efcac69b22c66985f050]</td>
|
|
<td>[bfa2345c4c9e7a6f0d65b33ef8e4fdefb8c43c7b5f627320094e8a78ced3d0da1ac20bd329de8a7456043f3caac08e8e]</td>
|
|
<td>[ac9764932de79a099562304da7ca017ef47b56ba2ff3fc50434d7b1d1c7622c1c26d5144c1de7ed055978998632f5e26bd8727ca00dc16ba551eabc1b81d259e]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>POPUPCMP.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>125440</td>
|
|
<td>4a6982ceaddf680df01c15c77e8eb3d9</td>
|
|
<td></td>
|
|
<td>1.12.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:24 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>b56a9d6e11c88e98c291efcac69b22c66985f050</td>
|
|
<td>bfa2345c4c9e7a6f0d65b33ef8e4fdefb8c43c7b5f627320094e8a78ced3d0da1ac20bd329de8a7456043f3caac08e8e</td>
|
|
<td>ac9764932de79a099562304da7ca017ef47b56ba2ff3fc50434d7b1d1c7622c1c26d5144c1de7ed055978998632f5e26bd8727ca00dc16ba551eabc1b81d259e</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 05:02:20 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7cc7c1291b2e252bcb756546657d8c00c4f79ca981f28ce37f5c8078a65132d8</td>
|
|
<td>[68a3146b5f0c41860c8c8509, 68a3146b5f0c41860c8c855c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\urllib\__pycache__\parse.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[a500c0a77b51df437e5212a3ccbbca4a]</td>
|
|
<td>[d8ed3a2e9e061f636a16798d3b66602754a5208d]</td>
|
|
<td>[369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0]</td>
|
|
<td>[8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>parse.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\urllib\__pycache__\</td>
|
|
<td></td>
|
|
<td>50297</td>
|
|
<td>a500c0a77b51df437e5212a3ccbbca4a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>d8ed3a2e9e061f636a16798d3b66602754a5208d</td>
|
|
<td>369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0</td>
|
|
<td>8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7c44f6e2dd5bec1edbd6982fb1e01986327ed9ad9e1ab078d43137cf5358e261</td>
|
|
<td>[68a3505955becb8a0ff1a792]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCGChaSdb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Affymetrix\dbcleanup\del30d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T16:00:01Z]</td>
|
|
<td>[2abe380b66aaa9644c02efe64b7ec488]</td>
|
|
<td>[d4f82f9d40f820fb58a6fd075507ec36fcb8a897]</td>
|
|
<td>[4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff]</td>
|
|
<td>[2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>del30d.ps1</td>
|
|
<td>C:\Affymetrix\dbcleanup\</td>
|
|
<td></td>
|
|
<td>153</td>
|
|
<td>2abe380b66aaa9644c02efe64b7ec488</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-02 19:44:08 +0000 UTC</td>
|
|
<td>2024-10-02 19:50:57 +0000 UTC</td>
|
|
<td>d4f82f9d40f820fb58a6fd075507ec36fcb8a897</td>
|
|
<td>4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff</td>
|
|
<td>2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa</td>
|
|
<td>2025-08-11 16:00:12 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b997c3cc74d393501497378b3f9012e85446d45990a040bee7862fa2d512520</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21d]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Set-MSOLUser-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[64c78cb84a34c1aac1f9040f9b3fa98c]</td>
|
|
<td>[5412398356155b4fa91298e55f818b7817fac6b1]</td>
|
|
<td>[843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb]</td>
|
|
<td>[b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Set-MSOLUser-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>5935</td>
|
|
<td>64c78cb84a34c1aac1f9040f9b3fa98c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-08 16:20:08 +0000 UTC</td>
|
|
<td>2025-08-08 16:20:13 +0000 UTC</td>
|
|
<td>5412398356155b4fa91298e55f818b7817fac6b1</td>
|
|
<td>843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb</td>
|
|
<td>b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b91d127ab813bedce31cf44c9d0bb338d1e5dbb7c4d88a4a5f9596cb927c7f6</td>
|
|
<td>[68a5cc2ad273577648d7017b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:44Z]</td>
|
|
<td>[8afad2ba62831ccf1afb549e35a2b1bf]</td>
|
|
<td>[2446f2b1eb95bb93555f1a32943d542757ac10ae]</td>
|
|
<td>[7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1]</td>
|
|
<td>[50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>854</td>
|
|
<td>8afad2ba62831ccf1afb549e35a2b1bf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:44 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:44 +0000 UTC</td>
|
|
<td>2446f2b1eb95bb93555f1a32943d542757ac10ae</td>
|
|
<td>7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1</td>
|
|
<td>50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b2434ec93f042d8373bd3cf763874ab9c43420543ed120001278db17adf9da6</td>
|
|
<td>[68a37f25e0879ae8dffd5e04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2ivls3f0.sja.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:29:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2ivls3f0.sja.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:29:36 +0000 UTC</td>
|
|
<td>2025-08-18 19:29:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:29:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b161486f98073b5ca3ae0e3e7f27c8f566ab06f8ad799373d2e403cc733db20</td>
|
|
<td>[68a4ccc785b914a60d739e4e, 68a4ce1fc826337212f53beb, 68a4d07753a851daf11e6936, 68a4d07753a851daf11e694b, 68a4d2d1ff2b441b8442812e, 68a4d2d1ff2b441b84428143]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\NamedCapture.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[13d4e8065c076cc03ca0b66f2f009cb2]</td>
|
|
<td>[08256197d2405a47f7154f36728228bb13613f5e]</td>
|
|
<td>[57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c]</td>
|
|
<td>[019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NamedCapture.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\</td>
|
|
<td></td>
|
|
<td>12288</td>
|
|
<td>13d4e8065c076cc03ca0b66f2f009cb2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:46 +0000 UTC</td>
|
|
<td>08256197d2405a47f7154f36728228bb13613f5e</td>
|
|
<td>57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c</td>
|
|
<td>019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7a24379c01420760711ad0a08f28f46d6a397601f0b51a4e48b96cffa037dd01</td>
|
|
<td>[68a34b98a6132bf659cce5c5, 68a34df0b71eea1289980a2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataExchange.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:46Z, 2025-08-18T15:58:46Z]</td>
|
|
<td>[50ea916f234c0715695ee3289f2ed436]</td>
|
|
<td>[6a0449cf6f27497d7e3e65c86b275f6b5775f3cc]</td>
|
|
<td>[3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf]</td>
|
|
<td>[a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.DataExchange.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Data Exchange Packages</td>
|
|
<td>1126912</td>
|
|
<td>50ea916f234c0715695ee3289f2ed436</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:08 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:08 +0000 UTC</td>
|
|
<td>6a0449cf6f27497d7e3e65c86b275f6b5775f3cc</td>
|
|
<td>3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf</td>
|
|
<td>a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7a036e3a324a555202141726993e8c9be46eae5d5025047d59729b1179f3e30a</td>
|
|
<td>[68a1590fe3d1de03981d3cb9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1yfzzf3t.n2s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:22:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1yfzzf3t.n2s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:22:31 +0000 UTC</td>
|
|
<td>2025-08-17 04:22:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:22:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>79ee9c9c5f8d352a018fdbfcf7a6b43bd929f0d2fb548332fb4b3eb59bc5a180</td>
|
|
<td>[68a166cbe2103169f36aaa4c, 68a2b85683c75b2a7728df23, 68a409fc2e5c970cd67b61bc, 68a55b98a62710d4188bf96a, 68a6adaea7a15af4366099af]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\CBORDEOD.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:15:01Z, 2025-08-18T05:15:01Z, 2025-08-19T05:15:01Z, 2025-08-20T05:15:01Z, 2025-08-21T05:15:01Z]</td>
|
|
<td>[d1f95b9724125a1c5f984fb1d1bc62d8]</td>
|
|
<td>[be6d615c8334ff3e05fd27e3343f643770bf2e1f]</td>
|
|
<td>[543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b]</td>
|
|
<td>[121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CBORDEOD.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>1923</td>
|
|
<td>d1f95b9724125a1c5f984fb1d1bc62d8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-08-07 19:56:21 +0000 UTC</td>
|
|
<td>2018-08-07 19:57:34 +0000 UTC</td>
|
|
<td>be6d615c8334ff3e05fd27e3343f643770bf2e1f</td>
|
|
<td>543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b</td>
|
|
<td>121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700</td>
|
|
<td>2025-08-09 05:15:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>79464f4def37e5ba9e14652ce241f8f4ec97e70a54e49a0b13962298d861da62</td>
|
|
<td>[68a1f536f0fc96497865c3dc]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[i-nnvrpms]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_u4u2h52q.o3j.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T15:28:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.112]</td>
|
|
<td>[172.17.251.112]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_u4u2h52q.o3j.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:28:42 +0000 UTC</td>
|
|
<td>2025-08-17 15:28:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:28:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7914a284be2811ffbc318ac97a2f6c21a503fadfcb460e81828ca0551dac35c0</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20a]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\PasswordExpirationDate.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[714d7d166b1ea948977b99df67d8c1b3]</td>
|
|
<td>[aa5398703aefacd2b30922cfda05af62e8343765]</td>
|
|
<td>[d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b]</td>
|
|
<td>[343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PasswordExpirationDate.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>1386</td>
|
|
<td>714d7d166b1ea948977b99df67d8c1b3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2025-04-29 12:08:30 +0000 UTC</td>
|
|
<td>aa5398703aefacd2b30922cfda05af62e8343765</td>
|
|
<td>d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b</td>
|
|
<td>343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>790685b721f1c02822e2c39c904ab990c088e6bf2934eacf9869129b18b201a7</td>
|
|
<td>[68a4d180b5900ae066920596]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:10Z]</td>
|
|
<td>[56c6d95ae5e68a0aa0da6568a48cd047]</td>
|
|
<td>[dcbd5930f6e52a715078f6ae99900819b3d5d1c3]</td>
|
|
<td>[ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72]</td>
|
|
<td>[0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>2786</td>
|
|
<td>56c6d95ae5e68a0aa0da6568a48cd047</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:33:06 +0000 UTC</td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>dcbd5930f6e52a715078f6ae99900819b3d5d1c3</td>
|
|
<td>ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72</td>
|
|
<td>0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f</td>
|
|
<td>2025-08-19 19:33:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>78ff80c56cd05df151c06670f6d96dcd5c6ee72ca66bcc647a12f9d7814c3408</td>
|
|
<td>[68a1a83ff1b55f2ff337408c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:00:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>78ea84d1d8dce7c6aa98d780ca6d76471088ad619f5f2af500c937960d19dd2d</td>
|
|
<td>[68a523949cec397f02de9f4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Caliburn.Micro.Platform.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[100db51fbb7d610e6d04f9a0f4ed277f]</td>
|
|
<td>[70961916a18a282844edf0140d0ae353fbd8f111]</td>
|
|
<td>[c929634b793eb4d8fbf319037bbdee03d2a1ff937a11895888c1ec43e2d1f63fcce4b50f533a69078b9985103d119528]</td>
|
|
<td>[919c6b4858ae8fd889fca7eaac317e88a42ea657f122254d2abc5ed706496cdf8f04b191cd621b7830127fe520978446751feb3a2de95497b5bff755efdf2a5d]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Caliburn.Micro.Platform.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Caliburn Micro Platform</td>
|
|
<td>83968</td>
|
|
<td>100db51fbb7d610e6d04f9a0f4ed277f</td>
|
|
<td>Caliburn.Micro</td>
|
|
<td>2.0.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:26 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:26 +0000 UTC</td>
|
|
<td>70961916a18a282844edf0140d0ae353fbd8f111</td>
|
|
<td>c929634b793eb4d8fbf319037bbdee03d2a1ff937a11895888c1ec43e2d1f63fcce4b50f533a69078b9985103d119528</td>
|
|
<td>919c6b4858ae8fd889fca7eaac317e88a42ea657f122254d2abc5ed706496cdf8f04b191cd621b7830127fe520978446751feb3a2de95497b5bff755efdf2a5d</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-02-15 14:03:11 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af</td>
|
|
<td>[68a72d39787594c630b4edf2]</td>
|
|
<td>[2]</td>
|
|
<td>[sk10219sa]</td>
|
|
<td>[n-sktartarus]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\sk10219sa\AppData\Local\Temp\2\nss2F7A.tmp\System.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\Notepad++Portable\Notepad++Portable.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T14:23:05Z]</td>
|
|
<td>[bf712f32249029466fa86756f5546950]</td>
|
|
<td>[75ac4dc4808ac148ddd78f6b89a51afbd4091c2e]</td>
|
|
<td>[d72ed7f5cc1073dde684e416e2edc388d61996455a930b2c909e6baa3e9bde67bb87fc81e47090349629a68668b30208]</td>
|
|
<td>[13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>System.dll</td>
|
|
<td>C:\Users\SVC_SL_Heartbase\AppData\Local\Temp\14\nsiB7FC.tmp\</td>
|
|
<td></td>
|
|
<td>11264</td>
|
|
<td>bf712f32249029466fa86756f5546950</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-16 13:12:27 +0000 UTC</td>
|
|
<td>2025-05-16 13:12:27 +0000 UTC</td>
|
|
<td>75ac4dc4808ac148ddd78f6b89a51afbd4091c2e</td>
|
|
<td>d72ed7f5cc1073dde684e416e2edc388d61996455a930b2c909e6baa3e9bde67bb87fc81e47090349629a68668b30208</td>
|
|
<td>13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4</td>
|
|
<td>2025-05-16 13:12:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-13 00:19:16 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-16 03:11:30.728 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f1c7a6dd39bd07d8bb63423b0a1a20c1a21ad1049160828ab2d4526e49937ec</td>
|
|
<td>[68a3209bdb4bb30ce9fad5ab]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\aigevikz\aigevikz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>aigevikz.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\aigevikz\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:46:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7ee90d2d178643fa86a91c933bb12080aad0ea0b7399ef08f6045a4841c54372</td>
|
|
<td>[68a3146b5f0c41860c8c8521]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\getopt.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z]</td>
|
|
<td>[36b1336ce751d7a3a4f98ed3688bd5b8]</td>
|
|
<td>[4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc]</td>
|
|
<td>[864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc]</td>
|
|
<td>[1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>getopt.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>8470</td>
|
|
<td>36b1336ce751d7a3a4f98ed3688bd5b8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 22:08:49 +0000 UTC</td>
|
|
<td>2024-11-22 22:08:49 +0000 UTC</td>
|
|
<td>4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc</td>
|
|
<td>864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc</td>
|
|
<td>1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7ea93b4fc21f3d05ed224b168a025f864db75ddfddc2343e1ec29a386d7501e0</td>
|
|
<td>[68a472b1b022648922e23592]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\logkit-1.0.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[32240100a5c15d53f00392fae4b0aab7]</td>
|
|
<td>[aaf5649b523c5ffc925e746074979150bb74bfdc]</td>
|
|
<td>[4b9d12b3f64a98e7a67d13f267be802868451a3fd37078f55b00a3e9a98649483af908061ba960a1864abbd73273bcb2]</td>
|
|
<td>[0983fdb8875495d5f5e6c18ed78140134b9987d2a1c73ead1a973a97556cbe0993448c91f4656525a035b50aeb113d3e47eac9518472b92fcb9183299024535d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>logkit-1.0.1.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>72150</td>
|
|
<td>32240100a5c15d53f00392fae4b0aab7</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>aaf5649b523c5ffc925e746074979150bb74bfdc</td>
|
|
<td>4b9d12b3f64a98e7a67d13f267be802868451a3fd37078f55b00a3e9a98649483af908061ba960a1864abbd73273bcb2</td>
|
|
<td>0983fdb8875495d5f5e6c18ed78140134b9987d2a1c73ead1a973a97556cbe0993448c91f4656525a035b50aeb113d3e47eac9518472b92fcb9183299024535d</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-07-16 03:42:19 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e88c063db7d11cc81424ad3a0b79439a708466a41d2515d39f435460a90ac6f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f214]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[04134a765a6766b8ccc33ab7b76c6484]</td>
|
|
<td>[a05c6df7ded795af80ad78b3109bf6c2456c4cf4]</td>
|
|
<td>[e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19]</td>
|
|
<td>[6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GP-Result.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>549</td>
|
|
<td>04134a765a6766b8ccc33ab7b76c6484</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2021-07-15 21:19:57 +0000 UTC</td>
|
|
<td>a05c6df7ded795af80ad78b3109bf6c2456c4cf4</td>
|
|
<td>e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19</td>
|
|
<td>6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e758ba1138fda4c2f6fe3d1dbf13865768509733a2b21297cb1854cdb41c3eb</td>
|
|
<td>[68a1e01c3977fb58c6e176eb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mksrzrw0.jcw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:58:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mksrzrw0.jcw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:58:47 +0000 UTC</td>
|
|
<td>2025-08-17 13:58:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:58:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e5ec9321797b7625a95073957004b3dbf6bb68dbe150739d70c989bd0fc30d4</td>
|
|
<td>[68a2055f52291ed98e81a02b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-Datsun]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ywzhivlf.tki.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T16:37:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ywzhivlf.tki.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 16:37:42 +0000 UTC</td>
|
|
<td>2025-08-17 16:37:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 16:37:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e17cb2b9e2e5ac4b1f09011ecbbaf0650c23af74a9e04bc8e97cab19aa4e77c</td>
|
|
<td>[68a33f3383e5334c1360eeb1]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_4ixogztp.vvu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\RuntimeBroker.exe]</td>
|
|
<td>[2025-08-18T14:56:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4ixogztp.vvu.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:56:41 +0000 UTC</td>
|
|
<td>2025-08-18 14:56:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:56:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e0882a76f59ed7dfc50b00936cc59d70148553daededad2c7f5423314e503a8</td>
|
|
<td>[68a472b1b022648922e23594]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mariadb-java-client-2.6.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[eed38aea7aa8cdda688482f0fccb9654]</td>
|
|
<td>[7ada3fc7b30ae8fa4616f47ef6d505bdda933605]</td>
|
|
<td>[c58e0134c6a0233ff5adeb0f802b62c1a167129249b60632f7534b3c634204ddb1c165009fb6b1fe8b4bf86abd60656f]</td>
|
|
<td>[de7d72879ea70bdb35ff3f48f52d0634c304560c81fd59a3a0260b781a0029c84bc3195dc7d06c355b55c11729abc2ec4995a555cf09b282c61947a8fde230e9]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mariadb-java-client-2.6.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>619873</td>
|
|
<td>eed38aea7aa8cdda688482f0fccb9654</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>7ada3fc7b30ae8fa4616f47ef6d505bdda933605</td>
|
|
<td>c58e0134c6a0233ff5adeb0f802b62c1a167129249b60632f7534b3c634204ddb1c165009fb6b1fe8b4bf86abd60656f</td>
|
|
<td>de7d72879ea70bdb35ff3f48f52d0634c304560c81fd59a3a0260b781a0029c84bc3195dc7d06c355b55c11729abc2ec4995a555cf09b282c61947a8fde230e9</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-11-26 10:10:29 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7dc13844e4547fa30201c20b6d74c6793d5b991668bded176f8162b00a211d55</td>
|
|
<td>[68a472b1b022648922e235a9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\streambuffer-1.5.4.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[7950b1c391083448c8db4e5d574953c2]</td>
|
|
<td>[fa88707c78bb5f1e5dff5149622625acaa9c6682]</td>
|
|
<td>[5335b13c467658fbf5abe24147b17babbad914367fe30610f5102648b81dbd0ba5776d6afa47c6d1bf8aa43837441639]</td>
|
|
<td>[3db8ba0e67cf09bb1904fbfb9cc0be55df203295d194d6d5a5617357f51ee7adf374d6103e5a238cb7cf6211fd0142bce0855bec6d862f691f5ee1ff3caf6e1a]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>streambuffer-1.5.4.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\streambuffer-1.5.4.jar-54116a8f49fa6e4d\</td>
|
|
<td></td>
|
|
<td>68619</td>
|
|
<td>7950b1c391083448c8db4e5d574953c2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:15 +0000 UTC</td>
|
|
<td>fa88707c78bb5f1e5dff5149622625acaa9c6682</td>
|
|
<td>5335b13c467658fbf5abe24147b17babbad914367fe30610f5102648b81dbd0ba5776d6afa47c6d1bf8aa43837441639</td>
|
|
<td>3db8ba0e67cf09bb1904fbfb9cc0be55df203295d194d6d5a5617357f51ee7adf374d6103e5a238cb7cf6211fd0142bce0855bec6d862f691f5ee1ff3caf6e1a</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-05 22:12:51 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d974abbff9ea70a534d75c24d021d96fc2d36fbef86539a7c32df8e99f11e9f</td>
|
|
<td>[68a3146b5f0c41860c8c8543]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\tempfile.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[7ab5aff3fa2b1f285db5557e42243465]</td>
|
|
<td>[ddfb6e39237347e33458183d7540eeef606d7ef9]</td>
|
|
<td>[e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2]</td>
|
|
<td>[477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tempfile.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>40711</td>
|
|
<td>7ab5aff3fa2b1f285db5557e42243465</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>ddfb6e39237347e33458183d7540eeef606d7ef9</td>
|
|
<td>e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2</td>
|
|
<td>477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d5e9a20509b1f9b8652b028a40c115f293d2cdc1f6e76bacf3ce5b19e82de32</td>
|
|
<td>[68a472a799ad3734d804e2d9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-anim-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:35Z]</td>
|
|
<td>[26d4eb525ef2e0f0c16998346dd92112]</td>
|
|
<td>[639288c6a28f0efcfea84ebb17e50f189a22e3e8]</td>
|
|
<td>[c6dc293d08a59ba26cca12f076bc5167b3d5c67a1f7b3bc1651fe7e15b7c68be836327be2b7909c349586926bd637fcb]</td>
|
|
<td>[57e2dfecfbd214e57e5f4edfe86e2b856092fa3e3fbcfbce41033f8d206899700270791e469578f6a10041f0122564036912dad3c4beee04dfdb91a0029c6889]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-anim-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>479193</td>
|
|
<td>26d4eb525ef2e0f0c16998346dd92112</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>639288c6a28f0efcfea84ebb17e50f189a22e3e8</td>
|
|
<td>c6dc293d08a59ba26cca12f076bc5167b3d5c67a1f7b3bc1651fe7e15b7c68be836327be2b7909c349586926bd637fcb</td>
|
|
<td>57e2dfecfbd214e57e5f4edfe86e2b856092fa3e3fbcfbce41033f8d206899700270791e469578f6a10041f0122564036912dad3c4beee04dfdb91a0029c6889</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:00:06 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d5cb2ca9517d0abb090d033d3861aef472e348e6e0887bb8c33a9646074056b</td>
|
|
<td>[68a3146b5f0c41860c8c8506, 68a3146b5f0c41860c8c852c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_casefix.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[d0128e493756c7a62e9dd29cfac89d8c]</td>
|
|
<td>[cad9e3b8221f00371ba6e19dd31a01bab2f2ddda]</td>
|
|
<td>[74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee]</td>
|
|
<td>[40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_casefix.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>1824</td>
|
|
<td>d0128e493756c7a62e9dd29cfac89d8c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>cad9e3b8221f00371ba6e19dd31a01bab2f2ddda</td>
|
|
<td>74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee</td>
|
|
<td>40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d55249e54c24ac0fec23c3cee31809ddac6b79c9b79941fbbb566d93c3348a6</td>
|
|
<td>[68a42c746d8e3c910ac20520]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jnw042yi.z53.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T07:49:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jnw042yi.z53.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 07:49:00 +0000 UTC</td>
|
|
<td>2025-08-19 07:49:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 07:49:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d22c23100d268ff338fc8cec1489d8f9f199d15ab50fcb8dfac74133eeaeabc</td>
|
|
<td>[68a4e94b8258ccd0ca80c68b, 68a4ec0d73c037b116f16923, 68a4f0bd96d8259b6fb14197, 68a4fcd0011d94a251a4ef39, 68a4fcd0011d94a251a4ef44, 68a4fcd0011d94a251a4ef46]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\DeployOpenVpn.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\2\{6D2A95DD-7878-4173-A054-2C5C8E3A05BA}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{F27E6C83-3351-4D92-A677-9892A6651C41}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\SysWOW64\cmd.exe, C:\Windows\Temp\{D464CC00-C9E1-418A-9BDB-FEE337D77CB0}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe, C:\Windows\Temp\{0AF13D10-A131-4644-8F46-345A8CF1F7F1}\.cr\Capsule_MDIP_software_Setup_11.8.0.328 (1).exe, C:\Windows\Temp\{2D0EBECB-0573-490E-BE9B-5F2DF93F480D}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{D7DDC242-26E7-40BC-AA59-F0A084047FD5}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe, C:\Windows\Temp\{4E1205BB-A26B-4AD2-B6F7-7F2CCF9E40F7}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{3DC0FF38-2812-41C0-94A3-517D5D56E856}\.cr\Capsule_MDIP_software_Setup_11.8.0.328.exe]</td>
|
|
<td>[2025-08-19T21:14:48Z, 2025-08-19T21:19:32Z, 2025-08-19T21:41:39Z, 2025-08-19T22:11:25Z, 2025-08-19T22:18:26Z, 2025-08-19T22:27:20Z]</td>
|
|
<td>[89d5d6522ae6f716bdc080b6b9b05004]</td>
|
|
<td>[c6e0eb411752855eab2334c14bc998465cc9b1b9]</td>
|
|
<td>[3e52c7ed45a5e449a58387f36187ef681b8e988c1ae9718e737693abfef77dd42072bff1bf53785c6011eaf8b10cacd7]</td>
|
|
<td>[f9eee002e42e399039606a177bc42b4bc75a367c9a48461f7faad9633f53affd65ac212a7c6df8da81d305e322847498082ef438ab972fbe5336250fcb370fe7]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DeployOpenVpn.bat</td>
|
|
<td>C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\</td>
|
|
<td></td>
|
|
<td>165</td>
|
|
<td>89d5d6522ae6f716bdc080b6b9b05004</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>c6e0eb411752855eab2334c14bc998465cc9b1b9</td>
|
|
<td>3e52c7ed45a5e449a58387f36187ef681b8e988c1ae9718e737693abfef77dd42072bff1bf53785c6011eaf8b10cacd7</td>
|
|
<td>f9eee002e42e399039606a177bc42b4bc75a367c9a48461f7faad9633f53affd65ac212a7c6df8da81d305e322847498082ef438ab972fbe5336250fcb370fe7</td>
|
|
<td>2025-08-19 21:14:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-05 13:26:47 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d031d09ec40cf9cfeb3455f9199da3e3f8b827cc4053d65f0a9ed878513cfe1</td>
|
|
<td>[68a3151a330e1d8c3da80971]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vmBKRIM]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\Instrument Manager\Drivers\diietldlservice.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>["E:\Instrument Manager\Drivers\diietldlservice.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-18T11:51:23Z]</td>
|
|
<td>[fa5ed12d9b5b2d41eed634a630122413]</td>
|
|
<td>[4afc7da9ab03e35ccdeb5a627579699df806659c]</td>
|
|
<td>[01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794]</td>
|
|
<td>[66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2]</td>
|
|
<td>[172.17.20.8]</td>
|
|
<td>[172.17.20.8]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>diietldlservice.exe</td>
|
|
<td>E:\Instrument Manager\Drivers\</td>
|
|
<td>Data Innovations LLC Lab GPS</td>
|
|
<td>78336</td>
|
|
<td>fa5ed12d9b5b2d41eed634a630122413</td>
|
|
<td>Instrument Manager</td>
|
|
<td>8.15.0008</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-03 15:35:11 +0000 UTC</td>
|
|
<td>2024-09-18 13:42:01 +0000 UTC</td>
|
|
<td>4afc7da9ab03e35ccdeb5a627579699df806659c</td>
|
|
<td>01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794</td>
|
|
<td>66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2</td>
|
|
<td>2025-07-17 13:02:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7cf7f652203cae7698ca99e9703b5496440c0dab2a04f5376c702809ebced958</td>
|
|
<td>[68a5c81947601aee5f76e911, 68a5c9d7599432010e418bcb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[D:\QS1\ltkrn14N.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z]</td>
|
|
<td>[7c12b813c50ac921c0f64da920267066]</td>
|
|
<td>[273df296aa8874f73aa1d64c36d9f1878b43da0c]</td>
|
|
<td>[97a907d4c5c8c5356e82ff4dc4f636324944ca41de730b329213f6d461f9d2257b885f51e89f7994111ffadc3b7bd1ba]</td>
|
|
<td>[0fd40ed7037dd10f3859986c302438495a7da4c84b121f96cdaf1aa244d2c4b29c962be0facf0f8c2cad2a6ef5e0bd58e9e0c992998242977294bfb1e44d3fbf]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltkrn14N.dll</td>
|
|
<td>C:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>434176</td>
|
|
<td>7c12b813c50ac921c0f64da920267066</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>14.5.0.013</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:13:27 +0000 UTC</td>
|
|
<td>2006-06-03 01:21:02 +0000 UTC</td>
|
|
<td>273df296aa8874f73aa1d64c36d9f1878b43da0c</td>
|
|
<td>97a907d4c5c8c5356e82ff4dc4f636324944ca41de730b329213f6d461f9d2257b885f51e89f7994111ffadc3b7bd1ba</td>
|
|
<td>0fd40ed7037dd10f3859986c302438495a7da4c84b121f96cdaf1aa244d2c4b29c962be0facf0f8c2cad2a6ef5e0bd58e9e0c992998242977294bfb1e44d3fbf</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-09 09:17:14 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8440cba619a5284877ee26a04c0fdda396a4b26dcab455b97cf6c12be5daa77d</td>
|
|
<td>[68a472b1b022648922e2359c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\policy-2.7.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[7ea0968c0619c6e5c467da202c36c07d]</td>
|
|
<td>[fd229ae6c09af1a72105f8d43c6911b0ddccbc79]</td>
|
|
<td>[3d0ba3475d94fcdc46392a132b3fcbc90ca5974124278a955261b54a048358550079e1711f3d95af7bc3ade1460da63c]</td>
|
|
<td>[689901832b9d614852191d0376a6517380b45e05fb9844fb03222a208edb755d81ed7ed1a0428efaa3ceca84c687e06cb8e9363f3b1a002d670daf4fc7ae95fe]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>policy-2.7.2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\policy-2.7.2.jar-201137f895e59857\</td>
|
|
<td></td>
|
|
<td>179038</td>
|
|
<td>7ea0968c0619c6e5c467da202c36c07d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:10 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:10 +0000 UTC</td>
|
|
<td>fd229ae6c09af1a72105f8d43c6911b0ddccbc79</td>
|
|
<td>3d0ba3475d94fcdc46392a132b3fcbc90ca5974124278a955261b54a048358550079e1711f3d95af7bc3ade1460da63c</td>
|
|
<td>689901832b9d614852191d0376a6517380b45e05fb9844fb03222a208edb755d81ed7ed1a0428efaa3ceca84c687e06cb8e9363f3b1a002d670daf4fc7ae95fe</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-07-06 00:22:58 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>83ec5200161f53cef32e50c03973d7121e92f4926f6a2f7640dd1a79502670b4</td>
|
|
<td>[68a472b1b022648922e2359b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\poi-3.2-FINAL.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[2fec24222aa7c353bff1960b8ac3e548]</td>
|
|
<td>[93690bb00b7511034f290077aac838d2946f2b36]</td>
|
|
<td>[882cc7991b294c4d79da2f1a66b404bde1194916e82da480422a248c7c4ea5b9f4876b9e0836e3f09edd17a466d24bfa]</td>
|
|
<td>[4b3f04470d2391fe27ed8663ad5b2276b278a65f3c706a5cd8d082cc2c34caa8d023f3e9e45a6d10fdab529cdedfe2286f2a432160cbbb9f85eab5691bc892c9]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>poi-3.2-FINAL.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>1428690</td>
|
|
<td>2fec24222aa7c353bff1960b8ac3e548</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>93690bb00b7511034f290077aac838d2946f2b36</td>
|
|
<td>882cc7991b294c4d79da2f1a66b404bde1194916e82da480422a248c7c4ea5b9f4876b9e0836e3f09edd17a466d24bfa</td>
|
|
<td>4b3f04470d2391fe27ed8663ad5b2276b278a65f3c706a5cd8d082cc2c34caa8d023f3e9e45a6d10fdab529cdedfe2286f2a432160cbbb9f85eab5691bc892c9</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-24 21:18:19 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>83a979fb882f2a864bd8541ffb78d55fb88e15750faae26788a8a8d63c465dee</td>
|
|
<td>[68a194fcbd314bfebd3efbbe]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kzqzcg4d.co3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:38:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kzqzcg4d.co3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:38:09 +0000 UTC</td>
|
|
<td>2025-08-17 08:38:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:38:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>828e4feaa7f12dcf43874a32bc8a352c6179840111d514ea71acd32dbd924944</td>
|
|
<td>[68a311cdc2d0d6e3eb77f218]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\findemailfromfreiendlyname.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[fda42888811197b147f60b25940b6167]</td>
|
|
<td>[d244e5619d64dc92414029ae026b62703fe7a133]</td>
|
|
<td>[19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f]</td>
|
|
<td>[b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>findemailfromfreiendlyname.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>641</td>
|
|
<td>fda42888811197b147f60b25940b6167</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-15 13:32:59 +0000 UTC</td>
|
|
<td>2024-11-27 21:47:05 +0000 UTC</td>
|
|
<td>d244e5619d64dc92414029ae026b62703fe7a133</td>
|
|
<td>19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f</td>
|
|
<td>b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>81aade262678c871634ca5dce06cef3f6e724c1d5957f40782636a97b000d4c0</td>
|
|
<td>[68a6afe50e0f3bd8deac4d02, 68a6afe50e0f3bd8deac4d17, 68a6afe50e0f3bd8deac4d44, 68a6afe50e0f3bd8deac4d65, 68a6afe50e0f3bd8deac4d84, 68a6afe50e0f3bd8deac4da4, 68a6afe50e0f3bd8deac4dc4, 68a6afe50e0f3bd8deac4de5, 68a6afe50e0f3bd8deac4e05, 68a6afe50e0f3bd8deac4e25, 68a6afe50e0f3bd8deac4e45, 68a6afe50e0f3bd8deac4e65, 68a6afe50e0f3bd8deac4e85, 68a6afe50e0f3bd8deac4ea5, 68a6afe50e0f3bd8deac4eb7, 68a6afe50e0f3bd8deac4ee6, 68a6afe50e0f3bd8deac4f05, 68a6afe50e0f3bd8deac4f25, 68a6afe50e0f3bd8deac4f46, 68a6afe50e0f3bd8deac4f6e, 68a6afe50e0f3bd8deac4f8f, 68a6afe50e0f3bd8deac4faf, 68a6afe50e0f3bd8deac4fcf, 68a6afe50e0f3bd8deac4fef, 68a6afe50e0f3bd8deac500f, 68a6afe50e0f3bd8deac502f, 68a6afe50e0f3bd8deac504e, 68a6afe50e0f3bd8deac506f, 68a6afe50e0f3bd8deac508f, 68a6afe50e0f3bd8deac50b9, 68a6afe50e0f3bd8deac50d8, 68a6afe50e0f3bd8deac50f9, 68a6afe50e0f3bd8deac5123, 68a6afe50e0f3bd8deac5145, 68a6afe50e0f3bd8deac5163, 68a6afe50e0f3bd8deac518d, 68a6afe50e0f3bd8deac51ad, 68a6afe50e0f3bd8deac51cc, 68a6afe50e0f3bd8deac51ed, 68a6afe50e0f3bd8deac5200, 68a6afe50e0f3bd8deac5217, 68a6afe50e0f3bd8deac524e, 68a6afe50e0f3bd8deac526e, 68a6afe50e0f3bd8deac5281, 68a6afe50e0f3bd8deac52a2, 68a6afe50e0f3bd8deac52c2, 68a6afe50e0f3bd8deac52e2, 68a6afe50e0f3bd8deac5302, 68a6afe50e0f3bd8deac5321, 68a6afe50e0f3bd8deac5342, 68a6afe50e0f3bd8deac5362, 68a6afe50e0f3bd8deac5382, 68a6afe50e0f3bd8deac53a8, 68a6afe50e0f3bd8deac53c3, 68a6afe50e0f3bd8deac53e7, 68a6afe50e0f3bd8deac5407, 68a6afe50e0f3bd8deac5428, 68a6afe50e0f3bd8deac5443, 68a6afe50e0f3bd8deac5469, 68a6afe50e0f3bd8deac5488, 68a6afe50e0f3bd8deac54a7, 68a6afe50e0f3bd8deac54c8, 68a6afe50e0f3bd8deac54e8, 68a6afe50e0f3bd8deac5509, 68a6afe50e0f3bd8deac5528, 68a6afe50e0f3bd8deac5548, 68a6afe50e0f3bd8deac5572, 68a6afe50e0f3bd8deac5592, 68a6afe50e0f3bd8deac55b2, 68a6afe50e0f3bd8deac55d2, 68a6afe50e0f3bd8deac55f2, 68a6afe50e0f3bd8deac5613, 68a6afe50e0f3bd8deac5632, 68a6afe50e0f3bd8deac563b, 68a6afe50e0f3bd8deac5661, 68a6afe50e0f3bd8deac5681, 68a6afe50e0f3bd8deac5690, 68a6afe50e0f3bd8deac56b0, 68a6afe50e0f3bd8deac56d0, 68a6afe50e0f3bd8deac56e8, 68a6afe50e0f3bd8deac5710, 68a6afe50e0f3bd8deac5729, 68a6afe50e0f3bd8deac5750, 68a6afe50e0f3bd8deac5759, 68a6afe50e0f3bd8deac5798, 68a6afe50e0f3bd8deac57a4, 68a6afe50e0f3bd8deac57d9, 68a6afe50e0f3bd8deac57e4, 68a6afe50e0f3bd8deac5818, 68a6afe50e0f3bd8deac5831, 68a6afe50e0f3bd8deac585a, 68a6afe50e0f3bd8deac5862, 68a6afe50e0f3bd8deac5899, 68a6afe50e0f3bd8deac58a9, 68a6afe50e0f3bd8deac58d9, 68a6afe50e0f3bd8deac58eb, 68a6afe50e0f3bd8deac5913, 68a6afe50e0f3bd8deac592a, 68a6afe50e0f3bd8deac595a, 68a6afe50e0f3bd8deac597a, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-pngwrapper-16-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...]</td>
|
|
<td>[3dd30dd1006e09c925864c89312bacca]</td>
|
|
<td>[5c0b26c55eb3afc6df7cb959907f04a28968a8eb]</td>
|
|
<td>[42928b5d32bd448b83e295150e6e0dabcca008a24e6ac081d7ef7aeccf73473a21d0b958be69af4ce47df30dfbe3ac73]</td>
|
|
<td>[e850a625805d1501ca03cbfd767ffb822212240ec0375a2dfa6cbfd3f0af41c7ebeaee24227932305a822c424d071f4afd943d4b02ad35862542b5df6f992783]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-pngwrapper-16-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-pngwrapper-16-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>194048</td>
|
|
<td>3dd30dd1006e09c925864c89312bacca</td>
|
|
<td>CIP</td>
|
|
<td>1.6.5.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-13 05:41:04 +0000 UTC</td>
|
|
<td>5c0b26c55eb3afc6df7cb959907f04a28968a8eb</td>
|
|
<td>42928b5d32bd448b83e295150e6e0dabcca008a24e6ac081d7ef7aeccf73473a21d0b958be69af4ce47df30dfbe3ac73</td>
|
|
<td>e850a625805d1501ca03cbfd767ffb822212240ec0375a2dfa6cbfd3f0af41c7ebeaee24227932305a822c424d071f4afd943d4b02ad35862542b5df6f992783</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>812b0f4b717665265bc5a0620fa8be3386853418328e5a28e7ff891462f9de6b</td>
|
|
<td>[68a5239e621d09b2b1ed5e4f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[7913110d2edd6e0303dd5cc770044109]</td>
|
|
<td>[47838c3517f0204ec04496a5da987943b905016f]</td>
|
|
<td>[5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf]</td>
|
|
<td>[3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Control</td>
|
|
<td>5632</td>
|
|
<td>7913110d2edd6e0303dd5cc770044109</td>
|
|
<td>Control</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>47838c3517f0204ec04496a5da987943b905016f</td>
|
|
<td>5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf</td>
|
|
<td>3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80eed1550c017565807bf8be35688e6845c564df5aaf1a006959e4714cfd990b</td>
|
|
<td>[68a31e4459685fc083f0f272]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:36:17Z]</td>
|
|
<td>[63f04652c1ffce069b2aade76da5bc56]</td>
|
|
<td>[253c1f10b1facd8919193a01d57d4ce26440467e]</td>
|
|
<td>[00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e]</td>
|
|
<td>[277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2198</td>
|
|
<td>63f04652c1ffce069b2aade76da5bc56</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:36:16 +0000 UTC</td>
|
|
<td>253c1f10b1facd8919193a01d57d4ce26440467e</td>
|
|
<td>00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e</td>
|
|
<td>277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d</td>
|
|
<td>2025-08-18 12:36:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80ed85556abb978978c3afeabdae83a61e828e13823ad8081b5656a15ac32295</td>
|
|
<td>[68a3146b5f0c41860c8c8513, 68a3146b5f0c41860c8c8566]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\header.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[5e51285c9cc412511aae0381df5af605]</td>
|
|
<td>[c34c9e21766749325670c8fb373441fa260ac2d4]</td>
|
|
<td>[3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1]</td>
|
|
<td>[6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>header.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>24610</td>
|
|
<td>5e51285c9cc412511aae0381df5af605</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>c34c9e21766749325670c8fb373441fa260ac2d4</td>
|
|
<td>3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1</td>
|
|
<td>6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80e46f9dd140f27a177e2a9b0df309a141ecb0ac32252ad5dd689d52acdfc3ae</td>
|
|
<td>[68a70bf158372bc3075d1d48]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Plugins\CheckReliability.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:07:05Z]</td>
|
|
<td>[1669b9c16b46591c45c4d2d763be89a7]</td>
|
|
<td>[86e7398f4339b816c9185e889990394f3fe26b6a]</td>
|
|
<td>[05f1bf466e1ec22d4e6c63afaf68ea781591d3b901a97f1d5afd6175ccddbe38e07c49a832f054329678543b8548df0c]</td>
|
|
<td>[3558f07944eb90eefc97883f0347dac512cde66b4fec9ef898c7d8b311a9b23fd4ee8d2ae3de9400203061e291effe87cc5f24b38b9fae56194f08aac3522087]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckReliability.dll</td>
|
|
<td>C:\Program Files\Yabe\Plugins\</td>
|
|
<td>CheckReliability Yabe Plugin</td>
|
|
<td>9216</td>
|
|
<td>1669b9c16b46591c45c4d2d763be89a7</td>
|
|
<td>CheckReliability</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-01-17 11:17:44 +0000 UTC</td>
|
|
<td>86e7398f4339b816c9185e889990394f3fe26b6a</td>
|
|
<td>05f1bf466e1ec22d4e6c63afaf68ea781591d3b901a97f1d5afd6175ccddbe38e07c49a832f054329678543b8548df0c</td>
|
|
<td>3558f07944eb90eefc97883f0347dac512cde66b4fec9ef898c7d8b311a9b23fd4ee8d2ae3de9400203061e291effe87cc5f24b38b9fae56194f08aac3522087</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-25 18:29:05 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80ac258e0852de329618df81b11d6beb684dd2d207b215a5559657ffefa44475</td>
|
|
<td>[68a25efe3635347d5469494e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\waxkiu4t.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>waxkiu4t.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80962aa98ccf32b6398709a133a9d678a4277d666bf0f68be6881a727b94cdc2</td>
|
|
<td>[68a161e4df6c771867d5823e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MIntGTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbe1cxlh.z1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:00:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jbe1cxlh.z1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:08 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:00:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f7196ee2c55c57bd6a32a85fdb5d9d6cbb0c143db529d30f65021be1f6794da</td>
|
|
<td>[68a16e26eef56db6411d81ce, 68a2bfb24201bf09ec6e1d53, 68a4115cc76143c265ae8f29, 68a562fc095f408404dbb6a7, 68a6b2541e0b1b536c26b932]</td>
|
|
<td>[2]</td>
|
|
<td>[IT.HelpDesk]</td>
|
|
<td>[PCH-BGSwap]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\WS_FTP_Scripts\Renamessi3.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:40:45Z, 2025-08-18T05:40:45Z, 2025-08-19T05:40:45Z, 2025-08-20T05:40:45Z, 2025-08-21T05:40:45Z]</td>
|
|
<td>[d9985deb5b260de564bcf74ddafcf4f6]</td>
|
|
<td>[6c6ddd5954aa3514b5100674c74a727ecdef2a81]</td>
|
|
<td>[24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c]</td>
|
|
<td>[fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Renamessi3.bat</td>
|
|
<td>C:\WS_FTP_Scripts\</td>
|
|
<td></td>
|
|
<td>905</td>
|
|
<td>d9985deb5b260de564bcf74ddafcf4f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-10-29 14:30:30 +0000 UTC</td>
|
|
<td>2020-10-29 14:31:13 +0000 UTC</td>
|
|
<td>6c6ddd5954aa3514b5100674c74a727ecdef2a81</td>
|
|
<td>24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c</td>
|
|
<td>fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78</td>
|
|
<td>2025-08-09 05:44:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f5f8fcfd84132579f07e395e65b44e1b031fe01a299bce0e3dd590131c5cb93</td>
|
|
<td>[68a46ee7124301f03a725ddc, 68a4728c1dfbce27769ea0ba, 68a4728c1dfbce27769ea0bd, 68a4728c1dfbce27769ea0be]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\.ba1\wixstdba.dll, C:\Users\my10040sa\AppData\Local\Temp\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\.ba1\wixstdba.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{FB6C058B-4ADA-4A07-89D6-55AFB1AEAC8A}\{BF2F04CD-3D1F-444e-8960-D08EBD285C3F}\vcredist_x86.exe, C:\ProgramData\Package Cache\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\vcredist_x86.exe, C:\Users\my10040sa\AppData\Local\Temp\{01D338CB-8F9F-4F30-BB60-6F2685D921F1}\{3A3AF437-A9CD-472f-9BC9-8EEDD7505A02}\vcredist_x64.exe, C:\ProgramData\Package Cache\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\vcredist_x64.exe]</td>
|
|
<td>[C:\Users\MY1004~1\AppData\Local\Temp\{FB6C058B-4ADA-4A07-89D6-55AFB1AEAC8A}\{BF2F04CD-3D1F-444e-8960-D08EBD285C3F}\vcredist_x86.exe, C:\ProgramData\Package Cache\{8e70e4e1-06d7-470b-9f74-a51bef21088e}\vcredist_x86.exe, C:\Users\MY1004~1\AppData\Local\Temp\{01D338CB-8F9F-4F30-BB60-6F2685D921F1}\{3A3AF437-A9CD-472f-9BC9-8EEDD7505A02}\vcredist_x64.exe, C:\ProgramData\Package Cache\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}\vcredist_x64.exe]</td>
|
|
<td>[2025-08-19T12:32:38Z, 2025-08-19T12:32:47Z, 2025-08-19T12:36:56Z, 2025-08-19T12:37:06Z]</td>
|
|
<td>[d7bf29763354eda154aad637017b5483]</td>
|
|
<td>[dfa7d296bfeecde738ef4708aaabfebec6bc1e48]</td>
|
|
<td>[c0ff4aa7d0e6f1965f43e823f2f225320f6f01f6c31a490102a0e2fce461b529ebcd2f4a316cd3ba3d194d7ec0d85692]</td>
|
|
<td>[1c76175732fe68b9b12cb46077daa21e086041adbd65401717a9a1b5f3c516e03c35a90897c22c7281647d6af4a1a5ffb3fbd5706ea376d8f6e574d27396019c]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>wixstdba.dll</td>
|
|
<td>C:\Users\varianinstaller\AppData\Local\Temp\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\.ba1\</td>
|
|
<td>WiX Standard Bootstrapper Application</td>
|
|
<td>129536</td>
|
|
<td>d7bf29763354eda154aad637017b5483</td>
|
|
<td>Windows Installer XML - SOC</td>
|
|
<td>3.6.3408.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2012-10-09 11:52:32 +0000 UTC</td>
|
|
<td>2012-10-09 11:52:32 +0000 UTC</td>
|
|
<td>dfa7d296bfeecde738ef4708aaabfebec6bc1e48</td>
|
|
<td>c0ff4aa7d0e6f1965f43e823f2f225320f6f01f6c31a490102a0e2fce461b529ebcd2f4a316cd3ba3d194d7ec0d85692</td>
|
|
<td>1c76175732fe68b9b12cb46077daa21e086041adbd65401717a9a1b5f3c516e03c35a90897c22c7281647d6af4a1a5ffb3fbd5706ea376d8f6e574d27396019c</td>
|
|
<td>2025-06-20 04:07:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-20 15:17:32 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-06-20 04:10:19.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f3f1b3c3698f724b932cb15eb898fd4049fee06fb71c10dbde9e86b9c46e387</td>
|
|
<td>[68a17bfc1ee81336fa54a933]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrgtzqe5.l50.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:51:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xrgtzqe5.l50.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:51:29 +0000 UTC</td>
|
|
<td>2025-08-17 06:51:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:51:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f3ab2ae868507dd7a50a8a32ca35df13c57044a206339041bea2b8656324c6d</td>
|
|
<td>[68a3189a985e97167cef8607]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tftoj4kh.1uo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:12:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tftoj4kh.1uo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:12:01 +0000 UTC</td>
|
|
<td>2025-08-18 12:12:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:12:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848</td>
|
|
<td>[68a306a5ba5832f49fe9cf41]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LIBEAY32.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[a724f5da0a0184b5668ef2d85a7346e0]</td>
|
|
<td>[7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399]</td>
|
|
<td>[9429216664488e243eff612f25f9d1757505154dd7d5e119ed3199adada3ee230016f8c6b9548629892f73b1646ef677]</td>
|
|
<td>[d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LIBEAY32.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td>OpenSSL Shared Library</td>
|
|
<td>1370624</td>
|
|
<td>a724f5da0a0184b5668ef2d85a7346e0</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.0.2o</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>7181fffaa6b8f0f29cf7cdd1b1b859c2b956d399</td>
|
|
<td>9429216664488e243eff612f25f9d1757505154dd7d5e119ed3199adada3ee230016f8c6b9548629892f73b1646ef677</td>
|
|
<td>d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-19 09:41:49 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8744ccc32c42cd0328342d972f6cb76533a8b36c148aa7bcf7be161e19b70d0b</td>
|
|
<td>[68a306a5ba5832f49fe9cf44]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STDS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[678daeab617ec66aaedd0849527f0a19]</td>
|
|
<td>[d1d1cf0b433a0824a4db93975a89734eebdbe4ac]</td>
|
|
<td>[17c4a5910fa49d8368727cfe5b225bccdcfc7304fd1185bec58c192dbd635641f9898ae5970053223457650536cbcc38]</td>
|
|
<td>[475eab42c67460c222fee44476463ef63d2ac0b751ce361bed7f55a410ba2450c834be926743469c798171842dac0b086f4461aff41f5b641a5d0894d95eb1b0]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STDS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>34816</td>
|
|
<td>678daeab617ec66aaedd0849527f0a19</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:37 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>d1d1cf0b433a0824a4db93975a89734eebdbe4ac</td>
|
|
<td>17c4a5910fa49d8368727cfe5b225bccdcfc7304fd1185bec58c192dbd635641f9898ae5970053223457650536cbcc38</td>
|
|
<td>475eab42c67460c222fee44476463ef63d2ac0b751ce361bed7f55a410ba2450c834be926743469c798171842dac0b086f4461aff41f5b641a5d0894d95eb1b0</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:36:26 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>872f4d2c0d8ef4ab77b5963e41450e69fd9561ff10cc9e426390e8e60a7ab8c2</td>
|
|
<td>[68a4ccc785b914a60d739e45, 68a4ce1fc826337212f53be5, 68a4d07753a851daf11e692f, 68a4d07753a851daf11e6942, 68a4d07753a851daf11e6948, 68a4d2d1ff2b441b84428127, 68a4d2d1ff2b441b8442813a, 68a4d2d1ff2b441b84428141]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[c:\gehc-it\ccg\quovadx\cis6.2/integrator/bin/perl -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5 -I. c:\gehc-it\ccg\quovadx\cis6.2/integrator/sbin/hcisetenv.pl -root nt , c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl c:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisetenv.pl -site _wmc_test, c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl.exe -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator/lib/perl5 c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/hcienginerun.pl -p qdxprocess]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[4caadd4e182d3699d9be956724a5b1b4]</td>
|
|
<td>[ba5ee1dc096bbc29f58afba973d21dca1c37dee7]</td>
|
|
<td>[f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1]</td>
|
|
<td>[77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>perl.exe</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>11264</td>
|
|
<td>4caadd4e182d3699d9be956724a5b1b4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:15 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>ba5ee1dc096bbc29f58afba973d21dca1c37dee7</td>
|
|
<td>f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1</td>
|
|
<td>77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86e8b1e1ca221cda910b70f1a6d1897907e2c9ca96eccb7d5127bec87aa6869d</td>
|
|
<td>[68a1ab05c9c3c78a4a9c60c7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y1xem3si.bim.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:12:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_y1xem3si.bim.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:12:15 +0000 UTC</td>
|
|
<td>2025-08-17 10:12:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86da2f4c83c0da4f1de628febb8696b29aec95d06d8b5284f668b135042940c5</td>
|
|
<td>[68a3146b5f0c41860c8c853c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\glob.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[270f681fa912e46a35c53cbd22e62dd5]</td>
|
|
<td>[f0b5eec09e7c91aaee55e0048029b8b2cc0e8196]</td>
|
|
<td>[49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585]</td>
|
|
<td>[a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>glob.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>23672</td>
|
|
<td>270f681fa912e46a35c53cbd22e62dd5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>f0b5eec09e7c91aaee55e0048029b8b2cc0e8196</td>
|
|
<td>49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585</td>
|
|
<td>a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e</td>
|
|
<td>[68a472b1b022648922e235a7]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax2-api-3.1.4.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[c08e89de601b0a78f941b2c29db565c3]</td>
|
|
<td>[ac19014b1e6a7c08aad07fe114af792676b685b7]</td>
|
|
<td>[83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f]</td>
|
|
<td>[911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>stax2-api-3.1.4.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\codehaus\woodstox\main\</td>
|
|
<td></td>
|
|
<td>161867</td>
|
|
<td>c08e89de601b0a78f941b2c29db565c3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:23 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>ac19014b1e6a7c08aad07fe114af792676b685b7</td>
|
|
<td>83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f</td>
|
|
<td>911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7</td>
|
|
<td>2025-03-28 16:04:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-25 04:34:18 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-11 01:43:01.229 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86c806c09a7803a770f23b20b51108d5f0d29c4d1a698bb0545c63f393abadc0</td>
|
|
<td>[68a3b572a3df3f11549b8bf8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5b425657313647968a206bfc77c3d0ce.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T23:21:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5b425657313647968a206bfc77c3d0ce.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:21:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>866164cb56991315fd38941ed74b5f8245a6469c0257f717ea063397bfb9cf0c</td>
|
|
<td>[68a611738671451adb8f5998]</td>
|
|
<td>[2]</td>
|
|
<td>[DEVSCCMADM]</td>
|
|
<td>[DP-Warehouse]</td>
|
|
<td>[DEV-WVUHS]</td>
|
|
<td>[C:\Windows\TempInst\is-SQO0N.tmp\driversetup.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>["C:\WINDOWS\TempInst\is-SQO0N.tmp\driversetup.tmp" /SL5="$80C2C,180455,180224,C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\driversetup.exe" /verysilent]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\DriverSetup.exe]</td>
|
|
<td>[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe]</td>
|
|
<td>[2025-08-20T18:17:00Z]</td>
|
|
<td>[8bf52dfd2770c37e8f26fbca3e773e8f]</td>
|
|
<td>[bbee69e2e92738aee823293871ad827fcf6e90a5]</td>
|
|
<td>[489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d]</td>
|
|
<td>[83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>driversetup.tmp</td>
|
|
<td>C:\Windows\TempInst\is-CVOEI.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2907136</td>
|
|
<td>8bf52dfd2770c37e8f26fbca3e773e8f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-20 20:41:55 +0000 UTC</td>
|
|
<td>2025-03-20 20:41:55 +0000 UTC</td>
|
|
<td>bbee69e2e92738aee823293871ad827fcf6e90a5</td>
|
|
<td>489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d</td>
|
|
<td>83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5</td>
|
|
<td>2025-03-20 20:42:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>862923dddfc3e6f7a560567ef7ad9a8d12ba03fef8d6206164127bd69412b1cb</td>
|
|
<td>[68a60640d91a6169403521ce]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast4]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Compare printers on I-nfp1 to u-nfp2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T17:30:34Z]</td>
|
|
<td>[fa7d347cd25e73c0b857d25867f6bcff]</td>
|
|
<td>[23fce09fe1c70011677b75fdc13d2b2d831bb22f]</td>
|
|
<td>[11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1]</td>
|
|
<td>[99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Compare printers on I-nfp1 to u-nfp2.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>917</td>
|
|
<td>fa7d347cd25e73c0b857d25867f6bcff</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 17:30:23 +0000 UTC</td>
|
|
<td>2025-06-30 12:13:17 +0000 UTC</td>
|
|
<td>23fce09fe1c70011677b75fdc13d2b2d831bb22f</td>
|
|
<td>11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1</td>
|
|
<td>99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887</td>
|
|
<td>2025-08-20 17:30:40 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>861af6ae28998ad90daf332e6ce3f52e32cb6af6490029ccdf01861030529fe0</td>
|
|
<td>[68a5cc2ad273577648d7017a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:42Z]</td>
|
|
<td>[0ec39449979000ec0584ab01673080c2]</td>
|
|
<td>[fdaf52401fc4eaebb0252552d432b836277078a8]</td>
|
|
<td>[3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4]</td>
|
|
<td>[7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>991</td>
|
|
<td>0ec39449979000ec0584ab01673080c2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:41 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:41 +0000 UTC</td>
|
|
<td>fdaf52401fc4eaebb0252552d432b836277078a8</td>
|
|
<td>3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4</td>
|
|
<td>7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85e9971db788a2fbcb79a597f116557fdaefc0a2164cec5c139beb7a33776ae0</td>
|
|
<td>[68a48674c4cb2500be692608, 68a48674c4cb2500be69261e]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Settings.Configuration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[3730789496ff9f88accaf6bec1cbf7ba]</td>
|
|
<td>[4371262d52547a51dda48e130f70806dbe766284]</td>
|
|
<td>[23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd]</td>
|
|
<td>[80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Settings.Configuration.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>76560</td>
|
|
<td>3730789496ff9f88accaf6bec1cbf7ba</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>3.3.0+651449dd4277217838b9224ba13acf66f5f95351</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-10-07 13:46:44 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>4371262d52547a51dda48e130f70806dbe766284</td>
|
|
<td>23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd</td>
|
|
<td>80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85c5e4aa4822be87bb86397b3bce69ce0ee2cb6b89d295e2a0e98cd3ba20a72c</td>
|
|
<td>[68a34b98a6132bf659cce5b9, 68a34df0b71eea1289980a1e]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Desert.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[751d5269225355b4ef0f4e7356d821ef]</td>
|
|
<td>[d99637a8675ab23bdba70a597bf90328ab5cae9f]</td>
|
|
<td>[63de6e6e9c730d0fef1fc6562048033b714237e87c81ae1da7a629ac9a637905c1065c00b52549a098cf9ffba069e543]</td>
|
|
<td>[a5d7bd517b45ddd7308893ae028eeef59e656df97a99a833b0cf0ce3497fa15f490f7dbf13c357b73cce8561c557372930254a78d369c32e8f393c0361c8788c]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Desert.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Desert</td>
|
|
<td>685568</td>
|
|
<td>751d5269225355b4ef0f4e7356d821ef</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>d99637a8675ab23bdba70a597bf90328ab5cae9f</td>
|
|
<td>63de6e6e9c730d0fef1fc6562048033b714237e87c81ae1da7a629ac9a637905c1065c00b52549a098cf9ffba069e543</td>
|
|
<td>a5d7bd517b45ddd7308893ae028eeef59e656df97a99a833b0cf0ce3497fa15f490f7dbf13c357b73cce8561c557372930254a78d369c32e8f393c0361c8788c</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:19 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85326460bd3f08e5658ae173143694d725b390ee91cdfee712d33f5b6f5c7fc4</td>
|
|
<td>[68a327366b9e5d3847e6ff2e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jolominu.tok.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:14:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jolominu.tok.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:14:20 +0000 UTC</td>
|
|
<td>2025-08-18 13:14:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:14:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84e95c6300aa357f75245f2c4da9e422ebe8bbe4db67283870cee53b02231ad7</td>
|
|
<td>[68a5239e621d09b2b1ed5e4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServices.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[0d46a7d13dd192a9bc24c976aabe9eef]</td>
|
|
<td>[acd9024e775f0381eda5fb39210490e8804f32f8]</td>
|
|
<td>[965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348]</td>
|
|
<td>[af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PeCommServices.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PeCommServices</td>
|
|
<td>141824</td>
|
|
<td>0d46a7d13dd192a9bc24c976aabe9eef</td>
|
|
<td>PeCommServices</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>acd9024e775f0381eda5fb39210490e8804f32f8</td>
|
|
<td>965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348</td>
|
|
<td>af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84a92f1878d1db1c398f021aa01d0a12ec303ef540927b562e71134855b23f48</td>
|
|
<td>[68a16bd60756fe54a9918fa1, 68a2149cb58debea69d7c74c, 68a2bd5ff793a9057f329c07, 68a3663261f8067c48423eba, 68a40efceddb3a9f1a71a603, 68a4b7cd36bc5d38057e2368]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWebService.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[c1f4a307abccb3ff203409f4e41e68b9]</td>
|
|
<td>[4c9a363eec7a97f06a1db1b6d80b38c5e85e342d]</td>
|
|
<td>[079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460]</td>
|
|
<td>[8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zWebService.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>7973176</td>
|
|
<td>c1f4a307abccb3ff203409f4e41e68b9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>4c9a363eec7a97f06a1db1b6d80b38c5e85e342d</td>
|
|
<td>079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460</td>
|
|
<td>8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:15:04 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8478b902d0815ed066db860fb14cc5d404548d4b6348ab930b46270fcddeba68</td>
|
|
<td>[68a472b1b022648922e235a1]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\servlet-api-2.3.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[c097f777c6fd453277c6891b3bb4dc09]</td>
|
|
<td>[0137a24e9f62973f01f16dd23fc1b5a9964fd9ef]</td>
|
|
<td>[835f37b6a29eb1abdf9e4a73b97fae35d06956804d6c50de155d9619d6220b259cd68b2db00d42a4484ac5cdb606c977]</td>
|
|
<td>[e07c598d468a9e268dc803bfd2fdfa7cafb35d271407b85297b35fc17017b85bafb0b1652434dcffb6777b4e39979d0cd9204bb150efa5e489146b51722af1fe]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>servlet-api-2.3.jar</td>
|
|
<td>C:\Program Files\DeploymentService\Tomcat\webapps\jhptweb\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>77977</td>
|
|
<td>c097f777c6fd453277c6891b3bb4dc09</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-09-23 21:35:37 +0000 UTC</td>
|
|
<td>2020-09-23 21:35:37 +0000 UTC</td>
|
|
<td>0137a24e9f62973f01f16dd23fc1b5a9964fd9ef</td>
|
|
<td>835f37b6a29eb1abdf9e4a73b97fae35d06956804d6c50de155d9619d6220b259cd68b2db00d42a4484ac5cdb606c977</td>
|
|
<td>e07c598d468a9e268dc803bfd2fdfa7cafb35d271407b85297b35fc17017b85bafb0b1652434dcffb6777b4e39979d0cd9204bb150efa5e489146b51722af1fe</td>
|
|
<td>2025-08-14 05:11:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-06 08:57:10 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-13 16:12:47.104 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84656aa54a0cb01d9269991ebd2a95d785e26a521297c8531b4ca03f6175cc63</td>
|
|
<td>[68a1e42dda86b7950e20922a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ihgyu0b3.oaq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:16:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ihgyu0b3.oaq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:16:08 +0000 UTC</td>
|
|
<td>2025-08-17 14:16:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:16:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0c13c35bf20b1a1396f441950fc850abdb4789e4c33a49b1e674cca2f73425df</td>
|
|
<td>[68a45d72612cd15680b4837a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_24pv0bd4.rpe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T11:17:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_24pv0bd4.rpe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:17:58 +0000 UTC</td>
|
|
<td>2025-08-19 11:17:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:18:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8a0a42e2c7ff5574ad97ad6dc26cfb596e29ce60fe78606d781b2adf7a87fb30</td>
|
|
<td>[68a34b98a6132bf659cce5bd, 68a34df0b71eea1289980a22]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2013Dark.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[e646e61635920e2fa928ebdbaa5d4f85]</td>
|
|
<td>[2bfb054c55fe6539dd6fc0ebb76801f2c45e88b3]</td>
|
|
<td>[4798aa85d893ecf566c6558cb737ee4c932edb42238b87bd6fbc2368e16df477bffb73dbf036a7cdff66f771f0b301d3]</td>
|
|
<td>[83a762b9dfcfa2db85f5e90b5b7b954c752305d101bc93d87536264dab9c6e0ad0c7b70d259a0ff7918f4ac3ad6ee6f6f963ad83f20f848b885cdf88a392f0cb]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Office2013Dark.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Office2013Dark</td>
|
|
<td>237568</td>
|
|
<td>e646e61635920e2fa928ebdbaa5d4f85</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2bfb054c55fe6539dd6fc0ebb76801f2c45e88b3</td>
|
|
<td>4798aa85d893ecf566c6558cb737ee4c932edb42238b87bd6fbc2368e16df477bffb73dbf036a7cdff66f771f0b301d3</td>
|
|
<td>83a762b9dfcfa2db85f5e90b5b7b954c752305d101bc93d87536264dab9c6e0ad0c7b70d259a0ff7918f4ac3ad6ee6f6f963ad83f20f848b885cdf88a392f0cb</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:17 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89ed47dd7a86c0556557c69fc7d6b6fc94c05116f55431bc6cb4e3731df5c1b0</td>
|
|
<td>[68a26fdfc0e2189e95b436e5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gqwsgxba.yiw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:12:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gqwsgxba.yiw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:12:05 +0000 UTC</td>
|
|
<td>2025-08-18 00:12:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:12:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0</td>
|
|
<td>[68a4e8b52033a4a8e5a0e977, 68a4fcd0011d94a251a4ef36, 68a4fcd0011d94a251a4ef43]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\drivers\tap0901.sys]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[2025-08-19T21:12:19Z, 2025-08-19T22:09:45Z, 2025-08-19T22:18:18Z]</td>
|
|
<td>[d765f43cbea72d14c04af3d2b9c8e54b]</td>
|
|
<td>[daebe266073616e5fc931c319470fcf42a06867a]</td>
|
|
<td>[f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33]</td>
|
|
<td>[ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tap0901.sys</td>
|
|
<td>C:\Windows\System32\drivers\</td>
|
|
<td>TAP-Windows Virtual Network Driver (NDIS 6.0)</td>
|
|
<td>27136</td>
|
|
<td>d765f43cbea72d14c04af3d2b9c8e54b</td>
|
|
<td>TAP-Windows Virtual Network Driver (NDIS 6.0)</td>
|
|
<td>9.21.2 9/21</td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 09:10:04 +0000 UTC</td>
|
|
<td>2016-04-21 09:10:04 +0000 UTC</td>
|
|
<td>daebe266073616e5fc931c319470fcf42a06867a</td>
|
|
<td>f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33</td>
|
|
<td>ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2</td>
|
|
<td>2025-08-19 21:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 13:01:34 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89c5baa3f3a41900e2d66d77c1e63a9dab11d2d6d5e556a169b8fa2097b8441b</td>
|
|
<td>[68a4ccc785b914a60d739e47, 68a4ce1fc826337212f53be7, 68a4d07753a851daf11e6931, 68a4d07753a851daf11e6944, 68a4d07753a851daf11e6951, 68a4d2d1ff2b441b84428129, 68a4d2d1ff2b441b8442813c, 68a4d2d1ff2b441b84428149]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\Cwd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[06bfbbd1e8fc346fa3358461f084d535]</td>
|
|
<td>[b979274e71278d1689608fbe3b5c639a3c334a55]</td>
|
|
<td>[39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737]</td>
|
|
<td>[d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cwd.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\</td>
|
|
<td></td>
|
|
<td>15360</td>
|
|
<td>06bfbbd1e8fc346fa3358461f084d535</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:01 +0000 UTC</td>
|
|
<td>b979274e71278d1689608fbe3b5c639a3c334a55</td>
|
|
<td>39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737</td>
|
|
<td>d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8985e9e94144b1fd71aa39a7df8f1857ef43cdfc56eb1974c97181b55345a895</td>
|
|
<td>[68a4631d55f0b006fedad271]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\u05q5u1z.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>u05q5u1z.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:42:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>896ab9cac41e3977792ba2034ea8730610c2779fa51bab6bed426094ea8d3ecd</td>
|
|
<td>[68a523949cec397f02de9f62]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\log4net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z]</td>
|
|
<td>[27fe8d18682fd9901e589e65ef429b23]</td>
|
|
<td>[6426e96243911beab547f2bc98a252a26692f11f]</td>
|
|
<td>[9b26b5b65c90baddb954c7b1704fbbcdd6c46d9226c6a47b24c4284f65b9ff65d702a227b362f8fc82e77fabbd52bc6a]</td>
|
|
<td>[9d6bc8c77c72cbad15e808281818c2768f1b44aa6ea1d54a979c91218b8fbf2a02fee49fa97db6cfa6087ddc363d6cdd6407e4494934b4568c514437030a2615]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4net.dll</td>
|
|
<td>C:\Program Files (x86)\MModal\MModal Fluency Direct\</td>
|
|
<td>Apache log4net for .NET Framework 4.5</td>
|
|
<td>270336</td>
|
|
<td>27fe8d18682fd9901e589e65ef429b23</td>
|
|
<td>log4net</td>
|
|
<td>2.0.12.0-.NET 4.5</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-10-19 06:40:10 +0000 UTC</td>
|
|
<td>2020-10-19 06:40:10 +0000 UTC</td>
|
|
<td>6426e96243911beab547f2bc98a252a26692f11f</td>
|
|
<td>9b26b5b65c90baddb954c7b1704fbbcdd6c46d9226c6a47b24c4284f65b9ff65d702a227b362f8fc82e77fabbd52bc6a</td>
|
|
<td>9d6bc8c77c72cbad15e808281818c2768f1b44aa6ea1d54a979c91218b8fbf2a02fee49fa97db6cfa6087ddc363d6cdd6407e4494934b4568c514437030a2615</td>
|
|
<td>2025-03-24 14:02:17 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-23 14:37:23 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 18:53:20.839 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>885e56d813268fca1e04e3c8d7292dc138ac4e188f7e61ea277d544a5c080f12</td>
|
|
<td>[68a31fecb457e7ec963d10ed]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-14 17:50:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>883007989d373d19f352ba9792b25dec21dc7d0e205a710a93a3815101bb3d03</td>
|
|
<td>[68a472b1b022648922e23587]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-api-2.3.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[ffa4ea6fada02493779bcd7f04f11ea3]</td>
|
|
<td>[99f802e0cb3e953ba3d6e698795c4aeb98d37c48]</td>
|
|
<td>[9c1ac98f02cd0e1fe91d1742004b6e87520a84a0de18d51ba1a6f615cb92fb7d9d0640157547f18d5b2e2c81b4b1c4d0]</td>
|
|
<td>[0c5bfc2c9f655bf5e6d596e0c196dcb9344d6dc78bf774207c8f8b6be59f69addf2b3121e81491983eff648dfbd55002b9878132de190825dad3ef3a1265b367]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jaxb-api-2.3.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>125632</td>
|
|
<td>ffa4ea6fada02493779bcd7f04f11ea3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>99f802e0cb3e953ba3d6e698795c4aeb98d37c48</td>
|
|
<td>9c1ac98f02cd0e1fe91d1742004b6e87520a84a0de18d51ba1a6f615cb92fb7d9d0640157547f18d5b2e2c81b4b1c4d0</td>
|
|
<td>0c5bfc2c9f655bf5e6d596e0c196dcb9344d6dc78bf774207c8f8b6be59f69addf2b3121e81491983eff648dfbd55002b9878132de190825dad3ef3a1265b367</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-26 16:55:02 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 12:45:43.084 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8816ced466c6030ba2624ebacbae119f2d4acdba7debf14a74c73a97605385a5</td>
|
|
<td>[68a5239e621d09b2b1ed5e53]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackTest.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[bc77c1c66df02372edd7ac4456a17bcf]</td>
|
|
<td>[15712c630fd5da7ad894f532b3ace2694eb388c6]</td>
|
|
<td>[1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c]</td>
|
|
<td>[f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackTest.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Test</td>
|
|
<td>16896</td>
|
|
<td>bc77c1c66df02372edd7ac4456a17bcf</td>
|
|
<td>Test</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>15712c630fd5da7ad894f532b3ace2694eb388c6</td>
|
|
<td>1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c</td>
|
|
<td>f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696</td>
|
|
<td>[68a5c64d54e5003d1abde4c0, 68a5c77e05aa879ada66b41c, 68a5c77e05aa879ada66b422, 68a5c77e05aa879ada66b427, 68a5c77e05aa879ada66b42c, 68a5c77e05aa879ada66b430]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\_Setup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[30ebd4e80b1dda05eac709a1dc5965b4]</td>
|
|
<td>[2418232370026574baabc84b105f6dd9e458ad86]</td>
|
|
<td>[fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774]</td>
|
|
<td>[5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_Setup.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\</td>
|
|
<td>FLEXnet (R) InstallShield (R) Setup Launcher Resources</td>
|
|
<td>164784</td>
|
|
<td>30ebd4e80b1dda05eac709a1dc5965b4</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2025-04-14 15:20:00 +0000 UTC</td>
|
|
<td>2418232370026574baabc84b105f6dd9e458ad86</td>
|
|
<td>fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774</td>
|
|
<td>5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-15 06:19:28 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 22:12:52.389 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87fa12deba87e8480e2f908b117c04f544a29ad84bfad78b06ff20e5e9457a90</td>
|
|
<td>[68a234114e9e68c09ff3b3ce]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_gdgv0db5.spm.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gdgv0db5.spm.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:58 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:57:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87eced5a13c1c768b4afba0c29a797300d938b5c42cd9b9b8f1009381036335c</td>
|
|
<td>[68a2841dea878ec155eeabc0]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-071EF405-2DA4-4BF6-B3E2-9EEE181CBAE8\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-18T01:35:00Z]</td>
|
|
<td>[531d104b020b9f98268ff78dd349c950]</td>
|
|
<td>[b163a90df0687f4e273d7df02eddf0f06f9089b4]</td>
|
|
<td>[f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1]</td>
|
|
<td>[e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>531d104b020b9f98268ff78dd349c950</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 01:35:00 +0000 UTC</td>
|
|
<td>2025-08-18 01:35:00 +0000 UTC</td>
|
|
<td>b163a90df0687f4e273d7df02eddf0f06f9089b4</td>
|
|
<td>f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1</td>
|
|
<td>e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4</td>
|
|
<td>2025-08-18 01:38:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87e9dadb6f2dafe4516df3207431d866f6523092fea13c70bb87a04ac2ca874a</td>
|
|
<td>[68a46900de52a0eb07bb2cac]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_2c7bdf88483841c991f97ab70ee180cb.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:07:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_2c7bdf88483841c991f97ab70ee180cb.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:07:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87dbd3847659ba45b3a70603a5ad16c5dba1a20e1560ae6f33c3855a28ccc8ab</td>
|
|
<td>[68a5c8eceb9e7b7716dce1ff, 68a5ca39b5df6e9c598d9a11, 68a5ca39b5df6e9c598d9a1e, 68a5ccf2ddfdba423e488634, 68a5ccf2ddfdba423e488642, 68a5ccf2ddfdba423e488650, 68a5ccf2ddfdba423e48865d, 68a5ccf2ddfdba423e48866a, 68a5ccf2ddfdba423e488677, 68a5ccf2ddfdba423e488684, 68a5ccf2ddfdba423e488691]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\ServerOMFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[c066359dd5247e181f64aed348841df7]</td>
|
|
<td>[c948c467da379e48f015a39a89b14abd9e318641]</td>
|
|
<td>[4d3f5a8cb65cb060dcd44531a67bdd3ee550487455624a5c15162e521397694acb2fb89f6b5a777fb0b2fe351c1b14be]</td>
|
|
<td>[3538def626ac7f7182b24fa8023cbd951d01166b32c24063cb7101cf56609d1ed774aae80ea506e3264f08fccadadcea54add5f174ce768ffa92421fb6516682]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ServerOMFunctions.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>30673</td>
|
|
<td>c066359dd5247e181f64aed348841df7</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:41 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>c948c467da379e48f015a39a89b14abd9e318641</td>
|
|
<td>4d3f5a8cb65cb060dcd44531a67bdd3ee550487455624a5c15162e521397694acb2fb89f6b5a777fb0b2fe351c1b14be</td>
|
|
<td>3538def626ac7f7182b24fa8023cbd951d01166b32c24063cb7101cf56609d1ed774aae80ea506e3264f08fccadadcea54add5f174ce768ffa92421fb6516682</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:02 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>875bd9b26bac5ac888c47873184798b7e7c154a8ff5c8307e884ca895f158080</td>
|
|
<td>[68a246379a94894376e8c601]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mg01z4ld.0i1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:14:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mg01z4ld.0i1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:14:30 +0000 UTC</td>
|
|
<td>2025-08-17 21:14:30 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:14:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b238948f852008a05ed3de256fe08c00bd98db5643b0edd083017ec744424d1</td>
|
|
<td>[68a2b38b161afab772184bd5]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\tmp_2kca3ybv.gtw.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T05:00:54Z]</td>
|
|
<td>[ae19d72b75e92e2a670f857ba9860ce3]</td>
|
|
<td>[e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a]</td>
|
|
<td>[e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377]</td>
|
|
<td>[2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_2kca3ybv.gtw.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\</td>
|
|
<td></td>
|
|
<td>4669570</td>
|
|
<td>ae19d72b75e92e2a670f857ba9860ce3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 05:00:54 +0000 UTC</td>
|
|
<td>2025-08-18 05:00:54 +0000 UTC</td>
|
|
<td>e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a</td>
|
|
<td>e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377</td>
|
|
<td>2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715</td>
|
|
<td>2025-08-18 05:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8aa7a83d12cd1daa9a802e686463263e91cb813627557b01861a89e27fde4b09</td>
|
|
<td>[68a2532c678a2fdf8182be04]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\archivescript\archive.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T22:00:01Z]</td>
|
|
<td>[ddf4199c681ada910f8e2a61d9af3fe8]</td>
|
|
<td>[e2e6b93f0619b5ab8141ee4886f87eca40482d09]</td>
|
|
<td>[5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a]</td>
|
|
<td>[3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>archive.ps1</td>
|
|
<td>D:\archivescript\</td>
|
|
<td></td>
|
|
<td>5996</td>
|
|
<td>ddf4199c681ada910f8e2a61d9af3fe8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-16 18:21:57 +0000 UTC</td>
|
|
<td>2015-04-22 19:31:33 +0000 UTC</td>
|
|
<td>e2e6b93f0619b5ab8141ee4886f87eca40482d09</td>
|
|
<td>5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a</td>
|
|
<td>3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31</td>
|
|
<td>2025-08-08 22:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8a1ced8a3f76ad3ff0b53b43010d53302e4b10d7affa3ffb69ba20a0ca24c1fb</td>
|
|
<td>[68a189ed0b483022e242e958]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nIC-HIC-PRD4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ax3ju4vv.gx3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:51:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ax3ju4vv.gx3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:51:02 +0000 UTC</td>
|
|
<td>2025-08-17 07:51:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:51:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f1c26396d25e75da96d668173f3844426c38a9f41e23e3b17ef38c6711c5001</td>
|
|
<td>[68a1a97fd1ad1d02ded12163, 68a2fb0a27a9a45c7a219507, 68a44cbb02b8ceb81ab6baf5, 68a59e6101f0277939a73181, 68a6f01aab614fc6e2411cd4]</td>
|
|
<td>[2]</td>
|
|
<td>[meditechbg]</td>
|
|
<td>[PCH-PRINTER003]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Printer_HP_Script\SSNP.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T10:00:27Z, 2025-08-18T10:00:27Z, 2025-08-19T10:00:27Z, 2025-08-20T10:00:27Z, 2025-08-21T10:00:26Z]</td>
|
|
<td>[7a39f19ce6c8fb1d161c443d1dc7f86f]</td>
|
|
<td>[6f028aff74eec5d0db149890d22a8fed50c536cb]</td>
|
|
<td>[67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2]</td>
|
|
<td>[5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SSNP.bat</td>
|
|
<td>C:\Printer_HP_Script\</td>
|
|
<td></td>
|
|
<td>5014</td>
|
|
<td>7a39f19ce6c8fb1d161c443d1dc7f86f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-03-21 12:35:45 +0000 UTC</td>
|
|
<td>2014-07-09 19:42:40 +0000 UTC</td>
|
|
<td>6f028aff74eec5d0db149890d22a8fed50c536cb</td>
|
|
<td>67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2</td>
|
|
<td>5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67</td>
|
|
<td>2025-08-09 10:04:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f144dc59a8cf91c8457c46a563833c9fd3d1f7766c9c6b99f6e85a93e942ab1</td>
|
|
<td>[68a3146b5f0c41860c8c8523]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\gettext.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z]</td>
|
|
<td>[2b01d716b248affc1d5c61df52586f70]</td>
|
|
<td>[01231cf7bb85f5151d9846df82dafc6b9bffb225]</td>
|
|
<td>[930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38]</td>
|
|
<td>[9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>gettext.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>22565</td>
|
|
<td>2b01d716b248affc1d5c61df52586f70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>01231cf7bb85f5151d9846df82dafc6b9bffb225</td>
|
|
<td>930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38</td>
|
|
<td>9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0eeae75aee6c2b8cfef58497f07cc728a2f169217e316453c9dc577daf51c831</td>
|
|
<td>[68a1b895b65e1946e3666f15, 68a6fe933cf7ea98b79d9d5e]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\EpicHHEnvSUP_SmartUpdateFull.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T11:00:09Z, 2025-08-21T11:00:10Z]</td>
|
|
<td>[f4a871c36ce1398c5c89063c394fb796]</td>
|
|
<td>[ff814062a8182c82de32de600bbabd8b08551fb9]</td>
|
|
<td>[ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb]</td>
|
|
<td>[7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvSUP_SmartUpdateFull.bat</td>
|
|
<td>C:\HomeHealth\</td>
|
|
<td></td>
|
|
<td>98</td>
|
|
<td>f4a871c36ce1398c5c89063c394fb796</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:47:08 +0000 UTC</td>
|
|
<td>ff814062a8182c82de32de600bbabd8b08551fb9</td>
|
|
<td>ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb</td>
|
|
<td>7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15</td>
|
|
<td>2025-08-11 11:00:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ea212b296688a2fcb2dee591d081469da7cc09780e3eaf5ea0c98e34eddff46</td>
|
|
<td>[68a1af8e6937b3bfeec24717]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y3wqc145.xln.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:31:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_y3wqc145.xln.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:31:33 +0000 UTC</td>
|
|
<td>2025-08-17 10:31:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:31:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e4fe0097d8234b17fbeae1326f4b4b2447540534ba3ee94a3aa1a5fdc13f22b</td>
|
|
<td>[68a2467384622a54886c0e75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kqy4i4tr.qqz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:15:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kqy4i4tr.qqz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0dc510c703e27423555cb0865302c504c258d0e84be9c30820e99edf20ff3401</td>
|
|
<td>[68a1c1205b1ee295fb12a3fd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_el5mtldf.3sb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:46:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_el5mtldf.3sb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:46:35 +0000 UTC</td>
|
|
<td>2025-08-17 11:46:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:46:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0d4d362ed5b662a4975f8e67030e069e9e60d82137f6970653fbf89e1cf30ea6</td>
|
|
<td>[68a156aa2d859ec7c26395e4, 68a15db20a227e1e294e1d6c, 68a1642f671392a6ca40e558, 68a1a40655e9b687a677b976, 68a2cb621ea3fd6932f5b13a, 68a416054e2b3b19a2fbbd64, 68a42b1df903729d40303a39, 68a5528ca68312b2437669bf, 68a567a3b30563f7a27fa9b4]</td>
|
|
<td>[2]</td>
|
|
<td>[ASCSvc]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[E:\WAVXMLBulkMapper\email.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T04:09:46Z, 2025-08-17T04:39:46Z, 2025-08-17T05:09:46Z, 2025-08-17T09:39:46Z, 2025-08-18T06:39:46Z, 2025-08-19T06:09:46Z, 2025-08-19T07:39:46Z, 2025-08-20T04:39:46Z, 2025-08-20T06:09:46Z]</td>
|
|
<td>[48709ee3e41ad538c3d93892b04c4b5b]</td>
|
|
<td>[61e2058c06bf9e3f8246aca4fcc61b5d15f7029e]</td>
|
|
<td>[335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f]</td>
|
|
<td>[f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>email.bat</td>
|
|
<td>E:\WAVXMLBulkMapper\</td>
|
|
<td></td>
|
|
<td>676</td>
|
|
<td>48709ee3e41ad538c3d93892b04c4b5b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-04-23 14:39:50 +0000 UTC</td>
|
|
<td>2020-07-09 11:40:59 +0000 UTC</td>
|
|
<td>61e2058c06bf9e3f8246aca4fcc61b5d15f7029e</td>
|
|
<td>335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f</td>
|
|
<td>f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c</td>
|
|
<td>2025-08-09 05:09:59 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0d1ee835c881e5f8a90127d71176b19a5f527136f4b33d877cebe729c11efe09</td>
|
|
<td>[68a5c8eceb9e7b7716dce204, 68a5ca39b5df6e9c598d9a16, 68a5ca39b5df6e9c598d9a23, 68a5ccf2ddfdba423e488639, 68a5ccf2ddfdba423e488647, 68a5ccf2ddfdba423e488655, 68a5ccf2ddfdba423e488662, 68a5ccf2ddfdba423e48866f, 68a5ccf2ddfdba423e48867c, 68a5ccf2ddfdba423e488689, 68a5ccf2ddfdba423e488696]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\helpers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:53Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:50Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[55a6027dd1e0a5e48063566b84073d33]</td>
|
|
<td>[b64ef951eba0b844f0a7155cca53f91eda45f185]</td>
|
|
<td>[614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88]</td>
|
|
<td>[d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>helpers.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\</td>
|
|
<td></td>
|
|
<td>8350</td>
|
|
<td>55a6027dd1e0a5e48063566b84073d33</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:38 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>b64ef951eba0b844f0a7155cca53f91eda45f185</td>
|
|
<td>614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88</td>
|
|
<td>d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0cef77375419ad8202ff4e7155a1455435de15f2d60b15ede6bc211911fde757</td>
|
|
<td>[68a5239e621d09b2b1ed5e68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManager.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[ca0b0d10eb53b26c35284118371cec1c]</td>
|
|
<td>[ba2ffd3912e3b01d09e74f5d0b929108f5493d5a]</td>
|
|
<td>[9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df]</td>
|
|
<td>[3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManager.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerGui</td>
|
|
<td>67584</td>
|
|
<td>ca0b0d10eb53b26c35284118371cec1c</td>
|
|
<td>SystemManagerGui</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:30 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:30 +0000 UTC</td>
|
|
<td>ba2ffd3912e3b01d09e74f5d0b929108f5493d5a</td>
|
|
<td>9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df</td>
|
|
<td>3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ce6997fa6eafbce91ac022bb3118f6a8653a53c0863a4e9c6b6323576adb12b</td>
|
|
<td>[68a4d176f9567d58ffcb80f2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ccd449b623f55b26f3976be2274e35b140cf5272362574dbbe9d88d8b102ea9</td>
|
|
<td>[68a44b460463afe0b03c0304]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_8c97621ff3534cd19b9e38158d7134a1.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-19T10:00:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_8c97621ff3534cd19b9e38158d7134a1.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 10:00:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0cb604e6bbbbee0c68cb7635364fb1e1703d268e9a7a3faa10919fd489b9536b</td>
|
|
<td>[68a4d674e6120d5dc3b3884b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-v3MRpt]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\3M_360\3M_Reports\3M_Reports\_Plugins\Hub.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T19:49:27Z]</td>
|
|
<td>[0a0741dc6c1d3868f207a363995a7b55]</td>
|
|
<td>[27795d1e6f8c15e4ec3d8e18b8cde5b6384237f1]</td>
|
|
<td>[bbe1e6dbf799eeccd4ae27f3a4aae7a9fcc6c51f659790d7c9d9a03c568e391699bd931ca652e1e5bac73d92acd18614]</td>
|
|
<td>[b3e31c46b64669d6965b8aacdd68f844e427ab3b8291d5723a097d1b723bd3e285ff420061050aba1773718ec959e3a6f782bdf93a119ab282f818ff2061760f]</td>
|
|
<td>[172.17.23.44]</td>
|
|
<td>[172.17.23.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Hub.dll</td>
|
|
<td>D:\3M_360\3M_Reports\3M_Reports\_Plugins\</td>
|
|
<td>Hub</td>
|
|
<td>12288</td>
|
|
<td>0a0741dc6c1d3868f207a363995a7b55</td>
|
|
<td>Hub</td>
|
|
<td>1.1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-10-09 16:47:08 +0000 UTC</td>
|
|
<td>2020-10-09 16:46:25 +0000 UTC</td>
|
|
<td>27795d1e6f8c15e4ec3d8e18b8cde5b6384237f1</td>
|
|
<td>bbe1e6dbf799eeccd4ae27f3a4aae7a9fcc6c51f659790d7c9d9a03c568e391699bd931ca652e1e5bac73d92acd18614</td>
|
|
<td>b3e31c46b64669d6965b8aacdd68f844e427ab3b8291d5723a097d1b723bd3e285ff420061050aba1773718ec959e3a6f782bdf93a119ab282f818ff2061760f</td>
|
|
<td>2025-04-30 20:58:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-08-03 01:01:41 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 21:01:36.155 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0c3b300653b21f6ea6ceb344e45f352f388ac0f3124b9ef92e84d6da8edb9e6a</td>
|
|
<td>[68a4e92df1821b1c8f96ba7e, 68a4e9b3061a87dd106e4740, 68a4ec0d73c037b116f16921, 68a4ec0d73c037b116f16922, 68a4f0bd96d8259b6fb14195, 68a4f0bd96d8259b6fb14196, 68a4fcd0011d94a251a4ef37, 68a4fcd0011d94a251a4ef38, 68a4fcd0011d94a251a4ef41, 68a4fcd0011d94a251a4ef42]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -ma set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -aa {7806169F-4404-49FF-AFB7-B36CBD48DCCF} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -al {A54B5DCB-5EF1-4081-9E16-56C5E76B4A59} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r,ll,la,rl,ra, "C:\Program Files (x86)\Capsule Technologie\InstallerTemp\DComPerm.exe" -aa {EF0D9B6D-D774-459e-A5E4-59BA9AB43E3C} set "NT AUTHORITY\ANONYMOUS LOGON" permit level:l,r]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:14:14Z, 2025-08-19T21:14:15Z, 2025-08-19T21:18:50Z, 2025-08-19T21:18:51Z, 2025-08-19T21:41:07Z, 2025-08-19T21:41:08Z, 2025-08-19T22:10:52Z, 2025-08-19T22:10:53Z, 2025-08-19T22:17:59Z, 2025-08-19T22:18:00Z]</td>
|
|
<td>[fdcaceaa3c0903c7ca0379595b32cd79]</td>
|
|
<td>[7e460ca7ab643b96bd942b8b3573b19ff298e57f]</td>
|
|
<td>[1232162f2d3a86169525a8ef82d12945c4bf1abaa7763a08e8221c8000b279ca0f88aba72ac8d2d7d57afe32e738b8de]</td>
|
|
<td>[3556597b354dc05b0e8be36c8c732d5a0a85d03ceec4137ca48a2373da2cddfab647055fcf385f6cec416b9c56647af7d839441a12a47abe0361b6c4d75483a2]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DComPerm.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\InstallerTemp\</td>
|
|
<td></td>
|
|
<td>87040</td>
|
|
<td>fdcaceaa3c0903c7ca0379595b32cd79</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2011-11-21 16:56:38 +0000 UTC</td>
|
|
<td>2011-11-21 16:56:38 +0000 UTC</td>
|
|
<td>7e460ca7ab643b96bd942b8b3573b19ff298e57f</td>
|
|
<td>1232162f2d3a86169525a8ef82d12945c4bf1abaa7763a08e8221c8000b279ca0f88aba72ac8d2d7d57afe32e738b8de</td>
|
|
<td>3556597b354dc05b0e8be36c8c732d5a0a85d03ceec4137ca48a2373da2cddfab647055fcf385f6cec416b9c56647af7d839441a12a47abe0361b6c4d75483a2</td>
|
|
<td>2025-08-19 21:14:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-02-22 10:17:04 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cebb25e240db3b6986fcaed6bc0b900fa09dad763a56fb71273529266c5c525</td>
|
|
<td>[68a2a2b145e54eb8011b598e, 68a3f3b82b0ad9191f472696, 68a545ad1588ee149e3e4b09, 68a6a04ba1132f2e5ae457dd]</td>
|
|
<td>[2]</td>
|
|
<td>[jskwv]</td>
|
|
<td>[I-nMoveItXfer]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\MOVEitTransfer\Util\7z.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>["e:\MOVEitTransfer\Util\7z" a -r -mx=1 "e:\MOVEittransfer\files\Backup\MOVEitDMZ_Backup.7z" *]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\MOVEitTransfer\Scheduler\DMZBackup.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-18T03:39:13Z, 2025-08-19T03:39:19Z, 2025-08-20T03:39:18Z, 2025-08-21T04:20:27Z]</td>
|
|
<td>[9a1dd1d96481d61934dcc2d568971d06]</td>
|
|
<td>[f136ef9bf8bd2fc753292fb5b7cf173a22675fb3]</td>
|
|
<td>[0b04e8917edb442c5578f5a5348b206dbb6eb3262ca94a5bbc42228f1be5163e51dda1908e2b8b329a7abdccda8c6760]</td>
|
|
<td>[7ac1581f8a29e778ba1a1220670796c47fa5b838417f8f635e2cb1998a01515cff3ee57045dacb78a8ec70d43754b970743aba600379fe6d9481958d32d8a5aa]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7z.exe</td>
|
|
<td>E:\MOVEitTransfer\Util\</td>
|
|
<td>7-Zip Console</td>
|
|
<td>557056</td>
|
|
<td>9a1dd1d96481d61934dcc2d568971d06</td>
|
|
<td>7-Zip</td>
|
|
<td>23.01</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-06-26 17:10:48 +0000 UTC</td>
|
|
<td>2024-06-08 01:59:02 +0000 UTC</td>
|
|
<td>f136ef9bf8bd2fc753292fb5b7cf173a22675fb3</td>
|
|
<td>0b04e8917edb442c5578f5a5348b206dbb6eb3262ca94a5bbc42228f1be5163e51dda1908e2b8b329a7abdccda8c6760</td>
|
|
<td>7ac1581f8a29e778ba1a1220670796c47fa5b838417f8f635e2cb1998a01515cff3ee57045dacb78a8ec70d43754b970743aba600379fe6d9481958d32d8a5aa</td>
|
|
<td>2025-05-01 04:19:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-29 07:31:52 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 04:20:30.057 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ce6d52b069c4c0b1f23db60276343d7e56612d5d7514eddbd8cbb6dd5855cbf</td>
|
|
<td>[68a646093f8d701fd091c655]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_JNT_BMCTrauma1]</td>
|
|
<td>[i-nbmctrauma]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Dicorp_V5\TR_V5\RW\APPS\RW.EXE]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>["C:\Dicorp_V5\TR_V5\RW\APPS\RW.EXE" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-20T21:57:38Z]</td>
|
|
<td>[8e4f49b05335fdcdeb2531f0bfa1358e]</td>
|
|
<td>[f7a81cdfad90376d7454c912106fd3ac119316ba]</td>
|
|
<td>[988cdbd254369668d3db4a65a81597cb2a30bc42c1de6f542b1f874376ea8b1ca22e9ba2d3eaef16992b18a5d40cee41]</td>
|
|
<td>[3856610914039f8fce61a4a3de05afea8bb8ea01efc385104c3bbce5bae8104d3d509ebf31769970d88cfd9f7d36a66f1c034f82a75d37fd846331e84f5004ad]</td>
|
|
<td>[172.17.250.104]</td>
|
|
<td>[172.17.250.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RW.EXE</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>RW App Launcher</td>
|
|
<td>34304</td>
|
|
<td>8e4f49b05335fdcdeb2531f0bfa1358e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:29 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>f7a81cdfad90376d7454c912106fd3ac119316ba</td>
|
|
<td>988cdbd254369668d3db4a65a81597cb2a30bc42c1de6f542b1f874376ea8b1ca22e9ba2d3eaef16992b18a5d40cee41</td>
|
|
<td>3856610914039f8fce61a4a3de05afea8bb8ea01efc385104c3bbce5bae8104d3d509ebf31769970d88cfd9f7d36a66f1c034f82a75d37fd846331e84f5004ad</td>
|
|
<td>2025-04-30 20:02:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ccb8e7fc8941394c60374d45ba4a1539b1bd3b1d798142e8705eb4dcd391265</td>
|
|
<td>[68a22721aa3b1f3dd3941512]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\tmp_4dvp2nbj.c5a.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T19:01:51Z]</td>
|
|
<td>[9c8e384aff95c5d7fe6b82325ac590ee]</td>
|
|
<td>[a8d27f4a6211fb079c6f04717fe31e0fac54fc3c]</td>
|
|
<td>[82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b]</td>
|
|
<td>[e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_4dvp2nbj.c5a.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\</td>
|
|
<td></td>
|
|
<td>4669542</td>
|
|
<td>9c8e384aff95c5d7fe6b82325ac590ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:01:49 +0000 UTC</td>
|
|
<td>2025-08-17 19:01:49 +0000 UTC</td>
|
|
<td>a8d27f4a6211fb079c6f04717fe31e0fac54fc3c</td>
|
|
<td>82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b</td>
|
|
<td>e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007</td>
|
|
<td>2025-08-17 19:01:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cc960e5be9a58295564d0d0debf17a6f72214b8b929bdbe52731ddc5107eb1a</td>
|
|
<td>[68a46f7d9ee334140767070c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{DD24F271-6094-4573-838E-8D8118B24393}\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Client 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:35:03Z]</td>
|
|
<td>[2ac024a7bc89cbe84dfbb61ff1281bdf]</td>
|
|
<td>[178e18ceeacbe7d7db1649743116948e2d1c27f2]</td>
|
|
<td>[cdbbb56d11daf49c4d143140915431599d7880c37e4678ee8eaefbce8934f8b13885b93ba24e46d677c678a9d2af95b2]</td>
|
|
<td>[19da691d2f56fe0d185444b7277f0a216f57b1a7753787c946a3a5042f46f91b9481c987bc52fe3f099fad0612cb56cc2bf294f827d5ae8a9b4b1042deeafe9f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{DD24F271-6094-4573-838E-8D8118B24393}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>3429383</td>
|
|
<td>2ac024a7bc89cbe84dfbb61ff1281bdf</td>
|
|
<td>InstallShield</td>
|
|
<td>22.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:35:03 +0000 UTC</td>
|
|
<td>2025-08-19 12:35:03 +0000 UTC</td>
|
|
<td>178e18ceeacbe7d7db1649743116948e2d1c27f2</td>
|
|
<td>cdbbb56d11daf49c4d143140915431599d7880c37e4678ee8eaefbce8934f8b13885b93ba24e46d677c678a9d2af95b2</td>
|
|
<td>19da691d2f56fe0d185444b7277f0a216f57b1a7753787c946a3a5042f46f91b9481c987bc52fe3f099fad0612cb56cc2bf294f827d5ae8a9b4b1042deeafe9f</td>
|
|
<td>2025-08-19 12:35:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-21 18:14:40 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 12:35:24.475 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cb7e004d91df55955d29932d6578e0c045c059763678afd3bedd01b7239c9ff</td>
|
|
<td>[68a4ccc785b914a60d739e51, 68a4ce1fc826337212f53bee, 68a4d07753a851daf11e6939, 68a4d07753a851daf11e694f, 68a4d2d1ff2b441b84428131, 68a4d2d1ff2b441b84428147]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\Util.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[63f02e1f06bcce8dfbafcf35d21a4fdf]</td>
|
|
<td>[81c04431647158995a1e96a1d4cb422363e86f2d]</td>
|
|
<td>[8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00]</td>
|
|
<td>[fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Util.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\</td>
|
|
<td></td>
|
|
<td>38400</td>
|
|
<td>63f02e1f06bcce8dfbafcf35d21a4fdf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:35 +0000 UTC</td>
|
|
<td>81c04431647158995a1e96a1d4cb422363e86f2d</td>
|
|
<td>8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00</td>
|
|
<td>fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c9c462d5ce63854cb4ab58308f8210a5e659263270c98b847c1d02ba9284d33</td>
|
|
<td>[68a1a4c40fc81084514a3a33]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-devsqltest1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ehq3f2rs.q1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ehq3f2rs.q1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:34 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:45:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c8346458e64bfef0e6a125d92a93f8c3af8db4aa7fbd3e49fa0b32b2a9f3ca7</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce9, 68a6afe50e0f3bd8deac4cf8, 68a6afe50e0f3bd8deac4d0c, 68a6afe50e0f3bd8deac4d3a, 68a6afe50e0f3bd8deac4d5a, 68a6afe50e0f3bd8deac4d7a, 68a6afe50e0f3bd8deac4d9a, 68a6afe50e0f3bd8deac4dba, 68a6afe50e0f3bd8deac4dda, 68a6afe50e0f3bd8deac4dfa, 68a6afe50e0f3bd8deac4e1a, 68a6afe50e0f3bd8deac4e3a, 68a6afe50e0f3bd8deac4e5a, 68a6afe50e0f3bd8deac4e7a, 68a6afe50e0f3bd8deac4e9a, 68a6afe50e0f3bd8deac4eab, 68a6afe50e0f3bd8deac4eda, 68a6afe50e0f3bd8deac4efa, 68a6afe50e0f3bd8deac4f1a, 68a6afe50e0f3bd8deac4f3a, 68a6afe50e0f3bd8deac4f64, 68a6afe50e0f3bd8deac4f84, 68a6afe50e0f3bd8deac4fa4, 68a6afe50e0f3bd8deac4fc4, 68a6afe50e0f3bd8deac4fe4, 68a6afe50e0f3bd8deac5004, 68a6afe50e0f3bd8deac5024, 68a6afe50e0f3bd8deac5044, 68a6afe50e0f3bd8deac5064, 68a6afe50e0f3bd8deac5084, 68a6afe50e0f3bd8deac50ae, 68a6afe50e0f3bd8deac50ce, 68a6afe50e0f3bd8deac50ee, 68a6afe50e0f3bd8deac5118, 68a6afe50e0f3bd8deac5138, 68a6afe50e0f3bd8deac5158, 68a6afe50e0f3bd8deac5182, 68a6afe50e0f3bd8deac51a2, 68a6afe50e0f3bd8deac51c2, 68a6afe50e0f3bd8deac51e3, 68a6afe50e0f3bd8deac51f5, 68a6afe50e0f3bd8deac522c, 68a6afe50e0f3bd8deac5243, 68a6afe50e0f3bd8deac5263, 68a6afe50e0f3bd8deac5277, 68a6afe50e0f3bd8deac5297, 68a6afe50e0f3bd8deac52b7, 68a6afe50e0f3bd8deac52d7, 68a6afe50e0f3bd8deac52f7, 68a6afe50e0f3bd8deac5317, 68a6afe50e0f3bd8deac5337, 68a6afe50e0f3bd8deac5357, 68a6afe50e0f3bd8deac5377, 68a6afe50e0f3bd8deac539d, 68a6afe50e0f3bd8deac53b9, 68a6afe50e0f3bd8deac53dd, 68a6afe50e0f3bd8deac53fc, 68a6afe50e0f3bd8deac541d, 68a6afe50e0f3bd8deac5437, 68a6afe50e0f3bd8deac545d, 68a6afe50e0f3bd8deac547d, 68a6afe50e0f3bd8deac549d, 68a6afe50e0f3bd8deac54bd, 68a6afe50e0f3bd8deac54dd, 68a6afe50e0f3bd8deac54fd, 68a6afe50e0f3bd8deac551d, 68a6afe50e0f3bd8deac553d, 68a6afe50e0f3bd8deac5567, 68a6afe50e0f3bd8deac5587, 68a6afe50e0f3bd8deac55a7, 68a6afe50e0f3bd8deac55c7, 68a6afe50e0f3bd8deac55e7, 68a6afe50e0f3bd8deac5607, 68a6afe50e0f3bd8deac5627, 68a6afe50e0f3bd8deac5656, 68a6afe50e0f3bd8deac5677, 68a6afe50e0f3bd8deac5688, 68a6afe50e0f3bd8deac56a5, 68a6afe50e0f3bd8deac56c5, 68a6afe50e0f3bd8deac56dd, 68a6afe50e0f3bd8deac5705, 68a6afe50e0f3bd8deac571f, 68a6afe50e0f3bd8deac5745, 68a6afe50e0f3bd8deac5778, 68a6afe50e0f3bd8deac578d, 68a6afe50e0f3bd8deac57b9, 68a6afe50e0f3bd8deac57cf, 68a6afe50e0f3bd8deac57f9, 68a6afe50e0f3bd8deac580d, 68a6afe50e0f3bd8deac5826, 68a6afe50e0f3bd8deac584f, 68a6afe50e0f3bd8deac5877, 68a6afe50e0f3bd8deac588d, 68a6afe50e0f3bd8deac58bf, 68a6afe50e0f3bd8deac58cf, 68a6afe50e0f3bd8deac58fe, 68a6afe50e0f3bd8deac5909, 68a6afe50e0f3bd8deac5920, 68a6afe50e0f3bd8deac594f, 68a6afe50e0f3bd8deac596f, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeCoreNonUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...]</td>
|
|
<td>[98d4172644bbcfcc3710f21af82bd7f4]</td>
|
|
<td>[38253fb2d3807f495665ae9f0250e0e6e48c728e]</td>
|
|
<td>[a23a4202f84dccdfd5281aa681d7ec85ebdfad97cfa0484a4f8dfce53b830dd60a995e8083a9da614061f7e695df9005]</td>
|
|
<td>[99660be02db2ef666d940225255750cf30ab70adc37c42561000dfefc837659afa9b9801fd263de07acaac006149da4c4bf9a834896e53afb3e654e7822069f4]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeCoreNonUI.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>4453888</td>
|
|
<td>98d4172644bbcfcc3710f21af82bd7f4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:42 +0000 UTC</td>
|
|
<td>2023-06-16 03:05:36 +0000 UTC</td>
|
|
<td>38253fb2d3807f495665ae9f0250e0e6e48c728e</td>
|
|
<td>a23a4202f84dccdfd5281aa681d7ec85ebdfad97cfa0484a4f8dfce53b830dd60a995e8083a9da614061f7e695df9005</td>
|
|
<td>99660be02db2ef666d940225255750cf30ab70adc37c42561000dfefc837659afa9b9801fd263de07acaac006149da4c4bf9a834896e53afb3e654e7822069f4</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c720b6172950507ce095cf5a651cf3cb8e8a2aa959c0144c3f29c540aaef910</td>
|
|
<td>[68a3146b5f0c41860c8c8512, 68a3146b5f0c41860c8c8565]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_policybase.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[eebd4f03df5dd13bbf7b36b967e78312]</td>
|
|
<td>[65ddc336de7d067cd0a6459879a7c9554ba794dd]</td>
|
|
<td>[2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2]</td>
|
|
<td>[0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_policybase.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>17969</td>
|
|
<td>eebd4f03df5dd13bbf7b36b967e78312</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>65ddc336de7d067cd0a6459879a7c9554ba794dd</td>
|
|
<td>2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2</td>
|
|
<td>0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c679263a27fbd607ce7190c8ea323b7ae362030e79a1ebba95720cdcdaa6e55</td>
|
|
<td>[68a289dc0e6a21d30c5fa31d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:00Z]</td>
|
|
<td>[6531a0177f81fedbb09ed25c3416e3d7]</td>
|
|
<td>[01743b37aa19e8ceae417626bf209d4c7a5c06f9]</td>
|
|
<td>[39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e]</td>
|
|
<td>[dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615]</td>
|
|
<td>[172.25.16.7]</td>
|
|
<td>[172.25.16.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>stop.bat</td>
|
|
<td>E:\kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>932</td>
|
|
<td>6531a0177f81fedbb09ed25c3416e3d7</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-18 22:31:05 +0000 UTC</td>
|
|
<td>2021-07-02 12:32:35 +0000 UTC</td>
|
|
<td>01743b37aa19e8ceae417626bf209d4c7a5c06f9</td>
|
|
<td>39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e</td>
|
|
<td>dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615</td>
|
|
<td>2025-07-22 23:34:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c1db5e7aa9c9ad5d76b4f1f7d522b7b17092332d4995fc2392518f78174d13e</td>
|
|
<td>[68a523949cec397f02de9f5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Interfaces.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[973212aa3cb7ab0a2a17074bc5ba69d9]</td>
|
|
<td>[6d85906a470dd27d48a2db0c4c948479b85be40b]</td>
|
|
<td>[6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc]</td>
|
|
<td>[cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Interfaces.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>4608</td>
|
|
<td>973212aa3cb7ab0a2a17074bc5ba69d9</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>6d85906a470dd27d48a2db0c4c948479b85be40b</td>
|
|
<td>6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc</td>
|
|
<td>cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c1ae98ab13bcbc9125b8c981a49c1d6d8b99ad4762922177b96e68c27654c08</td>
|
|
<td>[68a27b48e4b19da253904f3e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\tmpEXO_wjcpfw15.dhs.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T01:00:50Z]</td>
|
|
<td>[f85e53c7484a4249bc2823f1a02afcdb]</td>
|
|
<td>[7f875190fcfa319ef524f04ca2b59d97c4d659d7]</td>
|
|
<td>[fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf]</td>
|
|
<td>[fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_wjcpfw15.dhs.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>f85e53c7484a4249bc2823f1a02afcdb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 01:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 01:00:48 +0000 UTC</td>
|
|
<td>7f875190fcfa319ef524f04ca2b59d97c4d659d7</td>
|
|
<td>fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf</td>
|
|
<td>fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600</td>
|
|
<td>2025-08-18 01:00:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c0a3bc76b8521e565b1d96c05d755af47486ef405901baf2ece6c76299201df</td>
|
|
<td>[68a6afe50e0f3bd8deac4cfb, 68a6afe50e0f3bd8deac4d0e, 68a6afe50e0f3bd8deac4d3d, 68a6afe50e0f3bd8deac4d5d, 68a6afe50e0f3bd8deac4d7c, 68a6afe50e0f3bd8deac4d9c, 68a6afe50e0f3bd8deac4dbc, 68a6afe50e0f3bd8deac4ddc, 68a6afe50e0f3bd8deac4dfc, 68a6afe50e0f3bd8deac4e1c, 68a6afe50e0f3bd8deac4e3c, 68a6afe50e0f3bd8deac4e5c, 68a6afe50e0f3bd8deac4e7c, 68a6afe50e0f3bd8deac4e9c, 68a6afe50e0f3bd8deac4eae, 68a6afe50e0f3bd8deac4edc, 68a6afe50e0f3bd8deac4efc, 68a6afe50e0f3bd8deac4f1c, 68a6afe50e0f3bd8deac4f3c, 68a6afe50e0f3bd8deac4f66, 68a6afe50e0f3bd8deac4f86, 68a6afe50e0f3bd8deac4fa6, 68a6afe50e0f3bd8deac4fc6, 68a6afe50e0f3bd8deac4fe6, 68a6afe50e0f3bd8deac5006, 68a6afe50e0f3bd8deac5026, 68a6afe50e0f3bd8deac5046, 68a6afe50e0f3bd8deac5066, 68a6afe50e0f3bd8deac5086, 68a6afe50e0f3bd8deac50b1, 68a6afe50e0f3bd8deac50d0, 68a6afe50e0f3bd8deac50f0, 68a6afe50e0f3bd8deac511a, 68a6afe50e0f3bd8deac513a, 68a6afe50e0f3bd8deac515a, 68a6afe50e0f3bd8deac5184, 68a6afe50e0f3bd8deac51a4, 68a6afe50e0f3bd8deac51c4, 68a6afe50e0f3bd8deac51e5, 68a6afe50e0f3bd8deac51f7, 68a6afe50e0f3bd8deac522f, 68a6afe50e0f3bd8deac5245, 68a6afe50e0f3bd8deac5265, 68a6afe50e0f3bd8deac527a, 68a6afe50e0f3bd8deac5299, 68a6afe50e0f3bd8deac52b9, 68a6afe50e0f3bd8deac52da, 68a6afe50e0f3bd8deac52f9, 68a6afe50e0f3bd8deac5319, 68a6afe50e0f3bd8deac5339, 68a6afe50e0f3bd8deac5359, 68a6afe50e0f3bd8deac5379, 68a6afe50e0f3bd8deac53a0, 68a6afe50e0f3bd8deac53bb, 68a6afe50e0f3bd8deac53e0, 68a6afe50e0f3bd8deac53fe, 68a6afe50e0f3bd8deac541f, 68a6afe50e0f3bd8deac543a, 68a6afe50e0f3bd8deac5460, 68a6afe50e0f3bd8deac547f, 68a6afe50e0f3bd8deac549f, 68a6afe50e0f3bd8deac54bf, 68a6afe50e0f3bd8deac54df, 68a6afe50e0f3bd8deac54ff, 68a6afe50e0f3bd8deac551f, 68a6afe50e0f3bd8deac553f, 68a6afe50e0f3bd8deac5569, 68a6afe50e0f3bd8deac5589, 68a6afe50e0f3bd8deac55a9, 68a6afe50e0f3bd8deac55ca, 68a6afe50e0f3bd8deac55e9, 68a6afe50e0f3bd8deac560a, 68a6afe50e0f3bd8deac5629, 68a6afe50e0f3bd8deac5659, 68a6afe50e0f3bd8deac5678, 68a6afe50e0f3bd8deac568a, 68a6afe50e0f3bd8deac56a7, 68a6afe50e0f3bd8deac56c7, 68a6afe50e0f3bd8deac56e0, 68a6afe50e0f3bd8deac5708, 68a6afe50e0f3bd8deac5722, 68a6afe50e0f3bd8deac5747, 68a6afe50e0f3bd8deac577b, 68a6afe50e0f3bd8deac5790, 68a6afe50e0f3bd8deac57bb, 68a6afe50e0f3bd8deac57d1, 68a6afe50e0f3bd8deac57fb, 68a6afe50e0f3bd8deac5810, 68a6afe50e0f3bd8deac5829, 68a6afe50e0f3bd8deac5852, 68a6afe50e0f3bd8deac5879, 68a6afe50e0f3bd8deac5890, 68a6afe50e0f3bd8deac58a1, 68a6afe50e0f3bd8deac58d1, 68a6afe50e0f3bd8deac58e1, 68a6afe50e0f3bd8deac590b, 68a6afe50e0f3bd8deac5923, 68a6afe50e0f3bd8deac5952, 68a6afe50e0f3bd8deac5972, 68a6afe50e0f3bd8deac5988, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-framework-16-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[a79286b457502b5059b361968203440f]</td>
|
|
<td>[f19884755dd188e1078716d5790d6b2be016d2d5]</td>
|
|
<td>[b25ffbf433d8a2398299cfc63b34ca2b90bec049e414a80a8c428814e136d8b6a4577553e63bd1f4ceaa11d8eacb79e5]</td>
|
|
<td>[529dba85c0fb9aabed95e5ecc60447c81086df84732aa329cf3c278375927cc7c8ea959ddcc5ddd24858ed1566412444fe6cebf9d7ffd38a1a16000f5a62b81b]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-framework-16-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-framework-16-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>547328</td>
|
|
<td>a79286b457502b5059b361968203440f</td>
|
|
<td>CIP</td>
|
|
<td>1.6.5.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-13 05:40:42 +0000 UTC</td>
|
|
<td>f19884755dd188e1078716d5790d6b2be016d2d5</td>
|
|
<td>b25ffbf433d8a2398299cfc63b34ca2b90bec049e414a80a8c428814e136d8b6a4577553e63bd1f4ceaa11d8eacb79e5</td>
|
|
<td>529dba85c0fb9aabed95e5ecc60447c81086df84732aa329cf3c278375927cc7c8ea959ddcc5ddd24858ed1566412444fe6cebf9d7ffd38a1a16000f5a62b81b</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b6279297001a9f437b91303e1df24a03523664479215afb83a74924917f22c5</td>
|
|
<td>[68a31fe2fad6bdf6009b0cd2]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:43:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b45479a64cb441633ab079f95f98ba61da93a5097f63e46aaefe525087beaef</td>
|
|
<td>[68a6afe50e0f3bd8deac4f4e, 68a6afe50e0f3bd8deac5097, 68a6afe50e0f3bd8deac5101, 68a6afe50e0f3bd8deac516c, 68a6afe50e0f3bd8deac5551, 68a6afe50e0f3bd8deac5643, 68a6afe50e0f3bd8deac5761, 68a6afe50e0f3bd8deac5d2a, 68a6afe50e0f3bd8deac5dac, 68a6afe50e0f3bd8deac5eea]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\libintl-8.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[67474b5a975ae484fa29659a4ed6855c]</td>
|
|
<td>[f04828c6274c3f053b1fa23c4dd8f385b566f62d]</td>
|
|
<td>[0b8e1af6ba6d10397bb49432b3e37a0f32d0df73bacb8f13daa2389fe2b3f7028a59de79160cf1ba45efa7aa596602cd]</td>
|
|
<td>[3cda4baffca92195b97541c6b2d8d38f8ea011fd2ca9608a753a988cb4ff1db826da55481035e58d5e276e4767cd98b3a5fd2be767832f60f77546c65cda7a31]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libintl-8.dll</td>
|
|
<td>D:\biomerieux\programs\postgresql\12.5\bin\</td>
|
|
<td>LGPLed libintl for Windows</td>
|
|
<td>829175</td>
|
|
<td>67474b5a975ae484fa29659a4ed6855c</td>
|
|
<td>GNU libintl: accessing NLS message catalogs</td>
|
|
<td>0.20.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-12-04 17:20:10 +0000 UTC</td>
|
|
<td>2020-11-11 04:09:42 +0000 UTC</td>
|
|
<td>f04828c6274c3f053b1fa23c4dd8f385b566f62d</td>
|
|
<td>0b8e1af6ba6d10397bb49432b3e37a0f32d0df73bacb8f13daa2389fe2b3f7028a59de79160cf1ba45efa7aa596602cd</td>
|
|
<td>3cda4baffca92195b97541c6b2d8d38f8ea011fd2ca9608a753a988cb4ff1db826da55481035e58d5e276e4767cd98b3a5fd2be767832f60f77546c65cda7a31</td>
|
|
<td>2025-04-23 19:05:50 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-20 23:51:59 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-23 19:10:35.739 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b2c4068b2411da1c364ab97163a8b222ba8452c911c51c6799afb17c5b66d6a</td>
|
|
<td>[68a46fd7a5344f430966555f, 68a4728c1dfbce27769ea0bf]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>["C:\software\Storage Manager Data Collector 20.1.2.14.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-19T12:36:02Z, 2025-08-19T12:39:10Z]</td>
|
|
<td>[61a2de8ddb935edca1d78ad7774a2c7b]</td>
|
|
<td>[6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e]</td>
|
|
<td>[97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9]</td>
|
|
<td>[6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Storage Manager Data Collector 20.1.2.14.exe</td>
|
|
<td>C:\software\</td>
|
|
<td>Dell SupportAssist Services</td>
|
|
<td>2042852084</td>
|
|
<td>61a2de8ddb935edca1d78ad7774a2c7b</td>
|
|
<td>Dell Storage Manager Data Collector</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:31:10 +0000 UTC</td>
|
|
<td>2022-08-17 14:32:05 +0000 UTC</td>
|
|
<td>6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e</td>
|
|
<td>97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9</td>
|
|
<td>6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b</td>
|
|
<td>2025-08-19 12:36:39 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b2bded6ab6979a63c277f41c62e15937dc5403fc74f17f14fa371316759700c</td>
|
|
<td>[68a166b2de4e1d2a0ca2c54c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_buqznmts.ghk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:20:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_buqznmts.ghk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:20:40 +0000 UTC</td>
|
|
<td>2025-08-17 05:20:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:20:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90754df3acb484269d866b7f4c660b2e0b71b57c8bf8f4fa97c0a113f2cac4ac</td>
|
|
<td>[68a472b1b022648922e23584]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.mail-1.5.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[7568b973bb2e3cc6f150ad908ddf349f]</td>
|
|
<td>[9724dd44f1abbba99c9858aa05fc91d53f59e7a5]</td>
|
|
<td>[089bf0b45f4d8dd5c334a9852433b4e1b1c75c9b383d73adab6e72bcbebcab169c0cfc92e8ab7655935953460dfbaf5d]</td>
|
|
<td>[0fb9ea10e95a7f67901ccf85884173834a5a3552865b50abc7e6cfd0265515476bb7d0a64a014ea0dcdcee672e9c31364aa588c63dbcf18145a771b78524c3e8]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>javax.mail-1.5.1.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>545362</td>
|
|
<td>7568b973bb2e3cc6f150ad908ddf349f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>9724dd44f1abbba99c9858aa05fc91d53f59e7a5</td>
|
|
<td>089bf0b45f4d8dd5c334a9852433b4e1b1c75c9b383d73adab6e72bcbebcab169c0cfc92e8ab7655935953460dfbaf5d</td>
|
|
<td>0fb9ea10e95a7f67901ccf85884173834a5a3552865b50abc7e6cfd0265515476bb7d0a64a014ea0dcdcee672e9c31364aa588c63dbcf18145a771b78524c3e8</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-11-27 02:42:33 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f8b7214d2120fb1d73129fba6d1bd628b2ca29df4907461730b5e0a7edab93f</td>
|
|
<td>[68a4ccc785b914a60d739e4b, 68a4ce1fc826337212f53bea, 68a4d07753a851daf11e6934, 68a4d07753a851daf11e6947, 68a4d2d1ff2b441b8442812c, 68a4d2d1ff2b441b8442813f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setsite.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[36475116d7add7e74ac00af1dd9878d5]</td>
|
|
<td>[240dc97909a4dd7ecd8f512611ca18c25fead0b3]</td>
|
|
<td>[a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe]</td>
|
|
<td>[85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite.cmd</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\</td>
|
|
<td></td>
|
|
<td>892</td>
|
|
<td>36475116d7add7e74ac00af1dd9878d5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:06 +0000 UTC</td>
|
|
<td>2016-12-02 07:17:44 +0000 UTC</td>
|
|
<td>240dc97909a4dd7ecd8f512611ca18c25fead0b3</td>
|
|
<td>a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe</td>
|
|
<td>85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f37ca61813533be820b0c6f27c1a9de68bbf3da928e6d7f2d4eeba4c98e7e33</td>
|
|
<td>[68a4a6605961c54c81f645c9]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:16Z]</td>
|
|
<td>[0f76b414d248a467589b20404835e659]</td>
|
|
<td>[79a088b56468ea7d8b28e19e914063eaa948d267]</td>
|
|
<td>[1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304]</td>
|
|
<td>[9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2058</td>
|
|
<td>0f76b414d248a467589b20404835e659</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-07-17 18:17:19 +0000 UTC</td>
|
|
<td>79a088b56468ea7d8b28e19e914063eaa948d267</td>
|
|
<td>1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304</td>
|
|
<td>9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09</td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f0151b909447385ff1d147edb39dbcf485b0950c3a987002149e05f7297575c</td>
|
|
<td>[68a523949cec397f02de9f52]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[0c03cf54e4169918390fc3695ced37ad]</td>
|
|
<td>[015ca7f33d308f2e835115ae9aaf496acc3f6869]</td>
|
|
<td>[0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2]</td>
|
|
<td>[49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Control</td>
|
|
<td>5632</td>
|
|
<td>0c03cf54e4169918390fc3695ced37ad</td>
|
|
<td>Control</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>015ca7f33d308f2e835115ae9aaf496acc3f6869</td>
|
|
<td>0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2</td>
|
|
<td>49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ededf34004b1134d8651881868330e84c0fb4773fc78e51abf172493cc8f936</td>
|
|
<td>[68a6537cecc6b6878d6687f6]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_swjrd4bs.epm.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-20T23:00:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_swjrd4bs.epm.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 23:00:03 +0000 UTC</td>
|
|
<td>2025-08-20 23:00:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 23:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ed706d5ea69cb373505d2daa3f582641f725f565983408eb2c8dbacc6d06c1a</td>
|
|
<td>[68a1de82fe6f5faa447d1ddd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qm1pal05.wis.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:51:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qm1pal05.wis.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:51:56 +0000 UTC</td>
|
|
<td>2025-08-17 13:51:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:52:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ec0f3a5ed337c7cef9440f6ab170b140a44a3671f9c409ada11974538bdc872</td>
|
|
<td>[68a4ccc785b914a60d739e56, 68a4ce1fc826337212f53bf3, 68a4d07753a851daf11e693e, 68a4d07753a851daf11e6955, 68a4d2d1ff2b441b84428136, 68a4d2d1ff2b441b8442814d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\arybase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[99b820a26387f39d63e59b64748df4ec]</td>
|
|
<td>[bd55986771d861f6ab5bcac33eec5c539e7164db]</td>
|
|
<td>[17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f]</td>
|
|
<td>[8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>arybase.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\</td>
|
|
<td></td>
|
|
<td>17408</td>
|
|
<td>99b820a26387f39d63e59b64748df4ec</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:57 +0000 UTC</td>
|
|
<td>bd55986771d861f6ab5bcac33eec5c539e7164db</td>
|
|
<td>17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f</td>
|
|
<td>8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ebf9e1d8faaf0bf7970fb3b858f6e69b0250021d5c1d4094f85f6f607ff1a98</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce1, 68a6afe50e0f3bd8deac4cf0, 68a6afe50e0f3bd8deac4d24, 68a6afe50e0f3bd8deac4d32, 68a6afe50e0f3bd8deac4d52, 68a6afe50e0f3bd8deac4d72, 68a6afe50e0f3bd8deac4d92, 68a6afe50e0f3bd8deac4db2, 68a6afe50e0f3bd8deac4dd2, 68a6afe50e0f3bd8deac4df2, 68a6afe50e0f3bd8deac4e12, 68a6afe50e0f3bd8deac4e32, 68a6afe50e0f3bd8deac4e52, 68a6afe50e0f3bd8deac4e72, 68a6afe50e0f3bd8deac4e92, 68a6afe50e0f3bd8deac4ec3, 68a6afe50e0f3bd8deac4ed2, 68a6afe50e0f3bd8deac4ef2, 68a6afe50e0f3bd8deac4f12, 68a6afe50e0f3bd8deac4f32, 68a6afe50e0f3bd8deac4f5c, 68a6afe50e0f3bd8deac4f7c, 68a6afe50e0f3bd8deac4f9c, 68a6afe50e0f3bd8deac4fbc, 68a6afe50e0f3bd8deac4fdc, 68a6afe50e0f3bd8deac4ffc, 68a6afe50e0f3bd8deac501c, 68a6afe50e0f3bd8deac503c, 68a6afe50e0f3bd8deac505c, 68a6afe50e0f3bd8deac507c, 68a6afe50e0f3bd8deac50a6, 68a6afe50e0f3bd8deac50c6, 68a6afe50e0f3bd8deac50e6, 68a6afe50e0f3bd8deac5110, 68a6afe50e0f3bd8deac5130, 68a6afe50e0f3bd8deac5150, 68a6afe50e0f3bd8deac517a, 68a6afe50e0f3bd8deac519a, 68a6afe50e0f3bd8deac51ba, 68a6afe50e0f3bd8deac51db, 68a6afe50e0f3bd8deac520d, 68a6afe50e0f3bd8deac5224, 68a6afe50e0f3bd8deac523b, 68a6afe50e0f3bd8deac525b, 68a6afe50e0f3bd8deac528f, 68a6afe50e0f3bd8deac52af, 68a6afe50e0f3bd8deac52cf, 68a6afe50e0f3bd8deac52ef, 68a6afe50e0f3bd8deac530f, 68a6afe50e0f3bd8deac532f, 68a6afe50e0f3bd8deac534f, 68a6afe50e0f3bd8deac536f, 68a6afe50e0f3bd8deac5395, 68a6afe50e0f3bd8deac53b0, 68a6afe50e0f3bd8deac53d8, 68a6afe50e0f3bd8deac53f4, 68a6afe50e0f3bd8deac5415, 68a6afe50e0f3bd8deac542f, 68a6afe50e0f3bd8deac5458, 68a6afe50e0f3bd8deac5475, 68a6afe50e0f3bd8deac5495, 68a6afe50e0f3bd8deac54b5, 68a6afe50e0f3bd8deac54d5, 68a6afe50e0f3bd8deac54f5, 68a6afe50e0f3bd8deac5515, 68a6afe50e0f3bd8deac5535, 68a6afe50e0f3bd8deac555f, 68a6afe50e0f3bd8deac557f, 68a6afe50e0f3bd8deac559f, 68a6afe50e0f3bd8deac55bf, 68a6afe50e0f3bd8deac55df, 68a6afe50e0f3bd8deac55ff, 68a6afe50e0f3bd8deac561f, 68a6afe50e0f3bd8deac564c, 68a6afe50e0f3bd8deac566f, 68a6afe50e0f3bd8deac569d, 68a6afe50e0f3bd8deac56bd, 68a6afe50e0f3bd8deac56f4, 68a6afe50e0f3bd8deac56fc, 68a6afe50e0f3bd8deac5717, 68a6afe50e0f3bd8deac573d, 68a6afe50e0f3bd8deac5770, 68a6afe50e0f3bd8deac5783, 68a6afe50e0f3bd8deac57b0, 68a6afe50e0f3bd8deac57c7, 68a6afe50e0f3bd8deac57f1, 68a6afe50e0f3bd8deac5804, 68a6afe50e0f3bd8deac583d, 68a6afe50e0f3bd8deac5847, 68a6afe50e0f3bd8deac586f, 68a6afe50e0f3bd8deac5884, 68a6afe50e0f3bd8deac58b6, 68a6afe50e0f3bd8deac58c7, 68a6afe50e0f3bd8deac58f6, 68a6afe50e0f3bd8deac5901, 68a6afe50e0f3bd8deac5937, 68a6afe50e0f3bd8deac5947, 68a6afe50e0f3bd8deac5967, 68a6afe50e0f3bd8deac599e, 68a6afe50e0f3bd8deac59a6, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeVolumeRendererBase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[4b0e0b7fcbd9e07e9b1f5387e708a044]</td>
|
|
<td>[8537eae1fb1a771a28fc0571775711bac868b3df]</td>
|
|
<td>[a41f18bc1bdf5c89c8268ba64a32206da9f6abe4aef6c31b079f6551313498c8c73044d00a341a20dabef5dc7e2b4560]</td>
|
|
<td>[b41122fd11f141267ee0c9bf8d437ee5c35585f0ab7a1e544c2a704779ed1133af9cf058709df163065a07e23f5b30572aad23362cc272c76817f25de4230b85]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeVolumeRendererBase.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>345600</td>
|
|
<td>4b0e0b7fcbd9e07e9b1f5387e708a044</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:01:11 +0000 UTC</td>
|
|
<td>8537eae1fb1a771a28fc0571775711bac868b3df</td>
|
|
<td>a41f18bc1bdf5c89c8268ba64a32206da9f6abe4aef6c31b079f6551313498c8c73044d00a341a20dabef5dc7e2b4560</td>
|
|
<td>b41122fd11f141267ee0c9bf8d437ee5c35585f0ab7a1e544c2a704779ed1133af9cf058709df163065a07e23f5b30572aad23362cc272c76817f25de4230b85</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8e1e1cc17ababa2e966888d3f24f6433f1ed6321d262827bd46c1d761d6d6955</td>
|
|
<td>[68a16bd60756fe54a9918f9f, 68a2149cb58debea69d7c749, 68a2bd5ff793a9057f329c05, 68a3663261f8067c48423eb6, 68a40efceddb3a9f1a71a5ff, 68a4b7cd36bc5d38057e2364]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zEventTracker.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[74bc3a324486e7932736ad47214c0260]</td>
|
|
<td>[075fca7b2ec409d0fc70c07c24e2df41fd84890a]</td>
|
|
<td>[05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd]</td>
|
|
<td>[fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zEventTracker.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>226104</td>
|
|
<td>74bc3a324486e7932736ad47214c0260</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>075fca7b2ec409d0fc70c07c24e2df41fd84890a</td>
|
|
<td>05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd</td>
|
|
<td>fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:42 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8dfede6865d3c8ed1311b3e5b9a74b622ed0a2c7f9b9ce42a7f2425938d55624</td>
|
|
<td>[68a472b1b022648922e235b0]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xmlgraphics-commons-2.4.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[0e8876cf2cee31d25507f7f122ad4137]</td>
|
|
<td>[8d261df049a23d40a053d2700399ea76080fe0a8]</td>
|
|
<td>[4f83cfa4b38a9471d745145a97bf7209cb88d30e7c84b2ad7b557f6bf9c12e3b12e4048475286c0ffebc092076158896]</td>
|
|
<td>[f36086590f6cd2ced829ea7fa24f99a374544bff7bbe771190ca447e811ab4830fd6b46c06d6f2983a112b0b7e2f3727765559f47441950aaa3b8ed94b5954bc]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>xmlgraphics-commons-2.4.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>674446</td>
|
|
<td>0e8876cf2cee31d25507f7f122ad4137</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>8d261df049a23d40a053d2700399ea76080fe0a8</td>
|
|
<td>4f83cfa4b38a9471d745145a97bf7209cb88d30e7c84b2ad7b557f6bf9c12e3b12e4048475286c0ffebc092076158896</td>
|
|
<td>f36086590f6cd2ced829ea7fa24f99a374544bff7bbe771190ca447e811ab4830fd6b46c06d6f2983a112b0b7e2f3727765559f47441950aaa3b8ed94b5954bc</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-16 14:53:13 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:23:34.502 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8df0f98abff9c236fe721fb72e8aeebd922e8066668caa17a4dd205b0b7c0943</td>
|
|
<td>[68a16bd60756fe54a9918f98, 68a2149cb58debea69d7c743, 68a2bd5ff793a9057f329bfc, 68a3663261f8067c48423eb0, 68a40efceddb3a9f1a71a5f9, 68a4b7cd36bc5d38057e235e]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZMDB.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[0df7de126b6940fc83fe88611d07038b]</td>
|
|
<td>[0c05bb0be9131cbd3773e063e501f8be8f417fdb]</td>
|
|
<td>[71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe]</td>
|
|
<td>[e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZMDB.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>1188152</td>
|
|
<td>0df7de126b6940fc83fe88611d07038b</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0c05bb0be9131cbd3773e063e501f8be8f417fdb</td>
|
|
<td>71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe</td>
|
|
<td>e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:56 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8dcc9eb968c2c9db5ba7f8ceed8ba69324b28b276c40c0df325ac6a22b5314f5</td>
|
|
<td>[68a523949cec397f02de9f51]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DataModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[87329721b4c0dfe9032c6801df4da2dd]</td>
|
|
<td>[2b3ebb3cbb2c964cb1dd4c6a953115785530cca2]</td>
|
|
<td>[4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23]</td>
|
|
<td>[c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DataModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>DataModel</td>
|
|
<td>28672</td>
|
|
<td>87329721b4c0dfe9032c6801df4da2dd</td>
|
|
<td>DataModel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:10 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:10 +0000 UTC</td>
|
|
<td>2b3ebb3cbb2c964cb1dd4c6a953115785530cca2</td>
|
|
<td>4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23</td>
|
|
<td>c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8dcb19fd968ce3a14de4d2ed31fd5e6bb6b9e14e3d67b0cce3a341612a967a81</td>
|
|
<td>[68a48674c4cb2500be692642]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.SwaggerGen.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[72329e480b920a13e31934e2f529050b]</td>
|
|
<td>[b995a2f1cab419e3fe6b8f172a2f319af2c858d4]</td>
|
|
<td>[ecaa1562208ca5792bb7bcbfa74da9f536da17269bf5e2f86275c9e1f62384b59909af24bb6eba0e71469b269448821a]</td>
|
|
<td>[95e12e429bf40f90e5f3a05b99fcacabc1cdbf3e7feee5ab3fe0cf323a93d4e46fc344374f875e9570a43fa266e454519b6f68c0413a9359b064c5a82c99ffc1]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>96768</td>
|
|
<td>72329e480b920a13e31934e2f529050b</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-01-11 11:48:24 +0000 UTC</td>
|
|
<td>2023-01-11 11:48:24 +0000 UTC</td>
|
|
<td>b995a2f1cab419e3fe6b8f172a2f319af2c858d4</td>
|
|
<td>ecaa1562208ca5792bb7bcbfa74da9f536da17269bf5e2f86275c9e1f62384b59909af24bb6eba0e71469b269448821a</td>
|
|
<td>95e12e429bf40f90e5f3a05b99fcacabc1cdbf3e7feee5ab3fe0cf323a93d4e46fc344374f875e9570a43fa266e454519b6f68c0413a9359b064c5a82c99ffc1</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-15 22:09:54 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 14:11:01.183 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8d6314b0b132e4f90c614e0da514145f33cd612c61de6625846d0e3a851a8526</td>
|
|
<td>[68a1948400572dc6e953eac7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[nt-compass5]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_v0hjxpqk.y0v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:36:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_v0hjxpqk.y0v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:36:09 +0000 UTC</td>
|
|
<td>2025-08-17 08:36:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:36:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8d423d38d1d19e45323c114230bc1dbb9cf712c19a3b91b1d4cc7f034e4212de</td>
|
|
<td>[68a230dc4f444eddb4af5547]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w3bfksit.znv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:43:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w3bfksit.znv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:43:21 +0000 UTC</td>
|
|
<td>2025-08-17 19:43:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:43:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cfdf2a28b4b2141ed76efdb646aff13e98839e0899c6adb3251d869435c7f62</td>
|
|
<td>[68a31b06388be01815425c5c]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:28Z]</td>
|
|
<td>[5101faab8397e7d7a6a747b7b23e1120]</td>
|
|
<td>[a3b33248c78cd3c905ae66c5435c2eb59feaac5d]</td>
|
|
<td>[bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8]</td>
|
|
<td>[379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>5101faab8397e7d7a6a747b7b23e1120</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:27 +0000 UTC</td>
|
|
<td>a3b33248c78cd3c905ae66c5435c2eb59feaac5d</td>
|
|
<td>bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8</td>
|
|
<td>379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334</td>
|
|
<td>2025-08-18 12:22:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93f7bf68b241e38bde286fa997117fe3c109c9480386348f4b63a940773cb204</td>
|
|
<td>[68a71d98771132224a617f88]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\Newtonsoft.Json.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:41Z]</td>
|
|
<td>[6c43aba0181079ad4ec3833d9a455afb]</td>
|
|
<td>[35b952e87086daf66cc069b8e429d158e0684cab]</td>
|
|
<td>[5693ce6170e3fc0405f46dcb8b63525e922e8bd213cb70a67dea0a216f0d52bd2a1ac4541096ad2e548aed2af05541c7]</td>
|
|
<td>[8209686f740a115d255c0424546ef7594abeeb59bf37c8cff0d54a1e6beaff8603df75ece18515ed8fd588ef08c56b38eacffa57985b5cdaf236d1a82f626d50]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Newtonsoft.Json.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>Json.NET Portable</td>
|
|
<td>449024</td>
|
|
<td>6c43aba0181079ad4ec3833d9a455afb</td>
|
|
<td>Json.NET</td>
|
|
<td>6.0.6.17820</td>
|
|
<td>Not Signed</td>
|
|
<td>2014-10-21 00:22:08 +0000 UTC</td>
|
|
<td>2014-10-21 00:22:08 +0000 UTC</td>
|
|
<td>35b952e87086daf66cc069b8e429d158e0684cab</td>
|
|
<td>5693ce6170e3fc0405f46dcb8b63525e922e8bd213cb70a67dea0a216f0d52bd2a1ac4541096ad2e548aed2af05541c7</td>
|
|
<td>8209686f740a115d255c0424546ef7594abeeb59bf37c8cff0d54a1e6beaff8603df75ece18515ed8fd588ef08c56b38eacffa57985b5cdaf236d1a82f626d50</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-03-24 06:39:54 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93e1c58a8b37a06fd12513dac10c56cb4f8142f59bf22ade44711fc3fa700549</td>
|
|
<td>[68a16bd60756fe54a9918f97, 68a2149cb58debea69d7c742, 68a2bd5ff793a9057f329bfb, 68a3663261f8067c48423eaf, 68a40efceddb3a9f1a71a5f7, 68a4b7cd36bc5d38057e235d]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zLooper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[09bccc0138705459b9770a748b63b844]</td>
|
|
<td>[63ea04e8e1d4267982eafc40cd7f408dcb17f0d1]</td>
|
|
<td>[ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a]</td>
|
|
<td>[bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zLooper.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>69432</td>
|
|
<td>09bccc0138705459b9770a748b63b844</td>
|
|
<td>Zoom</td>
|
|
<td>1,0,0,0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>63ea04e8e1d4267982eafc40cd7f408dcb17f0d1</td>
|
|
<td>ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a</td>
|
|
<td>bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:04:30 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93dd4bed6eaeb61ac692bad889927b385bccaaab087061310c1e3af53f9057dd</td>
|
|
<td>[68a6afe50e0f3bd8deac4cef, 68a6afe50e0f3bd8deac4d1f, 68a6afe50e0f3bd8deac4d2f, 68a6afe50e0f3bd8deac4d4e, 68a6afe50e0f3bd8deac4d6d, 68a6afe50e0f3bd8deac4d8f, 68a6afe50e0f3bd8deac4db0, 68a6afe50e0f3bd8deac4dcd, 68a6afe50e0f3bd8deac4ded, 68a6afe50e0f3bd8deac4e0e, 68a6afe50e0f3bd8deac4e2d, 68a6afe50e0f3bd8deac4e4e, 68a6afe50e0f3bd8deac4e6e, 68a6afe50e0f3bd8deac4e8e, 68a6afe50e0f3bd8deac4ebf, 68a6afe50e0f3bd8deac4ecd, 68a6afe50e0f3bd8deac4eed, 68a6afe50e0f3bd8deac4f0e, 68a6afe50e0f3bd8deac4f2e, 68a6afe50e0f3bd8deac4f57, 68a6afe50e0f3bd8deac4f77, 68a6afe50e0f3bd8deac4f97, 68a6afe50e0f3bd8deac4fb8, 68a6afe50e0f3bd8deac4fd7, 68a6afe50e0f3bd8deac4ff8, 68a6afe50e0f3bd8deac5017, 68a6afe50e0f3bd8deac5037, 68a6afe50e0f3bd8deac5058, 68a6afe50e0f3bd8deac5077, 68a6afe50e0f3bd8deac50a1, 68a6afe50e0f3bd8deac50c2, 68a6afe50e0f3bd8deac50e1, 68a6afe50e0f3bd8deac510b, 68a6afe50e0f3bd8deac512c, 68a6afe50e0f3bd8deac514c, 68a6afe50e0f3bd8deac5175, 68a6afe50e0f3bd8deac5196, 68a6afe50e0f3bd8deac51b6, 68a6afe50e0f3bd8deac51d7, 68a6afe50e0f3bd8deac5209, 68a6afe50e0f3bd8deac5222, 68a6afe50e0f3bd8deac5238, 68a6afe50e0f3bd8deac5257, 68a6afe50e0f3bd8deac528b, 68a6afe50e0f3bd8deac52aa, 68a6afe50e0f3bd8deac52cb, 68a6afe50e0f3bd8deac52ea, 68a6afe50e0f3bd8deac530b, 68a6afe50e0f3bd8deac532b, 68a6afe50e0f3bd8deac534a, 68a6afe50e0f3bd8deac536b, 68a6afe50e0f3bd8deac538a, 68a6afe50e0f3bd8deac5391, 68a6afe50e0f3bd8deac53b3, 68a6afe50e0f3bd8deac53d2, 68a6afe50e0f3bd8deac53f0, 68a6afe50e0f3bd8deac5411, 68a6afe50e0f3bd8deac542e, 68a6afe50e0f3bd8deac5451, 68a6afe50e0f3bd8deac5471, 68a6afe50e0f3bd8deac5490, 68a6afe50e0f3bd8deac54b0, 68a6afe50e0f3bd8deac54d1, 68a6afe50e0f3bd8deac54f2, 68a6afe50e0f3bd8deac5510, 68a6afe50e0f3bd8deac5530, 68a6afe50e0f3bd8deac555a, 68a6afe50e0f3bd8deac557a, 68a6afe50e0f3bd8deac559a, 68a6afe50e0f3bd8deac55bb, 68a6afe50e0f3bd8deac55db, 68a6afe50e0f3bd8deac55fb, 68a6afe50e0f3bd8deac561b, 68a6afe50e0f3bd8deac5645, 68a6afe50e0f3bd8deac566b, 68a6afe50e0f3bd8deac5699, 68a6afe50e0f3bd8deac56b9, 68a6afe50e0f3bd8deac56f1, 68a6afe50e0f3bd8deac5701, 68a6afe50e0f3bd8deac5734, 68a6afe50e0f3bd8deac5739, 68a6afe50e0f3bd8deac576c, 68a6afe50e0f3bd8deac5781, 68a6afe50e0f3bd8deac57ad, 68a6afe50e0f3bd8deac57c4, 68a6afe50e0f3bd8deac57ed, 68a6afe50e0f3bd8deac5803, 68a6afe50e0f3bd8deac5839, 68a6afe50e0f3bd8deac5843, 68a6afe50e0f3bd8deac586b, 68a6afe50e0f3bd8deac5883, 68a6afe50e0f3bd8deac58ba, 68a6afe50e0f3bd8deac58c3, 68a6afe50e0f3bd8deac58f1, 68a6afe50e0f3bd8deac591d, 68a6afe50e0f3bd8deac5933, 68a6afe50e0f3bd8deac5943, 68a6afe50e0f3bd8deac5962, 68a6afe50e0f3bd8deac599a, 68a6afe50e0f3bd8deac59a5, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\PrometheusClt.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[4a6b079b92bf0c55a04eece082bdb51d]</td>
|
|
<td>[5d6aa4d8a198e6412ba425620eb64bcc96a6be8a]</td>
|
|
<td>[f227411cf3b329b2c48c053e32fb36ea61297c488879050572f68ec697c8b1a4425b5393509358fe3bdaa9bdccbfb736]</td>
|
|
<td>[66c778613af1402d28835477c39ea56ca727a3fe0a091718780fd3c4fe1acbfdb269b22517052dce9bd9f54814b027f3a5d04f63193693732a34c9ae541150f7]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PrometheusClt.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>764928</td>
|
|
<td>4a6b079b92bf0c55a04eece082bdb51d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:56 +0000 UTC</td>
|
|
<td>2023-06-16 03:04:33 +0000 UTC</td>
|
|
<td>5d6aa4d8a198e6412ba425620eb64bcc96a6be8a</td>
|
|
<td>f227411cf3b329b2c48c053e32fb36ea61297c488879050572f68ec697c8b1a4425b5393509358fe3bdaa9bdccbfb736</td>
|
|
<td>66c778613af1402d28835477c39ea56ca727a3fe0a091718780fd3c4fe1acbfdb269b22517052dce9bd9f54814b027f3a5d04f63193693732a34c9ae541150f7</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93c513e66a8974831a79fa4f1e81c7851fd38536fbaeb814fdaa200fa36e1ad3</td>
|
|
<td>[68a712752561fbf503357df5]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\4vm1tmr5\4vm1tmr5.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:30:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>4vm1tmr5.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\4vm1tmr5\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-21 12:35:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>934ef5c14e218db7b86847cb7e8e5a2b985ccfa55c27805c72d8c3fb5103cfb4</td>
|
|
<td>[68a2369b3b43e7f02650554c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nz35alhg.5g5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:07:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nz35alhg.5g5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:07:42 +0000 UTC</td>
|
|
<td>2025-08-17 20:07:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:07:55 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>930b1b9c71a3c5e16852cb23eaa4b624d9cfd50f4730ace88b34f3a2e0cc80f4</td>
|
|
<td>[68a38868065f0a2246a5fd5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dxct1uzy.sdn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2269.866]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T20:09:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dxct1uzy.sdn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 20:09:06 +0000 UTC</td>
|
|
<td>2025-08-18 20:09:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 20:09:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93012784c597277ba019572d4a60fc2b45f437fe68c39635b35ffdfb87b1bb13</td>
|
|
<td>[68a5cc2091727380a40e2b0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\233afcee-6ced-4993-9401-b562fb70f217.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:31Z]</td>
|
|
<td>[b88f41bbc1e02900c47403eea28a10ea]</td>
|
|
<td>[9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552]</td>
|
|
<td>[c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334]</td>
|
|
<td>[904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>233afcee-6ced-4993-9401-b562fb70f217.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>790</td>
|
|
<td>b88f41bbc1e02900c47403eea28a10ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:30 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:30 +0000 UTC</td>
|
|
<td>9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552</td>
|
|
<td>c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334</td>
|
|
<td>904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e</td>
|
|
<td>2025-08-20 13:22:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>923528caae4b397941a4cc7d31559130c34e624b777748c1711b22c6b1075878</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21a]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AD_Direct_reports.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[09cd0b51ba652e8b8f7a8f4156940364]</td>
|
|
<td>[6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57]</td>
|
|
<td>[a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b]</td>
|
|
<td>[62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AD_Direct_reports.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3119</td>
|
|
<td>09cd0b51ba652e8b8f7a8f4156940364</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-08-21 12:44:06 +0000 UTC</td>
|
|
<td>2025-06-13 14:43:10 +0000 UTC</td>
|
|
<td>6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57</td>
|
|
<td>a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b</td>
|
|
<td>62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>91ff3783187c447417b1e043d6548c6afd0bb6d23f08d61fd02459bae9712a45</td>
|
|
<td>[68a32e4676197e42f5a2fbd5, 68a45c02fdc422fb7bc1af75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vCUACPub]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\AACM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852, v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:38:25Z, 2025-08-19T11:02:01Z]</td>
|
|
<td>[65acd3aadd460333cdf00b7aa3496083]</td>
|
|
<td>[409f060afc9596b65a39165598013d9f3c666d1c]</td>
|
|
<td>[2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0]</td>
|
|
<td>[b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6]</td>
|
|
<td>[172.17.196.36]</td>
|
|
<td>[172.17.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AACM.dll</td>
|
|
<td>C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\</td>
|
|
<td>Cisco Unified Attendant Console</td>
|
|
<td>6745088</td>
|
|
<td>65acd3aadd460333cdf00b7aa3496083</td>
|
|
<td>Cisco Unified Attendant Console Advanced</td>
|
|
<td>WEB 12.0.5.1823</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-19 18:20:02 +0000 UTC</td>
|
|
<td>2019-07-19 18:20:02 +0000 UTC</td>
|
|
<td>409f060afc9596b65a39165598013d9f3c666d1c</td>
|
|
<td>2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0</td>
|
|
<td>b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6</td>
|
|
<td>2025-05-15 16:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>918cae3b9be1ee964521f29f95df80ca661f04fbfd790717c2bf044354d93d05</td>
|
|
<td>[68a19bf9f9fa0cbc93a3e18c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xkmgggns.rsj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:08:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xkmgggns.rsj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:08:04 +0000 UTC</td>
|
|
<td>2025-08-17 09:08:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:08:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>917ab3848c77e9593866c25b4b135e29b394f91214d295074a9dcbb07592d16b</td>
|
|
<td>[68a524b7d65490728dc99895]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wsefqq2c.g5h.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:28:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wsefqq2c.g5h.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:28:13 +0000 UTC</td>
|
|
<td>2025-08-20 01:28:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:28:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9112c932f1ebb8bb91402140bcb506afc616bc2f94c27daebed1975ab396c6ea</td>
|
|
<td>[68a5d0d993ef7c7d1206147e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_rojnfgz1.5of.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2291.881]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:42:41Z]</td>
|
|
<td>[82750d3658af09bec0468e8d3ce2aeb1]</td>
|
|
<td>[85d51df1579e58a1cb11665ee95e4858850d8401]</td>
|
|
<td>[b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e]</td>
|
|
<td>[9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rojnfgz1.5of.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>82750d3658af09bec0468e8d3ce2aeb1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:42:41 +0000 UTC</td>
|
|
<td>2025-08-20 13:42:41 +0000 UTC</td>
|
|
<td>85d51df1579e58a1cb11665ee95e4858850d8401</td>
|
|
<td>b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e</td>
|
|
<td>9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23</td>
|
|
<td>2025-08-20 13:42:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>91120b1794849724fc9ad653ec6607ac3f1c69a20e5b813ed9691b465f3deb06</td>
|
|
<td>[68a1de00310078f5309be0d1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0qhxxeok.d1t.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:49:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0qhxxeok.d1t.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:49:44 +0000 UTC</td>
|
|
<td>2025-08-17 13:49:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:49:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90d4051cf517ac7bbe8c79ad0c4ec7f4649ce5ab42959aad199aa9cd94b1b87b</td>
|
|
<td>[68a34b98a6132bf659cce5c2, 68a34df0b71eea1289980a27]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Medeco.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:20Z, 2025-08-18T15:58:10Z]</td>
|
|
<td>[732c49ecabd8c6c5a5c7681a37b0fc1b]</td>
|
|
<td>[cc60b5a4ed985f4a278f5a9d213069668e158fb6]</td>
|
|
<td>[428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1]</td>
|
|
<td>[35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Medeco.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Medeco Integration</td>
|
|
<td>163328</td>
|
|
<td>732c49ecabd8c6c5a5c7681a37b0fc1b</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:34 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:34 +0000 UTC</td>
|
|
<td>cc60b5a4ed985f4a278f5a9d213069668e158fb6</td>
|
|
<td>428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1</td>
|
|
<td>35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90a5f9ceaed977edfe8f514dcb15ddf5001cf9111a8fcd87b7cd8b0bb6231acc</td>
|
|
<td>[68a472b1b022648922e2358c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jcommon-1.0.17.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[d123cd511e2ebc4542e8b424cd20bbde]</td>
|
|
<td>[7bcb68fde08258e59fe7bcc758c08af830fb2c1d]</td>
|
|
<td>[0932599e79151670367c006eae1dda81952b37d3aea65fdacab09e0ddd834647eb180bdce7704a5d86016482bcb8bdd8]</td>
|
|
<td>[2e49d42617502eed52dff5f3fbf620612b5da8f6f1c37f327c6a246f5717860944358d6d508ad8596892217494545d39b28fdfc845b61677dfd9ff99f122f9f8]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jcommon-1.0.17.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>506386</td>
|
|
<td>d123cd511e2ebc4542e8b424cd20bbde</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>7bcb68fde08258e59fe7bcc758c08af830fb2c1d</td>
|
|
<td>0932599e79151670367c006eae1dda81952b37d3aea65fdacab09e0ddd834647eb180bdce7704a5d86016482bcb8bdd8</td>
|
|
<td>2e49d42617502eed52dff5f3fbf620612b5da8f6f1c37f327c6a246f5717860944358d6d508ad8596892217494545d39b28fdfc845b61677dfd9ff99f122f9f8</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-10 23:11:45 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90812f7b5c7f20d66571d9443f189b21105bcb1623cc4f53e465e092c616b667</td>
|
|
<td>[68a18597b6a5f761a88cfa32, 68a2d8ecf31eeab05c2823c5, 68a428c2b79a1ebc024dfc24, 68a57a5ae65234fd31d524a1, 68a6cbfb2a5793a672827170]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[UVOSCCN2]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:30:25Z, 2025-08-18T07:30:24Z, 2025-08-19T07:30:24Z, 2025-08-20T07:30:25Z, 2025-08-21T07:30:25Z]</td>
|
|
<td>[c799558e2a940cce61ff908c235a04ef]</td>
|
|
<td>[e991cadd79ff635a53623530e85eeb7b958ee0cc]</td>
|
|
<td>[7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e]</td>
|
|
<td>[46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2975</td>
|
|
<td>c799558e2a940cce61ff908c235a04ef</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:28:02 +0000 UTC</td>
|
|
<td>2022-05-08 10:28:59 +0000 UTC</td>
|
|
<td>e991cadd79ff635a53623530e85eeb7b958ee0cc</td>
|
|
<td>7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e</td>
|
|
<td>46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228</td>
|
|
<td>2025-08-09 07:30:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98c5823148a8173192ad3c72d9f4ea39c6c9f246fdbbaa0951d52c0c5f8e77b8</td>
|
|
<td>[68a5239e621d09b2b1ed5e56]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\RecordingsGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[8a5f1e57ae11d28423d76cb656a26c7d]</td>
|
|
<td>[442bc003f5180cc49734aa713f71766826622f60]</td>
|
|
<td>[7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e]</td>
|
|
<td>[f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RecordingsGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>RecordingsGUI</td>
|
|
<td>51200</td>
|
|
<td>8a5f1e57ae11d28423d76cb656a26c7d</td>
|
|
<td>RecordingsGUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>442bc003f5180cc49734aa713f71766826622f60</td>
|
|
<td>7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e</td>
|
|
<td>f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98a95506abccaa35c07debc753da55a30e02cdb9ebf9bf1c4cb2c893db23c09e</td>
|
|
<td>[68a50bca7779aa65cf4b6098]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MarquetteA5_5_3_10_3.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:41:53Z]</td>
|
|
<td>[0626022f937e6547de857658b88f7e30]</td>
|
|
<td>[a320f0c9212d7d0249b75c3c1c0a5a7708f0e224]</td>
|
|
<td>[f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84]</td>
|
|
<td>[67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MarquetteA5_5_3_10_3.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>3076096</td>
|
|
<td>0626022f937e6547de857658b88f7e30</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2025-08-19 23:41:50 +0000 UTC</td>
|
|
<td>2025-08-19 23:41:52 +0000 UTC</td>
|
|
<td>a320f0c9212d7d0249b75c3c1c0a5a7708f0e224</td>
|
|
<td>f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84</td>
|
|
<td>67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc</td>
|
|
<td>2025-08-19 23:42:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>989ec9cc45afa5d70a781bf3c041eef2cf9b3a15b63b30448e8086f98d1efafb</td>
|
|
<td>[68a4709fa6c6568ae291d430]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:39:56Z]</td>
|
|
<td>[8656d6fdd16ca1d6e9155383064f43db]</td>
|
|
<td>[1b21d73c29fc305a870b33b76d3aa997e45adc4a]</td>
|
|
<td>[3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd]</td>
|
|
<td>[3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>3583048</td>
|
|
<td>8656d6fdd16ca1d6e9155383064f43db</td>
|
|
<td>InstallShield</td>
|
|
<td>22.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:39:56 +0000 UTC</td>
|
|
<td>2025-08-19 12:39:56 +0000 UTC</td>
|
|
<td>1b21d73c29fc305a870b33b76d3aa997e45adc4a</td>
|
|
<td>3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd</td>
|
|
<td>3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d</td>
|
|
<td>2025-08-19 12:39:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98785b23979f24fe0b15bb479bcb033372f10e9633e1a69522168b6a35b14392</td>
|
|
<td>[68a523949cec397f02de9f41]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AEMDictionary.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:24Z]</td>
|
|
<td>[f3f4cfa0df21c55ead9c48d0dfa26574]</td>
|
|
<td>[6ea7f80899194a24fbf750c0551fc6be488c11eb]</td>
|
|
<td>[80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4]</td>
|
|
<td>[4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AEMDictionary.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>286720</td>
|
|
<td>f3f4cfa0df21c55ead9c48d0dfa26574</td>
|
|
<td></td>
|
|
<td>1.0.8565.40716</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:16 +0000 UTC</td>
|
|
<td>6ea7f80899194a24fbf750c0551fc6be488c11eb</td>
|
|
<td>80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4</td>
|
|
<td>4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9825e9ad234a4e8cfd0ca4f761bf814b06e39e903bb6479f57f6573a4cf3a741</td>
|
|
<td>[68a5c81947601aee5f76e917, 68a5c9d7599432010e418bd0]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\lttwn12n.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe]</td>
|
|
<td>[2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z]</td>
|
|
<td>[b36c26c98901c689faac7cc8689ea9c6]</td>
|
|
<td>[11f1a1415556439b8c6d0307ec1d79b8ef93f3d7]</td>
|
|
<td>[2af2471f93b342d3dc11033da9fe25a49a62cf51887cfdff58382672bc77f2b211516a8548d98355088e8813b1b8eeb3]</td>
|
|
<td>[1e6605e2ba55084297cfc3cffb5d50a288c0e2adc0d1810cb59df4d43b7d842f6cf68d33e0faef8b507ca849b16b4b71b6c3199729603d6a25edfba2832b9206]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>lttwn12n.dll</td>
|
|
<td>E:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>41472</td>
|
|
<td>b36c26c98901c689faac7cc8689ea9c6</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>12.1.0.020</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-14 13:01:50 +0000 UTC</td>
|
|
<td>2001-04-30 20:52:56 +0000 UTC</td>
|
|
<td>11f1a1415556439b8c6d0307ec1d79b8ef93f3d7</td>
|
|
<td>2af2471f93b342d3dc11033da9fe25a49a62cf51887cfdff58382672bc77f2b211516a8548d98355088e8813b1b8eeb3</td>
|
|
<td>1e6605e2ba55084297cfc3cffb5d50a288c0e2adc0d1810cb59df4d43b7d842f6cf68d33e0faef8b507ca849b16b4b71b6c3199729603d6a25edfba2832b9206</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-06-09 03:18:36 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>97c328205920d390811489de9f6422c397c9e92051610690a32e21f9ec986cbc</td>
|
|
<td>[68a523949cec397f02de9f57]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventsGeneratorModule.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[a00640fae1d989e1a7694484ed783170]</td>
|
|
<td>[b6505d65a800bad37bfc415fcc8cffcb2560af3d]</td>
|
|
<td>[b031056e682423161abbb2a8ef1ebefd8485f567c8b6ba80f508c1b0eaf6bc3f58b3db9e46829377148b3f2f3bb03413]</td>
|
|
<td>[2a2afb04ea4b20897e080806c21e17e1100eab123d7b528b75286df1b4403cb69f92c5f6d9f2f9ab4856086c0cbdb95a8523636dd985d4bb5c928e45eba67e7a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EventsGeneratorModule.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>EventsGeneratorModule</td>
|
|
<td>22016</td>
|
|
<td>a00640fae1d989e1a7694484ed783170</td>
|
|
<td>EventsGeneratorModule</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:12 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:12 +0000 UTC</td>
|
|
<td>b6505d65a800bad37bfc415fcc8cffcb2560af3d</td>
|
|
<td>b031056e682423161abbb2a8ef1ebefd8485f567c8b6ba80f508c1b0eaf6bc3f58b3db9e46829377148b3f2f3bb03413</td>
|
|
<td>2a2afb04ea4b20897e080806c21e17e1100eab123d7b528b75286df1b4403cb69f92c5f6d9f2f9ab4856086c0cbdb95a8523636dd985d4bb5c928e45eba67e7a</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-19 17:24:03 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>975ea175eadfdf66d1737a5bba6259c1d7645ef6e366d2065c42a537522f9e74</td>
|
|
<td>[68a16fe817c245683297ce48]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_sasv0xj3.dj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-17T06:00:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_sasv0xj3.dj0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:00:01 +0000 UTC</td>
|
|
<td>2025-08-17 06:00:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>96ff07a0eedbd7076a72e8437e437fdb2daa4fc1a9e602b883e7be15ab56ee7b</td>
|
|
<td>[68a46f91773c0242a5f9ac18]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\RSWHostConfigLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSICF19.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T12:35:28Z]</td>
|
|
<td>[5c96012a71c21f3471db121fff79e09e]</td>
|
|
<td>[9ae178c32bff752a942acecdafcc0b92a067c0a1]</td>
|
|
<td>[7bef724546e99adf44e2d7f16d07a6808efcfac7ab6296f681a44ec0e7f591453a6cccae7d7ebca2c6ff1320e3471bbb]</td>
|
|
<td>[24bc3088fbcf7c4276222943665a3abf0bba20870f74ccfd72432eb6bae83eb5488e3e68f3690405dffa0767f09866b985a5688e59903374df13c5b91ce80af8]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RSWHostConfigLib.dll</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\</td>
|
|
<td>Dell Storage Host Config Module</td>
|
|
<td>70656</td>
|
|
<td>5c96012a71c21f3471db121fff79e09e</td>
|
|
<td>Dell Storage Manager</td>
|
|
<td>1.4.0.109</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:48 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:48 +0000 UTC</td>
|
|
<td>9ae178c32bff752a942acecdafcc0b92a067c0a1</td>
|
|
<td>7bef724546e99adf44e2d7f16d07a6808efcfac7ab6296f681a44ec0e7f591453a6cccae7d7ebca2c6ff1320e3471bbb</td>
|
|
<td>24bc3088fbcf7c4276222943665a3abf0bba20870f74ccfd72432eb6bae83eb5488e3e68f3690405dffa0767f09866b985a5688e59903374df13c5b91ce80af8</td>
|
|
<td>2025-05-02 01:14:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-30 10:53:27 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-02 01:15:37.59 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>966b014872df2b10771a6d6599d9eec4fd8d07864b4640d6e4292d0ee2318cd3</td>
|
|
<td>[68a19d4d339a5398da5a5181]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zolibxmz.drt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:13:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zolibxmz.drt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:13:44 +0000 UTC</td>
|
|
<td>2025-08-17 09:13:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:13:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9647877a7e4fdb83bbda5a2173ff9135b2a52d3d083c444ca8af53f35f2d4837</td>
|
|
<td>[68a1d738c11dd0afce1560b6, 68a328b63412995838d5c362]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ITC-RODC-1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Npcap\CheckStatus.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2253]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T13:11:09Z, 2025-08-18T13:11:05Z]</td>
|
|
<td>[c1a174f329ffa8b331f6fc4fe6ab42f6]</td>
|
|
<td>[47e61c26d8e04ebdf10dc2a848f7479ec31bd752]</td>
|
|
<td>[a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c]</td>
|
|
<td>[4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076]</td>
|
|
<td>[172.17.20.198]</td>
|
|
<td>[172.17.20.198]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckStatus.bat</td>
|
|
<td>C:\Program Files\Npcap\</td>
|
|
<td></td>
|
|
<td>880</td>
|
|
<td>c1a174f329ffa8b331f6fc4fe6ab42f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-09-25 03:12:08 +0000 UTC</td>
|
|
<td>2020-09-25 03:12:08 +0000 UTC</td>
|
|
<td>47e61c26d8e04ebdf10dc2a848f7479ec31bd752</td>
|
|
<td>a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c</td>
|
|
<td>4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076</td>
|
|
<td>2025-04-17 02:20:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>95feb7eb3e3ecf712806fd2a8be19bdd62c76ef7862756398639298a88f7cae0</td>
|
|
<td>[68a523949cec397f02de9f58]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ExcitersDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[159dbdfc8777d46c067121e0c063c16f]</td>
|
|
<td>[039bdf8d9e0ab6315b08c9564545dd6f3cd1a574]</td>
|
|
<td>[fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155]</td>
|
|
<td>[e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ExcitersDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ExcitersDiagPlugIn</td>
|
|
<td>18944</td>
|
|
<td>159dbdfc8777d46c067121e0c063c16f</td>
|
|
<td>ExcitersDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>039bdf8d9e0ab6315b08c9564545dd6f3cd1a574</td>
|
|
<td>fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155</td>
|
|
<td>e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89</td>
|
|
<td>[68a4e8a1ad898641af98fd93, 68a4fcd0011d94a251a4ef2f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\nsProcess.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\nsProcess.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z]</td>
|
|
<td>[05450face243b3a7472407b999b03a72]</td>
|
|
<td>[ffd88af2e338ae606c444390f7eaaf5f4aef2cd9]</td>
|
|
<td>[a9a59ab1a641545718cf538ee664407d11c6b697dc816b017d3dde86228a6782570c7fa422735f3cc8626f499d4b7483]</td>
|
|
<td>[f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>nsProcess.dll</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\</td>
|
|
<td></td>
|
|
<td>4096</td>
|
|
<td>05450face243b3a7472407b999b03a72</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>ffd88af2e338ae606c444390f7eaaf5f4aef2cd9</td>
|
|
<td>a9a59ab1a641545718cf538ee664407d11c6b697dc816b017d3dde86228a6782570c7fa422735f3cc8626f499d4b7483</td>
|
|
<td>f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-15 22:51:22 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-08-19 04:32:47.43 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>952073dff01fd0ba7ccbbfaf8a6284e08720809453b4f0930fe9c9d9775d4955</td>
|
|
<td>[68a6afe50e0f3bd8deac4d0a, 68a6afe50e0f3bd8deac4d1e, 68a6afe50e0f3bd8deac4d2c, 68a6afe50e0f3bd8deac4d4c, 68a6afe50e0f3bd8deac4d6c, 68a6afe50e0f3bd8deac4d8c, 68a6afe50e0f3bd8deac4dac, 68a6afe50e0f3bd8deac4dcc, 68a6afe50e0f3bd8deac4dec, 68a6afe50e0f3bd8deac4e0c, 68a6afe50e0f3bd8deac4e2c, 68a6afe50e0f3bd8deac4e4c, 68a6afe50e0f3bd8deac4e6c, 68a6afe50e0f3bd8deac4e8c, 68a6afe50e0f3bd8deac4ebd, 68a6afe50e0f3bd8deac4ecc, 68a6afe50e0f3bd8deac4eec, 68a6afe50e0f3bd8deac4f0c, 68a6afe50e0f3bd8deac4f2c, 68a6afe50e0f3bd8deac4f56, 68a6afe50e0f3bd8deac4f76, 68a6afe50e0f3bd8deac4f96, 68a6afe50e0f3bd8deac4fb6, 68a6afe50e0f3bd8deac4fd6, 68a6afe50e0f3bd8deac4ff6, 68a6afe50e0f3bd8deac5016, 68a6afe50e0f3bd8deac5036, 68a6afe50e0f3bd8deac5056, 68a6afe50e0f3bd8deac5076, 68a6afe50e0f3bd8deac50a0, 68a6afe50e0f3bd8deac50c0, 68a6afe50e0f3bd8deac50e0, 68a6afe50e0f3bd8deac510a, 68a6afe50e0f3bd8deac512a, 68a6afe50e0f3bd8deac514a, 68a6afe50e0f3bd8deac5174, 68a6afe50e0f3bd8deac5194, 68a6afe50e0f3bd8deac51b4, 68a6afe50e0f3bd8deac51d5, 68a6afe50e0f3bd8deac5207, 68a6afe50e0f3bd8deac521e, 68a6afe50e0f3bd8deac5235, 68a6afe50e0f3bd8deac5255, 68a6afe50e0f3bd8deac5289, 68a6afe50e0f3bd8deac52a9, 68a6afe50e0f3bd8deac52c9, 68a6afe50e0f3bd8deac52e9, 68a6afe50e0f3bd8deac5309, 68a6afe50e0f3bd8deac5329, 68a6afe50e0f3bd8deac5349, 68a6afe50e0f3bd8deac5369, 68a6afe50e0f3bd8deac5389, 68a6afe50e0f3bd8deac538f, 68a6afe50e0f3bd8deac53cb, 68a6afe50e0f3bd8deac53cf, 68a6afe50e0f3bd8deac53ee, 68a6afe50e0f3bd8deac540f, 68a6afe50e0f3bd8deac544a, 68a6afe50e0f3bd8deac544f, 68a6afe50e0f3bd8deac546f, 68a6afe50e0f3bd8deac548f, 68a6afe50e0f3bd8deac54af, 68a6afe50e0f3bd8deac54cf, 68a6afe50e0f3bd8deac54ef, 68a6afe50e0f3bd8deac550f, 68a6afe50e0f3bd8deac552f, 68a6afe50e0f3bd8deac5558, 68a6afe50e0f3bd8deac5579, 68a6afe50e0f3bd8deac5599, 68a6afe50e0f3bd8deac55b9, 68a6afe50e0f3bd8deac55d9, 68a6afe50e0f3bd8deac55f9, 68a6afe50e0f3bd8deac5619, 68a6afe50e0f3bd8deac563f, 68a6afe50e0f3bd8deac5669, 68a6afe50e0f3bd8deac5697, 68a6afe50e0f3bd8deac56b7, 68a6afe50e0f3bd8deac56ef, 68a6afe50e0f3bd8deac56f7, 68a6afe50e0f3bd8deac5731, 68a6afe50e0f3bd8deac5737, 68a6afe50e0f3bd8deac576a, 68a6afe50e0f3bd8deac579f, 68a6afe50e0f3bd8deac57ab, 68a6afe50e0f3bd8deac57c1, 68a6afe50e0f3bd8deac57eb, 68a6afe50e0f3bd8deac581f, 68a6afe50e0f3bd8deac5838, 68a6afe50e0f3bd8deac5841, 68a6afe50e0f3bd8deac5869, 68a6afe50e0f3bd8deac589f, 68a6afe50e0f3bd8deac58b1, 68a6afe50e0f3bd8deac58c1, 68a6afe50e0f3bd8deac58f0, 68a6afe50e0f3bd8deac591b, 68a6afe50e0f3bd8deac5932, 68a6afe50e0f3bd8deac5941, 68a6afe50e0f3bd8deac5961, 68a6afe50e0f3bd8deac5998, 68a6afe50e0f3bd8deac59a1, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeCoreEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:18Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[87b71725252e091a4cb61cbc3693b633]</td>
|
|
<td>[a9b3200651eb21921d94c26452b0690e2f06a0fe]</td>
|
|
<td>[e0217182a7d1d0cd80ab8694414fc84d2ae92c68a2229b212130680fc11edd0f0664bdde1175f532df6862115ed551e0]</td>
|
|
<td>[131de62dc9e8f7a970ced59fb24bcc20e7f569a112741e60b11c69cb90c4031d17c7ddaee4998ba09bc218f11327ab337a1b42b2dc8eb83ed0657f406203ed43]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeCoreEngine.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>8249856</td>
|
|
<td>87b71725252e091a4cb61cbc3693b633</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:42 +0000 UTC</td>
|
|
<td>2023-06-16 03:06:31 +0000 UTC</td>
|
|
<td>a9b3200651eb21921d94c26452b0690e2f06a0fe</td>
|
|
<td>e0217182a7d1d0cd80ab8694414fc84d2ae92c68a2229b212130680fc11edd0f0664bdde1175f532df6862115ed551e0</td>
|
|
<td>131de62dc9e8f7a970ced59fb24bcc20e7f569a112741e60b11c69cb90c4031d17c7ddaee4998ba09bc218f11327ab337a1b42b2dc8eb83ed0657f406203ed43</td>
|
|
<td>2025-05-07 14:27:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>95110c1a469b7d9b3827ddb372ed092836c8321395b9c25ba549b5dda9fbbed3</td>
|
|
<td>[68a34b98a6132bf659cce5ad, 68a34df0b71eea1289980a12]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[408f1dc91e0b03f6f257c34bdbc09d01]</td>
|
|
<td>[d5a3758015b9885cb698065828a86628665aa3ad]</td>
|
|
<td>[039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f]</td>
|
|
<td>[9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Common.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Common Library</td>
|
|
<td>564736</td>
|
|
<td>408f1dc91e0b03f6f257c34bdbc09d01</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:40 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:40 +0000 UTC</td>
|
|
<td>d5a3758015b9885cb698065828a86628665aa3ad</td>
|
|
<td>039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f</td>
|
|
<td>9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>950b75c140c5d9c3199f5ca51b4100e7cca3bc9e0f71724a32881ef7f8a287d9</td>
|
|
<td>[68a16bd60756fe54a9918f8d, 68a2149cb58debea69d7c738, 68a2bd5ff793a9057f329bf1, 68a3663261f8067c48423ea7, 68a40efceddb3a9f1a71a5ef, 68a4b7cd36bc5d38057e2355]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Cmmlib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[b394dfb05ceb80ac63edb50de392a1c7]</td>
|
|
<td>[63c411b9ee55ddc4710dc2658a330b3a40fae4e0]</td>
|
|
<td>[91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4]</td>
|
|
<td>[49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cmmlib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2822456</td>
|
|
<td>b394dfb05ceb80ac63edb50de392a1c7</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>63c411b9ee55ddc4710dc2658a330b3a40fae4e0</td>
|
|
<td>91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4</td>
|
|
<td>49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:05 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>94e7408b722334f3631567ac6d326877568d1d35e377a0e1a2d601cbcca0ad6c</td>
|
|
<td>[68a3146b5f0c41860c8c84ec, 68a3146b5f0c41860c8c854d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\queue.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[20c4f8397302a02b31f63b5ee9bd03a3]</td>
|
|
<td>[76fd6d3949fd58da5a7e6f95a5938dccb396c415]</td>
|
|
<td>[635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506]</td>
|
|
<td>[9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>queue.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17359</td>
|
|
<td>20c4f8397302a02b31f63b5ee9bd03a3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>76fd6d3949fd58da5a7e6f95a5938dccb396c415</td>
|
|
<td>635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506</td>
|
|
<td>9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c269c3ccae8cdfd948a0ad38c2b7f1bf344ae0d021c265ab3e58b957b590831</td>
|
|
<td>[68a233fd88f628d5134f0d74]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ea0bsm2n.vub.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ea0bsm2n.vub.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:37 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c26250cf5f231965e4dd9ee1b71e0e324551b86e64fbce130341ef3f2a47608</td>
|
|
<td>[68a164c5390404f85b716adc, 68a2b64cfd812c7de4e545af, 68a408129f3185cbaca3c5ca, 68a559bf118aff08c8ed4943, 68a6a931f7c977ec1548fcf3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vroggera]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\la\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z]</td>
|
|
<td>[e95e27be69f2216256a8ccf328a5ac17]</td>
|
|
<td>[39cb921aee036bf1584b9509ee9151157810659f]</td>
|
|
<td>[edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2]</td>
|
|
<td>[0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\la\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>e95e27be69f2216256a8ccf328a5ac17</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>39cb921aee036bf1584b9509ee9151157810659f</td>
|
|
<td>edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2</td>
|
|
<td>0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c05f6b3c8ce2288ec62b397f4a664c0124c27e8357a1b8a067ace6585f6ddc2</td>
|
|
<td>[68a71d98771132224a617f7e]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Windows.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[41c32905a6d5181bb40d080ceecf2d06]</td>
|
|
<td>[10f8862f789173bc917f6d105f4bf0de52ae3273]</td>
|
|
<td>[e4472e86332c8bedc22d6eaf21d6aa71c3b6ba722d78abd1ec5df8fdfdf2e9730f6d30cbc2500981d9af6c3a57674efd]</td>
|
|
<td>[e66e9a5ba8994bd329f739a96253169e900d1a98bbaa7faf94d4c773d9dfb027ce97dc3f7fccd9010306bae5bccb04c6c078ecdf44499f9081825fc75f50c2b6]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.Windows.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.Windows.dll</td>
|
|
<td>35328</td>
|
|
<td>41c32905a6d5181bb40d080ceecf2d06</td>
|
|
<td>Mobile library assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:01:58 +0000 UTC</td>
|
|
<td>2020-05-11 15:01:58 +0000 UTC</td>
|
|
<td>10f8862f789173bc917f6d105f4bf0de52ae3273</td>
|
|
<td>e4472e86332c8bedc22d6eaf21d6aa71c3b6ba722d78abd1ec5df8fdfdf2e9730f6d30cbc2500981d9af6c3a57674efd</td>
|
|
<td>e66e9a5ba8994bd329f739a96253169e900d1a98bbaa7faf94d4c773d9dfb027ce97dc3f7fccd9010306bae5bccb04c6c078ecdf44499f9081825fc75f50c2b6</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-06-06 07:05:17 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9bd06859f2cfb88267330b32599fa526ab2549b8ea71c724e57f6d7378a5d416</td>
|
|
<td>[68a16bd60756fe54a9918f9c, 68a2149cb58debea69d7c747, 68a2bd5ff793a9057f329c02, 68a3663261f8067c48423eb5, 68a40efceddb3a9f1a71a5fe, 68a4b7cd36bc5d38057e2363]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zPTApp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[58b22b0d320b83af6d80cff0f993ee31]</td>
|
|
<td>[c0478b771792203787592fe5485a5face9f4eb9c]</td>
|
|
<td>[30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069]</td>
|
|
<td>[8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zPTApp.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>8505656</td>
|
|
<td>58b22b0d320b83af6d80cff0f993ee31</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>c0478b771792203787592fe5485a5face9f4eb9c</td>
|
|
<td>30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069</td>
|
|
<td>8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:15:00 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b79b047ffcabcd68e19e7888c0cec805364b59493bf0434b1ef282004936da0</td>
|
|
<td>[68a354c3f5d774cd6ae7dfaa]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2259.858]</td>
|
|
<td>["C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T16:28:48Z]</td>
|
|
<td>[8f6ab8f8e345c8442395fc1e94abf53c]</td>
|
|
<td>[7437ec517002030fd0499496eb4e4c06399057a8]</td>
|
|
<td>[da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40]</td>
|
|
<td>[e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PanelUtil.exe</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Panel Utility</td>
|
|
<td>290304</td>
|
|
<td>8f6ab8f8e345c8442395fc1e94abf53c</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:10 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:10 +0000 UTC</td>
|
|
<td>7437ec517002030fd0499496eb4e4c06399057a8</td>
|
|
<td>da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40</td>
|
|
<td>e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2</td>
|
|
<td>2025-08-18 16:28:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b4a8557217fe93c3a274d301e45c3f93caeb36f89b720a5f42ac34f7d27cd88</td>
|
|
<td>[68a472b1b022648922e235ae]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xercesImpl-2.9.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[da09b75b562ca9a8e9a535d2148be8e4]</td>
|
|
<td>[1136d197e2755bbde296ceee217ec5fe2917477b]</td>
|
|
<td>[3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a]</td>
|
|
<td>[37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>xercesImpl-2.9.1.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>1229289</td>
|
|
<td>da09b75b562ca9a8e9a535d2148be8e4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>1136d197e2755bbde296ceee217ec5fe2917477b</td>
|
|
<td>3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a</td>
|
|
<td>37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9aedfab326d5e3f307d5205bfc6a53d1615990c94cfb16a8b223b9f97f6e0469</td>
|
|
<td>[68a16556adb18f56bab6ec7d, 68a2b4a8c289c4a5fdc2edb0, 68a4085529d877e962e90ae5, 68a557e71e5d7a1efef2595d, 68a6a990a81c561389c37866]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\cg1B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[80f96d46829afa7f40109f8216bf4750]</td>
|
|
<td>[079dfe49b49dfa8d5f323413b49c7a077a5758ab]</td>
|
|
<td>[7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e]</td>
|
|
<td>[02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\cg1B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>80f96d46829afa7f40109f8216bf4750</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>079dfe49b49dfa8d5f323413b49c7a077a5758ab</td>
|
|
<td>7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e</td>
|
|
<td>02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9addd5904e11aac0c9314145f7a3571f0a6c6904a088475ff74610d4021f7188</td>
|
|
<td>[68a3c3516dcf6e4208aef621]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-3A9C2E87-DA60-427D-B80A-82DC7674B69E\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-19T00:17:04Z]</td>
|
|
<td>[5b0b73b4180309831b886d262c2f581a]</td>
|
|
<td>[07878f7908801a602bd37e6a7a6612369487387a]</td>
|
|
<td>[fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6]</td>
|
|
<td>[c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>5b0b73b4180309831b886d262c2f581a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 00:17:04 +0000 UTC</td>
|
|
<td>2025-08-19 00:17:04 +0000 UTC</td>
|
|
<td>07878f7908801a602bd37e6a7a6612369487387a</td>
|
|
<td>fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6</td>
|
|
<td>c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c</td>
|
|
<td>2025-08-19 00:20:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9a933035d08791e2782f9d3b15447d9d39970442a998a1bc5b1742acaa33f921</td>
|
|
<td>[68a46900de52a0eb07bb2cab]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:07:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:07:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9a3726ca46e5c03f051771dcde4dfb6ee31c3552a7a345655c5a916280a5fca0</td>
|
|
<td>[68a5f3b29b9fb9b13e357cc3]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_methinks]</td>
|
|
<td>[i-hMeThinks]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\svc_methinks\AppData\Local\Temp\1\8ca4fc1b-e498-4c03-ae74-6a16073d35b4.tmp.node]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2306]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Docker\Docker\frontend\Docker Desktop.exe]</td>
|
|
<td>[C:\Program Files\Docker\Docker\resources\com.docker.backend.exe]</td>
|
|
<td>[2025-08-20T16:01:57Z]</td>
|
|
<td>[595808a5981c518e408b20db02c91182]</td>
|
|
<td>[e039562b6f463711ed9c3ad8ac499d813afdf966]</td>
|
|
<td>[df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86]</td>
|
|
<td>[f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121]</td>
|
|
<td>[172.17.251.218]</td>
|
|
<td>[172.17.251.218]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>9c93f735-e0b0-426b-830a-650d88cf56a5.tmp.node</td>
|
|
<td>C:\Users\svc_methinks\AppData\Local\Temp\1\</td>
|
|
<td></td>
|
|
<td>155136</td>
|
|
<td>595808a5981c518e408b20db02c91182</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-16 16:01:47 +0000 UTC</td>
|
|
<td>2025-07-16 16:01:47 +0000 UTC</td>
|
|
<td>e039562b6f463711ed9c3ad8ac499d813afdf966</td>
|
|
<td>df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86</td>
|
|
<td>f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121</td>
|
|
<td>2025-07-16 16:01:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>99f5ef22213d7e971d8bc8b5484f3e933cf66bf37b94e8d5aa5acf5e2220ca5a</td>
|
|
<td>[68a48674c4cb2500be69260c, 68a48674c4cb2500be692622]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Hosting.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[54fea61134ad099f7ca3485319f3c4de]</td>
|
|
<td>[b4dc1558d037e14add30d135864a478c444ca0c7]</td>
|
|
<td>[db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3]</td>
|
|
<td>[48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Hosting.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>40200</td>
|
|
<td>54fea61134ad099f7ca3485319f3c4de</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-09 03:00:30 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>b4dc1558d037e14add30d135864a478c444ca0c7</td>
|
|
<td>db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3</td>
|
|
<td>48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>999c523b3e43f399966a49f3caeb2a7d8ccb39d5911dfe71fd15a6a0aa2b87fe</td>
|
|
<td>[68a5c64d54e5003d1abde4bf, 68a5c77e05aa879ada66b41b, 68a5c77e05aa879ada66b421, 68a5c77e05aa879ada66b426, 68a5c77e05aa879ada66b42b]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\Disk1\ISSetup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\Disk1\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z]</td>
|
|
<td>[708814a62ba813cea1a94bb77d68195b]</td>
|
|
<td>[39c99a215751832481dc9b2ac2d6dbb17435195d]</td>
|
|
<td>[a639dd70ec9a9652bc05b7bd58b8287b9df1321a5dfb238710be542c8db404bd966eae424e8d6969b3e6a7dccfc037a7]</td>
|
|
<td>[426cd1a12e42212ff541b3bd9c239282d548596487929b17c657056958d71a77fce209c5daa606af4d0eb6c5f74779b6d332997d00e71f6ec80fd18407c57bd3]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{1FB787B1-89CF-48C2-9B76-ED951638D358}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>552214</td>
|
|
<td>708814a62ba813cea1a94bb77d68195b</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:07:34 +0000 UTC</td>
|
|
<td>2025-04-14 15:20:36 +0000 UTC</td>
|
|
<td>39c99a215751832481dc9b2ac2d6dbb17435195d</td>
|
|
<td>a639dd70ec9a9652bc05b7bd58b8287b9df1321a5dfb238710be542c8db404bd966eae424e8d6969b3e6a7dccfc037a7</td>
|
|
<td>426cd1a12e42212ff541b3bd9c239282d548596487929b17c657056958d71a77fce209c5daa606af4d0eb6c5f74779b6d332997d00e71f6ec80fd18407c57bd3</td>
|
|
<td>2025-07-17 16:07:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-08 16:16:42 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:07:44.463 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>994a611ef09f8ae2fe98c2da01d655ce4fa347baa82b9c9915df9f6ec9fbfbc3</td>
|
|
<td>[68a523a99ba7c92b34976f9c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Utils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[c709df517b83ce6b8dc1fea8d595054b]</td>
|
|
<td>[8f53280dfe52874cff44f8780c0fc0fc115b5f3e]</td>
|
|
<td>[dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490]</td>
|
|
<td>[9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Utils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>7168</td>
|
|
<td>c709df517b83ce6b8dc1fea8d595054b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>8f53280dfe52874cff44f8780c0fc0fc115b5f3e</td>
|
|
<td>dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490</td>
|
|
<td>9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98df3078f3f8bc3b2cd2b8ee77cb6c1b2ed806a39bbacb1384ae9efc24d9189f</td>
|
|
<td>[68a3146b5f0c41860c8c84e9, 68a3146b5f0c41860c8c851d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\cp1252.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[fa5b299bcf803667db7c4c48d05a08df]</td>
|
|
<td>[e854bca592b85a87408e883fb8ec1bbddee34662]</td>
|
|
<td>[bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481]</td>
|
|
<td>[4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cp1252.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>3299</td>
|
|
<td>fa5b299bcf803667db7c4c48d05a08df</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>e854bca592b85a87408e883fb8ec1bbddee34662</td>
|
|
<td>bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481</td>
|
|
<td>4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98ca15715d87f7d35a7756ea9bcfdbe3767ed4163fb017d675587792a3152fea</td>
|
|
<td>[68a4cf29dfc75d42acc2fee6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98c7fa6109742b02106c96b2b99c72c0fefafae342651a8872b0796d11288b15</td>
|
|
<td>[68a46327817fe25f39e81a94]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\tmp_4a4ji0dj.v0h.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:27Z]</td>
|
|
<td>[a8a00094ca4d0ea2312187e43d5354ee]</td>
|
|
<td>[6567ea2e3352de1259d836237c57870a171d2ef4]</td>
|
|
<td>[d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c]</td>
|
|
<td>[fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_4a4ji0dj.v0h.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>a8a00094ca4d0ea2312187e43d5354ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:42:27 +0000 UTC</td>
|
|
<td>2025-08-19 11:42:27 +0000 UTC</td>
|
|
<td>6567ea2e3352de1259d836237c57870a171d2ef4</td>
|
|
<td>d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c</td>
|
|
<td>fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7</td>
|
|
<td>2025-08-19 11:42:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9f264451e7dcfa93593fa221b6d2661884b5f9554a28b0eadadb49e28069453b</td>
|
|
<td>[68a306a5ba5832f49fe9cf43]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2COMPS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[376a4faf9a26b8f3fca39b0537a140b6]</td>
|
|
<td>[8c87dff640521f57d42f85e232b7936c3c241b96]</td>
|
|
<td>[f3d3841f183e4ffa65823996a53348cd809119bf3fd4a5966926ec1fd7b91772f44e03329a89bc839006c053cc79ce97]</td>
|
|
<td>[dd5ecfbd5f3bc834d35d8912cd77417540a667ff0d0b665289d0289a4b2bb87b1a2aee8757b7734462b42178d042e8b4c1f1389ae179e8461713c61f7af44abf]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DI2COMPS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>38912</td>
|
|
<td>376a4faf9a26b8f3fca39b0537a140b6</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:09 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>8c87dff640521f57d42f85e232b7936c3c241b96</td>
|
|
<td>f3d3841f183e4ffa65823996a53348cd809119bf3fd4a5966926ec1fd7b91772f44e03329a89bc839006c053cc79ce97</td>
|
|
<td>dd5ecfbd5f3bc834d35d8912cd77417540a667ff0d0b665289d0289a4b2bb87b1a2aee8757b7734462b42178d042e8b4c1f1389ae179e8461713c61f7af44abf</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-13 05:12:30 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9e9e38773b97fac96937b516d9a32db59eb414381251b0ef854054ca564f3750</td>
|
|
<td>[68a306a5ba5832f49fe9cf49]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CCTABS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[c161e9903e7f25b14044fb24f4ba8da4]</td>
|
|
<td>[f7beb14091dcf02cf66a7e5479f9eb3e838ca1d5]</td>
|
|
<td>[9f74b15867d9f94831b55a18798e423eced84925b967b6202f62b0ab76df5a039af5ac39100faa7e7cddb6a65f668485]</td>
|
|
<td>[4ed7061279e55cb651e66ff3b9b1a7f6257d17f8575bee183a104a4dbdc4bef5a8bd31f515498b752bd3c1887493c506aee7c1ca30f056910aae170f26c511ee]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CCTABS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>CCTabs</td>
|
|
<td>88576</td>
|
|
<td>c161e9903e7f25b14044fb24f4ba8da4</td>
|
|
<td></td>
|
|
<td>2.94.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:04 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>f7beb14091dcf02cf66a7e5479f9eb3e838ca1d5</td>
|
|
<td>9f74b15867d9f94831b55a18798e423eced84925b967b6202f62b0ab76df5a039af5ac39100faa7e7cddb6a65f668485</td>
|
|
<td>4ed7061279e55cb651e66ff3b9b1a7f6257d17f8575bee183a104a4dbdc4bef5a8bd31f515498b752bd3c1887493c506aee7c1ca30f056910aae170f26c511ee</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2016-12-16 05:54:41 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9e8d01f172301b966f1f404aa6fc0bdbec478ae9197256ad95bfcad1ef927601</td>
|
|
<td>[68a472a799ad3734d804e2fb]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-logging-1.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[6b62417e77b000a87de66ee3935edbf5]</td>
|
|
<td>[ba24d5de831911b684c92cd289ed5ff826271824]</td>
|
|
<td>[2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f]</td>
|
|
<td>[5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>commons-logging-1.1.jar</td>
|
|
<td>D:\hms\server\default\tmp\deploy\tmp2592723483578379162ems.ear-contents\ems.sar-contents\</td>
|
|
<td></td>
|
|
<td>52915</td>
|
|
<td>6b62417e77b000a87de66ee3935edbf5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-28 02:32:27 +0000 UTC</td>
|
|
<td>2025-04-28 02:32:27 +0000 UTC</td>
|
|
<td>ba24d5de831911b684c92cd289ed5ff826271824</td>
|
|
<td>2e5b81be573afeb4665b2c861674953816df9e2e3ff8426a358348f8301594e0b15f1f9e62229bc51a6541b4c547ca6f</td>
|
|
<td>5e8b069406c05148555760681417a9edabf40b0c807a286262bc449bd5ad976e3715c0a05ff941680f73f83962321ad0663cc8cd414537a1326658d00d5b6630</td>
|
|
<td>2025-04-28 02:32:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-26 07:56:25 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-28 01:46:49.87 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9e6418c6b426c57d04673ad2ea1691cf052bd5b35b0af0566c2043a8ebde33a4</td>
|
|
<td>[68a5c9c80a9c36d9537b967c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\MSI1ACF.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-20T13:12:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MSIB3C0.tmp</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-07-17 16:14:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-17 12:30:26 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-07-17 02:52:11.135 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9e060acd96a0d21fadc52d209a12f1038fc73e3d3dad79ac993c7bbe4cb07ea2</td>
|
|
<td>[68a6afe50e0f3bd8deac4f50, 68a6afe50e0f3bd8deac509b, 68a6afe50e0f3bd8deac5104, 68a6afe50e0f3bd8deac516e, 68a6afe50e0f3bd8deac5553, 68a6afe50e0f3bd8deac5649, 68a6afe50e0f3bd8deac5764, 68a6afe50e0f3bd8deac5d2e, 68a6afe50e0f3bd8deac5daf, 68a6afe50e0f3bd8deac5eed]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\icuuc53.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[1c906171953d3d548a0edad1c25586de]</td>
|
|
<td>[5e8df0b599bbb1a9b1c501e227d6dd5ea9d3f401]</td>
|
|
<td>[e3a7506589e55e7e61c6b6001c714bf8bfbac0dc750510bf8b87706d504b77f005053a04648d79cd63a7fb8d885c3e1f]</td>
|
|
<td>[788d021cdd86aad824cc038c7cb7ffc4a5115f62b91c4bdf1729838295e119b08472ee3967000e4b57ea53aa6d7b28572210a4ac4bb64d1b437207da57deee92]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>icuuc53.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>ICU Common DLL</td>
|
|
<td>1317376</td>
|
|
<td>1c906171953d3d548a0edad1c25586de</td>
|
|
<td>International Components for Unicode</td>
|
|
<td>53, 1, 0, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:22 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:37 +0000 UTC</td>
|
|
<td>5e8df0b599bbb1a9b1c501e227d6dd5ea9d3f401</td>
|
|
<td>e3a7506589e55e7e61c6b6001c714bf8bfbac0dc750510bf8b87706d504b77f005053a04648d79cd63a7fb8d885c3e1f</td>
|
|
<td>788d021cdd86aad824cc038c7cb7ffc4a5115f62b91c4bdf1729838295e119b08472ee3967000e4b57ea53aa6d7b28572210a4ac4bb64d1b437207da57deee92</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2024-06-08 09:21:48 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 06:40:28.291 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9dfb220bb3f348f33dc86e0fc936db0ca2efc1a3789c9e1121cb512ec33077fa</td>
|
|
<td>[68a17ca68feea10e77a5fb6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1x2unr4g.5ni.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:54:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1x2unr4g.5ni.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:54:25 +0000 UTC</td>
|
|
<td>2025-08-17 06:54:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:54:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9db972fb315a206061dd8d2e0dc1416055b3867dfa04dc408bd3a7a446df3648</td>
|
|
<td>[68a306a5ba5832f49fe9cf57]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FORMENG2.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[e4fb2c4a1b902290ce0af3bbc92a2610]</td>
|
|
<td>[a81215af8ce0921fba6dfb8202e9039342506b6c]</td>
|
|
<td>[1960ffdbc2fa4a3050e482c51b8576f36eba093293fc68327d095fca1f3c0c8f193e51707681224c71418ee4b2d59fde]</td>
|
|
<td>[348e079e766022f143a8375a556df717f3c27a855bd44eec3e6d8cfd88b87bc96e8b229cfd523f0ad18879de1a887a1a9c0dbf308c7848441c22b1bf68de33d0]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FORMENG2.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>CDA Form Engine</td>
|
|
<td>187392</td>
|
|
<td>e4fb2c4a1b902290ce0af3bbc92a2610</td>
|
|
<td></td>
|
|
<td>1.20</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:15 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>a81215af8ce0921fba6dfb8202e9039342506b6c</td>
|
|
<td>1960ffdbc2fa4a3050e482c51b8576f36eba093293fc68327d095fca1f3c0c8f193e51707681224c71418ee4b2d59fde</td>
|
|
<td>348e079e766022f143a8375a556df717f3c27a855bd44eec3e6d8cfd88b87bc96e8b229cfd523f0ad18879de1a887a1a9c0dbf308c7848441c22b1bf68de33d0</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-11-09 15:54:26 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9da55b55bf7f629825cea208fa7f81ec54f6a19daa972c58ae7dc286f4d68594</td>
|
|
<td>[68a2a7d21e529195058821a8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_qmir4he3.i00.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:10:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qmir4he3.i00.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:10:52 +0000 UTC</td>
|
|
<td>2025-08-18 04:10:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:10:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d9a4969ee818d3ab6eb78ee164b44f9376111d781e2bcd9b51f52b35898d341</td>
|
|
<td>[68a24268b7be513faed67bb0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koanizjm.loh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:58:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_koanizjm.loh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:58:10 +0000 UTC</td>
|
|
<td>2025-08-17 20:58:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:58:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d97578780dbb03cc0c396200b96fce7e7645af7bafa5f5dc7fba849474f3c07</td>
|
|
<td>[68a5c8eceb9e7b7716dce203, 68a5ca39b5df6e9c598d9a15, 68a5ca39b5df6e9c598d9a22, 68a5ccf2ddfdba423e488638, 68a5ccf2ddfdba423e488646, 68a5ccf2ddfdba423e488654, 68a5ccf2ddfdba423e488661, 68a5ccf2ddfdba423e48866e, 68a5ccf2ddfdba423e48867b, 68a5ccf2ddfdba423e488688, 68a5ccf2ddfdba423e488695]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\powershell.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[774bf83f632cbecb715ee124673f4a07]</td>
|
|
<td>[1af8f80e3fac45073288d420016eb0718463a2df]</td>
|
|
<td>[1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016]</td>
|
|
<td>[ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>powershell.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\</td>
|
|
<td></td>
|
|
<td>10213</td>
|
|
<td>774bf83f632cbecb715ee124673f4a07</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:38 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>1af8f80e3fac45073288d420016eb0718463a2df</td>
|
|
<td>1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016</td>
|
|
<td>ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d59e4a2f76cd64d5749bd32d2ff4b194967c71546ab94d1ac2a1883f9738c35</td>
|
|
<td>[68a1a56518d384e847176013]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-devsqltest1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ejhf5yxn.j5m.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:48:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ejhf5yxn.j5m.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:48:10 +0000 UTC</td>
|
|
<td>2025-08-17 09:48:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:48:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d111e03218a7eea9537a00e1863cddde10211dba9218b3d6b47608f1e77c251</td>
|
|
<td>[68a3146b5f0c41860c8c8540]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_compression.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[af1c1193de59fb127d8911df425569ca]</td>
|
|
<td>[6fd4756649e5aad5421b16a620fd166330c51cce]</td>
|
|
<td>[a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1]</td>
|
|
<td>[fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_compression.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7813</td>
|
|
<td>af1c1193de59fb127d8911df425569ca</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>6fd4756649e5aad5421b16a620fd166330c51cce</td>
|
|
<td>a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1</td>
|
|
<td>fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9cdf0d9852f8c3557cfe9a6e3ee68cd450c4fc09bd2664d77bfa66af82c82726</td>
|
|
<td>[68a3146b5f0c41860c8c8525, 68a3146b5f0c41860c8c856e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\message.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[1f9cf3f516b09dca73c5d70db0ae5491]</td>
|
|
<td>[2b812bdaf15435914d726ada0f6149e822eba183]</td>
|
|
<td>[d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa]</td>
|
|
<td>[6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>message.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>51634</td>
|
|
<td>1f9cf3f516b09dca73c5d70db0ae5491</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2b812bdaf15435914d726ada0f6149e822eba183</td>
|
|
<td>d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa</td>
|
|
<td>6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9cdd435552e4798b104c63a8918b11cb96b5a4a7618907130342a4ffbd5a839a</td>
|
|
<td>[68a2452ec0a888da2a3144f6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1puaykw.vxr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:09:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s1puaykw.vxr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:09:53 +0000 UTC</td>
|
|
<td>2025-08-17 21:09:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:10:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9cb71f00c19397723d39861ff809c70f9d2cdbcf91b3dd8021060714512a39cb</td>
|
|
<td>[68a4e8a1ad898641af98fd94, 68a4fcd0011d94a251a4ef30]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\nsExec.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\nsExec.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z]</td>
|
|
<td>[1139fb5cc942e668c8277f8b8f1e5f20]</td>
|
|
<td>[94bbb2454dad420b70553c0fca4899f120d3ed43]</td>
|
|
<td>[91b21d7f4bf65cf9c6b3e4c15067b33b654b5d61a30a14f300abaf62d12daa6837ae1387e8e9c584dbd1753620c13b70]</td>
|
|
<td>[08e8eb820801875208d9f28fb1416e0fc66abf5cc343e7ac973cc6736dbcd0f85b1bf42e8d110ad8c9a9ced204c00cf530099b8c411871762615051e1f7061d0]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>nsExec.dll</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\</td>
|
|
<td></td>
|
|
<td>9216</td>
|
|
<td>1139fb5cc942e668c8277f8b8f1e5f20</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>2025-08-19 21:11:56 +0000 UTC</td>
|
|
<td>94bbb2454dad420b70553c0fca4899f120d3ed43</td>
|
|
<td>91b21d7f4bf65cf9c6b3e4c15067b33b654b5d61a30a14f300abaf62d12daa6837ae1387e8e9c584dbd1753620c13b70</td>
|
|
<td>08e8eb820801875208d9f28fb1416e0fc66abf5cc343e7ac973cc6736dbcd0f85b1bf42e8d110ad8c9a9ced204c00cf530099b8c411871762615051e1f7061d0</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-17 22:00:41 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c4b5ce1dc29be4d5b9dddab220de247696495cf359c659d98e4a8faec482df8</td>
|
|
<td>[68a501fb7a753eb605659393]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\q0440fxp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>q0440fxp.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a31ce0c5fb2fb5a70ae2f5675d2e718053ab5a33f61fe21ee4068a320772e549</td>
|
|
<td>[68a3263cd45919f0090e7c01]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_amguifg1.dah.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:10:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_amguifg1.dah.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:10:15 +0000 UTC</td>
|
|
<td>2025-08-18 13:10:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:10:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a24c6cf2c1296bf625d34337de2c4b74f05f5b63458662733e93e461aebb19fb</td>
|
|
<td>[68a70bdc2a90344d346daef0]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>["C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T12:06:43Z]</td>
|
|
<td>[8ff9ef7b9b3cf60ede52251e1cbeb69e]</td>
|
|
<td>[ef838e007ff4c6ace164c39a44ee021e70c9c913]</td>
|
|
<td>[e54890ade199651cd1463a8edc236e1ef28914358d92899d5ad45d081e7d03f4f2f2b132cabf8180947aabe5542334e9]</td>
|
|
<td>[32293a2cb2bf8defaf3ebe83dcd9771ea4b31f4b57d2babaad220c848aba91861fc002d590761de6384fe7ffa55d4d955ac80854cf5a01f5025a790583aac305]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SetupYabe_v2.1.0.exe</td>
|
|
<td>C:\Users\SVC_SL_ControlSystem\Downloads\</td>
|
|
<td>Yabe Setup</td>
|
|
<td>2618889</td>
|
|
<td>8ff9ef7b9b3cf60ede52251e1cbeb69e</td>
|
|
<td>Yabe</td>
|
|
<td>2.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:06:16 +0000 UTC</td>
|
|
<td>2025-08-21 12:06:37 +0000 UTC</td>
|
|
<td>ef838e007ff4c6ace164c39a44ee021e70c9c913</td>
|
|
<td>e54890ade199651cd1463a8edc236e1ef28914358d92899d5ad45d081e7d03f4f2f2b132cabf8180947aabe5542334e9</td>
|
|
<td>32293a2cb2bf8defaf3ebe83dcd9771ea4b31f4b57d2babaad220c848aba91861fc002d590761de6384fe7ffa55d4d955ac80854cf5a01f5025a790583aac305</td>
|
|
<td>2025-08-21 12:06:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-14 17:14:24 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>2</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.30</td>
|
|
<td>2025-08-20 18:12:07.258 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a1480a44ff827a97701dd6a4137a19fcdeb576045215acfbffeee086f6aea2a5</td>
|
|
<td>[68a472a799ad3734d804e2e9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-swing-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[381f6591ce10dbdec1d4040edf9e68dc]</td>
|
|
<td>[79ae20903bd6cf67aa7d2b7c697c93be5decfdd0]</td>
|
|
<td>[5af4447d2424fdd259095a8f161a1674be4e551371c085f7067a9c906ce59575e12a56a0293f73698288bc88f5f5b98d]</td>
|
|
<td>[6f1d81f1ab029e40cf0da4db3bdb558ed54b886718cfb4cffa91e6bfbce39e782a7e866cd972dbc0dd5c0856067fd2946833a7e5f481cd860d6772b77eebbc81]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-swing-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>190772</td>
|
|
<td>381f6591ce10dbdec1d4040edf9e68dc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>79ae20903bd6cf67aa7d2b7c697c93be5decfdd0</td>
|
|
<td>5af4447d2424fdd259095a8f161a1674be4e551371c085f7067a9c906ce59575e12a56a0293f73698288bc88f5f5b98d</td>
|
|
<td>6f1d81f1ab029e40cf0da4db3bdb558ed54b886718cfb4cffa91e6bfbce39e782a7e866cd972dbc0dd5c0856067fd2946833a7e5f481cd860d6772b77eebbc81</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-11 05:23:38 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a143f84acb242d2ae93165cf5caa808116878e47cb0686e9830bf9a0abb1fcd9</td>
|
|
<td>[68a1638d6b917cef7bc97208]</td>
|
|
<td>[2]</td>
|
|
<td>[insqadhocadmin]</td>
|
|
<td>[inSQADHOC]</td>
|
|
<td>[INSQADHOC]</td>
|
|
<td>[D:\DxFlats\SQ-AdHoc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:02Z]</td>
|
|
<td>[bb3305a61952566315ce176436bd4621]</td>
|
|
<td>[029fd1a6c08c26b003c740a134e6f98c79ad8496]</td>
|
|
<td>[fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901]</td>
|
|
<td>[f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c]</td>
|
|
<td>[172.17.253.151]</td>
|
|
<td>[172.17.253.151]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SQ-AdHoc.ps1</td>
|
|
<td>D:\DxFlats\</td>
|
|
<td></td>
|
|
<td>83576</td>
|
|
<td>bb3305a61952566315ce176436bd4621</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-06-13 14:05:23 +0000 UTC</td>
|
|
<td>2024-05-23 19:22:49 +0000 UTC</td>
|
|
<td>029fd1a6c08c26b003c740a134e6f98c79ad8496</td>
|
|
<td>fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901</td>
|
|
<td>f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c</td>
|
|
<td>2025-08-10 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a131c59ce31216aa82e7546a4b29e1afce259d87212f7f5cdfddf2cfcba76cc5</td>
|
|
<td>[68a523949cec397f02de9f56]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[c159bbc0a5b7044ad2341d142bb49419]</td>
|
|
<td>[f4677064145ae5286fa91bf3a06c3f0362c1f6cc]</td>
|
|
<td>[4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4]</td>
|
|
<td>[cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EventMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>8192</td>
|
|
<td>c159bbc0a5b7044ad2341d142bb49419</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>f4677064145ae5286fa91bf3a06c3f0362c1f6cc</td>
|
|
<td>4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4</td>
|
|
<td>cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a11bb160641b9f5e4b916fe8c1332a7daea7cb5bec0ff20aca1ed56cd38403c9</td>
|
|
<td>[68a25fb2e970d941642e7ede, 68a25fb2e970d941642e7eeb, 68a3b2cf09045b56b2a707b6, 68a3b2cf09045b56b2a707c3, 68a502e12ae1a61fbf4caf14, 68a502e12ae1a61fbf4caf21, 68a65489c4cae84feadc5714, 68a65489c4cae84feadc5721]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\typealiases.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:07Z, 2025-08-20T23:00:15Z]</td>
|
|
<td>[6edb4820eefbf4bf8f34890da9a4df9a]</td>
|
|
<td>[d8b1ce8e599da18ebf86d4082cfd62d30a68f185]</td>
|
|
<td>[e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712]</td>
|
|
<td>[fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>typealiases.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\</td>
|
|
<td></td>
|
|
<td>13502</td>
|
|
<td>6edb4820eefbf4bf8f34890da9a4df9a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:23 +0000 UTC</td>
|
|
<td>2024-03-16 13:33:48 +0000 UTC</td>
|
|
<td>d8b1ce8e599da18ebf86d4082cfd62d30a68f185</td>
|
|
<td>e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712</td>
|
|
<td>fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-24 17:17:25 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a10b871ec3447828b319d9b2e28d6149b355385b2769f30727d4a0c8473ddf74</td>
|
|
<td>[68a1f34c27d6d6088ad4500e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MWeb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_m1lxrrkv.j3z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T15:20:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_m1lxrrkv.j3z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:20:36 +0000 UTC</td>
|
|
<td>2025-08-17 15:20:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:20:44 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a0f9448462d634ee1d128826515e829d6fe4e5ffe437e8223d9160e17434506d</td>
|
|
<td>[68a73eeccf2548d3f5b4dc5f, 68a73f16c50eeb69d9e9620f, 68a7416d0d35e93ff55f30c3, 68a743c53e4f6ed539ccb985]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_EQ2HEMS]</td>
|
|
<td>[i-nHEMS1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\HEMS Installation Files\WEB812\WEB812\deploy.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe, C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T15:44:31Z, 2025-08-21T15:44:32Z, 2025-08-21T15:52:47Z, 2025-08-21T15:55:38Z]</td>
|
|
<td>[929f3267690c5d511b621ab2cea44e26]</td>
|
|
<td>[47ab10b2d3b2649e232c2b3e4c5bab2e001e0b8c]</td>
|
|
<td>[5b48a57051a9931a34ef146284ccca5d1d9f362b82765830c83c26b0c3102275dfc5fac57377b3810c4fd2341be0c97b]</td>
|
|
<td>[b208cb7218b30d4ec6586e7ac77f6d031e04b25c345de3af441481f1a5674f6822674470337df76a51629297c206b95dcebac4dbc7474873bd39864149127f8c]</td>
|
|
<td>[172.17.20.170]</td>
|
|
<td>[172.17.20.170]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>deploy.bat</td>
|
|
<td>E:\HEMS Installation Files\WEB812\WEB812\</td>
|
|
<td></td>
|
|
<td>345</td>
|
|
<td>929f3267690c5d511b621ab2cea44e26</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-08-04 20:01:48 +0000 UTC</td>
|
|
<td>2025-08-21 15:35:24 +0000 UTC</td>
|
|
<td>47ab10b2d3b2649e232c2b3e4c5bab2e001e0b8c</td>
|
|
<td>5b48a57051a9931a34ef146284ccca5d1d9f362b82765830c83c26b0c3102275dfc5fac57377b3810c4fd2341be0c97b</td>
|
|
<td>b208cb7218b30d4ec6586e7ac77f6d031e04b25c345de3af441481f1a5674f6822674470337df76a51629297c206b95dcebac4dbc7474873bd39864149127f8c</td>
|
|
<td>2025-08-21 15:44:44 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a08bb4d95e13cd7f071180ecc9b403249364af378c3a63dc24f56600ca6d54a1</td>
|
|
<td>[68a471ad04130eaeee8f8d05]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:44:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:44:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a04620ce2adb9cce34ae2ec9142bcfdc9025b2b3c2e67014c22afecfc3b7bd02</td>
|
|
<td>[68a3146b5f0c41860c8c84e7, 68a3146b5f0c41860c8c851a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\aliases.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[6d4c823e9d2c59e8c7a1c22385febbc1]</td>
|
|
<td>[9c505a63924d0934af779792b915ccaf391a6a6b]</td>
|
|
<td>[8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3]</td>
|
|
<td>[7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>aliases.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>12393</td>
|
|
<td>6d4c823e9d2c59e8c7a1c22385febbc1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9c505a63924d0934af779792b915ccaf391a6a6b</td>
|
|
<td>8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3</td>
|
|
<td>7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a03926359987dde8bfa14905c2e91b0dcb912cc1c5c4e5cc4e08a3f410a51975</td>
|
|
<td>[68a48674c4cb2500be69261b, 68a48674c4cb2500be692631]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\log4net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[3b9e164c32b6dde7701c518e1c515196]</td>
|
|
<td>[0b7e5cedc915c5952cdaf018df7f46d91cabe893]</td>
|
|
<td>[eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684]</td>
|
|
<td>[8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4net.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Apache log4net for .NET Standard 2.0</td>
|
|
<td>270048</td>
|
|
<td>3b9e164c32b6dde7701c518e1c515196</td>
|
|
<td>log4net</td>
|
|
<td>2.0.15.0-.NET Standard 2.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-07-25 12:40:06 +0000 UTC</td>
|
|
<td>2024-02-15 18:01:58 +0000 UTC</td>
|
|
<td>0b7e5cedc915c5952cdaf018df7f46d91cabe893</td>
|
|
<td>eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684</td>
|
|
<td>8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a01fa864af44f514a8ca839c76e037070eea0ddf92270f74bdbce2a8e63f63ff</td>
|
|
<td>[68a5c64d54e5003d1abde4c6]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\QINST.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z]</td>
|
|
<td>[3f405d2fd3a79616620d01393f1d961f]</td>
|
|
<td>[9588954c67246bc9aaeb0f505ed21c4809714963]</td>
|
|
<td>[851b6726999d133ecafa321231e5e24fe784fc076b31e45de5b797ae9ed5b670c534585592d56edbf84c1caddff2ca9a]</td>
|
|
<td>[0da8e5fc9e1431fb985907bcbc90b2080a4fe75c3b717cf0d48dbca514bf8ddda102b4e8f52d95bf2bef4fb75d362b4a26ae1c688aa1b8a3aa4fee29de2b691b]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QINST.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\</td>
|
|
<td>QINST DLL</td>
|
|
<td>172032</td>
|
|
<td>3f405d2fd3a79616620d01393f1d961f</td>
|
|
<td>QINST Dynamic Link Library</td>
|
|
<td>1, 9, 0, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:57:41 +0000 UTC</td>
|
|
<td>2005-11-28 16:13:00 +0000 UTC</td>
|
|
<td>9588954c67246bc9aaeb0f505ed21c4809714963</td>
|
|
<td>851b6726999d133ecafa321231e5e24fe784fc076b31e45de5b797ae9ed5b670c534585592d56edbf84c1caddff2ca9a</td>
|
|
<td>0da8e5fc9e1431fb985907bcbc90b2080a4fe75c3b717cf0d48dbca514bf8ddda102b4e8f52d95bf2bef4fb75d362b4a26ae1c688aa1b8a3aa4fee29de2b691b</td>
|
|
<td>2025-08-20 12:57:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-06-05 23:33:47 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-08-20 13:00:50.983 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9fe625d221dea59ac1c5ab0f79858f4c045abebb697b1c3eb027a414b2958437</td>
|
|
<td>[68a5c7c9c8d0bc698419a39b]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:04:06Z]</td>
|
|
<td>[f8a8127aad81320181a335b2302e1508]</td>
|
|
<td>[88144bf920725b1b6a1cb70f5f4dfb5f61750705]</td>
|
|
<td>[e20877476ddd8d882e84d927a5e5e53a0207ef30545b08ed8b0fd4f6c3fa9d9e242c1cb09ddd4809891a2d390d2a59a0]</td>
|
|
<td>[7517fe9eb4ec1d23c16cb0e969b764b808fb432aff8ad22382e5b7ddf6746374eab2285a1741a130e35a39ff1dfde84d943491d61359b35a57881b0b56564d0d]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>2446807</td>
|
|
<td>f8a8127aad81320181a335b2302e1508</td>
|
|
<td>InstallShield</td>
|
|
<td>22.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:04:06 +0000 UTC</td>
|
|
<td>2025-08-20 13:04:06 +0000 UTC</td>
|
|
<td>88144bf920725b1b6a1cb70f5f4dfb5f61750705</td>
|
|
<td>e20877476ddd8d882e84d927a5e5e53a0207ef30545b08ed8b0fd4f6c3fa9d9e242c1cb09ddd4809891a2d390d2a59a0</td>
|
|
<td>7517fe9eb4ec1d23c16cb0e969b764b808fb432aff8ad22382e5b7ddf6746374eab2285a1741a130e35a39ff1dfde84d943491d61359b35a57881b0b56564d0d</td>
|
|
<td>2025-08-20 13:04:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-02-14 03:35:39 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:05:52.276 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9fd2800a6ee13d69c81facd1f787e3bb4455ed0fc730451f00fc996925c71f67</td>
|
|
<td>[68a306a5ba5832f49fe9cf3b]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPLDRI.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[14581feb98f274e635a1b43ae13178b0]</td>
|
|
<td>[c777647bb6323cd9e16de5ce509717fe673a40c9]</td>
|
|
<td>[51d2485260d8d82ad7a3a677d5888e6d68d58bd89a0294469db566299706e092d65b36e2bbed06f425052d46985da901]</td>
|
|
<td>[c2e60fcae775445d9919b031aef20a26e93de97d1be68cd4fc6d6bd19a0e5270a33c77ddc3b9bf8923ff1eef799517b3a6f559ba9f31bd07d5b5a6c5c7aeb84d]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>APPLDRI.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>9728</td>
|
|
<td>14581feb98f274e635a1b43ae13178b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:02 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>c777647bb6323cd9e16de5ce509717fe673a40c9</td>
|
|
<td>51d2485260d8d82ad7a3a677d5888e6d68d58bd89a0294469db566299706e092d65b36e2bbed06f425052d46985da901</td>
|
|
<td>c2e60fcae775445d9919b031aef20a26e93de97d1be68cd4fc6d6bd19a0e5270a33c77ddc3b9bf8923ff1eef799517b3a6f559ba9f31bd07d5b5a6c5c7aeb84d</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 16:26:41 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9f99575689b7e32b88c81ce7d3553b185fc3568cb2a27485d762cb6b5dfbe93f</td>
|
|
<td>[68a472b1b022648922e23572]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmStorageCenterApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[3545642ecd8b1fad16503d6b79d591f8]</td>
|
|
<td>[31f259d55dd99d4cf2a12637d49347a0056805af]</td>
|
|
<td>[15eb77b0830f2747cd0c82e2d8424c9abebf4022770b16f685d0773c15738f6c5e0aad5d8d9204e04240700213711d6c]</td>
|
|
<td>[d22061dea3a40ff9a27749ee27710fa07c5797bb55725404f9df7626a5290d51f832d8862475838f718b3b2bb4fe75b4bcf6b5e055c83eb9821730fbb9b3621a]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmStorageCenterApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>3057596</td>
|
|
<td>3545642ecd8b1fad16503d6b79d591f8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>31f259d55dd99d4cf2a12637d49347a0056805af</td>
|
|
<td>15eb77b0830f2747cd0c82e2d8424c9abebf4022770b16f685d0773c15738f6c5e0aad5d8d9204e04240700213711d6c</td>
|
|
<td>d22061dea3a40ff9a27749ee27710fa07c5797bb55725404f9df7626a5290d51f832d8862475838f718b3b2bb4fe75b4bcf6b5e055c83eb9821730fbb9b3621a</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:51 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9f6dc00e7d0000006079d5e2ce106967e2ebc046d4a9f8e041b02d6264831b71</td>
|
|
<td>[68a4cc1d3f45e81aa92ef529]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GEHC.XI.Shared.Formulas.Globals.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GESCProcess.exe]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GEServiceController.exe]</td>
|
|
<td>[2025-08-19T19:10:14Z]</td>
|
|
<td>[c06ed6d1d0a7c4eb01cd24bdc80fc3a2]</td>
|
|
<td>[eccd928e1bc57300c08c04737cc9e896d0cbd3f3]</td>
|
|
<td>[9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77]</td>
|
|
<td>[a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GEHC.XI.Shared.Formulas.Globals.dll</td>
|
|
<td>D:\CARDDAS\Backend\bin\</td>
|
|
<td>GEHC.XI.Shared.Formulas.Globals</td>
|
|
<td>30208</td>
|
|
<td>c06ed6d1d0a7c4eb01cd24bdc80fc3a2</td>
|
|
<td>Centricity Cardio Workflow</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-13 16:45:46 +0000 UTC</td>
|
|
<td>2020-12-02 02:05:25 +0000 UTC</td>
|
|
<td>eccd928e1bc57300c08c04737cc9e896d0cbd3f3</td>
|
|
<td>9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77</td>
|
|
<td>a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168</td>
|
|
<td>2025-08-19 19:10:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a70abcb3640f722ba91de8272c43459616c3249eed6a70fe73426299248a0921</td>
|
|
<td>[68a3b50e0570ac6ecb876346, 68a7449f1fda64ac50b71047]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nBMCAtlas]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\charsets.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Amazon Corretto\jdk1.8.0_352\bin\java.exe]</td>
|
|
<td>[C:\Atlas\PevcoCore\ServiceWrapper.exe]</td>
|
|
<td>[2025-08-18T23:19:40Z, 2025-08-21T16:07:26Z]</td>
|
|
<td>[d7251e5cfabd1851fc9f161add6c4614]</td>
|
|
<td>[f8109e7d9708f7915de0513be7afb9b34bf1654b]</td>
|
|
<td>[fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b]</td>
|
|
<td>[4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a]</td>
|
|
<td>[172.17.252.62]</td>
|
|
<td>[172.17.252.62]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>charsets.jar</td>
|
|
<td>C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\</td>
|
|
<td></td>
|
|
<td>3092101</td>
|
|
<td>d7251e5cfabd1851fc9f161add6c4614</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-10-15 02:36:30 +0000 UTC</td>
|
|
<td>2022-10-15 02:36:30 +0000 UTC</td>
|
|
<td>f8109e7d9708f7915de0513be7afb9b34bf1654b</td>
|
|
<td>fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b</td>
|
|
<td>4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a</td>
|
|
<td>2025-08-18 23:19:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a6cd66e10949aed9399a361660c3a31728d676132440d32d9b7edb1a005f580f</td>
|
|
<td>[68a51e96c8556d85247b1372]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe" /COMPUTER:localhost]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-20T01:02:09Z]</td>
|
|
<td>[99df7d512c46663d311ff21b6a397a7c]</td>
|
|
<td>[fd2dbd2766b4a205081e88640035ed1ad5ce7781]</td>
|
|
<td>[01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab]</td>
|
|
<td>[9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DCAdmin.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\</td>
|
|
<td>DCAdmin Module</td>
|
|
<td>2647776</td>
|
|
<td>99df7d512c46663d311ff21b6a397a7c</td>
|
|
<td>DataCaptor</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:03:52 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>fd2dbd2766b4a205081e88640035ed1ad5ce7781</td>
|
|
<td>01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab</td>
|
|
<td>9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f</td>
|
|
<td>2025-08-20 01:02:14 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a6b136aacbe10b92c762f356579330100e2c8b1ae9d6d5657974f9490b3b7f45</td>
|
|
<td>[68a3146b5f0c41860c8c8545]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\random.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[c2ce0e5ec437c6d8538c27ae345c1042]</td>
|
|
<td>[b7828fe39a90bb14a046eab7bf0a18259468b4d6]</td>
|
|
<td>[e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27]</td>
|
|
<td>[1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>random.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>35246</td>
|
|
<td>c2ce0e5ec437c6d8538c27ae345c1042</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>b7828fe39a90bb14a046eab7bf0a18259468b4d6</td>
|
|
<td>e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27</td>
|
|
<td>1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a5ff7457fce680ffacc0bba20ac6a177e78341c7dcae31abefcba7e577e64a7f</td>
|
|
<td>[68a32d9ee5fbd5313b7dadcc]</td>
|
|
<td>[2]</td>
|
|
<td>[shke0124]</td>
|
|
<td>[UH-ADSSP]</td>
|
|
<td>[UTWNNET]</td>
|
|
<td>[C:\DesktopInfo\dtlaunch2.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\wscript.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:41:46Z]</td>
|
|
<td>[e1ace6499530151980189be914a5f89a]</td>
|
|
<td>[3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3]</td>
|
|
<td>[ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba]</td>
|
|
<td>[eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b]</td>
|
|
<td>[172.17.253.172]</td>
|
|
<td>[172.17.253.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dtlaunch2.vbs</td>
|
|
<td>C:\DesktopInfo\</td>
|
|
<td></td>
|
|
<td>176</td>
|
|
<td>e1ace6499530151980189be914a5f89a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-05-07 16:56:42 +0000 UTC</td>
|
|
<td>2019-04-30 12:25:16 +0000 UTC</td>
|
|
<td>3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3</td>
|
|
<td>ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba</td>
|
|
<td>eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b</td>
|
|
<td>2025-08-12 21:44:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a596db3f46aad59dc048c9604dd923c50cc42f4839cba96ce5341875ebfdfd96</td>
|
|
<td>[68a54627d2a51a0036bb0308]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2rcrpoi2.rwf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T03:50:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2rcrpoi2.rwf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 03:50:54 +0000 UTC</td>
|
|
<td>2025-08-20 03:50:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 03:51:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a548df31d03d23622cb379acfbc0695202c0e6f9d3fd292b8231855119eed7eb</td>
|
|
<td>[68a50d976457caa3bd4cff40]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MedRadA_5_0_2_8.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:49:35Z]</td>
|
|
<td>[689ccd0909386b792a96ff44490c0330]</td>
|
|
<td>[ec4d7c17af12efd1448a71da2447d4ae8a11e588]</td>
|
|
<td>[6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35]</td>
|
|
<td>[513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MedRadA_5_0_2_8.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>851968</td>
|
|
<td>689ccd0909386b792a96ff44490c0330</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:49:26 +0000 UTC</td>
|
|
<td>2025-08-19 23:49:28 +0000 UTC</td>
|
|
<td>ec4d7c17af12efd1448a71da2447d4ae8a11e588</td>
|
|
<td>6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35</td>
|
|
<td>513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22</td>
|
|
<td>2025-08-19 23:49:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4fb99caa5f9c76cb638e6277d2a08ca60291241513e64ef8614d5f494708b4b</td>
|
|
<td>[68a5239e621d09b2b1ed5e61]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.MVVM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:39Z]</td>
|
|
<td>[a0116d71c2bf7d9b02ec8f810131729a]</td>
|
|
<td>[0a48bc49abd332c14c031050c67ba147ce752b0d]</td>
|
|
<td>[2978dfa74cc28a4559b5ad081f0fbd3c28a19b7a232494d4db7f0e1d17f1e5000cd1a079b05635f63b3a5f4992b50910]</td>
|
|
<td>[8923081b5e8268a5630db28d943b0b119e1477ea18ed517ec2e256e8967306de8cb879e6c621b3acee4a68ff615b8efdac1e43e2cc96f7e37ebbe0d379d46d72]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.MVVM.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.MVVM</td>
|
|
<td>8704</td>
|
|
<td>a0116d71c2bf7d9b02ec8f810131729a</td>
|
|
<td>Stanley.Infra.MVVM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>0a48bc49abd332c14c031050c67ba147ce752b0d</td>
|
|
<td>2978dfa74cc28a4559b5ad081f0fbd3c28a19b7a232494d4db7f0e1d17f1e5000cd1a079b05635f63b3a5f4992b50910</td>
|
|
<td>8923081b5e8268a5630db28d943b0b119e1477ea18ed517ec2e256e8967306de8cb879e6c621b3acee4a68ff615b8efdac1e43e2cc96f7e37ebbe0d379d46d72</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-19 17:24:53 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4a5a9bd80cb73fd325ee15e645a860069e36ff5c05c932e2efd9626bee05efe</td>
|
|
<td>[68a25fb2e970d941642e7edc, 68a25fb2e970d941642e7ee9, 68a3b2cf09045b56b2a707b4, 68a3b2cf09045b56b2a707c1, 68a502e12ae1a61fbf4caf12, 68a502e12ae1a61fbf4caf1f, 68a65489c4cae84feadc5712, 68a65489c4cae84feadc571f]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\dbatools.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:06Z, 2025-08-20T23:00:15Z]</td>
|
|
<td>[cbadc5b980f5f88524209de74cb9d288]</td>
|
|
<td>[841515e5cc99849bb746688968e5a2f9b2800d69]</td>
|
|
<td>[dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a]</td>
|
|
<td>[d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\</td>
|
|
<td></td>
|
|
<td>51056</td>
|
|
<td>cbadc5b980f5f88524209de74cb9d288</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:27 +0000 UTC</td>
|
|
<td>2024-03-16 13:34:02 +0000 UTC</td>
|
|
<td>841515e5cc99849bb746688968e5a2f9b2800d69</td>
|
|
<td>dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a</td>
|
|
<td>d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a48e7e331904068e317f8aead7ddc244424fc8f0d0fd9595195727b3e7348a93</td>
|
|
<td>[68a24592503474046d56002d, 68a6643ac834a71c320c303b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[IMAGENOW73-PROD]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\erl8.3\lib\asn1-4.0.4\priv\lib\asn1rt_nif.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2314]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erl.exe]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe]</td>
|
|
<td>[2025-08-17T21:02:16Z, 2025-08-21T00:02:17Z]</td>
|
|
<td>[a938f609f23ef250d9275783f6ee19ef]</td>
|
|
<td>[50cb99e8c0d3c1040e34b471f231d378e90fc2df]</td>
|
|
<td>[7d071fe6c3f094833c457b5ddc17e3c4b1daf8ae7153c4126983244f49811828de5d0cbbcb528374f47ecea17075be28]</td>
|
|
<td>[6e23cfd8516b708996d055b6b96c6640c1eae3bc3cdc05a4acef70523767973a0494ac2045f741ca2b75718a9d828521a430bbeb4450742cd5437ec1ccb41b05]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>asn1rt_nif.dll</td>
|
|
<td>C:\Program Files\erl8.3\lib\asn1-4.0.4\priv\lib\</td>
|
|
<td></td>
|
|
<td>17920</td>
|
|
<td>a938f609f23ef250d9275783f6ee19ef</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2017-03-14 21:29:24 +0000 UTC</td>
|
|
<td>2017-03-14 21:29:24 +0000 UTC</td>
|
|
<td>50cb99e8c0d3c1040e34b471f231d378e90fc2df</td>
|
|
<td>7d071fe6c3f094833c457b5ddc17e3c4b1daf8ae7153c4126983244f49811828de5d0cbbcb528374f47ecea17075be28</td>
|
|
<td>6e23cfd8516b708996d055b6b96c6640c1eae3bc3cdc05a4acef70523767973a0494ac2045f741ca2b75718a9d828521a430bbeb4450742cd5437ec1ccb41b05</td>
|
|
<td>2025-07-17 00:02:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-12-12 13:35:55 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 00:06:14.119 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a44bd80e82cb0f4cfac0dac8575746223802514e3cec9dc75235bc0de646af14</td>
|
|
<td>[68a472b1b022648922e235ad]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xalan-2.7.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[6aa6607802502c8016b676f25f8e4873]</td>
|
|
<td>[d55d3f02a56ec4c25695fe67e1334ff8c2ecea23]</td>
|
|
<td>[f107b40321720128c82aa3cdef232c8dc393dc2023de47c9e4c6b16c49caa1fc72f7390fe32e9ae3f3668d30df2125a3]</td>
|
|
<td>[00f859c5bd65f6dc91e396ce91fe2f6d30b2354d6b419cd9ea96984c5403e5cd1342bb9362b0ae1f2792612f0df731c4f7ac92f16a825bb7e22089c27a129c6c]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>xalan-2.7.2.jar</td>
|
|
<td>C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>3154938</td>
|
|
<td>6aa6607802502c8016b676f25f8e4873</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-18 18:38:28 +0000 UTC</td>
|
|
<td>2021-02-09 20:57:00 +0000 UTC</td>
|
|
<td>d55d3f02a56ec4c25695fe67e1334ff8c2ecea23</td>
|
|
<td>f107b40321720128c82aa3cdef232c8dc393dc2023de47c9e4c6b16c49caa1fc72f7390fe32e9ae3f3668d30df2125a3</td>
|
|
<td>00f859c5bd65f6dc91e396ce91fe2f6d30b2354d6b419cd9ea96984c5403e5cd1342bb9362b0ae1f2792612f0df731c4f7ac92f16a825bb7e22089c27a129c6c</td>
|
|
<td>2025-08-08 17:07:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 10:43:36 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 17:21:09.865 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4454856dcfed999425856c0fd6a1b93a0ffaa9f3847c3c8553a54171ceb81ed</td>
|
|
<td>[68a28941494a241570529b12]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\tmpEXO_4quyqcfh.c4k.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T02:00:24Z]</td>
|
|
<td>[3a71ee92f23de090c1f5c4f973e12c93]</td>
|
|
<td>[0e445921ea26bec3569ea162bf961f3a24c0ed37]</td>
|
|
<td>[961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116]</td>
|
|
<td>[a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_4quyqcfh.c4k.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>3a71ee92f23de090c1f5c4f973e12c93</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 02:00:23 +0000 UTC</td>
|
|
<td>2025-08-18 02:00:23 +0000 UTC</td>
|
|
<td>0e445921ea26bec3569ea162bf961f3a24c0ed37</td>
|
|
<td>961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116</td>
|
|
<td>a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328</td>
|
|
<td>2025-08-18 02:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a3a373e7af1e1a849e77ac7afeda3c2fcb310114787f26f0bda956e435b85a2e</td>
|
|
<td>[68a4cf1f4971da3ff4f65d7a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a3724c84c328061648a13640100576fa1495c17595531d32511c386cb89ad0d0</td>
|
|
<td>[68a523a99ba7c92b34976f9a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[81bb796392271fdee395ef35a86dd765]</td>
|
|
<td>[00289d1c9869b2ff54b9f6d773ba1a33719b7d1d]</td>
|
|
<td>[0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828]</td>
|
|
<td>[ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnderlyingControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>UnderlyingControl</td>
|
|
<td>43520</td>
|
|
<td>81bb796392271fdee395ef35a86dd765</td>
|
|
<td>UnderlyingControl</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:40 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:40 +0000 UTC</td>
|
|
<td>00289d1c9869b2ff54b9f6d773ba1a33719b7d1d</td>
|
|
<td>0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828</td>
|
|
<td>ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a35f7e2e854e0a9bec312d0e231257abf44ccd69ca8d4ce54a45a37c4b33e944</td>
|
|
<td>[68a3146b5f0c41860c8c84ee, 68a3146b5f0c41860c8c8544]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\warnings.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7d85eaf7564ffaa1209cf036319c7ee9]</td>
|
|
<td>[d08d019620615f931d936c43e8c10fe455351f14]</td>
|
|
<td>[258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232]</td>
|
|
<td>[50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>warnings.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>29539</td>
|
|
<td>7d85eaf7564ffaa1209cf036319c7ee9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>d08d019620615f931d936c43e8c10fe455351f14</td>
|
|
<td>258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232</td>
|
|
<td>50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a324b6ad763bc358149289b8e56cf6af34165731120eac06b4c11545098abe80</td>
|
|
<td>[68a3344d439a37dcf9cca092]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rrmcis01.ufu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T14:10:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rrmcis01.ufu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:10:10 +0000 UTC</td>
|
|
<td>2025-08-18 14:10:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:10:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a32017ae555c56a0e151a37d90e172e739a0be07eba0325f360d41187c2a4915</td>
|
|
<td>[68a3146b5f0c41860c8c8503, 68a3146b5f0c41860c8c8529]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_compiler.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[3fe222e07defb25b338445dbcab0bfb9]</td>
|
|
<td>[a105528d5535f8082be6782364ab5baaa5e0bfcb]</td>
|
|
<td>[4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16]</td>
|
|
<td>[f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_compiler.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>26774</td>
|
|
<td>3fe222e07defb25b338445dbcab0bfb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>a105528d5535f8082be6782364ab5baaa5e0bfcb</td>
|
|
<td>4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16</td>
|
|
<td>f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab3e4f08e2c7a570c28ca7c164108d27b6143f29ccb057cc4a83a9802489df05</td>
|
|
<td>[68a25fb2e970d941642e7eda, 68a25fb2e970d941642e7ee7, 68a3b2cf09045b56b2a707b2, 68a3b2cf09045b56b2a707bf, 68a502e12ae1a61fbf4caf10, 68a502e12ae1a61fbf4caf1d, 68a65489c4cae84feadc5710, 68a65489c4cae84feadc571d]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\bogus\bogus.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:05Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:05Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:04Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:05Z, 2025-08-20T23:00:15Z]</td>
|
|
<td>[a61f8b7824f907fb6c358393c82c5940]</td>
|
|
<td>[c30336669104b991f2c6b492f653998c8c77b1ad]</td>
|
|
<td>[1d04f4b56a0edf786dd23ee356cb9d5f5474a9e94e9add2dbc7c10badf9e0816467efb6263f6ca5c8681ef498ca68960]</td>
|
|
<td>[1098b35b74559b78d303a032489fd9f1926c79a05049698d515e9a9899a27ec25b3606d944adae25db284568637c3099b98c9db0a0d9efa2a312482941c6dd5d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bogus.dll</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\bogus\</td>
|
|
<td>Bogus Fake Data Generator for .NET</td>
|
|
<td>2431488</td>
|
|
<td>a61f8b7824f907fb6c358393c82c5940</td>
|
|
<td>Bogus</td>
|
|
<td>35.4.1 built on 2024-03-02 18:42:42Z</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 18:35:30 +0000 UTC</td>
|
|
<td>2024-03-02 22:45:14 +0000 UTC</td>
|
|
<td>c30336669104b991f2c6b492f653998c8c77b1ad</td>
|
|
<td>1d04f4b56a0edf786dd23ee356cb9d5f5474a9e94e9add2dbc7c10badf9e0816467efb6263f6ca5c8681ef498ca68960</td>
|
|
<td>1098b35b74559b78d303a032489fd9f1926c79a05049698d515e9a9899a27ec25b3606d944adae25db284568637c3099b98c9db0a0d9efa2a312482941c6dd5d</td>
|
|
<td>2025-05-10 23:00:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-03 16:29:02 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-10 23:01:16.463 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab2b298d409c891edf1513d3484c5c164cb6060a64944ea2e6c0b6dd496f0097</td>
|
|
<td>[68a246ffe80acba0b194f586]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_fxyje5js.4bs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:17:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fxyje5js.4bs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:17:47 +0000 UTC</td>
|
|
<td>2025-08-17 21:17:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:17:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab0001b12e7ad572eb986b3f639d489d860bcdd5c1a84f13f16bc73235b11c44</td>
|
|
<td>[68a3146b5f0c41860c8c84ea, 68a3146b5f0c41860c8c851e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8_sig.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[efb0079be3128e1ca929caf3e6968501]</td>
|
|
<td>[3aad7766e3c7603ad9e0b90a344edb5158b6f556]</td>
|
|
<td>[7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664]</td>
|
|
<td>[dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utf_8_sig.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>6921</td>
|
|
<td>efb0079be3128e1ca929caf3e6968501</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:26:59 +0000 UTC</td>
|
|
<td>2024-11-22 16:26:59 +0000 UTC</td>
|
|
<td>3aad7766e3c7603ad9e0b90a344edb5158b6f556</td>
|
|
<td>7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664</td>
|
|
<td>dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>aaf84151e67fc2d21578b8d07a8bc592af20149f26cf05cc67de7acee9f4637b</td>
|
|
<td>[68a2349d93dd7dbb6ab7e942]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_53h31yga.ysi.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:59:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_53h31yga.ysi.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:59:20 +0000 UTC</td>
|
|
<td>2025-08-17 19:59:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:59:25 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>aa20b24267545230ee528dc0d011fc2431c53e24cbc89d13638c19dfaf93cf3c</td>
|
|
<td>[68a6afe50e0f3bd8deac4d03, 68a6afe50e0f3bd8deac4d18, 68a6afe50e0f3bd8deac4d45, 68a6afe50e0f3bd8deac4d66, 68a6afe50e0f3bd8deac4d85, 68a6afe50e0f3bd8deac4da5, 68a6afe50e0f3bd8deac4dc6, 68a6afe50e0f3bd8deac4de6, 68a6afe50e0f3bd8deac4e06, 68a6afe50e0f3bd8deac4e26, 68a6afe50e0f3bd8deac4e46, 68a6afe50e0f3bd8deac4e66, 68a6afe50e0f3bd8deac4e86, 68a6afe50e0f3bd8deac4ea6, 68a6afe50e0f3bd8deac4eb8, 68a6afe50e0f3bd8deac4ee7, 68a6afe50e0f3bd8deac4f06, 68a6afe50e0f3bd8deac4f26, 68a6afe50e0f3bd8deac4f47, 68a6afe50e0f3bd8deac4f6f, 68a6afe50e0f3bd8deac4f90, 68a6afe50e0f3bd8deac4fb0, 68a6afe50e0f3bd8deac4fd0, 68a6afe50e0f3bd8deac4ff0, 68a6afe50e0f3bd8deac5010, 68a6afe50e0f3bd8deac5030, 68a6afe50e0f3bd8deac504f, 68a6afe50e0f3bd8deac5070, 68a6afe50e0f3bd8deac5090, 68a6afe50e0f3bd8deac50ba, 68a6afe50e0f3bd8deac50d9, 68a6afe50e0f3bd8deac50fa, 68a6afe50e0f3bd8deac5124, 68a6afe50e0f3bd8deac5146, 68a6afe50e0f3bd8deac5164, 68a6afe50e0f3bd8deac518e, 68a6afe50e0f3bd8deac51ae, 68a6afe50e0f3bd8deac51cd, 68a6afe50e0f3bd8deac51ee, 68a6afe50e0f3bd8deac5201, 68a6afe50e0f3bd8deac5218, 68a6afe50e0f3bd8deac524f, 68a6afe50e0f3bd8deac526f, 68a6afe50e0f3bd8deac5282, 68a6afe50e0f3bd8deac52a3, 68a6afe50e0f3bd8deac52c3, 68a6afe50e0f3bd8deac52e3, 68a6afe50e0f3bd8deac5303, 68a6afe50e0f3bd8deac5323, 68a6afe50e0f3bd8deac5343, 68a6afe50e0f3bd8deac5363, 68a6afe50e0f3bd8deac5383, 68a6afe50e0f3bd8deac53a9, 68a6afe50e0f3bd8deac53c4, 68a6afe50e0f3bd8deac53e8, 68a6afe50e0f3bd8deac5408, 68a6afe50e0f3bd8deac5429, 68a6afe50e0f3bd8deac5444, 68a6afe50e0f3bd8deac546a, 68a6afe50e0f3bd8deac5489, 68a6afe50e0f3bd8deac54a8, 68a6afe50e0f3bd8deac54c9, 68a6afe50e0f3bd8deac54e9, 68a6afe50e0f3bd8deac5508, 68a6afe50e0f3bd8deac5529, 68a6afe50e0f3bd8deac5549, 68a6afe50e0f3bd8deac5573, 68a6afe50e0f3bd8deac5593, 68a6afe50e0f3bd8deac55b3, 68a6afe50e0f3bd8deac55d3, 68a6afe50e0f3bd8deac55f3, 68a6afe50e0f3bd8deac5614, 68a6afe50e0f3bd8deac5633, 68a6afe50e0f3bd8deac563c, 68a6afe50e0f3bd8deac5662, 68a6afe50e0f3bd8deac5682, 68a6afe50e0f3bd8deac5691, 68a6afe50e0f3bd8deac56b1, 68a6afe50e0f3bd8deac56d1, 68a6afe50e0f3bd8deac56e9, 68a6afe50e0f3bd8deac5711, 68a6afe50e0f3bd8deac572a, 68a6afe50e0f3bd8deac5751, 68a6afe50e0f3bd8deac575a, 68a6afe50e0f3bd8deac5799, 68a6afe50e0f3bd8deac57a5, 68a6afe50e0f3bd8deac57da, 68a6afe50e0f3bd8deac57e5, 68a6afe50e0f3bd8deac5819, 68a6afe50e0f3bd8deac5832, 68a6afe50e0f3bd8deac585b, 68a6afe50e0f3bd8deac5863, 68a6afe50e0f3bd8deac589a, 68a6afe50e0f3bd8deac58aa, 68a6afe50e0f3bd8deac58da, 68a6afe50e0f3bd8deac58ec, 68a6afe50e0f3bd8deac5914, 68a6afe50e0f3bd8deac592b, 68a6afe50e0f3bd8deac595b, 68a6afe50e0f3bd8deac597b, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\cip-zwrapper-16-vc140-64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, ...]</td>
|
|
<td>[8753dfd88c2f17946cc3f0d6f3b275e2]</td>
|
|
<td>[e4cfebc6b3fb92a21b64a555ff94674d87f702f5]</td>
|
|
<td>[430c713d06411b42858c750bfb66a1a31841b613b772949f3fa12f19c091934ff48947d21040a8ef2383bd01c4302d80]</td>
|
|
<td>[27ace49187c0e9c624cc7114814d966732b60471fb5ecd1b0d94230d453d9bcf3a31b09d21edcd9a29a1bad51ad60a3848166f7af39bc0aa601fc2d222212c4d]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cip-zwrapper-16-vc140-64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>cip-zwrapper-16-vc140-64 ダイナミックリンクライブラリ</td>
|
|
<td>62976</td>
|
|
<td>8753dfd88c2f17946cc3f0d6f3b275e2</td>
|
|
<td>CIP</td>
|
|
<td>1.6.5.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2015-10-13 05:41:08 +0000 UTC</td>
|
|
<td>e4cfebc6b3fb92a21b64a555ff94674d87f702f5</td>
|
|
<td>430c713d06411b42858c750bfb66a1a31841b613b772949f3fa12f19c091934ff48947d21040a8ef2383bd01c4302d80</td>
|
|
<td>27ace49187c0e9c624cc7114814d966732b60471fb5ecd1b0d94230d453d9bcf3a31b09d21edcd9a29a1bad51ad60a3848166f7af39bc0aa601fc2d222212c4d</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>aa13263cf877fba12972c6ed947fca30c01b3d65106e1346ada8772145045119</td>
|
|
<td>[68a2676e765f21351af39a4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-I-FAMELASTIC]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjuufxzf.lny.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T23:36:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hjuufxzf.lny.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:36:04 +0000 UTC</td>
|
|
<td>2025-08-17 23:36:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:36:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a95a3864848994037a1db9261c87490070f83ce90f08af579cd568bd979bfe8f</td>
|
|
<td>[68a5239e621d09b2b1ed5e5b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellHostsDataModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[65262622b831d010834ff3548a3dd05a]</td>
|
|
<td>[f1f44b243a97ceff5f11eacd61789dc2e1ad3f21]</td>
|
|
<td>[bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4]</td>
|
|
<td>[517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellHostsDataModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>13824</td>
|
|
<td>65262622b831d010834ff3548a3dd05a</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>f1f44b243a97ceff5f11eacd61789dc2e1ad3f21</td>
|
|
<td>bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4</td>
|
|
<td>517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a94fd67daf9137b26e2d98aa4cf46614439bd64263c5c211369a232c444862ea</td>
|
|
<td>[68a4e8a1ad898641af98fd91, 68a4fcd0011d94a251a4ef2d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\UserInfo.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\UserInfo.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:52Z, 2025-08-19T22:09:39Z]</td>
|
|
<td>[9f0cb655a832fdecb9433dd781004637]</td>
|
|
<td>[bea6b32a5d2d6d152a52847db1184fab956a9d3b]</td>
|
|
<td>[5c09eafe2f161f74f7aa03230bbed01693e7ed426b7923744a035cf1a54e7a73f9b6388ac92b5bd1bffdcd130a947c6a]</td>
|
|
<td>[5fd32197a5d9bb7cc65e3917791023fbe2b80a34899d4363475a7fb05fb1051c0a17c72359f3c215d0fd41bbb2dfed0bb95c766131fc175c18ac91cf54b05551]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UserInfo.dll</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\</td>
|
|
<td></td>
|
|
<td>6144</td>
|
|
<td>9f0cb655a832fdecb9433dd781004637</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:11:52 +0000 UTC</td>
|
|
<td>2025-08-19 21:11:52 +0000 UTC</td>
|
|
<td>bea6b32a5d2d6d152a52847db1184fab956a9d3b</td>
|
|
<td>5c09eafe2f161f74f7aa03230bbed01693e7ed426b7923744a035cf1a54e7a73f9b6388ac92b5bd1bffdcd130a947c6a</td>
|
|
<td>5fd32197a5d9bb7cc65e3917791023fbe2b80a34899d4363475a7fb05fb1051c0a17c72359f3c215d0fd41bbb2dfed0bb95c766131fc175c18ac91cf54b05551</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-17 21:57:13 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a8c69cff170a11e09c0db48f6eff36552f0e55bead875b852f53e4014d2ec4ad</td>
|
|
<td>[68a5ea05ebe5b1fd9532e2b9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nnvr8]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0q2akhpz.hat.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2303.894]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T15:29:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.215]</td>
|
|
<td>[172.17.250.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0q2akhpz.hat.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 15:29:28 +0000 UTC</td>
|
|
<td>2025-08-20 15:29:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 15:30:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a8ae15a09049933a89fdb4389e64b361166effd3c50059a27b421c35661ab8ec</td>
|
|
<td>[68a3146b5f0c41860c8c84f7, 68a3146b5f0c41860c8c8538]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\selectors.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[dce6f6cf31043a85ae09dd17ed5d2d5f]</td>
|
|
<td>[811715ac731526bdaee76bf10571075361ecf9d5]</td>
|
|
<td>[544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011]</td>
|
|
<td>[8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>selectors.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>26363</td>
|
|
<td>dce6f6cf31043a85ae09dd17ed5d2d5f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>811715ac731526bdaee76bf10571075361ecf9d5</td>
|
|
<td>544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011</td>
|
|
<td>8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a89d98e45048ab6c95c9bcd763368cdba07ce23cccae4c0397a21465a704f696</td>
|
|
<td>[68a16bd60756fe54a9918f9d, 68a2149cb58debea69d7c748, 68a2bd5ff793a9057f329c03, 68a3663261f8067c48423eb8, 68a40efceddb3a9f1a71a600, 68a4b7cd36bc5d38057e2365]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\XmppDll.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[e9993b2952f59b356b8d698593ee395c]</td>
|
|
<td>[918396277f3549bc9b03d29c6e39a4daf0493ef0]</td>
|
|
<td>[8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a]</td>
|
|
<td>[9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>XmppDll.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>gloox Jabber/XMPP library</td>
|
|
<td>2290488</td>
|
|
<td>e9993b2952f59b356b8d698593ee395c</td>
|
|
<td></td>
|
|
<td>1.0.11</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>918396277f3549bc9b03d29c6e39a4daf0493ef0</td>
|
|
<td>8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a</td>
|
|
<td>9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:43 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</td>
|
|
<td>[68a472b1b022648922e235af]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xml-apis-1.4.01.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[7eaad6fea5925cca6c36ee8b3e02ac9d]</td>
|
|
<td>[3789d9fada2d3d458c4ba2de349d48780f381ee3]</td>
|
|
<td>[bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce]</td>
|
|
<td>[8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>xml-apis-1.4.01.jar</td>
|
|
<td>C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>220536</td>
|
|
<td>7eaad6fea5925cca6c36ee8b3e02ac9d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-18 18:38:29 +0000 UTC</td>
|
|
<td>2021-02-09 20:57:00 +0000 UTC</td>
|
|
<td>3789d9fada2d3d458c4ba2de349d48780f381ee3</td>
|
|
<td>bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</td>
|
|
<td>8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</td>
|
|
<td>2025-08-08 17:07:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-07 10:45:19 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 17:21:09.865 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a7cccc87ac2b6a10d20c9bc854dda16ada4efba273b52f1b2aea2e1590febe83</td>
|
|
<td>[68a311cdc2d0d6e3eb77f213]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AddRemoveADGroupMembers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[6125933ae4a52b308e5db3f580da5971]</td>
|
|
<td>[9bd2f70e769baa4eeadac833831062423a4ace2b]</td>
|
|
<td>[c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b]</td>
|
|
<td>[3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AddRemoveADGroupMembers.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>433</td>
|
|
<td>6125933ae4a52b308e5db3f580da5971</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:40 +0000 UTC</td>
|
|
<td>2021-02-15 19:13:49 +0000 UTC</td>
|
|
<td>9bd2f70e769baa4eeadac833831062423a4ace2b</td>
|
|
<td>c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b</td>
|
|
<td>3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a777578b5261143b213a8b866c266b434757c0d70c0bff30823ba2aa77cb6f99</td>
|
|
<td>[68a1dcde696c67888926ebf4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_g5umrco1.qad.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:44:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_g5umrco1.qad.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:44:48 +0000 UTC</td>
|
|
<td>2025-08-17 13:44:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:45:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a767d9dc32d4a0e488878f652ef5e97ceb11636426ed07e4243ad94ac1a882c2</td>
|
|
<td>[68a1f0fecfcf9ec5faefd427]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MWeb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o0k5mtai.fpt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T15:10:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o0k5mtai.fpt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:10:44 +0000 UTC</td>
|
|
<td>2025-08-17 15:10:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:10:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a74e1014a652da7a239592f6d0165e69ba56f2890c3a6192f18481090e01ff37</td>
|
|
<td>[68a2529a2a645cc96ea797bf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cob2eltw.0et.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:07:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cob2eltw.0et.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:07:14 +0000 UTC</td>
|
|
<td>2025-08-17 22:07:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:07:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ada1fdc640def878fdcc18021bedea9d70ed8c536f9747198187bbb5d17356cf</td>
|
|
<td>[68a238fd2d0808cf577455c5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_od0m00va.ovq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:17:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_od0m00va.ovq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:17:57 +0000 UTC</td>
|
|
<td>2025-08-17 20:17:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:18:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad89571f2b2cb3680b5f6178667a3c01b1ad085b0a046a9c24ad542f574dc02b</td>
|
|
<td>[68a71d98771132224a617f7b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Event Server\VideoOS.Event.Server.TrayController.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>["C:\Program Files\Milestone\XProtect Event Server\VideoOS.Event.Server.TrayController.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:38Z]</td>
|
|
<td>[0bd181c7ce7eb21f003927b9a13f5f96]</td>
|
|
<td>[7c2862073507c837c7d771db494fe151a9c9b69a]</td>
|
|
<td>[a0cec1718341afa841287c50a3241226d455d0e4676e9791d3cfb9aba8631747ea6914bfe064e9f825e214acc440ccf4]</td>
|
|
<td>[6fdfc4c0633ab205cc49090189b3fbe2b3e191d6222c7ddb80a5004cd6e2ebcd6d4f74baa3f0eeb8d500240d091df4ccb0d041099e58b5abf68578a288b21de9]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Event.Server.TrayController.exe</td>
|
|
<td>C:\Program Files\Milestone\XProtect Event Server\</td>
|
|
<td>Event Server manager</td>
|
|
<td>59904</td>
|
|
<td>0bd181c7ce7eb21f003927b9a13f5f96</td>
|
|
<td>VideoOS</td>
|
|
<td>20.2.2035.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-01 19:51:34 +0000 UTC</td>
|
|
<td>2020-05-01 19:51:34 +0000 UTC</td>
|
|
<td>7c2862073507c837c7d771db494fe151a9c9b69a</td>
|
|
<td>a0cec1718341afa841287c50a3241226d455d0e4676e9791d3cfb9aba8631747ea6914bfe064e9f825e214acc440ccf4</td>
|
|
<td>6fdfc4c0633ab205cc49090189b3fbe2b3e191d6222c7ddb80a5004cd6e2ebcd6d4f74baa3f0eeb8d500240d091df4ccb0d041099e58b5abf68578a288b21de9</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-01-11 11:29:30 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad7c0b2129710ddf993b52f160a9045d9ba52aadc123df4370360ea7f70b3152</td>
|
|
<td>[68a16bd60756fe54a9918f9e, 68a2149cb58debea69d7c74a, 68a2bd5ff793a9057f329c04, 68a3663261f8067c48423eb7, 68a40efceddb3a9f1a71a601, 68a4b7cd36bc5d38057e2366]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMsgAppCommon.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[8ebe28011c96596c46449bb1073ef46e]</td>
|
|
<td>[14337012084411cbc0624f820c9fea5072ca6c1b]</td>
|
|
<td>[a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421]</td>
|
|
<td>[66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zMsgAppCommon.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>10472248</td>
|
|
<td>8ebe28011c96596c46449bb1073ef46e</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>14337012084411cbc0624f820c9fea5072ca6c1b</td>
|
|
<td>a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421</td>
|
|
<td>66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:17:11 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad3d406f876972eb8546c0464c04d3728c2928bbaa961d25359a1386c77c655c</td>
|
|
<td>[68a70bf158372bc3075d1d47]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>["C:\Program Files\Yabe\Yabe.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[C:\Users\SVC_SL_ControlSystem\Downloads\SetupYabe_v2.1.0.exe]</td>
|
|
<td>[2025-08-21T12:07:03Z]</td>
|
|
<td>[863329bcff088adc2e1f1bbc16de8e56]</td>
|
|
<td>[03ccd0a7e520defb9babd8ac71de101142ddcaea]</td>
|
|
<td>[e119f161b2087ffbce3d9c2387e6c5788ba7492971b83e768c48f63449d2b40096ab7d8586c643416321b31bf7b79574]</td>
|
|
<td>[0dfcc2ed17e37de087e03ed5e9516df9f199b5de8ff65c8e527349e29ecffefcb43a5f1754b058b56745b6cb5b887e539a09c9a75dffedcb2744ebe24c99bf95]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Yabe.exe</td>
|
|
<td>C:\Program Files\Yabe\</td>
|
|
<td>Yabe</td>
|
|
<td>2409984</td>
|
|
<td>863329bcff088adc2e1f1bbc16de8e56</td>
|
|
<td>Yabe</td>
|
|
<td>2.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-07-10 09:09:52 +0000 UTC</td>
|
|
<td>03ccd0a7e520defb9babd8ac71de101142ddcaea</td>
|
|
<td>e119f161b2087ffbce3d9c2387e6c5788ba7492971b83e768c48f63449d2b40096ab7d8586c643416321b31bf7b79574</td>
|
|
<td>0dfcc2ed17e37de087e03ed5e9516df9f199b5de8ff65c8e527349e29ecffefcb43a5f1754b058b56745b6cb5b887e539a09c9a75dffedcb2744ebe24c99bf95</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-14 17:19:26 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>2</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.40</td>
|
|
<td>2025-08-20 18:12:07.258 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce</td>
|
|
<td>[68a472a799ad3734d804e2f8]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-codec-1.9.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[75615356605c8128013da9e3ac62a249]</td>
|
|
<td>[9ce04e34240f674bc72680f8b843b1457383161a]</td>
|
|
<td>[29ef73a57b1f0ed729409d4a0200f1c9a444a4f6ac355c5c8f09e7acb23fdb6dca3074009b916fb6ec073f7cccc0adbf]</td>
|
|
<td>[b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>commons-codec.jar</td>
|
|
<td>E:\weblogic\user_projects\domains\swisslog\servers\AdminServer\tmp\_WL_user\pim-war\r2ub70\war\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>263965</td>
|
|
<td>75615356605c8128013da9e3ac62a249</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-09-20 03:24:08 +0000 UTC</td>
|
|
<td>2023-09-28 14:22:30 +0000 UTC</td>
|
|
<td>9ce04e34240f674bc72680f8b843b1457383161a</td>
|
|
<td>29ef73a57b1f0ed729409d4a0200f1c9a444a4f6ac355c5c8f09e7acb23fdb6dca3074009b916fb6ec073f7cccc0adbf</td>
|
|
<td>b65531ead8500493e3dd14a860224851b80f438fc53bf8868b443a0557d839a2b0c868e4fedcf99579ae04b6b2bbd8cdb37f9921ad785983c37569aa9d2e8102</td>
|
|
<td>2025-08-11 05:11:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-24 12:17:15 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-10 09:14:12.412 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad17815283c3efec2632516bfb653476c33644002df5f1aa22804c8b165f6170</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21e]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:39:07Z]</td>
|
|
<td>[51edb535cb2fcd632ec8c09c14fe100f]</td>
|
|
<td>[ed4596c1f4043fb241a493063969f44e970c3e04]</td>
|
|
<td>[994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd]</td>
|
|
<td>[a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShellISE_profile.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\WindowsPowerShell\</td>
|
|
<td></td>
|
|
<td>152</td>
|
|
<td>51edb535cb2fcd632ec8c09c14fe100f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-29 17:38:09 +0000 UTC</td>
|
|
<td>2023-08-31 18:12:15 +0000 UTC</td>
|
|
<td>ed4596c1f4043fb241a493063969f44e970c3e04</td>
|
|
<td>994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd</td>
|
|
<td>a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad12fe924b6dbe1f869a20425a873f3d69862ab4deae20bfd6345adf5cf6a1c0</td>
|
|
<td>[68a7159f4aa14456bb5cd15f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[u-hAADConnect]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_9273e095-4825-45ca-bdb1-4155db91ed74_Untitled1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:42:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.63]</td>
|
|
<td>[172.25.19.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_9273e095-4825-45ca-bdb1-4155db91ed74_Untitled1.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 12:27:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>acbc4f0a5eaf7c7d93ac6e6b7215bfc3335342b6e2dd8dca6f53dcb7ee79b033</td>
|
|
<td>[68a2a5fb28c6be6b08f580b6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5tf0ydu5.0zc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:03:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_5tf0ydu5.0zc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:03:01 +0000 UTC</td>
|
|
<td>2025-08-18 04:03:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:03:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973</td>
|
|
<td>[68a72d39787594c630b4edf3]</td>
|
|
<td>[2]</td>
|
|
<td>[sk10219sa]</td>
|
|
<td>[n-sktartarus]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\sk10219sa\AppData\Local\Temp\2\nss2F7A.tmp\registry.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.910]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\Notepad++Portable\Notepad++Portable.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T14:23:07Z]</td>
|
|
<td>[2880bf3bbbc8dcaeb4367df8a30f01a8]</td>
|
|
<td>[cb5c65eae4ae923514a67c95ada2d33b0c3f2118]</td>
|
|
<td>[f1936b8653ddf29cb9e10da4b80ac2fa2073cf27bbbbb74aaf4a4906e9153263d4f9bf756c0b199545609ccfaa7489a4]</td>
|
|
<td>[ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>registry.dll</td>
|
|
<td>C:\Users\SVC_SL_Biomer\AppData\Local\Temp\6\nsn13A1.tmp\</td>
|
|
<td></td>
|
|
<td>29696</td>
|
|
<td>2880bf3bbbc8dcaeb4367df8a30f01a8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-05 16:24:57 +0000 UTC</td>
|
|
<td>2025-05-05 16:24:57 +0000 UTC</td>
|
|
<td>cb5c65eae4ae923514a67c95ada2d33b0c3f2118</td>
|
|
<td>f1936b8653ddf29cb9e10da4b80ac2fa2073cf27bbbbb74aaf4a4906e9153263d4f9bf756c0b199545609ccfaa7489a4</td>
|
|
<td>ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3</td>
|
|
<td>2025-05-05 16:24:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-02 17:55:51 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-05 12:57:36.74 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ac5c7e37104a139a3ea877b75658eff5f399de2333e5ba8c3e5388f8890389dc</td>
|
|
<td>[68a523949cec397f02de9f4f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Control.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[3f5edae09a2d2bbfda7864aa86623e86]</td>
|
|
<td>[a31163d319bb84f551dcd9ee88b4bc9fb6323152]</td>
|
|
<td>[7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9]</td>
|
|
<td>[87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Control.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>20480</td>
|
|
<td>3f5edae09a2d2bbfda7864aa86623e86</td>
|
|
<td></td>
|
|
<td>1.0.8565.40744</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:10 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:10 +0000 UTC</td>
|
|
<td>a31163d319bb84f551dcd9ee88b4bc9fb6323152</td>
|
|
<td>7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9</td>
|
|
<td>87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>abfc4eadbf5b3acb9932b4f2d763d6aa06f05c2031a181854aa56996337ce231</td>
|
|
<td>[68a4ce1bb0bf18198cad4ef7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cweckucy.31w.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:18:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cweckucy.31w.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:18:42 +0000 UTC</td>
|
|
<td>2025-08-19 19:18:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:18:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>abd869d106c61140b3d80bd9cc1a008c3d4d508926a67934a664f7987c30311a</td>
|
|
<td>[68a5239e621d09b2b1ed5e62]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.UIUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:39Z]</td>
|
|
<td>[1e5cee344d8f60e9f329b21d53a74f4b]</td>
|
|
<td>[100cbac39f16b76b3c4bf875e20cddb93f89355b]</td>
|
|
<td>[65839e770d4100b7cfa2dbb31f23931b96c8f7e105709e0812cc577cda33df8506e730057a440b237e2d22eb0a924d59]</td>
|
|
<td>[c7f2b3a4f50b15c532dfb98513896340321fbf2111dbe96fc7b828edcffbaada084d8ecc0d3909e4cf931b4b8c99545c115abda0fe2d68512f450589ec45fb3d]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.UIUtils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.UIUtils</td>
|
|
<td>27648</td>
|
|
<td>1e5cee344d8f60e9f329b21d53a74f4b</td>
|
|
<td>Stanley.Infra.UIUtils</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>100cbac39f16b76b3c4bf875e20cddb93f89355b</td>
|
|
<td>65839e770d4100b7cfa2dbb31f23931b96c8f7e105709e0812cc577cda33df8506e730057a440b237e2d22eb0a924d59</td>
|
|
<td>c7f2b3a4f50b15c532dfb98513896340321fbf2111dbe96fc7b828edcffbaada084d8ecc0d3909e4cf931b4b8c99545c115abda0fe2d68512f450589ec45fb3d</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-19 17:24:02 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab9cadc80e234580e3f3c8c18644314fccd4b3cd3f7085d4e934866cb561b95d</td>
|
|
<td>[68a472b1b022648922e23590]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-api-2.17.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[935fcbd8c8273c0a4f1652de53493050]</td>
|
|
<td>[bbd791e9c8c9421e45337c4fe0a10851c086e36c]</td>
|
|
<td>[4bb853d3edb5ded142e8434a14e13e2c80c7c075bc57eca331974e23c81099f4bb3f973466c09e1b9241702bad3e2462]</td>
|
|
<td>[6391788510d015ae2d94527b942cf49a9518e8628932e0a08a1d8a46297499f9cd8a81f7dd99409f69beb06e844f9fc33b6c5c403786202cb3face9e182a5496]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4j-api-2.17.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>301776</td>
|
|
<td>935fcbd8c8273c0a4f1652de53493050</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>bbd791e9c8c9421e45337c4fe0a10851c086e36c</td>
|
|
<td>4bb853d3edb5ded142e8434a14e13e2c80c7c075bc57eca331974e23c81099f4bb3f973466c09e1b9241702bad3e2462</td>
|
|
<td>6391788510d015ae2d94527b942cf49a9518e8628932e0a08a1d8a46297499f9cd8a81f7dd99409f69beb06e844f9fc33b6c5c403786202cb3face9e182a5496</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-23 15:11:58 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab9b7bb85b4a86b0959ea8ab79a27d2943d17f81f93306f5628edf2f0e1d69ee</td>
|
|
<td>[68a4855388937a93ff144374]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Data.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[f6f2e748b8e7aebde05c149eccef41f3]</td>
|
|
<td>[279bb7a5349ffe29333bc142aac24e8e2cfa883c]</td>
|
|
<td>[c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de]</td>
|
|
<td>[2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Data.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Data</td>
|
|
<td>11264</td>
|
|
<td>f6f2e748b8e7aebde05c149eccef41f3</td>
|
|
<td>Stryker.iBedServer.Authentication.Data</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:16 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:16 +0000 UTC</td>
|
|
<td>279bb7a5349ffe29333bc142aac24e8e2cfa883c</td>
|
|
<td>c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de</td>
|
|
<td>2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab560b0d3264fb18db34b6e934db7a947b7091d6384524f728d3ab53b93b28ac</td>
|
|
<td>[68a306a5ba5832f49fe9cf47]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FE2CMPS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[73b6eded7c5fd671f52d68f3edae4ca9]</td>
|
|
<td>[73f32cfcd330441690385be65724169a8f89d934]</td>
|
|
<td>[ed9b4ccf0c323dbe5ff6d433e44585c48715ff87f78b06a6d1e5c75637e996806d498693ac408aec2cac60878068d69c]</td>
|
|
<td>[00ce22a461c6f0deef98931c2e7535098827444a547119e686694910de5e5893812459d1a5ccbc1b8cb2e7f3cbc54a1f7031b20e35298744f424d2a110d232b9]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FE2CMPS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>536064</td>
|
|
<td>73b6eded7c5fd671f52d68f3edae4ca9</td>
|
|
<td></td>
|
|
<td>1.24.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:13 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>73f32cfcd330441690385be65724169a8f89d934</td>
|
|
<td>ed9b4ccf0c323dbe5ff6d433e44585c48715ff87f78b06a6d1e5c75637e996806d498693ac408aec2cac60878068d69c</td>
|
|
<td>00ce22a461c6f0deef98931c2e7535098827444a547119e686694910de5e5893812459d1a5ccbc1b8cb2e7f3cbc54a1f7031b20e35298744f424d2a110d232b9</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-07-19 05:53:37 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab43a515bf8b14a2a9c2994df65a7c29e928b93092b1b77cddb95a748c3e356a</td>
|
|
<td>[68a6afe50e0f3bd8deac4f4f, 68a6afe50e0f3bd8deac5099, 68a6afe50e0f3bd8deac5103, 68a6afe50e0f3bd8deac516d, 68a6afe50e0f3bd8deac5552, 68a6afe50e0f3bd8deac5644, 68a6afe50e0f3bd8deac5763, 68a6afe50e0f3bd8deac5d2c, 68a6afe50e0f3bd8deac5dae, 68a6afe50e0f3bd8deac5eec]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\icuin53.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[81182110c7efd4a1ca04b3f9459caf57]</td>
|
|
<td>[a3ba426552698c1fee9df6f3a58afa00f487396d]</td>
|
|
<td>[312c932e25b6a59d9f136d6ce760489fd55ce01b2b4d71d5c99211d521422534e98d81923d84d27c44f3f6b34a96784a]</td>
|
|
<td>[b2375b979efd272a2c8a2d06d2d9bb5ca78585e5ddba824bc13c70f4162e71c009b32034b23afd8320c329766ce82461ec74ff5e98d02b983bab27177e39ed65]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>icuin53.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>ICU I18N DLL</td>
|
|
<td>1844224</td>
|
|
<td>81182110c7efd4a1ca04b3f9459caf57</td>
|
|
<td>International Components for Unicode</td>
|
|
<td>53, 1, 0, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:23 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:37 +0000 UTC</td>
|
|
<td>a3ba426552698c1fee9df6f3a58afa00f487396d</td>
|
|
<td>312c932e25b6a59d9f136d6ce760489fd55ce01b2b4d71d5c99211d521422534e98d81923d84d27c44f3f6b34a96784a</td>
|
|
<td>b2375b979efd272a2c8a2d06d2d9bb5ca78585e5ddba824bc13c70f4162e71c009b32034b23afd8320c329766ce82461ec74ff5e98d02b983bab27177e39ed65</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-10 12:39:31 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 06:40:28.291 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08fdd39cece7dfe6201bda96bc2af42eaddb0c51af311571f4fcd66b72cdb961</td>
|
|
<td>[68a5239e621d09b2b1ed5e67]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\System.Data.SQLite.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[4fcac7bf3ed72062425643cddab98ece]</td>
|
|
<td>[24601d0641ef8b5f30833f270e45671b0ba95171]</td>
|
|
<td>[cc749a936d4d8e27ccd8950eee8d9b8ff57f1bfb53ff489d2c87cf6ce14f2739643a79b8801a7712defd91a134fb569d]</td>
|
|
<td>[789607ea5f3f2e00f015027b19b647a1a749dcb5d950c34266de5e3e0f699e8bc0eda61d7347801eaa0ffcd4481afb5b339e45a225e566f241e95f146920a508]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>System.Data.SQLite.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>System.Data.SQLite Interop Library</td>
|
|
<td>502272</td>
|
|
<td>4fcac7bf3ed72062425643cddab98ece</td>
|
|
<td>System.Data.SQLite</td>
|
|
<td>1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>24601d0641ef8b5f30833f270e45671b0ba95171</td>
|
|
<td>cc749a936d4d8e27ccd8950eee8d9b8ff57f1bfb53ff489d2c87cf6ce14f2739643a79b8801a7712defd91a134fb569d</td>
|
|
<td>789607ea5f3f2e00f015027b19b647a1a749dcb5d950c34266de5e3e0f699e8bc0eda61d7347801eaa0ffcd4481afb5b339e45a225e566f241e95f146920a508</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-08-05 07:07:38 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>1</td>
|
|
<td>Benign 0.70</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08f4b407953309b37462a1b49111c0346f505c18df73ad795fe1f3d08a26a13c</td>
|
|
<td>[68a2407e7f644124333c5597]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_az4bceeu.ygt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:49:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_az4bceeu.ygt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:49:53 +0000 UTC</td>
|
|
<td>2025-08-17 20:49:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:50:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08ded4c8af90b220466832bcd7ec8e5a81b80f84609e90d7adefa12059f2df88</td>
|
|
<td>[68a34b98a6132bf659cce5b2, 68a34df0b71eea1289980a17]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadDock.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[28879b8c421e36c48de2516b86e8ad42]</td>
|
|
<td>[e23d1238671eaf5cdb219cb147bc97b5ace02066]</td>
|
|
<td>[fb49b10fa8269187e762f7adca78ce8b832003743e63f9324a976c9612fa14aa81238930df458a1bc862c861563e45c0]</td>
|
|
<td>[4b537d2df27de2ef48f0375ab4b58b2877ba8e7d9ea08cfd5a383ad531b46d938de403d2486e536a53b3f3302deea45605a8ee16764d0596abba81c9e76ec9d6]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.RadDock.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.RadDock</td>
|
|
<td>900096</td>
|
|
<td>28879b8c421e36c48de2516b86e8ad42</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:00 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>e23d1238671eaf5cdb219cb147bc97b5ace02066</td>
|
|
<td>fb49b10fa8269187e762f7adca78ce8b832003743e63f9324a976c9612fa14aa81238930df458a1bc862c861563e45c0</td>
|
|
<td>4b537d2df27de2ef48f0375ab4b58b2877ba8e7d9ea08cfd5a383ad531b46d938de403d2486e536a53b3f3302deea45605a8ee16764d0596abba81c9e76ec9d6</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-23 05:15:43 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b037b79be171f4aa0667e324cadfec44ffe7822980c741fe4c0e08263c13e651</td>
|
|
<td>[68a5239e621d09b2b1ed5e50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:35Z]</td>
|
|
<td>[3f67c30ff4a260e1eb472273f8adddae]</td>
|
|
<td>[6cc927b8950e31a2117aabc6226b40ba6e255fe0]</td>
|
|
<td>[1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98]</td>
|
|
<td>[32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>1496576</td>
|
|
<td>3f67c30ff4a260e1eb472273f8adddae</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:24 +0000 UTC</td>
|
|
<td>6cc927b8950e31a2117aabc6226b40ba6e255fe0</td>
|
|
<td>1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98</td>
|
|
<td>32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b001c8a9342cace11b481d2a09c0da0fa6d773e695beeb5b73e0605eb4bfe43d</td>
|
|
<td>[68a71d98771132224a617f7c, 68a71d98771132224a617f84]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Event Server\VideoOS.Utilities.dll, C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Utilities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP7C7E~1\VIDEOO~1.EXE, C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:38Z, 2025-08-21T13:14:39Z]</td>
|
|
<td>[a4d0de7cbab9e6286a4d7fa619361abb]</td>
|
|
<td>[ac16a7547ca24e71a436bb1243a1c7044f58ecda]</td>
|
|
<td>[4272a9e2fe2c5ec2c2edbfd39f3aeef8c58df98c9b39ca66ed9529122fd042237e18342e40adb69fc6a1f927a01e7415]</td>
|
|
<td>[26b03eef9ad4f00987e40474e1784bc65e6749973e5f22729dbfb236b90cc7c89a71e5470bf2d926fd5872ca9d535d0d7ee2ea9d5194933a6a71c8d5b260f054]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Utilities.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Event Server\</td>
|
|
<td>Common Utilities</td>
|
|
<td>615424</td>
|
|
<td>a4d0de7cbab9e6286a4d7fa619361abb</td>
|
|
<td>VideoOS</td>
|
|
<td>20.2.216.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-01 19:13:06 +0000 UTC</td>
|
|
<td>2020-05-01 19:13:06 +0000 UTC</td>
|
|
<td>ac16a7547ca24e71a436bb1243a1c7044f58ecda</td>
|
|
<td>4272a9e2fe2c5ec2c2edbfd39f3aeef8c58df98c9b39ca66ed9529122fd042237e18342e40adb69fc6a1f927a01e7415</td>
|
|
<td>26b03eef9ad4f00987e40474e1784bc65e6749973e5f22729dbfb236b90cc7c89a71e5470bf2d926fd5872ca9d535d0d7ee2ea9d5194933a6a71c8d5b260f054</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-03-25 17:25:58 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afe3176a14b043f58c56704a27e21b9475b8f09d831e28f4fcc5d1f3cbef7405</td>
|
|
<td>[68a1642f671392a6ca40e557, 68a1804bf8ae7dd3df476f08, 68a2b3ef86404a813dc06ef7, 68a4059c5671ca7f23589561, 68a558aca07fa49408288e4a, 68a6a8f326e2a7ae27aa5354]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[VM-ASCNEO]</td>
|
|
<td>[C:\Program Files (x86)\ASC\ASC Product Suite\scripts\database.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\pgAgent\bin\pgagent.exe]</td>
|
|
<td>[2025-08-17T05:00:05Z, 2025-08-17T07:00:01Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z, 2025-08-21T05:00:01Z]</td>
|
|
<td>[bb8911d4382b8a47f80788ddae424b5e]</td>
|
|
<td>[4de6d08bc1e8b11e7bf5103511383b4b580be052]</td>
|
|
<td>[88a7d44a0d060f268d18579441c450d467092733ae765cd56a41231ec42b6282afc05751f36dd905da129bcc5cf61d3b]</td>
|
|
<td>[464c98c46143d08846caf906c10b6f8be29f6ce623ea51efbd3a3f1cc0e0396d8fa169fa3e93a2eff1a7a3484df58d7f2cb0d6670659a801a9718940923272b6]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>database.bat</td>
|
|
<td>C:\Program Files (x86)\ASC\ASC Product Suite\scripts\</td>
|
|
<td></td>
|
|
<td>2792</td>
|
|
<td>bb8911d4382b8a47f80788ddae424b5e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-15 14:27:52 +0000 UTC</td>
|
|
<td>2020-05-15 14:27:52 +0000 UTC</td>
|
|
<td>4de6d08bc1e8b11e7bf5103511383b4b580be052</td>
|
|
<td>88a7d44a0d060f268d18579441c450d467092733ae765cd56a41231ec42b6282afc05751f36dd905da129bcc5cf61d3b</td>
|
|
<td>464c98c46143d08846caf906c10b6f8be29f6ce623ea51efbd3a3f1cc0e0396d8fa169fa3e93a2eff1a7a3484df58d7f2cb0d6670659a801a9718940923272b6</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-03-08 13:27:59 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-09 05:00:32.765 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afd354cdedd2b9416488113376fb0d902eed137a474db3f4950dfe724f4af992</td>
|
|
<td>[68a3146b5f0c41860c8c84f1, 68a3146b5f0c41860c8c852e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\collections\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[d9f076f7a677fa5a6ef8c75ca0ba3c77]</td>
|
|
<td>[92b5e1df018c550f117247f779ae19db21eaae9f]</td>
|
|
<td>[4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a]</td>
|
|
<td>[a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\collections\__pycache__\</td>
|
|
<td></td>
|
|
<td>73105</td>
|
|
<td>d9f076f7a677fa5a6ef8c75ca0ba3c77</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>92b5e1df018c550f117247f779ae19db21eaae9f</td>
|
|
<td>4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a</td>
|
|
<td>a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afcee321d7c7d802d9cd2489bd88d1aa30043b3576078e4ecbfb9c8fb3b7df7b</td>
|
|
<td>[68a165183f1f36f01a2f3ff2, 68a2b69c8b983fbe0c82338d, 68a40846a972cb7f3cce6ebb, 68a5578d6ea23be9f4b23b73, 68a6a93bfd31eba40e58e7ca]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vroggerb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\rb\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z]</td>
|
|
<td>[9b70ea11df34de22f6a0b16fddf15abc]</td>
|
|
<td>[296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358]</td>
|
|
<td>[6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052]</td>
|
|
<td>[ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\rb\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>9b70ea11df34de22f6a0b16fddf15abc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:22 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:22 +0000 UTC</td>
|
|
<td>296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358</td>
|
|
<td>6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052</td>
|
|
<td>ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afa68b96334ea8493bcb908743af3dbd619cf26be7b44460179abd4d75d849d2</td>
|
|
<td>[68a162e82a638d4aa3f3a7de, 68a2b471d463128b1e9bad1c, 68a4061e04f40cbca7b61c8d, 68a557c15db6cbee6e2f08cc, 68a6a9787a86f4672b9b6281]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_sunnuc]</td>
|
|
<td>[NT-SUNCHECK]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\nodejs\npm.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:09Z, 2025-08-18T05:00:09Z, 2025-08-19T05:00:09Z, 2025-08-20T05:00:09Z, 2025-08-21T05:00:09Z]</td>
|
|
<td>[d5b5acb61c9bf69fb8bfc65eba28c6ab]</td>
|
|
<td>[eebdd696f7f1aaea15ac4e10f5a6e5aa5a6aca8c]</td>
|
|
<td>[e8cdb0183a63c298c54fac2f222f64c25d7406acc7158312c01bcf6220543a41777561ce274f791f2daa66e047cba2d7]</td>
|
|
<td>[69483d7c5e49efdcdf054b3c5d96d9d315e436f60ef3059dd6a80472445d79068655a8a27d868e907f2ebafc49b8f638947b2fb49d42e4a9f427fec74fb58822]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>npm.cmd</td>
|
|
<td>C:\Program Files\nodejs\</td>
|
|
<td></td>
|
|
<td>483</td>
|
|
<td>d5b5acb61c9bf69fb8bfc65eba28c6ab</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-02-23 00:32:30 +0000 UTC</td>
|
|
<td>2021-02-23 00:32:30 +0000 UTC</td>
|
|
<td>eebdd696f7f1aaea15ac4e10f5a6e5aa5a6aca8c</td>
|
|
<td>e8cdb0183a63c298c54fac2f222f64c25d7406acc7158312c01bcf6220543a41777561ce274f791f2daa66e047cba2d7</td>
|
|
<td>69483d7c5e49efdcdf054b3c5d96d9d315e436f60ef3059dd6a80472445d79068655a8a27d868e907f2ebafc49b8f638947b2fb49d42e4a9f427fec74fb58822</td>
|
|
<td>2025-08-09 05:00:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-14 20:22:01 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-08 12:10:30.248 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>af99df13a42a0e67c70d559948cf794b9df7d5fc84dbb69e4b32ad84fe7aca55</td>
|
|
<td>[68a306a5ba5832f49fe9cf59]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\CFGDATA.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[aafddb6202b25809659546608e51a682]</td>
|
|
<td>[fc4b1331b97da0e5e1462462c26d0f0799a961ac]</td>
|
|
<td>[602bb01e4ee73e56a6da15c76288156f8c9ebbbae28c3bfc2d154eb8298c9470983aed45d972b91f62416f274d1b19fb]</td>
|
|
<td>[dc1a678eef2ab975a553d5caefe489b06a5fc33abf9d92ebb11bbf03993a0a58a6aa8bf6fe70e54b1d3605f118460d6b4c875781023622cd117ffe84b56b1c3b]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CFGDATA.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>27136</td>
|
|
<td>aafddb6202b25809659546608e51a682</td>
|
|
<td>CfgData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:04 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>fc4b1331b97da0e5e1462462c26d0f0799a961ac</td>
|
|
<td>602bb01e4ee73e56a6da15c76288156f8c9ebbbae28c3bfc2d154eb8298c9470983aed45d972b91f62416f274d1b19fb</td>
|
|
<td>dc1a678eef2ab975a553d5caefe489b06a5fc33abf9d92ebb11bbf03993a0a58a6aa8bf6fe70e54b1d3605f118460d6b4c875781023622cd117ffe84b56b1c3b</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-10-02 05:01:41 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>af92fc52408ffd0a52b3c898e7d4126e06b42495c28d98f06f78934ea0393139</td>
|
|
<td>[68a70bf158372bc3075d1d49]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Plugins\CheckStatusFlags.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:07:06Z]</td>
|
|
<td>[430174ae9646bff13c7bcf74cd9bf1d9]</td>
|
|
<td>[575df67e248571180452bcb9a03ad6a649fd2fec]</td>
|
|
<td>[284d179131d4cf8b450fccc7b3f1fdfdfc7b17db065879525f9987dc105b1f8dc3b49f783ce79ab3477e5a6f8a18c461]</td>
|
|
<td>[0f3b0b3e981fffcf203e676f692cbe7f3f633f1db1e1f9b934da4b800b3ff422a6cd3b290c1d59c2cea122e9cf1a77d703278d350358a19ac536f732b8f3e8cf]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckStatusFlags.dll</td>
|
|
<td>C:\Program Files\Yabe\Plugins\</td>
|
|
<td>CheckReliability Yabe Plugin</td>
|
|
<td>22016</td>
|
|
<td>430174ae9646bff13c7bcf74cd9bf1d9</td>
|
|
<td>CheckReliability</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-01-17 11:17:44 +0000 UTC</td>
|
|
<td>575df67e248571180452bcb9a03ad6a649fd2fec</td>
|
|
<td>284d179131d4cf8b450fccc7b3f1fdfdfc7b17db065879525f9987dc105b1f8dc3b49f783ce79ab3477e5a6f8a18c461</td>
|
|
<td>0f3b0b3e981fffcf203e676f692cbe7f3f633f1db1e1f9b934da4b800b3ff422a6cd3b290c1d59c2cea122e9cf1a77d703278d350358a19ac536f732b8f3e8cf</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-25 18:29:06 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae938cf2fc97de3ecebb4366788b40c4b0278d5d8590cfec49822ceccaba6cc1</td>
|
|
<td>[68a32505df020a242f955315]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q3yphmy4.esi.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:05:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_q3yphmy4.esi.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:05:08 +0000 UTC</td>
|
|
<td>2025-08-18 13:05:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae79d3bb94a62586e22d6319312d1a9bac29432617a879a3c81c12cc070dd0ef</td>
|
|
<td>[68a5c81947601aee5f76e90f, 68a5c9d7599432010e418bc9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[D:\QS1\ltfil14N.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z]</td>
|
|
<td>[ea579b87170fb740ed95a50d5b9633c5]</td>
|
|
<td>[9ee176043363bae65d21eed48ad91a8b14149268]</td>
|
|
<td>[61bb9220bf441c7970c8f54f3d4f3c8b78a468b302db7edc4da4b5f086726911938058de8544c6ea9ee4fca4ec06ac74]</td>
|
|
<td>[f94c9cc139a8a94d63721b95392dffbbed578dfcfe979e64623d315d2deaa8e48dbeeea3b0f8329b5d48fc0928928f585bf3b056201c04138c5b262241acce62]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltfil14N.DLL</td>
|
|
<td>C:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>155648</td>
|
|
<td>ea579b87170fb740ed95a50d5b9633c5</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>14.5.0.013</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:13:27 +0000 UTC</td>
|
|
<td>2006-06-03 04:44:30 +0000 UTC</td>
|
|
<td>9ee176043363bae65d21eed48ad91a8b14149268</td>
|
|
<td>61bb9220bf441c7970c8f54f3d4f3c8b78a468b302db7edc4da4b5f086726911938058de8544c6ea9ee4fca4ec06ac74</td>
|
|
<td>f94c9cc139a8a94d63721b95392dffbbed578dfcfe979e64623d315d2deaa8e48dbeeea3b0f8329b5d48fc0928928f585bf3b056201c04138c5b262241acce62</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-09 09:34:17 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae73137687a27f2a7dac88f244bb0a8bf7932a7d05c197173f1621766e66d7e2</td>
|
|
<td>[68a253ef9fa0433bd6158684]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eygtkwak.uks.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:12:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eygtkwak.uks.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:12:56 +0000 UTC</td>
|
|
<td>2025-08-17 22:12:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:13:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae05305e7aba537e3a237d01bd252ddfc50e1a2773932b0bc822524ea5106909</td>
|
|
<td>[68a306a5ba5832f49fe9cf33]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STATUSCR.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:35Z]</td>
|
|
<td>[ea17aa006763ebd9d98447e3bba818be]</td>
|
|
<td>[caf8bdbc3576be8252abdaf38180e54ca753a2b6]</td>
|
|
<td>[d8e2908a992f16bc55372bbb207ff71b94c124a7495d12cf16ee8c03bd060f41ce35c31bbeafbb1aaf92d8ddf8ef9a98]</td>
|
|
<td>[decbe90ee6f19a7c1488b700ad8fe17bcfd9f387c1ffcc513c57ecf9a366c63f05f46d95b5448c40ab8c0aadf9c83478674f462f9e6fd1ac200181c2513b4931]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STATUSCR.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td></td>
|
|
<td>13312</td>
|
|
<td>ea17aa006763ebd9d98447e3bba818be</td>
|
|
<td></td>
|
|
<td>1.01.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>caf8bdbc3576be8252abdaf38180e54ca753a2b6</td>
|
|
<td>d8e2908a992f16bc55372bbb207ff71b94c124a7495d12cf16ee8c03bd060f41ce35c31bbeafbb1aaf92d8ddf8ef9a98</td>
|
|
<td>decbe90ee6f19a7c1488b700ad8fe17bcfd9f387c1ffcc513c57ecf9a366c63f05f46d95b5448c40ab8c0aadf9c83478674f462f9e6fd1ac200181c2513b4931</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-02 05:00:54 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>adaefc2aa3397945c97b623d64120ad2b6519d4851e36bff57f9f0883c771108</td>
|
|
<td>[68a164117581c1d365b56ef1, 68a2b59a1058adce8154cb02]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\adminscripts\SCMNightlyAdmin.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:00Z, 2025-08-18T05:00:00Z]</td>
|
|
<td>[3347796315705d161a99178531496358]</td>
|
|
<td>[edba27f15fb9731ee5129e5325e18ebbab93f9a2]</td>
|
|
<td>[2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687]</td>
|
|
<td>[0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCMNightlyAdmin.bat</td>
|
|
<td>D:\adminscripts\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td>3347796315705d161a99178531496358</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-17 15:10:50 +0000 UTC</td>
|
|
<td>2013-08-21 18:34:04 +0000 UTC</td>
|
|
<td>edba27f15fb9731ee5129e5325e18ebbab93f9a2</td>
|
|
<td>2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687</td>
|
|
<td>0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b07f775760a7fe4a33f58c4db6d53037c94625def8cfde62ebe8b7971c53c987</td>
|
|
<td>[68a48674c4cb2500be69260f, 68a48674c4cb2500be692625]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Async.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[8ad6b881cc4d5180f4d24828d54d78ae]</td>
|
|
<td>[c86a4f3444888a9c12414814d12e71c3e6bedbe6]</td>
|
|
<td>[f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3]</td>
|
|
<td>[2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Async.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Async</td>
|
|
<td>21240</td>
|
|
<td>8ad6b881cc4d5180f4d24828d54d78ae</td>
|
|
<td>Serilog.Sinks.Async</td>
|
|
<td>1.5.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-06-25 13:05:08 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>c86a4f3444888a9c12414814d12e71c3e6bedbe6</td>
|
|
<td>f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3</td>
|
|
<td>2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b064ecea39c5e774709a9e0a949b035b655c5802060b137b86fef2cd7052a9da</td>
|
|
<td>[68a306a5ba5832f49fe9cf37]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\POPUPSD.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[99ff8bb651a4e1ff48049e0a06596063]</td>
|
|
<td>[2a61da7049c9eb2d01d55efdc3eaff3690437c44]</td>
|
|
<td>[01c5bedb5a0d449ddd51e77e253e631b72c74263d5a46092bec86ee3d77a1166a20c966486b4f834c733ff39120b1954]</td>
|
|
<td>[e543b4a3e7b05b1eb09e809dd620833ef93de84392fec28c389deb9f4ee5eb7f707a762d437a9bb16c40056156016838b6cef074249af4c9ebf24855f5077394]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>POPUPSD.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>99ff8bb651a4e1ff48049e0a06596063</td>
|
|
<td></td>
|
|
<td>1.10</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:24 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>2a61da7049c9eb2d01d55efdc3eaff3690437c44</td>
|
|
<td>01c5bedb5a0d449ddd51e77e253e631b72c74263d5a46092bec86ee3d77a1166a20c966486b4f834c733ff39120b1954</td>
|
|
<td>e543b4a3e7b05b1eb09e809dd620833ef93de84392fec28c389deb9f4ee5eb7f707a762d437a9bb16c40056156016838b6cef074249af4c9ebf24855f5077394</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:06:15 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b05164c297f162623bc1e95e24652366aefa9c1981e348865e032cd0560206f2</td>
|
|
<td>[68a198085cb01f9c46d51708]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kvkgjkg.3ev.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:51:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1kvkgjkg.3ev.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:51:14 +0000 UTC</td>
|
|
<td>2025-08-17 08:51:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:51:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b03f066abb26f7b16e18cf10144ff5f30bcc8a36068d06284214536ecb09ddeb</td>
|
|
<td>[68a71d98771132224a617f7f]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.Portable.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[c8d73ea3ec2d837cfdd564e3ae6b824b]</td>
|
|
<td>[fae41385bd1e214c745d3fe4d773ddc55f6f6709]</td>
|
|
<td>[a0f8f64efe1c82855099615c0acc0dfaeb788c04ce8bf6f304a58137ff1a851b83a2af2d71e6fad726bd04f65bd2ec64]</td>
|
|
<td>[7545060c21242bba33d18e8ea5deec6056982b2b690a29d372d696f73ff4cbc8f6e5411726a3d50d557abcf1b399335c55d26034d9d8cf93488eef7936fea93e]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.Portable.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.Portable.dll</td>
|
|
<td>475136</td>
|
|
<td>c8d73ea3ec2d837cfdd564e3ae6b824b</td>
|
|
<td>Mobile library portable assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:01:56 +0000 UTC</td>
|
|
<td>2020-05-11 15:01:56 +0000 UTC</td>
|
|
<td>fae41385bd1e214c745d3fe4d773ddc55f6f6709</td>
|
|
<td>a0f8f64efe1c82855099615c0acc0dfaeb788c04ce8bf6f304a58137ff1a851b83a2af2d71e6fad726bd04f65bd2ec64</td>
|
|
<td>7545060c21242bba33d18e8ea5deec6056982b2b690a29d372d696f73ff4cbc8f6e5411726a3d50d557abcf1b399335c55d26034d9d8cf93488eef7936fea93e</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-06-30 06:37:55 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0bd8154ae4c3cbfbe53faf7231b74923957cfc58fbbdfb75fbb8720c9987dfd3</td>
|
|
<td>[68a70dd16d1f6520c5ed8b07]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_peak]</td>
|
|
<td>[i-npeak01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\EGScript2.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:15:01Z]</td>
|
|
<td>[67b66568ea040e1c41e823789ebb240f]</td>
|
|
<td>[b5c133c8c11146048dc67efa9c29b46472ee6595]</td>
|
|
<td>[a8806c40f21c74ca11ad25d9234613be73285bd393598b51f4e6c930986fc7e6286910c6069420611de9c0f5fe57825d]</td>
|
|
<td>[a441c7b1e54a9e994b21aa65daaf7cf7672ed7688564b750047ae9884a0373f6f92d8b3d0a50190b1078991d92ad8fec5eb4919c510051ed516a8504c1855e04]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>[172.17.22.1]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EGScript2.vbs</td>
|
|
<td>\\wvuhs.com\Files\PeakHealth\Operational Analytics - Hepler\PRODUCTION REPORTING\147 - Daily Claim Reports - All LOB & MA ~ reoccurring, daily\</td>
|
|
<td></td>
|
|
<td>1742</td>
|
|
<td>67b66568ea040e1c41e823789ebb240f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-19 18:22:17 +0000 UTC</td>
|
|
<td>2025-06-19 18:22:17 +0000 UTC</td>
|
|
<td>b5c133c8c11146048dc67efa9c29b46472ee6595</td>
|
|
<td>a8806c40f21c74ca11ad25d9234613be73285bd393598b51f4e6c930986fc7e6286910c6069420611de9c0f5fe57825d</td>
|
|
<td>a441c7b1e54a9e994b21aa65daaf7cf7672ed7688564b750047ae9884a0373f6f92d8b3d0a50190b1078991d92ad8fec5eb4919c510051ed516a8504c1855e04</td>
|
|
<td>2025-08-21 12:15:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0bd4d2b2fab316e2b6167cba5029721eb5848087645ef44f2ccb09f1108383fd</td>
|
|
<td>[68a5c675884e598888847639, 68a5c77e05aa879ada66b420]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\MFC42.DLL, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\pft79AF.tmp\MFC42.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QMenuBld.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\pft79AF.tmp\AGLSetup.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\20230420001ARCHGL.EXE]</td>
|
|
<td>[2025-08-20T12:58:23Z, 2025-08-20T12:59:51Z]</td>
|
|
<td>[4d197238fdfaa5793d1b0961aaef649a]</td>
|
|
<td>[a3898f146eab31ae3dee74d368b1b330ecfa3b06]</td>
|
|
<td>[2360ecbd299108fe56192925d1c663b959100c7528adec61a4ec4c8454cf7244e7ca4b85311b8a368e98eff9267a02af]</td>
|
|
<td>[28b313884d858ad4f2424028d4c767dbe3e7a3c03541d4e0e63864c0eedee53fddc6a20ad5098e3902c019e43507f4fa545f499dee3f584bbbb00d413157c051]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MFC42.DLL</td>
|
|
<td>E:\QS1\</td>
|
|
<td>MFCDLL Shared Library - Retail Version</td>
|
|
<td>995383</td>
|
|
<td>4d197238fdfaa5793d1b0961aaef649a</td>
|
|
<td>Microsoft (R) Visual C++</td>
|
|
<td>6.0.100</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-05 14:21:16 +0000 UTC</td>
|
|
<td>1998-09-26 08:00:00 +0000 UTC</td>
|
|
<td>a3898f146eab31ae3dee74d368b1b330ecfa3b06</td>
|
|
<td>2360ecbd299108fe56192925d1c663b959100c7528adec61a4ec4c8454cf7244e7ca4b85311b8a368e98eff9267a02af</td>
|
|
<td>28b313884d858ad4f2424028d4c767dbe3e7a3c03541d4e0e63864c0eedee53fddc6a20ad5098e3902c019e43507f4fa545f499dee3f584bbbb00d413157c051</td>
|
|
<td>2025-05-01 04:00:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-29 04:00:16 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-30 21:32:47.382 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0b9cfba6305c8496162fda85b7983c16a54a0cf9f440e78036aa9b1bbbd1880a</td>
|
|
<td>[68a2a7be3873668df54ea750]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e0qjqdxl.ujj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:10:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_e0qjqdxl.ujj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:10:32 +0000 UTC</td>
|
|
<td>2025-08-18 04:10:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:10:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0b6dfe5782a8538388a876949b905a42200e3a0782364dc9ce4bc31d0715f921</td>
|
|
<td>[68a1c8289d2b908295246da3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_45ebkynn.fr2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:16:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_45ebkynn.fr2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:16:33 +0000 UTC</td>
|
|
<td>2025-08-17 12:16:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:16:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0b2589c1cc725326d3a418caf0255671120c8022a07e7a9a275819d0210553fb</td>
|
|
<td>[68a306a5ba5832f49fe9cf38]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\TXTDISP.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[a4ab1423490d37c3faaa7382f18eacaa]</td>
|
|
<td>[8749511557ebc7195eae625826ea3900f9218c07]</td>
|
|
<td>[db80a18c711fb13a01fa104f5aed1927ab696e36c32dc29477881b7675daf08334571292edfc55bcd8504e5d11b62a44]</td>
|
|
<td>[def8fccd135ef7658bbaf980542a214725864f571e8b59eba544a099b6fedd21e0ffc3d9aa27de8dd648bb6bfc9f2f0206c37b340fc1bcd961e21c46c825539b]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>TXTDISP.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>17920</td>
|
|
<td>a4ab1423490d37c3faaa7382f18eacaa</td>
|
|
<td></td>
|
|
<td>1.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:39 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>8749511557ebc7195eae625826ea3900f9218c07</td>
|
|
<td>db80a18c711fb13a01fa104f5aed1927ab696e36c32dc29477881b7675daf08334571292edfc55bcd8504e5d11b62a44</td>
|
|
<td>def8fccd135ef7658bbaf980542a214725864f571e8b59eba544a099b6fedd21e0ffc3d9aa27de8dd648bb6bfc9f2f0206c37b340fc1bcd961e21c46c825539b</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-19 05:12:08 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0afa64e00fa3297457ecce77cec084a74bb8249564892f7bebfeb90889821242</td>
|
|
<td>[68a3146b5f0c41860c8c8553]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\subprocess.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[b98aec5604af4147d92232924b474ec2]</td>
|
|
<td>[9f22741de1461c01ea9501244734fbed0b843d10]</td>
|
|
<td>[a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7]</td>
|
|
<td>[fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>subprocess.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>81473</td>
|
|
<td>b98aec5604af4147d92232924b474ec2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9f22741de1461c01ea9501244734fbed0b843d10</td>
|
|
<td>a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7</td>
|
|
<td>fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0a9dbe448ddb227553c9a48de77405193eb5fe2bebabab9d6527c15d84d8c2ba</td>
|
|
<td>[68a1a3e8ae65e4e5452ad825]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod10]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gasrem2i.gfx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:41:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gasrem2i.gfx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:41:54 +0000 UTC</td>
|
|
<td>2025-08-17 09:41:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0a7a5d0917668ae4ac4f30b1478c5194203e78937a808d6431141eb772c3667d</td>
|
|
<td>[68a34b98a6132bf659cce5b5, 68a34df0b71eea1289980a1a]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadWebCam.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:14Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[b8cfbf0f53bbd1805563fe2ad6c092cc]</td>
|
|
<td>[837e866e14c6b812afb996c2dc2fa34bf60efa6b]</td>
|
|
<td>[e53934ceb0d866b8279090a81048eade19173b1bfd46342a825825e2077c8077a20198ebfceb76642929716ec79dfa7b]</td>
|
|
<td>[0933f29e0b9cd38162e73e18236c69fad0a7b33b21b6e73d5030b6b03d2e18d2f624b0c4946d81fd3b023f822af5d45adc9c0fac1da8d61d4a6f1b2ec94258e3]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.RadWebCam.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.RadWebCam</td>
|
|
<td>44544</td>
|
|
<td>b8cfbf0f53bbd1805563fe2ad6c092cc</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>837e866e14c6b812afb996c2dc2fa34bf60efa6b</td>
|
|
<td>e53934ceb0d866b8279090a81048eade19173b1bfd46342a825825e2077c8077a20198ebfceb76642929716ec79dfa7b</td>
|
|
<td>0933f29e0b9cd38162e73e18236c69fad0a7b33b21b6e73d5030b6b03d2e18d2f624b0c4946d81fd3b023f822af5d45adc9c0fac1da8d61d4a6f1b2ec94258e3</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-23 05:15:41 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0a0ff20d66f01b5fa8926bace01d4a73a24db54811a975ea5ea4a01d43eb585b</td>
|
|
<td>[68a5319ce132e4c5dc00a81c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3mWebTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vfkwh45z.3qh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:23:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vfkwh45z.3qh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:23:12 +0000 UTC</td>
|
|
<td>2025-08-20 02:23:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:23:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>097bbfae1d0892c24236778e721ffe5fc95b840bc664d8a3913220a6d2d49d2e</td>
|
|
<td>[68a16bd60756fe54a9918f8e, 68a2149cb58debea69d7c739, 68a2bd5ff793a9057f329bf4, 68a3663261f8067c48423ea4, 68a40efceddb3a9f1a71a5f0, 68a4b7cd36bc5d38057e2352]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\msaalib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[6a50b127ea76fb89e03c2d875f6a7ac9]</td>
|
|
<td>[c28b7cddcfd0a7d635ebca504a463eef23e082db]</td>
|
|
<td>[85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985]</td>
|
|
<td>[16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>msaalib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>53560</td>
|
|
<td>6a50b127ea76fb89e03c2d875f6a7ac9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>c28b7cddcfd0a7d635ebca504a463eef23e082db</td>
|
|
<td>85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985</td>
|
|
<td>16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:40 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>092d18bd968e95133e7af93ebf48edda4dacbff12db23935b3fda6156292f445</td>
|
|
<td>[68a23262644a537a218593af]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ngnjcvkf.sli.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:49:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ngnjcvkf.sli.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:49:46 +0000 UTC</td>
|
|
<td>2025-08-17 19:49:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:49:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>09225ceef00a8012fc441f581bb567e63e4d8c0379b8a9466e29ca79db1e0fd3</td>
|
|
<td>[68a1a41aafa35cf692bdcd7a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4hscutvi.yka.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:42:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4hscutvi.yka.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:42:47 +0000 UTC</td>
|
|
<td>2025-08-17 09:42:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b3413f96707997fb76ae3dc559e6efe5dafdd3c6fe2192556350e65eb0e4ab2b</td>
|
|
<td>[68a5c81947601aee5f76e910, 68a5c9d7599432010e418bc8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[D:\QS1\LTDIS14N.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe, C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe, C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:05:19Z, 2025-08-20T13:05:20Z]</td>
|
|
<td>[e6d240f61eda26c597b334bd74623b99]</td>
|
|
<td>[64c5771f7e3d59e386c344901d089c5d75f1368e]</td>
|
|
<td>[321c5601d02c3db14751c485a81ec5ff7c13799d0d314842f213b7810e4d9f8060a4e979dfe58be0f61b1d1e2c6df0ec]</td>
|
|
<td>[5796ecaf7a2536eea556d033096e74a7885c980e3c072cdb69a800f1cebd2fc03dcecbc9f61ff0c33b625324ec4b3aa2555e5d32eb9fcb1a4e30551bf74e1c06]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LTDIS14N.dll</td>
|
|
<td>C:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>262144</td>
|
|
<td>e6d240f61eda26c597b334bd74623b99</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>14.5.0.013</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:13:27 +0000 UTC</td>
|
|
<td>2006-06-01 17:58:24 +0000 UTC</td>
|
|
<td>64c5771f7e3d59e386c344901d089c5d75f1368e</td>
|
|
<td>321c5601d02c3db14751c485a81ec5ff7c13799d0d314842f213b7810e4d9f8060a4e979dfe58be0f61b1d1e2c6df0ec</td>
|
|
<td>5796ecaf7a2536eea556d033096e74a7885c980e3c072cdb69a800f1cebd2fc03dcecbc9f61ff0c33b625324ec4b3aa2555e5d32eb9fcb1a4e30551bf74e1c06</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-13 01:21:42 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b32e714dba63f4419642f37f9dc3ec07e796f64d74ed423212e42bbfd60b3011</td>
|
|
<td>[68a5c7fb01814ea84d75e597, 68a5ca39b5df6e9c598d9a09]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_Talis1]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DevOps_Agent_MDI\config.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:04:57Z, 2025-08-20T13:04:58Z]</td>
|
|
<td>[62f91d7b9e1f8c5d2b6e72541b2a5dfa]</td>
|
|
<td>[48e84dff2af8d7a19c64fe8debc73206411eefb9]</td>
|
|
<td>[273c2f160231864b2d187d853f563c7abd1f3aecac7ecd60ef772d2568182c7f0968161f1b00a5c8b98f4d4615e5c85a]</td>
|
|
<td>[75c72d6b55cff1361f81c3208d3e544e6ad8cfc709315279808f6184053d9b1d4a332ed35c56c730a45a2d3c86c9c452c1c88decc79bd039c402bbc35f67f190]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>config.cmd</td>
|
|
<td>C:\DevOps_Agent_MDI\</td>
|
|
<td></td>
|
|
<td>2967</td>
|
|
<td>62f91d7b9e1f8c5d2b6e72541b2a5dfa</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:04:51 +0000 UTC</td>
|
|
<td>2023-10-11 22:42:38 +0000 UTC</td>
|
|
<td>48e84dff2af8d7a19c64fe8debc73206411eefb9</td>
|
|
<td>273c2f160231864b2d187d853f563c7abd1f3aecac7ecd60ef772d2568182c7f0968161f1b00a5c8b98f4d4615e5c85a</td>
|
|
<td>75c72d6b55cff1361f81c3208d3e544e6ad8cfc709315279808f6184053d9b1d4a332ed35c56c730a45a2d3c86c9c452c1c88decc79bd039c402bbc35f67f190</td>
|
|
<td>2025-08-20 13:04:59 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-08-04 21:43:45 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:05:52.276 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b2f925f8d062ab2fc1673c086fb48594e430fd2c0ec7eb934f81d96a34d0ea16</td>
|
|
<td>[68a164af314711b37247c0a3, 68a2b633bc43c5800255e65f, 68a408552c9c833f6d66b3f9, 68a559867a66111383e972e2, 68a6ab388907e10b3b3c7b09]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG1A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[ef14e4a8cc642332fc30ac0bcb94fe34]</td>
|
|
<td>[6caa0f9496776587777d38905a7de70c6487a3a3]</td>
|
|
<td>[04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74]</td>
|
|
<td>[22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG1A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>ef14e4a8cc642332fc30ac0bcb94fe34</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:31 +0000 UTC</td>
|
|
<td>2022-12-21 07:59:47 +0000 UTC</td>
|
|
<td>6caa0f9496776587777d38905a7de70c6487a3a3</td>
|
|
<td>04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74</td>
|
|
<td>22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b2b829e8a8e70f50b6a8cf06fce67da3a1ca6a94edaf3695549d26121c3b7714</td>
|
|
<td>[68a4767cdfcdccd185a6a0e1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d04ale1f.v4l.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T13:04:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_d04ale1f.v4l.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 13:04:58 +0000 UTC</td>
|
|
<td>2025-08-19 13:04:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 13:05:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b2ab9b7fc01dfac2ba9dbb7df1b50e9b15085fe0b2bc421e7e69745ce4e85b1e</td>
|
|
<td>[68a472b1b022648922e23577]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFsPackageManager.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:39Z]</td>
|
|
<td>[857834d461d47e01c347e04870201423]</td>
|
|
<td>[7ab4230def1628058b600ae2333c2f92f3172119]</td>
|
|
<td>[a6e5fca77ab835d3b43aa12b4eec9a5afd1965f95a055039281f7f279fd87ac0f2aa3ac841a0d4587af48ad19b657982]</td>
|
|
<td>[e034a09f3c9a38f87ff2058cd5f2170af78e1f822340037c474b794ce822eabda79bd597c9c9de2b3fb5356d570dbfa645315735ab878d0aefd100ba427dc93b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FluidFsPackageManager.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\FluidFsPackageManager.jar-f8b70fdea874fc90\</td>
|
|
<td></td>
|
|
<td>30380</td>
|
|
<td>857834d461d47e01c347e04870201423</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>7ab4230def1628058b600ae2333c2f92f3172119</td>
|
|
<td>a6e5fca77ab835d3b43aa12b4eec9a5afd1965f95a055039281f7f279fd87ac0f2aa3ac841a0d4587af48ad19b657982</td>
|
|
<td>e034a09f3c9a38f87ff2058cd5f2170af78e1f822340037c474b794ce822eabda79bd597c9c9de2b3fb5356d570dbfa645315735ab878d0aefd100ba427dc93b</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:47 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b29891eb56e0294032177d3e010dc819c5b71ef58a86a6b4d59901c6903f24bd</td>
|
|
<td>[68a5239e621d09b2b1ed5e4d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServicesFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[2b18faf53fc63bb5296888bd87664da1]</td>
|
|
<td>[4f0c9afc061841d8539cc5a3e3320483d837b9da]</td>
|
|
<td>[be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb]</td>
|
|
<td>[2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PeCommServicesFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PeCommServicesFacade</td>
|
|
<td>90624</td>
|
|
<td>2b18faf53fc63bb5296888bd87664da1</td>
|
|
<td>PeCommServicesFacade</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>4f0c9afc061841d8539cc5a3e3320483d837b9da</td>
|
|
<td>be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb</td>
|
|
<td>2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b22a5bd87191cfbc9e6edb3e9a804f120c7da8eb995d56d8c6aeff8ad3da2d86</td>
|
|
<td>[68a5c90aab7f84c2d5a0971d]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>["C:\Users\SVC_SL~1\AppData\Local\Temp\RarSFX0\Package.exe" ]</td>
|
|
<td>[Lexmark International, Inc.]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:09:26Z]</td>
|
|
<td>[5c64c62f044ea1fae6d3adc7f4be5688]</td>
|
|
<td>[f86c5dea9f6931b69fc490414635ae398efe5229]</td>
|
|
<td>[e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5]</td>
|
|
<td>[0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Package.exe</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\</td>
|
|
<td>Package Selection Options</td>
|
|
<td>3653920</td>
|
|
<td>5c64c62f044ea1fae6d3adc7f4be5688</td>
|
|
<td></td>
|
|
<td>1.0.0.1</td>
|
|
<td>Lexmark International, Inc.</td>
|
|
<td>2025-08-20 13:09:26 +0000 UTC</td>
|
|
<td>2017-08-16 14:18:52 +0000 UTC</td>
|
|
<td>f86c5dea9f6931b69fc490414635ae398efe5229</td>
|
|
<td>e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5</td>
|
|
<td>0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca</td>
|
|
<td>2025-08-20 13:09:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-19 23:25:52 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b20b976d3c543ddaf040e446fb5d2b222c48d92f4138ac8c84ff50c098a595a1</td>
|
|
<td>[68a311cdc2d0d6e3eb77f215]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result-2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[5df2e31963b90c169c0b60f6fcbe78ca]</td>
|
|
<td>[3d68e24539d2676b2e1baf19621f037391dc5d8b]</td>
|
|
<td>[5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e]</td>
|
|
<td>[c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GP-Result-2.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>281</td>
|
|
<td>5df2e31963b90c169c0b60f6fcbe78ca</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-02-22 21:35:08 +0000 UTC</td>
|
|
<td>2023-02-22 21:35:08 +0000 UTC</td>
|
|
<td>3d68e24539d2676b2e1baf19621f037391dc5d8b</td>
|
|
<td>5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e</td>
|
|
<td>c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b1e050b0e221b917e880a41c58bd8f26e60419a342809625acc0ac34e10d9c47</td>
|
|
<td>[68a65386dfe30ebba74d31c8]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_qao1xvkd.d2n.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-20T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qao1xvkd.d2n.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 23:00:14 +0000 UTC</td>
|
|
<td>2025-08-20 23:00:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 23:00:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b1d22e20b8225402b76387421d0f1e10986724d4d9dac1441de2530507aa913c</td>
|
|
<td>[68a57f5c9ded16611b655b1f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[istools]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\_ir_tu2_temp_1\IRZip.lmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\FMAuditOnsite\Update.exe]</td>
|
|
<td>[C:\Program Files (x86)\FMAuditOnsite\fmaonsite.exe]</td>
|
|
<td>[2025-08-20T07:55:00Z]</td>
|
|
<td>[fcf0d70f428b081937103d32889535b8]</td>
|
|
<td>[a703030f601e5840d4718d570c4f59a4ff735158]</td>
|
|
<td>[095766e149333648839344752be3856bb0dce24a49116897ebbd08e88cc289bcb0f448279394b0a22e744b4f92175156]</td>
|
|
<td>[ad0dd0ac2046a19eaaf14b9fca99f770446f8c211f1506dc86795bc763a823421eb391945e1f0536d41bc3f8706d9f05a53bc61c3ce34bccbfcd39f6b66a9468]</td>
|
|
<td>[10.36.132.210]</td>
|
|
<td>[10.36.132.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IRZip.lmd</td>
|
|
<td>C:\Windows\Temp\_ir_tu2_temp_0\</td>
|
|
<td>Indigo Rose Zip Plugin</td>
|
|
<td>344064</td>
|
|
<td>fcf0d70f428b081937103d32889535b8</td>
|
|
<td>IRZip Action Plugin</td>
|
|
<td>1.0.2.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2010-07-15 10:00:00 +0000 UTC</td>
|
|
<td>2010-07-15 10:00:00 +0000 UTC</td>
|
|
<td>a703030f601e5840d4718d570c4f59a4ff735158</td>
|
|
<td>095766e149333648839344752be3856bb0dce24a49116897ebbd08e88cc289bcb0f448279394b0a22e744b4f92175156</td>
|
|
<td>ad0dd0ac2046a19eaaf14b9fca99f770446f8c211f1506dc86795bc763a823421eb391945e1f0536d41bc3f8706d9f05a53bc61c3ce34bccbfcd39f6b66a9468</td>
|
|
<td>2025-04-25 05:48:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-22 14:44:33 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-25 05:50:55.236 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b190e0e5f23a28b0bd6b36cc81ef964d9609cd3c74a31fe6e2e34efde4d9239b</td>
|
|
<td>[68a5c8eceb9e7b7716dce1f9, 68a5ca39b5df6e9c598d9a0b, 68a5ca39b5df6e9c598d9a18, 68a5ccf2ddfdba423e48862e, 68a5ccf2ddfdba423e48863c, 68a5ccf2ddfdba423e48864a, 68a5ccf2ddfdba423e488657, 68a5ccf2ddfdba423e488664, 68a5ccf2ddfdba423e488671, 68a5ccf2ddfdba423e48867e, 68a5ccf2ddfdba423e48868b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\FindFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[6c754bf54698d9c86af4a51385851f09]</td>
|
|
<td>[9b01fc728c1ad5d5eaa326a56bc6dfe77605a294]</td>
|
|
<td>[887e7ffe7a2bc3b23c2f7b3973234d9ec3464538b581a3caae456fd2e4326660fc5a8c7ab6fd717478982de601d97ca4]</td>
|
|
<td>[1e7a990f7cbfaeda688e02d5e9739a65e6d1799d977c9c1fc7ad9d7d65d6760caf6433e2732a058e820bae029293c09bf2f36b3c485d5375522bd187483dbfab]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindFunctions.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>27376</td>
|
|
<td>6c754bf54698d9c86af4a51385851f09</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:40 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>9b01fc728c1ad5d5eaa326a56bc6dfe77605a294</td>
|
|
<td>887e7ffe7a2bc3b23c2f7b3973234d9ec3464538b581a3caae456fd2e4326660fc5a8c7ab6fd717478982de601d97ca4</td>
|
|
<td>1e7a990f7cbfaeda688e02d5e9739a65e6d1799d977c9c1fc7ad9d7d65d6760caf6433e2732a058e820bae029293c09bf2f36b3c485d5375522bd187483dbfab</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:02 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b180bc0178b09ceeda8bfbc9d31b027b81c5d22112d3565439e93d55fba48e26</td>
|
|
<td>[68a34b98a6132bf659cce5b6, 68a34df0b71eea1289980a1b]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.BadgeDesigner.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[494ef760b62995f95b39dbab2b3dede0]</td>
|
|
<td>[daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4]</td>
|
|
<td>[b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81]</td>
|
|
<td>[973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.BadgeDesigner.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Badge Designer</td>
|
|
<td>1878528</td>
|
|
<td>494ef760b62995f95b39dbab2b3dede0</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:58 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:58 +0000 UTC</td>
|
|
<td>daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4</td>
|
|
<td>b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81</td>
|
|
<td>973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b155a8c60e6ab1faaafc6abccc7b0a3d422882d236d1653fe05500225d93eb4a</td>
|
|
<td>[68a306a5ba5832f49fe9cf55]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\EQGRIDD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[60e4ff73d5b65f5c2c097b19416e7be1]</td>
|
|
<td>[848b4a155cfa1182390f2623ed750ae03560266b]</td>
|
|
<td>[f3c3b05967f1954e73027e786f17c3531e134100b06b91b19e0ffdab7d2fa46cbaecdfb8b6822758afdb878b0625b103]</td>
|
|
<td>[324081455ebc0e62a15ab21b5c1685c91f527c2b8b6be22cd805f3849d84053986079f9c26763156680184e280cfe44f4f0ed4975b1bfc8d6e6c2ca93a208552]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EQGRIDD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express QuantumGrid Components</td>
|
|
<td>417280</td>
|
|
<td>60e4ff73d5b65f5c2c097b19416e7be1</td>
|
|
<td>ExpressQuantumGrid</td>
|
|
<td>3.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:12 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>848b4a155cfa1182390f2623ed750ae03560266b</td>
|
|
<td>f3c3b05967f1954e73027e786f17c3531e134100b06b91b19e0ffdab7d2fa46cbaecdfb8b6822758afdb878b0625b103</td>
|
|
<td>324081455ebc0e62a15ab21b5c1685c91f527c2b8b6be22cd805f3849d84053986079f9c26763156680184e280cfe44f4f0ed4975b1bfc8d6e6c2ca93a208552</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:31:35 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b1488a51345ec65399924b338a116841ec55647b58545f134b763fc74e6cdd6b</td>
|
|
<td>[68a5239e621d09b2b1ed5e51]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[91881048e0480bb6f1d2a01a584dbc0e]</td>
|
|
<td>[197bbba69f29bd0ad3259f80e9fbaa46572c04ec]</td>
|
|
<td>[56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a]</td>
|
|
<td>[4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>112128</td>
|
|
<td>91881048e0480bb6f1d2a01a584dbc0e</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:58 +0000 UTC</td>
|
|
<td>197bbba69f29bd0ad3259f80e9fbaa46572c04ec</td>
|
|
<td>56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a</td>
|
|
<td>4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b13fd81c7196ec3a08414d632e41768dd453368707898569a112522c52d021a8</td>
|
|
<td>[68a191be4a6689329df75d3c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0cdtq1pr.td3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:24:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0cdtq1pr.td3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:24:26 +0000 UTC</td>
|
|
<td>2025-08-17 08:24:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:24:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b0c8cbaecbdb0386376e51b838bdc5126f68432b9ae7ee2a40ccaabf7aa347b7</td>
|
|
<td>[68a533e1954adb953e029f0c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o5ngoajq.xjy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:33:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o5ngoajq.xjy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:33:00 +0000 UTC</td>
|
|
<td>2025-08-20 02:33:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:33:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b67e96557db684ea3d20a57301813992a9bb287858163364903b7812408d80dc</td>
|
|
<td>[68a2a2b145e54eb8011b598c, 68a3f3b82b0ad9191f472694, 68a545ad1588ee149e3e4b07, 68a696eb697ef63577880b6d]</td>
|
|
<td>[2]</td>
|
|
<td>[jskwv]</td>
|
|
<td>[I-nMoveItXfer]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\MOVEitTransfer\Scheduler\Transfer_Backup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T03:39:01Z, 2025-08-19T03:39:01Z, 2025-08-20T03:39:01Z, 2025-08-21T03:39:04Z]</td>
|
|
<td>[74742b6a20af7f6a8d04c5730e252d6f]</td>
|
|
<td>[5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9]</td>
|
|
<td>[705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc]</td>
|
|
<td>[3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Transfer_Backup.bat</td>
|
|
<td>E:\MOVEitTransfer\Scheduler\</td>
|
|
<td></td>
|
|
<td>179</td>
|
|
<td>74742b6a20af7f6a8d04c5730e252d6f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-02-21 18:38:03 +0000 UTC</td>
|
|
<td>2024-02-27 13:33:08 +0000 UTC</td>
|
|
<td>5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9</td>
|
|
<td>705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc</td>
|
|
<td>3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9</td>
|
|
<td>2025-08-09 03:39:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b5d7aeb1b57572ef3c25893b3dbdfbddff207e741e87b3af78941e08b1b66f3c</td>
|
|
<td>[68a31ae889b2c7794e79451a]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_hwz0hraw.sk0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:21:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hwz0hraw.sk0.ps1</td>
|
|
<td>C:\Users\be10045\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:21:56 +0000 UTC</td>
|
|
<td>2025-08-18 12:21:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:22:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b5c4840198ec973d3f940a1a54639be4eb24bb6a8ebe6519dd1810ea2d437f98</td>
|
|
<td>[68a2d482450a223d0231431b, 68a57528577ea16290f09fee]</td>
|
|
<td>[2]</td>
|
|
<td>[1801910989]</td>
|
|
<td>[UH-LIBRX]</td>
|
|
<td>[UH-LIBRX]</td>
|
|
<td>[C:\Program Files\Siber Systems\GoodSync\gsync.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2284.877]</td>
|
|
<td>["C:\Program Files\Siber Systems\GoodSync\gsync.exe" /runner-service=(user)]</td>
|
|
<td>[Siber Systems]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-18T07:00:38Z, 2025-08-20T07:00:41Z]</td>
|
|
<td>[6d0db0f2170f8b674f059587ed5d89bc]</td>
|
|
<td>[bfd4582ba3e95eec900600e9a60cf57d0ca9dcec]</td>
|
|
<td>[9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737]</td>
|
|
<td>[b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c]</td>
|
|
<td>[10.101.101.35]</td>
|
|
<td>[10.101.101.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>gsync.exe</td>
|
|
<td>C:\Program Files\Siber Systems\GoodSync\</td>
|
|
<td>Command Line GoodSync</td>
|
|
<td>8298240</td>
|
|
<td>6d0db0f2170f8b674f059587ed5d89bc</td>
|
|
<td>GoodSync</td>
|
|
<td>10.20.9.9</td>
|
|
<td>Siber Systems</td>
|
|
<td>2022-11-21 14:59:15 +0000 UTC</td>
|
|
<td>2022-11-21 14:59:16 +0000 UTC</td>
|
|
<td>bfd4582ba3e95eec900600e9a60cf57d0ca9dcec</td>
|
|
<td>9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737</td>
|
|
<td>b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c</td>
|
|
<td>2025-07-18 07:00:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-07-31 00:16:36 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-18 07:05:17.975 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b5aee07f2266fd28bcbdfbcf19b2bf189282126828701fc1d0c7502c9d97952c</td>
|
|
<td>[68a34b98a6132bf659cce5bc, 68a34df0b71eea1289980a21]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Office2010Silver.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:17Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[30e345918d7eb6d974f765ae9488b5b6]</td>
|
|
<td>[c47a721f8c12d6aa927eff7d9a8c0b5c11f65453]</td>
|
|
<td>[367a01c288a50fac40934767b499effab7c30c36ebe8110c927364422c5fa85357e8873082c79a0939f66d5c3e9892f1]</td>
|
|
<td>[af1f5365ad38a711daddd0d41b4eebf0238fb6ddda72d790844863bfdbc4e6412aaaeb18bf10f33b40f85f0e71bf95931daf2b44ecd1ae381a76646469dde885]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Silver.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Office2010Silver</td>
|
|
<td>858112</td>
|
|
<td>30e345918d7eb6d974f765ae9488b5b6</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>c47a721f8c12d6aa927eff7d9a8c0b5c11f65453</td>
|
|
<td>367a01c288a50fac40934767b499effab7c30c36ebe8110c927364422c5fa85357e8873082c79a0939f66d5c3e9892f1</td>
|
|
<td>af1f5365ad38a711daddd0d41b4eebf0238fb6ddda72d790844863bfdbc4e6412aaaeb18bf10f33b40f85f0e71bf95931daf2b44ecd1ae381a76646469dde885</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:17 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b59bec3484b1e3784e15b424f7e821225085d138b019e05882bda94241dc00e3</td>
|
|
<td>[68a311cdc2d0d6e3eb77f210]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\STJ-RoboCopy Backups.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[c31cd4a84106cd950c509053746c600a]</td>
|
|
<td>[6947d2e1b5f8f8b4edc283006497752985874c4b]</td>
|
|
<td>[8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398]</td>
|
|
<td>[15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STJ-RoboCopy Backups.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>2852</td>
|
|
<td>c31cd4a84106cd950c509053746c600a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:22 +0000 UTC</td>
|
|
<td>2025-04-16 19:23:14 +0000 UTC</td>
|
|
<td>6947d2e1b5f8f8b4edc283006497752985874c4b</td>
|
|
<td>8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398</td>
|
|
<td>15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b59250b9adde69abc6f23216abeb16e32637bb047a8192277bc1a8c55586c512</td>
|
|
<td>[68a3146b5f0c41860c8c8533]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\signal.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z]</td>
|
|
<td>[98e32654cc4beecc5b9986354e2cb5dd]</td>
|
|
<td>[8a835d62b26651f30621da221a647e38e6c7a3df]</td>
|
|
<td>[c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff]</td>
|
|
<td>[59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>signal.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>4546</td>
|
|
<td>98e32654cc4beecc5b9986354e2cb5dd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>8a835d62b26651f30621da221a647e38e6c7a3df</td>
|
|
<td>c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff</td>
|
|
<td>59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b58922e0574cad1fbef0f5a65531b4eddf34269f9722653e0c7f36fe98e6bd46</td>
|
|
<td>[68a472b1b022648922e2358e]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jsr181-api-1.0-MR1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[885a3ad96d314881cffb7191b4a27d71]</td>
|
|
<td>[9f10fa5e6eaf2adf1360503cccf807e42951f45e]</td>
|
|
<td>[c91a6f516c4bba394656789b0ddf1045b5493fb07c1cf455fe9e529fbb3d755eb191edf7946d1db93431771d8f9d3dca]</td>
|
|
<td>[4e7f6b6061a3acc24c17d29a0174f08d53e9b100aa17cfd847f45baeb92f57b8a2ee19b761f6e4b3a1fc32eb7562b114725c3b87ed1003697a128730b002784c]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jsr181-api-1.0-MR1.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jsr181-api-1.0-MR1.jar-e34e49ec3c528050\</td>
|
|
<td></td>
|
|
<td>7993</td>
|
|
<td>885a3ad96d314881cffb7191b4a27d71</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>9f10fa5e6eaf2adf1360503cccf807e42951f45e</td>
|
|
<td>c91a6f516c4bba394656789b0ddf1045b5493fb07c1cf455fe9e529fbb3d755eb191edf7946d1db93431771d8f9d3dca</td>
|
|
<td>4e7f6b6061a3acc24c17d29a0174f08d53e9b100aa17cfd847f45baeb92f57b8a2ee19b761f6e4b3a1fc32eb7562b114725c3b87ed1003697a128730b002784c</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-01-24 00:52:29 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b561139fa338c5b200834e229f07a555a9205fe738e17c4049ff79395c89908a</td>
|
|
<td>[68a55e004fbc48ef3ae2d514]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cann4xwj.005.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:32:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cann4xwj.005.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:32:41 +0000 UTC</td>
|
|
<td>2025-08-20 05:32:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:32:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b525aee11faa91060c160da0de662ebdaae0ca7ce740e76133a078823edf2a62</td>
|
|
<td>[68a306a5ba5832f49fe9cf4f]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMADS.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[c57e297d4e7c7a2f6c6c953023c78c0b]</td>
|
|
<td>[c2e5c4deb2ac5a5b8ac8b9b36bf49f3cc7c634a0]</td>
|
|
<td>[14126afe1ad881b5ba382a0899acbd804ab8aed2b17c3a61e1bc43e3c30f7d3b40fb4aa475601d72b2986038a47ef3ca]</td>
|
|
<td>[ad92bb18bf98e411632af195888e2be8cce54f58fba7f40d3b6fb6d44e16e323c7cdc736f7ab0cfd6d9091aaf60b3ccef96b4ab96bea785d35c8a9a1401267f2]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCHEMADS.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td>Schema DataSet</td>
|
|
<td>50688</td>
|
|
<td>c57e297d4e7c7a2f6c6c953023c78c0b</td>
|
|
<td></td>
|
|
<td>2.2.4</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>c2e5c4deb2ac5a5b8ac8b9b36bf49f3cc7c634a0</td>
|
|
<td>14126afe1ad881b5ba382a0899acbd804ab8aed2b17c3a61e1bc43e3c30f7d3b40fb4aa475601d72b2986038a47ef3ca</td>
|
|
<td>ad92bb18bf98e411632af195888e2be8cce54f58fba7f40d3b6fb6d44e16e323c7cdc736f7ab0cfd6d9091aaf60b3ccef96b4ab96bea785d35c8a9a1401267f2</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2018-01-18 18:51:12 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b511a6022af485b824a56917829fb0ef0ca73c3f9e1d33f129726fc72d2c3336</td>
|
|
<td>[68a523949cec397f02de9f44]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AnalyzerFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[8b60c2b5e55285098541e339810946da]</td>
|
|
<td>[6d4c57ebde036e7090fcdd723f58ad5eee852c70]</td>
|
|
<td>[7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1]</td>
|
|
<td>[6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AnalyzerFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>AnalyzerFacade</td>
|
|
<td>12800</td>
|
|
<td>8b60c2b5e55285098541e339810946da</td>
|
|
<td>AnalyzerFacade</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>6d4c57ebde036e7090fcdd723f58ad5eee852c70</td>
|
|
<td>7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1</td>
|
|
<td>6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b4af2e4f4c385a595462e2f811e1c0ee74fcc354cfaebc71d7eaa2be8f89826e</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce7, 68a6afe50e0f3bd8deac4cf6, 68a6afe50e0f3bd8deac4d2a, 68a6afe50e0f3bd8deac4d38, 68a6afe50e0f3bd8deac4d58, 68a6afe50e0f3bd8deac4d78, 68a6afe50e0f3bd8deac4d98, 68a6afe50e0f3bd8deac4db8, 68a6afe50e0f3bd8deac4dd8, 68a6afe50e0f3bd8deac4df8, 68a6afe50e0f3bd8deac4e18, 68a6afe50e0f3bd8deac4e38, 68a6afe50e0f3bd8deac4e58, 68a6afe50e0f3bd8deac4e78, 68a6afe50e0f3bd8deac4e98, 68a6afe50e0f3bd8deac4ec9, 68a6afe50e0f3bd8deac4ed8, 68a6afe50e0f3bd8deac4ef8, 68a6afe50e0f3bd8deac4f18, 68a6afe50e0f3bd8deac4f38, 68a6afe50e0f3bd8deac4f62, 68a6afe50e0f3bd8deac4f82, 68a6afe50e0f3bd8deac4fa2, 68a6afe50e0f3bd8deac4fc2, 68a6afe50e0f3bd8deac4fe2, 68a6afe50e0f3bd8deac5002, 68a6afe50e0f3bd8deac5022, 68a6afe50e0f3bd8deac5042, 68a6afe50e0f3bd8deac5062, 68a6afe50e0f3bd8deac5082, 68a6afe50e0f3bd8deac50ac, 68a6afe50e0f3bd8deac50cc, 68a6afe50e0f3bd8deac50ec, 68a6afe50e0f3bd8deac5116, 68a6afe50e0f3bd8deac5136, 68a6afe50e0f3bd8deac5156, 68a6afe50e0f3bd8deac5180, 68a6afe50e0f3bd8deac51a0, 68a6afe50e0f3bd8deac51c0, 68a6afe50e0f3bd8deac51e1, 68a6afe50e0f3bd8deac5213, 68a6afe50e0f3bd8deac522a, 68a6afe50e0f3bd8deac5241, 68a6afe50e0f3bd8deac5261, 68a6afe50e0f3bd8deac5275, 68a6afe50e0f3bd8deac5295, 68a6afe50e0f3bd8deac52b5, 68a6afe50e0f3bd8deac52d5, 68a6afe50e0f3bd8deac52f5, 68a6afe50e0f3bd8deac5315, 68a6afe50e0f3bd8deac5335, 68a6afe50e0f3bd8deac5355, 68a6afe50e0f3bd8deac5375, 68a6afe50e0f3bd8deac539b, 68a6afe50e0f3bd8deac53b7, 68a6afe50e0f3bd8deac53db, 68a6afe50e0f3bd8deac53fa, 68a6afe50e0f3bd8deac541b, 68a6afe50e0f3bd8deac5435, 68a6afe50e0f3bd8deac545b, 68a6afe50e0f3bd8deac547b, 68a6afe50e0f3bd8deac549b, 68a6afe50e0f3bd8deac54bb, 68a6afe50e0f3bd8deac54db, 68a6afe50e0f3bd8deac54fb, 68a6afe50e0f3bd8deac551b, 68a6afe50e0f3bd8deac553b, 68a6afe50e0f3bd8deac5565, 68a6afe50e0f3bd8deac5585, 68a6afe50e0f3bd8deac55a5, 68a6afe50e0f3bd8deac55c5, 68a6afe50e0f3bd8deac55e5, 68a6afe50e0f3bd8deac5605, 68a6afe50e0f3bd8deac5625, 68a6afe50e0f3bd8deac5654, 68a6afe50e0f3bd8deac5675, 68a6afe50e0f3bd8deac56a3, 68a6afe50e0f3bd8deac56c3, 68a6afe50e0f3bd8deac56db, 68a6afe50e0f3bd8deac5702, 68a6afe50e0f3bd8deac571d, 68a6afe50e0f3bd8deac5743, 68a6afe50e0f3bd8deac5776, 68a6afe50e0f3bd8deac5789, 68a6afe50e0f3bd8deac57b7, 68a6afe50e0f3bd8deac57cd, 68a6afe50e0f3bd8deac57f7, 68a6afe50e0f3bd8deac580b, 68a6afe50e0f3bd8deac5824, 68a6afe50e0f3bd8deac584d, 68a6afe50e0f3bd8deac5875, 68a6afe50e0f3bd8deac588b, 68a6afe50e0f3bd8deac58bc, 68a6afe50e0f3bd8deac58cd, 68a6afe50e0f3bd8deac58fc, 68a6afe50e0f3bd8deac5907, 68a6afe50e0f3bd8deac593e, 68a6afe50e0f3bd8deac594d, 68a6afe50e0f3bd8deac596d, 68a6afe50e0f3bd8deac5984, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\PrometheusSvr.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[43747ee0e4e03ff34b76a6701584480c]</td>
|
|
<td>[820982a35763a0555d44c78f839256a5babff5c1]</td>
|
|
<td>[d4930d584ffcf00642c95c0cc13afe3af04178c1e7d8c2c66f6c65087b398ec9868d51a72dc62aa5cd32b0061026f467]</td>
|
|
<td>[d42b5eda4572832fb13e578b126b6fff3990114bffadaeed5a14a5559db8f7ca695207de8c2d886e88e881acd90bb6b11c1df0867170bfd0386c656e1b03b723]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PrometheusSvr.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>1416704</td>
|
|
<td>43747ee0e4e03ff34b76a6701584480c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:56 +0000 UTC</td>
|
|
<td>2023-06-16 03:04:49 +0000 UTC</td>
|
|
<td>820982a35763a0555d44c78f839256a5babff5c1</td>
|
|
<td>d4930d584ffcf00642c95c0cc13afe3af04178c1e7d8c2c66f6c65087b398ec9868d51a72dc62aa5cd32b0061026f467</td>
|
|
<td>d42b5eda4572832fb13e578b126b6fff3990114bffadaeed5a14a5559db8f7ca695207de8c2d886e88e881acd90bb6b11c1df0867170bfd0386c656e1b03b723</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b4078ab651d17c4b369f8715ad39efccc3486c43f9251216892df4b2c5803d82</td>
|
|
<td>[68a1a4ec481e55b8d125b626]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cvo0wbij.qu1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:46:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cvo0wbij.qu1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:46:14 +0000 UTC</td>
|
|
<td>2025-08-17 09:46:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:46:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b3f3dce7a596ba8e3a87f5ddeaaad498b74d1b3393eecfc602a33d4968ffaf2b</td>
|
|
<td>[68a2219559db607aeb81cbd5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a2eipcbx.muw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:38:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a2eipcbx.muw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:38:04 +0000 UTC</td>
|
|
<td>2025-08-17 18:38:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:38:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b3aee295edf894a88964eb7fa381561a95f892e2a2a3c29630c97c882aab46d9</td>
|
|
<td>[68a31bbacbbb0c7bfb580ca8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2kil5soy.rh3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:25:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2kil5soy.rh3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:25:27 +0000 UTC</td>
|
|
<td>2025-08-18 12:25:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:25:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b37be6e880d1111feb27c4482864a487c1ce7bf7ff74f481aef0aa5cbd0cb936</td>
|
|
<td>[68a5c233a5c8de03b7ff4fb5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_fec2b8080fd34625874eec49b533f1b5.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.879]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:40:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_fec2b8080fd34625874eec49b533f1b5.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b35b32d6e755eb4d7a586d90f0719eda7cc411146d22fbaa1f1370638e656ebc</td>
|
|
<td>[68a24592503474046d56002c, 68a6643ac834a71c320c303a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[IMAGENOW73-PROD]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\win32sysinfo.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2314]</td>
|
|
<td>["c:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\win32sysinfo.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erl.exe]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe]</td>
|
|
<td>[2025-08-17T21:02:09Z, 2025-08-21T00:02:16Z]</td>
|
|
<td>[ab84bb4715791a04eb91742f5e41f33a]</td>
|
|
<td>[92a2578c1729556210b2b2926b4565510c9c39dd]</td>
|
|
<td>[927dfe7cd3bd4d5d63f9da97ca229dfdbf9dc04833b7fabb1b9b1b938af030b0b5f5e96f7ba76f03cbad34f608c944d2]</td>
|
|
<td>[66fa46376beb2ecf24227cab0ae9cf10b1509b5c0cee14ff171b3b0cafd17e5e5a068134c978f3f81dab1bdbaa3a739636e07beb6e83912b89fef656936c6c5e]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>win32sysinfo.exe</td>
|
|
<td>C:\Program Files\erl8.3\lib\os_mon-2.4.2\priv\bin\</td>
|
|
<td></td>
|
|
<td>11264</td>
|
|
<td>ab84bb4715791a04eb91742f5e41f33a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2017-03-14 21:32:40 +0000 UTC</td>
|
|
<td>2017-03-14 21:32:40 +0000 UTC</td>
|
|
<td>92a2578c1729556210b2b2926b4565510c9c39dd</td>
|
|
<td>927dfe7cd3bd4d5d63f9da97ca229dfdbf9dc04833b7fabb1b9b1b938af030b0b5f5e96f7ba76f03cbad34f608c944d2</td>
|
|
<td>66fa46376beb2ecf24227cab0ae9cf10b1509b5c0cee14ff171b3b0cafd17e5e5a068134c978f3f81dab1bdbaa3a739636e07beb6e83912b89fef656936c6c5e</td>
|
|
<td>2025-07-17 00:02:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-07-14 21:29:51 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 00:06:14.119 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b99374cf4c828d4f0a0cc7479cd72181f5e1e8cb7d06e4542fe9f70a092364a7</td>
|
|
<td>[68a50d29c9694e1e7f8f163d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MasimoA_5_0_3_6.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:47:50Z]</td>
|
|
<td>[b05d0a00db3ebcaaf5e56cadb578324c]</td>
|
|
<td>[ba246078ee4beeee2e07d8585ddba002f741bcc6]</td>
|
|
<td>[2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac]</td>
|
|
<td>[71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MasimoA_5_0_3_6.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>836608</td>
|
|
<td>b05d0a00db3ebcaaf5e56cadb578324c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:47:36 +0000 UTC</td>
|
|
<td>2025-08-19 23:47:46 +0000 UTC</td>
|
|
<td>ba246078ee4beeee2e07d8585ddba002f741bcc6</td>
|
|
<td>2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac</td>
|
|
<td>71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405</td>
|
|
<td>2025-08-19 23:47:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b96d73284c337848272fa37ac7ce8d932f38fac1e8ce7c4cad00d0269c3c6d95</td>
|
|
<td>[68a181c21bfbeda4694fdffa, 68a2d3509d0518d9d631f7e6, 68a424e9ee9f96031977be4b, 68a5773a7caf7da878b3cf54, 68a6c8221b27d3859e4f0bd5]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[ivOSCCN1]</td>
|
|
<td>[IVOSCCN1]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:10:25Z, 2025-08-18T07:10:25Z, 2025-08-19T07:10:26Z, 2025-08-20T07:10:25Z, 2025-08-21T07:10:25Z]</td>
|
|
<td>[fcf50a056b3ffa96b640a38d655dc1f6]</td>
|
|
<td>[56bac5386ef9a04cd2807ff235f395be9bd0cfe6]</td>
|
|
<td>[d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113]</td>
|
|
<td>[0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530]</td>
|
|
<td>[172.17.21.34]</td>
|
|
<td>[172.17.21.34]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2975</td>
|
|
<td>fcf50a056b3ffa96b640a38d655dc1f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:19:37 +0000 UTC</td>
|
|
<td>2022-03-01 18:22:37 +0000 UTC</td>
|
|
<td>56bac5386ef9a04cd2807ff235f395be9bd0cfe6</td>
|
|
<td>d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113</td>
|
|
<td>0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530</td>
|
|
<td>2025-08-09 07:10:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b9589642180b32d9a18ca52398fb0d53893e3f8a35611ce3f854492fa0349871</td>
|
|
<td>[68a48674c4cb2500be692617, 68a48674c4cb2500be69262d]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.ServiceAgents.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[b49ebe2365863c63c5fa3d96eb031469]</td>
|
|
<td>[b3fb3dd5136ae2fe56a4cd7646029f67dd46980d]</td>
|
|
<td>[3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a]</td>
|
|
<td>[1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.ServiceAgents.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.ServiceAgents</td>
|
|
<td>61176</td>
|
|
<td>b49ebe2365863c63c5fa3d96eb031469</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>b3fb3dd5136ae2fe56a4cd7646029f67dd46980d</td>
|
|
<td>3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a</td>
|
|
<td>1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b8b19794e923a87fdd28cbda97d035b042db36fcee37dd4484df192b845048d9</td>
|
|
<td>[68a34d6610b57c5bffc57dae]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b89a7bc12b53e050d63c480c02dca3465ec46030fdc218b1e39fa9e3ac4de1b0</td>
|
|
<td>[68a5cc349d52e7a8b7af63d8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:53Z]</td>
|
|
<td>[818225421d2ff632a02c29cb34911515]</td>
|
|
<td>[fb0da057d2c2e63d16b2edabf800317ff1330839]</td>
|
|
<td>[747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650]</td>
|
|
<td>[55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>1822</td>
|
|
<td>818225421d2ff632a02c29cb34911515</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:52 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:52 +0000 UTC</td>
|
|
<td>fb0da057d2c2e63d16b2edabf800317ff1330839</td>
|
|
<td>747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650</td>
|
|
<td>55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b890b88192a223a900d9aad500373d9063f118fc8766d8b4735a325fb6801018</td>
|
|
<td>[68a51d7e1d680695d3f9edbd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_shrbidj0.cko.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T00:57:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_shrbidj0.cko.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 00:57:23 +0000 UTC</td>
|
|
<td>2025-08-20 00:57:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:57:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b86ff7561af0f3e859b9e84637797298246dc1ce387949f2edbd3d5b1e77280a</td>
|
|
<td>[68a191aae18cc7bf65302e71]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_idh1m53d.0uw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:24:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_idh1m53d.0uw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:24:07 +0000 UTC</td>
|
|
<td>2025-08-17 08:24:07 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b85b23da452663f58b6f9b7ab45593958feea65172bf427c8b37face06a87982</td>
|
|
<td>[68a3146b5f0c41860c8c850b, 68a3146b5f0c41860c8c855e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_parseaddr.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7b77eb5e6cbc5ad91a9839f110240b19]</td>
|
|
<td>[c026a9d1bf349081e31bc6d062263cd6283cadee]</td>
|
|
<td>[d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5]</td>
|
|
<td>[4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_parseaddr.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>23570</td>
|
|
<td>7b77eb5e6cbc5ad91a9839f110240b19</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>c026a9d1bf349081e31bc6d062263cd6283cadee</td>
|
|
<td>d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5</td>
|
|
<td>4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b84fc2be29f8ec8d88aeeab2dcb336c1f5f8e6ca8377fc5e362c14b5d7107cfa</td>
|
|
<td>[68a5be0ff6fc3715f4449f44]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\tmp_5ltoq3rq.ifx.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:33Z]</td>
|
|
<td>[965ce93ed86a419fab19dac9c846905f]</td>
|
|
<td>[db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef]</td>
|
|
<td>[3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e]</td>
|
|
<td>[6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_5ltoq3rq.ifx.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>965ce93ed86a419fab19dac9c846905f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:22:33 +0000 UTC</td>
|
|
<td>2025-08-20 12:22:33 +0000 UTC</td>
|
|
<td>db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef</td>
|
|
<td>3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e</td>
|
|
<td>6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234</td>
|
|
<td>2025-08-20 12:22:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7fe4622933d7c1a7c53299db1c824d52a784e0af74283aae7ec1b9169dd8a20</td>
|
|
<td>[68a164af314711b37247c0a4, 68a2b633bc43c5800255e660, 68a408552c9c833f6d66b3f8, 68a559867a66111383e972e4, 68a6ab388907e10b3b3c7b0a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG3A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[527c15cbb2fe42bc3c85f5a6c8722700]</td>
|
|
<td>[ab323a93daa8ccdbc6c23f5fbf5779189899cfc3]</td>
|
|
<td>[030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c]</td>
|
|
<td>[890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG3A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>527c15cbb2fe42bc3c85f5a6c8722700</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:45 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:45 +0000 UTC</td>
|
|
<td>ab323a93daa8ccdbc6c23f5fbf5779189899cfc3</td>
|
|
<td>030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c</td>
|
|
<td>890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7f2e8f1f6db47a8161afee3f7622b254ca82a8359fd0abb491c6c6dfbf4d64f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f206]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Get-O365Recip-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[499c7364c1c683bfe66b60484bcd9d37]</td>
|
|
<td>[ac1ccb570f21610993e4deae5958e14f68b2e40c]</td>
|
|
<td>[3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd]</td>
|
|
<td>[01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Get-O365Recip-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>47512</td>
|
|
<td>499c7364c1c683bfe66b60484bcd9d37</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:56:32 +0000 UTC</td>
|
|
<td>2025-02-28 16:56:32 +0000 UTC</td>
|
|
<td>ac1ccb570f21610993e4deae5958e14f68b2e40c</td>
|
|
<td>3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd</td>
|
|
<td>01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7d519ae6a735e97fcb0cd79bdab293c9bcfa2506bb6bd7f8fa5d472db60459c</td>
|
|
<td>[68a523949cec397f02de9f4e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CommonPropertiesViewAccessor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[d5b36a1cfb5d705b9b73158b06477362]</td>
|
|
<td>[d9fd05e56d2e29cc1562b515b18468fc3f4a5b78]</td>
|
|
<td>[d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f]</td>
|
|
<td>[3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CommonPropertiesViewAccessor.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>CommonPropertiesViews</td>
|
|
<td>10240</td>
|
|
<td>d5b36a1cfb5d705b9b73158b06477362</td>
|
|
<td>CommonPropertiesViews</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>d9fd05e56d2e29cc1562b515b18468fc3f4a5b78</td>
|
|
<td>d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f</td>
|
|
<td>3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7b074a8be506995e4f7f47f986e3fa7e7e5de6b93db80ae4b178c336f308368</td>
|
|
<td>[68a4c47e2db3c760ec3d2a2b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_7df3f40078b24ec2b13b78976237aec3.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:37:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_7df3f40078b24ec2b13b78976237aec3.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 18:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b78984455debffa0028d3e0622604eed012e7af47b86694db7145688d5665881</td>
|
|
<td>[68a3245120cdf2a94b146f91]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\tmp_xyrtah4t.fox.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:02:08Z]</td>
|
|
<td>[5a50d1d12cefd1d7851797d436fefba4]</td>
|
|
<td>[bf6cbc8bade556ceffa2a7e056ad531a37ae415f]</td>
|
|
<td>[0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60]</td>
|
|
<td>[b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_xyrtah4t.fox.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\</td>
|
|
<td></td>
|
|
<td>4669542</td>
|
|
<td>5a50d1d12cefd1d7851797d436fefba4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:02:08 +0000 UTC</td>
|
|
<td>2025-08-18 13:02:08 +0000 UTC</td>
|
|
<td>bf6cbc8bade556ceffa2a7e056ad531a37ae415f</td>
|
|
<td>0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60</td>
|
|
<td>b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8</td>
|
|
<td>2025-08-18 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7825fdc3e3579c3e55c8ada3988398c80f2bf0210559ffd4a4a2e877281142e</td>
|
|
<td>[68a254cb23f365394e70285a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fed2ttov.ux0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:16:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fed2ttov.ux0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:16:32 +0000 UTC</td>
|
|
<td>2025-08-17 22:16:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:16:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b77c030cc7905994ec426f0da89c90fe737ec024b6c5993906e40ecb5da71451</td>
|
|
<td>[68a37f2f3086ee3e1235fb78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_biqeuy3o.ye3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:29:49Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_biqeuy3o.ye3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:29:49 +0000 UTC</td>
|
|
<td>2025-08-18 19:29:49 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:29:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bddc530b9300a27f70c238d542f107dd3fe56831bf9c2b46fc5f2490358bedee</td>
|
|
<td>[68a50cecb4890326e80ca020]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MaquetC_5_4_9_24.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:46:44Z]</td>
|
|
<td>[0c379659877fcb46c2b1ed42e5f08649]</td>
|
|
<td>[8b35c794af260f72bfaa4b9eb93a634e911231fb]</td>
|
|
<td>[bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36]</td>
|
|
<td>[9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MaquetC_5_4_9_24.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>2547712</td>
|
|
<td>0c379659877fcb46c2b1ed42e5f08649</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2025-08-19 23:46:40 +0000 UTC</td>
|
|
<td>2025-08-19 23:46:42 +0000 UTC</td>
|
|
<td>8b35c794af260f72bfaa4b9eb93a634e911231fb</td>
|
|
<td>bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36</td>
|
|
<td>9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a</td>
|
|
<td>2025-08-19 23:46:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bd79e98f45782e89ee51e26e013872c1faf37f65e8587e8548d46ad3f983620c</td>
|
|
<td>[68a241507a42095fec9759e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aolq2wnp.tpe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aolq2wnp.tpe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:27 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bd2fb70755ce42ee8c06c2369072646bb3b358d84caad212790cc7a7765f4aa2</td>
|
|
<td>[68a31bce8786a3280b2dd174]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_r4slq4hq.rmb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:25:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_r4slq4hq.rmb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:25:48 +0000 UTC</td>
|
|
<td>2025-08-18 12:25:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:25:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bcb7eca729429e6e4bde18597726ed72e9254a2170afc225e8153e8adc0c4647</td>
|
|
<td>[68a1a47e2fff6fd1138de638]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod10]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vxfvtst4.00q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:44:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vxfvtst4.00q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:44:20 +0000 UTC</td>
|
|
<td>2025-08-17 09:44:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:44:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc9cf02ea7753bec4aa072388d1712951cb6fbdf6189a89af968a0049dca7e5a</td>
|
|
<td>[68a4a6605961c54c81f645c8]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045eu\AppData\Local\Temp\2\__PSScriptPolicyTest_lxe33krl.g3q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lxe33krl.g3q.ps1</td>
|
|
<td>C:\Users\be10045eu\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 16:29:15 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc9ae90107a5c1f70c604ec5dff275f870d4e75c684dc03d05ef9fa4406d0c70</td>
|
|
<td>[68a5621beb84499e47622cf6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-EXTHSW-NP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qqnyxqog.4g5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:50:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qqnyxqog.4g5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:50:09 +0000 UTC</td>
|
|
<td>2025-08-20 05:50:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:50:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc5a7b4a00675634fdaebf906e31c462451c097ab7271aca010a27d235a55f64</td>
|
|
<td>[68a24592503474046d56002f, 68a6643ac834a71c320c303d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[IMAGENOW73-PROD]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\crypto_callback.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2314]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erl.exe]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe]</td>
|
|
<td>[2025-08-17T21:02:24Z, 2025-08-21T00:02:18Z]</td>
|
|
<td>[607acf16c9a90ec5de916299b342a430]</td>
|
|
<td>[67157292b29599f8284f65ec5d7bad9af0d97a1a]</td>
|
|
<td>[081ae60c14ef018e0ba1006e3a86e01810b26f74b4f8338e45f308ea6bc5eb3184f6ac58583032b22404a0d8ea00bbee]</td>
|
|
<td>[59868d7200f7d128a4d843bca378ad93a1f1da517d74076d6e5726229cfcc76df6174903d3da502cc22858af839238c38b573408d61a16cf91690e6ab5f037a7]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>crypto_callback.dll</td>
|
|
<td>C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\</td>
|
|
<td></td>
|
|
<td>7680</td>
|
|
<td>607acf16c9a90ec5de916299b342a430</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2017-03-14 21:32:04 +0000 UTC</td>
|
|
<td>2017-03-14 21:32:04 +0000 UTC</td>
|
|
<td>67157292b29599f8284f65ec5d7bad9af0d97a1a</td>
|
|
<td>081ae60c14ef018e0ba1006e3a86e01810b26f74b4f8338e45f308ea6bc5eb3184f6ac58583032b22404a0d8ea00bbee</td>
|
|
<td>59868d7200f7d128a4d843bca378ad93a1f1da517d74076d6e5726229cfcc76df6174903d3da502cc22858af839238c38b573408d61a16cf91690e6ab5f037a7</td>
|
|
<td>2025-07-17 00:02:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-12-12 15:27:44 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 00:06:14.119 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc0ed4db8de326d7c19c7939ea915f38ed472ce6816289b859858ab012d5f985</td>
|
|
<td>[68a5c9c80a9c36d9537b967b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\MSI1AAF.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-20T13:12:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MSIB39F.tmp</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-07-17 16:14:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-07 18:46:33 +0000 UTC</td>
|
|
<td>75</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 02:52:11.135 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bbd86edc2c3565783aa1938aa5f3bd807cc89a133ace4980c6023c6002109e50</td>
|
|
<td>[68a1b24bfa129e536415c635]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gnb4wcd.hsz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:43:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2gnb4wcd.hsz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:43:10 +0000 UTC</td>
|
|
<td>2025-08-17 10:43:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:43:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>badbdd1da0042ec4e9d34d2d9badabcd4d0fe9f9d8e24c61c277bccb77aca8a2</td>
|
|
<td>[68a523949cec397f02de9f46]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Apache.NMS.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[7f08c7a68144ab87f22d28285ad41bec]</td>
|
|
<td>[7c2ec54871d788ef2f6d34a672a4c7ded8202132]</td>
|
|
<td>[d70c94d19b1810ae8231f4830853ebd6bd6159eb02ecbba54cc3fd46c4ac668488786e961f449f910099e21d3f46b694]</td>
|
|
<td>[cde815bfb62b47f64f4cba6991158a48ed736c6d9a81bedd5faa813598e7580e1c0fab5c5bacd47dde0bcb40aff0b54905a4880b29c747700ef7424ef8e06c8b]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Apache.NMS.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Apache NMS Class Library</td>
|
|
<td>64512</td>
|
|
<td>7f08c7a68144ab87f22d28285ad41bec</td>
|
|
<td>Apache NMS Class Library</td>
|
|
<td>1.6.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:12 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:12 +0000 UTC</td>
|
|
<td>7c2ec54871d788ef2f6d34a672a4c7ded8202132</td>
|
|
<td>d70c94d19b1810ae8231f4830853ebd6bd6159eb02ecbba54cc3fd46c4ac668488786e961f449f910099e21d3f46b694</td>
|
|
<td>cde815bfb62b47f64f4cba6991158a48ed736c6d9a81bedd5faa813598e7580e1c0fab5c5bacd47dde0bcb40aff0b54905a4880b29c747700ef7424ef8e06c8b</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-08-19 19:35:04 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bac8eb3f47e2f86cc0c63b0e0ddf4d59f7f484f12e636d3dc485555944a9fc44</td>
|
|
<td>[68a16bd60756fe54a9918f90, 68a2149cb58debea69d7c73b, 68a2bd5ff793a9057f329bf6, 68a3663261f8067c48423ea9, 68a40efceddb3a9f1a71a5f1, 68a4b7cd36bc5d38057e2356]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTask.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[cba32f4fc85fa047780b98586445d649]</td>
|
|
<td>[bf00992713ad9d38e3090bf52e8b1e82b1647fdb]</td>
|
|
<td>[f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc]</td>
|
|
<td>[79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZoomTask.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>389432</td>
|
|
<td>cba32f4fc85fa047780b98586445d649</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>bf00992713ad9d38e3090bf52e8b1e82b1647fdb</td>
|
|
<td>f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc</td>
|
|
<td>79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:42 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba81e8ceff38640c2aef358ea04002dbdd2231c3c987001c15b6fc73ba75466d</td>
|
|
<td>[68a25fb2e970d941642e7ed9, 68a25fb2e970d941642e7ee6, 68a3b2cf09045b56b2a707b1, 68a3b2cf09045b56b2a707be, 68a502e12ae1a61fbf4caf0f, 68a502e12ae1a61fbf4caf1c, 68a65489c4cae84feadc570f, 68a65489c4cae84feadc571c]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\dbatools.library.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z, 2025-08-20T23:00:04Z, 2025-08-20T23:00:14Z]</td>
|
|
<td>[5654ec4ceddb9b01a8f94166ba14091d]</td>
|
|
<td>[5cfeb2b421fd0881a3ec31af07e3a285404d1fb4]</td>
|
|
<td>[b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb]</td>
|
|
<td>[2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.library.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\</td>
|
|
<td></td>
|
|
<td>18768</td>
|
|
<td>5654ec4ceddb9b01a8f94166ba14091d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-02-21 21:01:13 +0000 UTC</td>
|
|
<td>2023-09-21 14:59:12 +0000 UTC</td>
|
|
<td>5cfeb2b421fd0881a3ec31af07e3a285404d1fb4</td>
|
|
<td>b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb</td>
|
|
<td>2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6</td>
|
|
<td>2025-08-08 23:00:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba72fc4388172874b1939f7066f2216e2a3bc68fd4270ce70289271537f3b218</td>
|
|
<td>[68a34b98a6132bf659cce5aa, 68a34df0b71eea1289980a0f]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Controls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:10Z, 2025-08-18T15:58:03Z]</td>
|
|
<td>[b31ce0cf803ae8da1785b059a6bfbb59]</td>
|
|
<td>[1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb]</td>
|
|
<td>[19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b]</td>
|
|
<td>[f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Controls.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Controls</td>
|
|
<td>823296</td>
|
|
<td>b31ce0cf803ae8da1785b059a6bfbb59</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:44 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:44 +0000 UTC</td>
|
|
<td>1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb</td>
|
|
<td>19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b</td>
|
|
<td>f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8</td>
|
|
<td>2025-05-13 12:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba6629e795cffb8817cc3c0107f7236a6c5de18c79028ebf70764952b39da475</td>
|
|
<td>[68a523949cec397f02de9f50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CoverageAndAccuracyAnalyzer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[ae5d8bbe8d977a4803d26ca7e9f13e54]</td>
|
|
<td>[8657b548e0b81e31a64d88c4fb0a7ddc694c7823]</td>
|
|
<td>[868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9]</td>
|
|
<td>[c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CoverageAndAccuracyAnalyzer.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>458752</td>
|
|
<td>ae5d8bbe8d977a4803d26ca7e9f13e54</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:24 +0000 UTC</td>
|
|
<td>8657b548e0b81e31a64d88c4fb0a7ddc694c7823</td>
|
|
<td>868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9</td>
|
|
<td>c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba0a35ba189d00bdb6b111752821f3669b627aaca52bb4b10f5fcf64160f529b</td>
|
|
<td>[68a223c52dfc87abfe6c481e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xhjpbhxc.j3s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:47:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xhjpbhxc.j3s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:47:29 +0000 UTC</td>
|
|
<td>2025-08-17 18:47:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:47:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b9a96cee003b20d0bb55c2e7f974aa492bd30d4b320ff76462b277aa41ff1298</td>
|
|
<td>[68a4698d5445b9aa205794ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:09:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:09:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c20c9862e9f229c783934344ec3cf0effa49a4fa48f8aa9ec11af817ce5f9624</td>
|
|
<td>[68a17f77d37f800f0e604b32]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2orxsm0.eiy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:06:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s2orxsm0.eiy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:06:19 +0000 UTC</td>
|
|
<td>2025-08-17 07:06:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:06:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c1b1e782a095f948cd8e5b162ad54e4df932e5d2b5f237c8b567af8b4d6a0764</td>
|
|
<td>[68a4eb94aedd0434fc149c6a, 68a4eb94aedd0434fc149c6b]</td>
|
|
<td>[2]</td>
|
|
<td>[SpokSrv]</td>
|
|
<td>[VM-Spokapp1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Amcom Software\Amcom Console\IDESKLauncher.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>["C:\Program Files (x86)\Amcom Software\Amcom Console\IDESKLauncher.exe" IdeskAdmin.Exe -NORMAL]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-19T21:14:53Z, 2025-08-19T21:15:26Z]</td>
|
|
<td>[ce676d2e46b67c2f3b5fd3cd89ce0648]</td>
|
|
<td>[011564a2f5238e56833edc57092cec9752835d4b]</td>
|
|
<td>[f7d01ac8492a9ecc08996f2be53a52f68af91fe04639b91741598ab9afaff16a05043b9c38628434317c3bab6eb7ac44]</td>
|
|
<td>[e8528e236f15a8dcf82c454ea97541640294adbe67094364c5479aaa0c2a4f06762e1ac84ecf0b40194a87302a1b92e6d573468b075539efba3921083ca5895f]</td>
|
|
<td>[172.17.251.253]</td>
|
|
<td>[172.17.251.253]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IDESKLauncher.exe</td>
|
|
<td>C:\Program Files (x86)\Amcom Software\Amcom Console\</td>
|
|
<td></td>
|
|
<td>110694</td>
|
|
<td>ce676d2e46b67c2f3b5fd3cd89ce0648</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-10-10 06:10:02 +0000 UTC</td>
|
|
<td>2019-10-10 06:10:02 +0000 UTC</td>
|
|
<td>011564a2f5238e56833edc57092cec9752835d4b</td>
|
|
<td>f7d01ac8492a9ecc08996f2be53a52f68af91fe04639b91741598ab9afaff16a05043b9c38628434317c3bab6eb7ac44</td>
|
|
<td>e8528e236f15a8dcf82c454ea97541640294adbe67094364c5479aaa0c2a4f06762e1ac84ecf0b40194a87302a1b92e6d573468b075539efba3921083ca5895f</td>
|
|
<td>2025-07-15 02:21:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-12-08 18:15:58 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>5</td>
|
|
<td>KNOWN</td>
|
|
<td>1</td>
|
|
<td>Benign 0.60</td>
|
|
<td>2025-07-15 02:26:01.582 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c195f5ba344cf791d23156d6ff388f703b39cee05cec3c1717928b35b9ec838b</td>
|
|
<td>[68a472a799ad3734d804e2f2]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\blowfishj-2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[d773b78b0422efc5d3a7f242ddacb86c]</td>
|
|
<td>[5a5c9138fd86a8ace5988462723879c2fe31b136]</td>
|
|
<td>[ad6050e83750f905414467df89663c7af7b503bb52b24c375070fbc23283dd3d72e18604105dcd8cc125fed041ca82d0]</td>
|
|
<td>[9314b03bb7f66acbed7d0ee2c4109129278a07823bebb4324a125a6adb3a6bc0af0c5b481dc4027aa7727598e2af4a04a22c47183852f84a348bb92e473c8389]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>blowfishj-2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\net\sourceforge\blowfishj\main\</td>
|
|
<td></td>
|
|
<td>32047</td>
|
|
<td>d773b78b0422efc5d3a7f242ddacb86c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:13 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>5a5c9138fd86a8ace5988462723879c2fe31b136</td>
|
|
<td>ad6050e83750f905414467df89663c7af7b503bb52b24c375070fbc23283dd3d72e18604105dcd8cc125fed041ca82d0</td>
|
|
<td>9314b03bb7f66acbed7d0ee2c4109129278a07823bebb4324a125a6adb3a6bc0af0c5b481dc4027aa7727598e2af4a04a22c47183852f84a348bb92e473c8389</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-01-20 02:55:24 +0000 UTC</td>
|
|
<td>55</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:58:11.933 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c164b1bd80936370ff6016453cc9427cdbbf89245cf4aca8a6fa4d20ef06ea77</td>
|
|
<td>[68a717f82c01dbda38bdd3d7]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\mbahost.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2319.906]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe]</td>
|
|
<td>[C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe]</td>
|
|
<td>[2025-08-21T12:58:29Z]</td>
|
|
<td>[fc8b1707f5183f09609501728b93358c]</td>
|
|
<td>[ff8ecf8ad8b5e2addd7543963b96fff7f931f407]</td>
|
|
<td>[51206f4a255d4d1a1d511228ac6f158baa3a1592bbf55c0bcd7fc7a69e1804ea9b2c1c7e798ad815c65df8110eed6002]</td>
|
|
<td>[3a51bebad86daad406407f2ae6d82d80921a6fc617637c9f485f61d6d868e94fdd9d924b0a514ff97db1ef39e6899d57e518ac84a4bd602fb1570a1471319412]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mbahost.dll</td>
|
|
<td>C:\Users\Juggernaut\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\</td>
|
|
<td>Managed Bootstrapper Application Host</td>
|
|
<td>66048</td>
|
|
<td>fc8b1707f5183f09609501728b93358c</td>
|
|
<td>Windows Installer XML</td>
|
|
<td>3.7.3517.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2014-11-17 15:38:08 +0000 UTC</td>
|
|
<td>2014-11-17 15:38:08 +0000 UTC</td>
|
|
<td>ff8ecf8ad8b5e2addd7543963b96fff7f931f407</td>
|
|
<td>51206f4a255d4d1a1d511228ac6f158baa3a1592bbf55c0bcd7fc7a69e1804ea9b2c1c7e798ad815c65df8110eed6002</td>
|
|
<td>3a51bebad86daad406407f2ae6d82d80921a6fc617637c9f485f61d6d868e94fdd9d924b0a514ff97db1ef39e6899d57e518ac84a4bd602fb1570a1471319412</td>
|
|
<td>2025-06-25 18:05:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-24 03:58:22 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-06-24 22:47:06.637 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c150d983ad4f863bf8caf9c5948481ea40a122b0bb81f1a13134c5f97affdce0</td>
|
|
<td>[68a5c7d3fe4e7ef11ca5feb3, 68a5c9d7599432010e418bd1]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech, SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS, NT AUTHORITY]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AFE33D5-1C08-4BEC-ABE2-DD894A26805B}\SetACL64.exe, C:\Windows\Temp\{E69728DE-360F-46C7-B2C4-6A1C0B087C5A}\SetACL64.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AFE33D5-1C08-4BEC-ABE2-DD894A26805B}\SetACL64.exe -on HKEY_LOCAL_MACHINE\Software\Microsoft\Windows -ot reg -actn ace -ace "n:power users;p:full" , C:\Windows\Temp\{E69728DE-360F-46C7-B2C4-6A1C0B087C5A}\SetACL64.exe -on HKEY_LOCAL_MACHINE\Software\Microsoft\Windows -ot reg -actn ace -ace "n:power users;p:full" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, C:\Windows\Temp\{3F64586E-9E75-4E93-A75B-88E798BC0CE3}\191042001Depends.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\191042001Depends.exe]</td>
|
|
<td>[2025-08-20T13:04:13Z, 2025-08-20T13:12:38Z]</td>
|
|
<td>[84551cd8625713feedfebc769562a67d]</td>
|
|
<td>[3c5be5394a55578199e0adb9fa12caf087d2030b]</td>
|
|
<td>[db3e5fd597e716d1772065ca2b53b2f5af0e3d5cb1593e40d85bcee9a8cdc03012b8d4f8c228c8eea6a16ad359416428]</td>
|
|
<td>[41d10f7fa0c0eef729c0142fd3804342e41f793f2293d063fe548de40c8cc853b928005d8207319e2de7d6336ef422c43a77cb1e91329cabbc8067610ed6b327]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SetACL64.exe</td>
|
|
<td>C:\Windows\Temp\{74D56724-9D08-439F-B683-ECB6E1E727E2}\</td>
|
|
<td>SetACL 2</td>
|
|
<td>443392</td>
|
|
<td>84551cd8625713feedfebc769562a67d</td>
|
|
<td>SetACL</td>
|
|
<td>2, 1, 3, 0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-17 16:14:45 +0000 UTC</td>
|
|
<td>2025-07-17 16:14:45 +0000 UTC</td>
|
|
<td>3c5be5394a55578199e0adb9fa12caf087d2030b</td>
|
|
<td>db3e5fd597e716d1772065ca2b53b2f5af0e3d5cb1593e40d85bcee9a8cdc03012b8d4f8c228c8eea6a16ad359416428</td>
|
|
<td>41d10f7fa0c0eef729c0142fd3804342e41f793f2293d063fe548de40c8cc853b928005d8207319e2de7d6336ef422c43a77cb1e91329cabbc8067610ed6b327</td>
|
|
<td>2025-07-17 16:15:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-27 17:54:30 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c0ebe5d656d755ce4f5f399105a936b82b36951fc2640a2e64c72316414e16a1</td>
|
|
<td>[68a55d10a6e1a08ed492f8f2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Jackson]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_imgqx5ud.rnw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:28:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_imgqx5ud.rnw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:28:42 +0000 UTC</td>
|
|
<td>2025-08-20 05:28:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:28:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c0a8ed297345fae7a0e2c5e97b92df98da9107d5ebea48a0ef63d094ca6f0d99</td>
|
|
<td>[68a4ccc785b914a60d739e42, 68a4d07753a851daf11e692c, 68a4d2d1ff2b441b84428124]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\Qdx_work\custom_scripts\CloverleafAutoStart.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T19:13:00Z, 2025-08-19T19:23:00Z, 2025-08-19T19:33:00Z]</td>
|
|
<td>[6070a9a674793a659ece679e56c0413c]</td>
|
|
<td>[55204a5d25518210d99df5e3908b07b14d5c3c17]</td>
|
|
<td>[c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78]</td>
|
|
<td>[9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CloverleafAutoStart.ps1</td>
|
|
<td>D:\Qdx_work\custom_scripts\</td>
|
|
<td></td>
|
|
<td>3464</td>
|
|
<td>6070a9a674793a659ece679e56c0413c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-04-27 17:40:48 +0000 UTC</td>
|
|
<td>2020-04-27 17:40:48 +0000 UTC</td>
|
|
<td>55204a5d25518210d99df5e3908b07b14d5c3c17</td>
|
|
<td>c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78</td>
|
|
<td>9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c06ca9f2522de6b59a5bdf15e8be2f96e2ca48ae6a1fdef55b7de47d63ba64aa</td>
|
|
<td>[68a511b1e4d3ba2a8e3af5c3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:07:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c05a64ef54feee47008c74b3ec8a0d4bd0966b183e05b8a61cb14baf116a2c1e</td>
|
|
<td>[68a306a5ba5832f49fe9cf56]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\APPLDR.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[90c2cf7fc66d0effe39ce31a84eac978]</td>
|
|
<td>[fa0dbef0f9f74739993c1b000cc686200a56e78b]</td>
|
|
<td>[64539c1c43a4b958138bf10ca450083a52a92d8c27b7267311f4bbac23ab2766c52b211c1fe2015cbe785c2ef0c99a24]</td>
|
|
<td>[1262de8f13e3bf393a95b3330437703a21e6812e51169b9af51d9c7e135c187bab29e36a5da04b1913f23b1705b479b3d68f1d65889d470852a0a64fb211aa56]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>APPLDR.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>20480</td>
|
|
<td>90c2cf7fc66d0effe39ce31a84eac978</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:01 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:48 +0000 UTC</td>
|
|
<td>fa0dbef0f9f74739993c1b000cc686200a56e78b</td>
|
|
<td>64539c1c43a4b958138bf10ca450083a52a92d8c27b7267311f4bbac23ab2766c52b211c1fe2015cbe785c2ef0c99a24</td>
|
|
<td>1262de8f13e3bf393a95b3330437703a21e6812e51169b9af51d9c7e135c187bab29e36a5da04b1913f23b1705b479b3d68f1d65889d470852a0a64fb211aa56</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 16:46:26 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bff9aab5dab9e2075db20262c2f58cf81db4c6ee97c513c599029bf441282a7a</td>
|
|
<td>[68a15648b3fb2a7f3ef2c4b5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfas0q2g.4wq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:10:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nfas0q2g.4wq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:10:35 +0000 UTC</td>
|
|
<td>2025-08-17 04:10:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:10:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bf941354d209769734c601d7d725941fb53ce6cfeb77bac36709c89ec9bc8b50</td>
|
|
<td>[68a4e8fbf38f9e1f8274ab4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe" req -new -x509 -extensions rootca_cert -passout pass:V]7H:]Vp#>3l:&mj/I#F -keyout "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.key" -out "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.crt" -days 3653 -config "C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\Root.cnf"]</td>
|
|
<td>[Open Source Developer, François PIETTE]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:13:27Z]</td>
|
|
<td>[36a5d769ada5511b269cd7f028f80b36]</td>
|
|
<td>[568b532bef2967af9fef30d860972fc5b67827e4]</td>
|
|
<td>[11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d]</td>
|
|
<td>[c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>openssl.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\</td>
|
|
<td>OpenSSL application</td>
|
|
<td>732016</td>
|
|
<td>36a5d769ada5511b269cd7f028f80b36</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1b</td>
|
|
<td>Open Source Developer, François PIETTE</td>
|
|
<td>2019-02-27 14:53:24 +0000 UTC</td>
|
|
<td>2019-02-27 14:53:24 +0000 UTC</td>
|
|
<td>568b532bef2967af9fef30d860972fc5b67827e4</td>
|
|
<td>11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d</td>
|
|
<td>c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda</td>
|
|
<td>2025-08-19 21:13:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-05-07 09:32:58 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bf42bb8c665225c28749685e2f8b661c02baa300701ba9ec2b32e0703b41073c</td>
|
|
<td>[68a5239e621d09b2b1ed5e5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.Helpers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[328d30770ede8b155abe1fa9a87ef03a]</td>
|
|
<td>[7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708]</td>
|
|
<td>[7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44]</td>
|
|
<td>[2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers</td>
|
|
<td>9728</td>
|
|
<td>328d30770ede8b155abe1fa9a87ef03a</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708</td>
|
|
<td>7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44</td>
|
|
<td>2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>be82e978adc037a3a56135bf555c5d4442c67d8c4e58572201d2349fba6f7b0e</td>
|
|
<td>[68a1951058f868128a49bffc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_o1ghm1vm.52u.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:38:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o1ghm1vm.52u.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:38:28 +0000 UTC</td>
|
|
<td>2025-08-17 08:38:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:38:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>be6d136082036017ac3b1cf3a626c42a3a76561171691e0345cf9cec5cf07209</td>
|
|
<td>[68a6afe50e0f3bd8deac4d08, 68a6afe50e0f3bd8deac4d1c, 68a6afe50e0f3bd8deac4d4a, 68a6afe50e0f3bd8deac4d6a, 68a6afe50e0f3bd8deac4d8a, 68a6afe50e0f3bd8deac4daa, 68a6afe50e0f3bd8deac4dca, 68a6afe50e0f3bd8deac4dea, 68a6afe50e0f3bd8deac4e0a, 68a6afe50e0f3bd8deac4e2a, 68a6afe50e0f3bd8deac4e4a, 68a6afe50e0f3bd8deac4e6a, 68a6afe50e0f3bd8deac4e8a, 68a6afe50e0f3bd8deac4eaa, 68a6afe50e0f3bd8deac4eba, 68a6afe50e0f3bd8deac4eea, 68a6afe50e0f3bd8deac4f0a, 68a6afe50e0f3bd8deac4f2a, 68a6afe50e0f3bd8deac4f4a, 68a6afe50e0f3bd8deac4f74, 68a6afe50e0f3bd8deac4f94, 68a6afe50e0f3bd8deac4fb4, 68a6afe50e0f3bd8deac4fd4, 68a6afe50e0f3bd8deac4ff4, 68a6afe50e0f3bd8deac5014, 68a6afe50e0f3bd8deac5034, 68a6afe50e0f3bd8deac5054, 68a6afe50e0f3bd8deac5074, 68a6afe50e0f3bd8deac5094, 68a6afe50e0f3bd8deac50be, 68a6afe50e0f3bd8deac50dd, 68a6afe50e0f3bd8deac50fe, 68a6afe50e0f3bd8deac5128, 68a6afe50e0f3bd8deac5148, 68a6afe50e0f3bd8deac5168, 68a6afe50e0f3bd8deac5192, 68a6afe50e0f3bd8deac51b2, 68a6afe50e0f3bd8deac51d2, 68a6afe50e0f3bd8deac51f3, 68a6afe50e0f3bd8deac5205, 68a6afe50e0f3bd8deac521c, 68a6afe50e0f3bd8deac5253, 68a6afe50e0f3bd8deac5273, 68a6afe50e0f3bd8deac5287, 68a6afe50e0f3bd8deac52a7, 68a6afe50e0f3bd8deac52c7, 68a6afe50e0f3bd8deac52e7, 68a6afe50e0f3bd8deac5307, 68a6afe50e0f3bd8deac5327, 68a6afe50e0f3bd8deac5347, 68a6afe50e0f3bd8deac5367, 68a6afe50e0f3bd8deac5387, 68a6afe50e0f3bd8deac53ad, 68a6afe50e0f3bd8deac53c8, 68a6afe50e0f3bd8deac53ed, 68a6afe50e0f3bd8deac540c, 68a6afe50e0f3bd8deac542d, 68a6afe50e0f3bd8deac5447, 68a6afe50e0f3bd8deac546d, 68a6afe50e0f3bd8deac548d, 68a6afe50e0f3bd8deac54ad, 68a6afe50e0f3bd8deac54cd, 68a6afe50e0f3bd8deac54ed, 68a6afe50e0f3bd8deac550d, 68a6afe50e0f3bd8deac552d, 68a6afe50e0f3bd8deac554d, 68a6afe50e0f3bd8deac5577, 68a6afe50e0f3bd8deac5597, 68a6afe50e0f3bd8deac55b7, 68a6afe50e0f3bd8deac55d7, 68a6afe50e0f3bd8deac55f7, 68a6afe50e0f3bd8deac5617, 68a6afe50e0f3bd8deac5637, 68a6afe50e0f3bd8deac5667, 68a6afe50e0f3bd8deac5687, 68a6afe50e0f3bd8deac5695, 68a6afe50e0f3bd8deac56b5, 68a6afe50e0f3bd8deac56d5, 68a6afe50e0f3bd8deac56ed, 68a6afe50e0f3bd8deac5715, 68a6afe50e0f3bd8deac572f, 68a6afe50e0f3bd8deac5755, 68a6afe50e0f3bd8deac575e, 68a6afe50e0f3bd8deac579d, 68a6afe50e0f3bd8deac57a9, 68a6afe50e0f3bd8deac57de, 68a6afe50e0f3bd8deac57e9, 68a6afe50e0f3bd8deac581d, 68a6afe50e0f3bd8deac5836, 68a6afe50e0f3bd8deac585f, 68a6afe50e0f3bd8deac5867, 68a6afe50e0f3bd8deac589d, 68a6afe50e0f3bd8deac58ae, 68a6afe50e0f3bd8deac58df, 68a6afe50e0f3bd8deac58e9, 68a6afe50e0f3bd8deac5919, 68a6afe50e0f3bd8deac5930, 68a6afe50e0f3bd8deac595f, 68a6afe50e0f3bd8deac597f, 68a6afe50e0f3bd8deac5996, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\libcrypto-1_1-x64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:25Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:55Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:40Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:47Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[3ff61aef6545cc4fe20493c24388fb64]</td>
|
|
<td>[2a11cb2f5d89afb4638b32dcd9239986df7882e4]</td>
|
|
<td>[ff38cae2ab0aff63f479d8fff29fedaffe2cb90af7117391c4e47fee39861118d78d53de1cbad5351b1d0a0f96b6f09a]</td>
|
|
<td>[2f59b2fe12b896fe8d1020cc36ab4f3f8d024af5cc053747b1477209c333483acdedb17c9287667c3bb5d10874fe1302cad0fe034d78c9cd468f9fcb8f916538]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libcrypto-1_1-x64.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>3442176</td>
|
|
<td>3ff61aef6545cc4fe20493c24388fb64</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1d</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:46 +0000 UTC</td>
|
|
<td>2023-03-07 00:33:42 +0000 UTC</td>
|
|
<td>2a11cb2f5d89afb4638b32dcd9239986df7882e4</td>
|
|
<td>ff38cae2ab0aff63f479d8fff29fedaffe2cb90af7117391c4e47fee39861118d78d53de1cbad5351b1d0a0f96b6f09a</td>
|
|
<td>2f59b2fe12b896fe8d1020cc36ab4f3f8d024af5cc053747b1477209c333483acdedb17c9287667c3bb5d10874fe1302cad0fe034d78c9cd468f9fcb8f916538</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>be5e9587e3ca556aef9c2cde627026bcf487a2c0577ed5d5878c9045719f8ac0</td>
|
|
<td>[68a2a383740bfa0e8661429f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tnnwgcbz.kx3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T03:52:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tnnwgcbz.kx3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 03:52:27 +0000 UTC</td>
|
|
<td>2025-08-18 03:52:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 03:52:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bdf42be3e8a2d355425f5b3cde6143964bc5bc8e34a4eeef8d5ce9168187ba14</td>
|
|
<td>[68a523949cec397f02de9f4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Caliburn.Micro.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[6983fd92ac73d4eeba2138a9fb060504]</td>
|
|
<td>[9058f7800a0c0580583935a7d7d5c7a725e273cf]</td>
|
|
<td>[75d55a4f64ac3796cc8c374ff44d407530b74757b362f227c1606633223ba1b3a7da55c676b95e1d01d246d137b6e363]</td>
|
|
<td>[843bef8a15921c4cc9e6ed752953d5a00bb7496246dd8d50dca42ced8ffb427aed5ae6f9294f57cdf7f4dc6a7d0ad7250749162c19be81b6687b09f4c36e7771]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Caliburn.Micro.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Caliburn Micro</td>
|
|
<td>62464</td>
|
|
<td>6983fd92ac73d4eeba2138a9fb060504</td>
|
|
<td>Caliburn.Micro</td>
|
|
<td>2.0.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:26 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:26 +0000 UTC</td>
|
|
<td>9058f7800a0c0580583935a7d7d5c7a725e273cf</td>
|
|
<td>75d55a4f64ac3796cc8c374ff44d407530b74757b362f227c1606633223ba1b3a7da55c676b95e1d01d246d137b6e363</td>
|
|
<td>843bef8a15921c4cc9e6ed752953d5a00bb7496246dd8d50dca42ced8ffb427aed5ae6f9294f57cdf7f4dc6a7d0ad7250749162c19be81b6687b09f4c36e7771</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-10-12 02:13:26 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c6b6dc489be976c353613a2e6ccc00459d683607f7016bf7100b54f3840c9de8</td>
|
|
<td>[68a514957c462c6feed1d6ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_645608853d614555ad24aa760135fa91.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_645608853d614555ad24aa760135fa91.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c64d02709f5a2a0f2b1f7fdce51ea690718e118b044861c776bd216796720ce1</td>
|
|
<td>[68a27594b1c6255cad9f46e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fqfwtzyh.2si.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:36:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fqfwtzyh.2si.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:36:24 +0000 UTC</td>
|
|
<td>2025-08-18 00:36:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:36:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c5ed39440ed5c887e029536b2385b4abcb5c92dc545a0aa6da398b6d107d47ec</td>
|
|
<td>[68a17aee0ae38deaa00d340b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-v3MAppTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pwoh1wzv.2ff.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:47:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_pwoh1wzv.2ff.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:47:02 +0000 UTC</td>
|
|
<td>2025-08-17 06:47:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:47:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c5aff149a88b77be98108f0bcd11aecbc95552b149633da6e4802ebacebb5b7a</td>
|
|
<td>[68a5562678064307c83a4ac0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbgibpfr.i4d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T04:59:17Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jbgibpfr.i4d.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 04:59:17 +0000 UTC</td>
|
|
<td>2025-08-20 04:59:17 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 04:59:18 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c596c3c0daaf9055213284e42bd337e3b6754890efe1c480f0e7731ad4060af5</td>
|
|
<td>[68a16bd60756fe54a9918fa7, 68a2149cb58debea69d7c752, 68a2bd5ff793a9057f329c0d, 68a3663261f8067c48423ec0, 68a40efceddb3a9f1a71a609, 68a4b7cd36bc5d38057e236e]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\CmmBrowserEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[097f29d6fcdb18a270a67a77726f02e0]</td>
|
|
<td>[572c07086245d07726fa885459d62fe77733dfbc]</td>
|
|
<td>[0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d]</td>
|
|
<td>[f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CmmBrowserEngine.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>199480</td>
|
|
<td>097f29d6fcdb18a270a67a77726f02e0</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>572c07086245d07726fa885459d62fe77733dfbc</td>
|
|
<td>0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d</td>
|
|
<td>f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:28 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c535b5c57d55794d09c08b5caba7399add0cfd2043491bafb35453d6aebff17a</td>
|
|
<td>[68a4ccc785b914a60d739e53, 68a4ce1fc826337212f53bf1, 68a4d07753a851daf11e693c, 68a4d07753a851daf11e6952, 68a4d2d1ff2b441b84428134, 68a4d2d1ff2b441b8442814b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\API.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[6ddc8640259abb08c4a7aab5963f9132]</td>
|
|
<td>[64c7beca37e5f11c99f66bf2ba9aa4d549147813]</td>
|
|
<td>[c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710]</td>
|
|
<td>[7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>API.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\</td>
|
|
<td></td>
|
|
<td>17920</td>
|
|
<td>6ddc8640259abb08c4a7aab5963f9132</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:13:04 +0000 UTC</td>
|
|
<td>64c7beca37e5f11c99f66bf2ba9aa4d549147813</td>
|
|
<td>c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710</td>
|
|
<td>7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c534f09b89879437205c2c070f09e847f00ca5462acc567fab450fe01d667c57</td>
|
|
<td>[68a3146b5f0c41860c8c8505, 68a3146b5f0c41860c8c852b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_constants.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[ad6cb6b298821e0783d24bd040205667]</td>
|
|
<td>[1068bc2e3f910a9d0d9a00b67dc90a726720fdc8]</td>
|
|
<td>[fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0]</td>
|
|
<td>[47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_constants.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>5382</td>
|
|
<td>ad6cb6b298821e0783d24bd040205667</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>1068bc2e3f910a9d0d9a00b67dc90a726720fdc8</td>
|
|
<td>fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0</td>
|
|
<td>47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c4d5f27d397b627a66b385a571f63b327f086b0c10eadd90ada70474097443c7</td>
|
|
<td>[68a34b98a6132bf659cce5af, 68a34df0b71eea1289980a14]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\NuGet.Squirrel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[c29d753ab575ba590dee09d9951fe391]</td>
|
|
<td>[06514982da9ebd5a13d13808abbc475260b0b566]</td>
|
|
<td>[ca4ab209e7f9f2731de9896057c8d82a6736bf8672c214a32ede567e6b0da21a5fcc7356784b5f629b8d9d1a990bc065]</td>
|
|
<td>[3f165fc822655cab20c54859673799d070a547d737ee16c96bc309067e2974870b7f8991695410729d486e244d8312438faaed6738f9b2d7223582a77c37c83a]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NuGet.Squirrel.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>NuGet.Core</td>
|
|
<td>509952</td>
|
|
<td>c29d753ab575ba590dee09d9951fe391</td>
|
|
<td>NuGet</td>
|
|
<td>3.0.0-preview</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:52 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:52 +0000 UTC</td>
|
|
<td>06514982da9ebd5a13d13808abbc475260b0b566</td>
|
|
<td>ca4ab209e7f9f2731de9896057c8d82a6736bf8672c214a32ede567e6b0da21a5fcc7356784b5f629b8d9d1a990bc065</td>
|
|
<td>3f165fc822655cab20c54859673799d070a547d737ee16c96bc309067e2974870b7f8991695410729d486e244d8312438faaed6738f9b2d7223582a77c37c83a</td>
|
|
<td>2025-06-09 21:58:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-23 08:47:41 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c48ee8109815a5443615dc6932ffe0a3fa4d8ba3ba73cc481a0eea00785f76be</td>
|
|
<td>[68a16fc09b16dfa10f38c979]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hkdjfhdi.ivf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:59:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hkdjfhdi.ivf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:59:23 +0000 UTC</td>
|
|
<td>2025-08-17 05:59:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:59:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c47706e64fc4a76a6a9491ecb56a34662e8b6e68399c73a5b2cf319b46ada3a6</td>
|
|
<td>[68a3364098a9a1f4e6f8e02d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kft34fye.mii.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T14:18:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kft34fye.mii.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:18:32 +0000 UTC</td>
|
|
<td>2025-08-18 14:18:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:18:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3a00c139fea67d3b256e9119dd35e0bbaef4fd51a800022f693a0f157bdcdd3</td>
|
|
<td>[68a3240b38d5d5195ff8315f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\tmpEXO_h3psaegy.pzf.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:00:50Z]</td>
|
|
<td>[4337273c42ec7d667280321798203a81]</td>
|
|
<td>[6cecb446e53d0bceb0598e63c47129b289f76680]</td>
|
|
<td>[01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b]</td>
|
|
<td>[81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_h3psaegy.pzf.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>4337273c42ec7d667280321798203a81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 13:00:48 +0000 UTC</td>
|
|
<td>6cecb446e53d0bceb0598e63c47129b289f76680</td>
|
|
<td>01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b</td>
|
|
<td>81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493</td>
|
|
<td>2025-08-18 13:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3796735f397c34b8190c04151071a3700e9356214c940fc7a16781c1678c998</td>
|
|
<td>[68a16bd60756fe54a9918f9b, 68a2149cb58debea69d7c746, 68a2bd5ff793a9057f329c01, 68a3663261f8067c48423eb4, 68a40efceddb3a9f1a71a5fd, 68a4b7cd36bc5d38057e2362]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWinRes.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[ea160d8a356d92ab1ce2cef57b69cd5a]</td>
|
|
<td>[4e49b884b2592720404e91cdd2d526af82c02c6b]</td>
|
|
<td>[77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56]</td>
|
|
<td>[917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zWinRes.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>10790712</td>
|
|
<td>ea160d8a356d92ab1ce2cef57b69cd5a</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>4e49b884b2592720404e91cdd2d526af82c02c6b</td>
|
|
<td>77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56</td>
|
|
<td>917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:14:39 +0000 UTC</td>
|
|
<td>51</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3667c28750579a47d4170b1f5e1442a386fe1cebe6246179a6c27d1b53c2de5</td>
|
|
<td>[68a2324e8d5b232a80ba583b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrvnheh0.wft.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:45:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jrvnheh0.wft.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:45:56 +0000 UTC</td>
|
|
<td>2025-08-17 19:45:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:49:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c301ca5c745a7ea2471ae58975afc931ee83421bb7d51d06311cce889fd41407</td>
|
|
<td>[68a17a26093dbf71ffe19bcf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mhcpaqhq.f01.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:43:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mhcpaqhq.f01.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:43:45 +0000 UTC</td>
|
|
<td>2025-08-17 06:43:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:43:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c2ed1c813c3e9df1cce05bdae49d2c20edf56502f916ca8c55d8ac08f1b7f682</td>
|
|
<td>[68a16bd60756fe54a9918f8b, 68a2149cb58debea69d7c736, 68a2bd5ff793a9057f329bf2, 68a3663261f8067c48423ea6, 68a40efceddb3a9f1a71a5ed, 68a4b7cd36bc5d38057e2354]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\DuiLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[46daed87222362c75d0f93c9ceebecee]</td>
|
|
<td>[5d2aa57dbda3c6914acd7024280a2cb71a290cc5]</td>
|
|
<td>[2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14]</td>
|
|
<td>[e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DuiLib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2146104</td>
|
|
<td>46daed87222362c75d0f93c9ceebecee</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>5d2aa57dbda3c6914acd7024280a2cb71a290cc5</td>
|
|
<td>2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14</td>
|
|
<td>e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:10 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c261f75c1a25ecb17d1936efe34a34236b5d0e79415b34ffb9324359a30a8c08</td>
|
|
<td>[68a472b1b022648922e2358a]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxws-api-2.3.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[f72dee163a5730f80c0e198decba2b2a]</td>
|
|
<td>[82db2dfe70624d6ed1e93737abfbb0a4df084a89]</td>
|
|
<td>[d442fe94c113ac7c7acf83e1f22063e853e712f47eab137c89d075cc6c89c00a87443d3ea10954f96fb6d16c618cf865]</td>
|
|
<td>[a43235ad5688b96e121b951715819963fb00af9e573d1d3582a2351450c270160d88caa0c3615321c0cf8ec59c3ad09789e58fb8d4339fc61face5c7e93c7e3e]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jaxws-api-2.3.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>52437</td>
|
|
<td>f72dee163a5730f80c0e198decba2b2a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>82db2dfe70624d6ed1e93737abfbb0a4df084a89</td>
|
|
<td>d442fe94c113ac7c7acf83e1f22063e853e712f47eab137c89d075cc6c89c00a87443d3ea10954f96fb6d16c618cf865</td>
|
|
<td>a43235ad5688b96e121b951715819963fb00af9e573d1d3582a2351450c270160d88caa0c3615321c0cf8ec59c3ad09789e58fb8d4339fc61face5c7e93c7e3e</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-24 02:46:58 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ca0f677ea03e930eab6d803e0015635200a3e4a1de4391cd78a7c6b33b722ad7</td>
|
|
<td>[68a3146b5f0c41860c8c8550, 68a3146b5f0c41860c8c8576]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\textwrap.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[a983cb636c494edd66f26bbb0d50debd]</td>
|
|
<td>[b1e72b671ead0a94705dc8fce5642bba7d658c8c]</td>
|
|
<td>[07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb]</td>
|
|
<td>[83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>textwrap.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17938</td>
|
|
<td>a983cb636c494edd66f26bbb0d50debd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>b1e72b671ead0a94705dc8fce5642bba7d658c8c</td>
|
|
<td>07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb</td>
|
|
<td>83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9fc184e1ca62fe686fbd38a18904c7d84f091a080e009089e170d1b30b664f0</td>
|
|
<td>[68a48674c4cb2500be692633]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:15Z]</td>
|
|
<td>[4d6da26c03021f4618d9339970734fcf]</td>
|
|
<td>[1f147bd82cbdc20c0f3edf7844e0096e65201b69]</td>
|
|
<td>[98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0]</td>
|
|
<td>[4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>3265296</td>
|
|
<td>4d6da26c03021f4618d9339970734fcf</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:49:02 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:07 +0000 UTC</td>
|
|
<td>1f147bd82cbdc20c0f3edf7844e0096e65201b69</td>
|
|
<td>98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0</td>
|
|
<td>4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660</td>
|
|
<td>2025-07-15 14:07:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9f6192ea1b31abf195f87899b9a689fa2eade5036fcdaed0057948f970df578</td>
|
|
<td>[68a6afe50e0f3bd8deac4ce6, 68a6afe50e0f3bd8deac4cf5, 68a6afe50e0f3bd8deac4d29, 68a6afe50e0f3bd8deac4d37, 68a6afe50e0f3bd8deac4d57, 68a6afe50e0f3bd8deac4d77, 68a6afe50e0f3bd8deac4d97, 68a6afe50e0f3bd8deac4db7, 68a6afe50e0f3bd8deac4dd7, 68a6afe50e0f3bd8deac4df7, 68a6afe50e0f3bd8deac4e17, 68a6afe50e0f3bd8deac4e37, 68a6afe50e0f3bd8deac4e56, 68a6afe50e0f3bd8deac4e77, 68a6afe50e0f3bd8deac4e97, 68a6afe50e0f3bd8deac4ec8, 68a6afe50e0f3bd8deac4ed7, 68a6afe50e0f3bd8deac4ef7, 68a6afe50e0f3bd8deac4f17, 68a6afe50e0f3bd8deac4f37, 68a6afe50e0f3bd8deac4f61, 68a6afe50e0f3bd8deac4f81, 68a6afe50e0f3bd8deac4fa1, 68a6afe50e0f3bd8deac4fc1, 68a6afe50e0f3bd8deac4fe1, 68a6afe50e0f3bd8deac5001, 68a6afe50e0f3bd8deac5021, 68a6afe50e0f3bd8deac5041, 68a6afe50e0f3bd8deac5061, 68a6afe50e0f3bd8deac5081, 68a6afe50e0f3bd8deac50ab, 68a6afe50e0f3bd8deac50cb, 68a6afe50e0f3bd8deac50eb, 68a6afe50e0f3bd8deac5115, 68a6afe50e0f3bd8deac5135, 68a6afe50e0f3bd8deac5155, 68a6afe50e0f3bd8deac517f, 68a6afe50e0f3bd8deac519f, 68a6afe50e0f3bd8deac51bf, 68a6afe50e0f3bd8deac51e0, 68a6afe50e0f3bd8deac5212, 68a6afe50e0f3bd8deac5229, 68a6afe50e0f3bd8deac5240, 68a6afe50e0f3bd8deac5260, 68a6afe50e0f3bd8deac5274, 68a6afe50e0f3bd8deac5294, 68a6afe50e0f3bd8deac52b4, 68a6afe50e0f3bd8deac52d4, 68a6afe50e0f3bd8deac52f4, 68a6afe50e0f3bd8deac5314, 68a6afe50e0f3bd8deac5334, 68a6afe50e0f3bd8deac5354, 68a6afe50e0f3bd8deac5374, 68a6afe50e0f3bd8deac539a, 68a6afe50e0f3bd8deac53b6, 68a6afe50e0f3bd8deac53da, 68a6afe50e0f3bd8deac53f9, 68a6afe50e0f3bd8deac541a, 68a6afe50e0f3bd8deac5434, 68a6afe50e0f3bd8deac545a, 68a6afe50e0f3bd8deac547a, 68a6afe50e0f3bd8deac549a, 68a6afe50e0f3bd8deac54ba, 68a6afe50e0f3bd8deac54da, 68a6afe50e0f3bd8deac54fa, 68a6afe50e0f3bd8deac551a, 68a6afe50e0f3bd8deac553a, 68a6afe50e0f3bd8deac5564, 68a6afe50e0f3bd8deac5584, 68a6afe50e0f3bd8deac55a4, 68a6afe50e0f3bd8deac55c4, 68a6afe50e0f3bd8deac55e4, 68a6afe50e0f3bd8deac5604, 68a6afe50e0f3bd8deac5624, 68a6afe50e0f3bd8deac5653, 68a6afe50e0f3bd8deac5674, 68a6afe50e0f3bd8deac56a2, 68a6afe50e0f3bd8deac56c2, 68a6afe50e0f3bd8deac56d9, 68a6afe50e0f3bd8deac5703, 68a6afe50e0f3bd8deac571c, 68a6afe50e0f3bd8deac5742, 68a6afe50e0f3bd8deac5775, 68a6afe50e0f3bd8deac5788, 68a6afe50e0f3bd8deac57b6, 68a6afe50e0f3bd8deac57cc, 68a6afe50e0f3bd8deac57f6, 68a6afe50e0f3bd8deac580a, 68a6afe50e0f3bd8deac5823, 68a6afe50e0f3bd8deac584c, 68a6afe50e0f3bd8deac5874, 68a6afe50e0f3bd8deac5889, 68a6afe50e0f3bd8deac58bb, 68a6afe50e0f3bd8deac58cc, 68a6afe50e0f3bd8deac58fb, 68a6afe50e0f3bd8deac5906, 68a6afe50e0f3bd8deac593d, 68a6afe50e0f3bd8deac594c, 68a6afe50e0f3bd8deac596c, 68a6afe50e0f3bd8deac5983, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeDicomLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[8038198f467aa6483596d5a103224695]</td>
|
|
<td>[6b8a73173f513d5f61a988c35488840d6ca5168e]</td>
|
|
<td>[3b2a8ba76a6c692b44e50997fe5e1f03c21d176182103f9d517415cfd2b7f08e202b0df323aa1b4c6cc9014e774b97af]</td>
|
|
<td>[8d17003e1ed1d73f2af8db29b4bfdd8b995a238cf2c7c55930356696609c35b18674db5861f83e8ead902541d8d3c0506cdeee98c4026fbe200ddcf57579c479]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeDicomLib.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>805888</td>
|
|
<td>8038198f467aa6483596d5a103224695</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:42 +0000 UTC</td>
|
|
<td>2023-06-16 02:58:17 +0000 UTC</td>
|
|
<td>6b8a73173f513d5f61a988c35488840d6ca5168e</td>
|
|
<td>3b2a8ba76a6c692b44e50997fe5e1f03c21d176182103f9d517415cfd2b7f08e202b0df323aa1b4c6cc9014e774b97af</td>
|
|
<td>8d17003e1ed1d73f2af8db29b4bfdd8b995a238cf2c7c55930356696609c35b18674db5861f83e8ead902541d8d3c0506cdeee98c4026fbe200ddcf57579c479</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9ef35bed70ffa0981bafd0071185b56fdad8f9c97f3582a4dae9b420959fb97</td>
|
|
<td>[68a16bc4ad9c33d9c2e65756, 68a172cdc0f8055f64713419, 68a179d338572cbc65616da3, 68a1804bf8ae7dd3df476f09, 68a187e553ac2a86abb03491, 68a18eee729156ffa7259826, 68a195f4b86f0c8aa5216084, 68a19cfd64bf60820d0181d7, 68a1acc43dfbfac90032a3bc, 68a1b219d07230b57463e87a, 68a1b91d1b24cf3f4771b897, 68a1c025a1293bdf5a6549d4, 68a1c8e646186b37f5ac3e87, 68a1ce37ff8f091c89bd7e0d, 68a1d53f1824f04bdbbd2e23, 68a1dc48e9b446590d212ea0, 68a1e5096f3390a2d4c45b8c, 68a1ea59c2807bfb4e6bd79c, 68a1f1620185d739f28077bb, 68a1f86b5860bb1ab8fe7017, 68a1ff7362f73c75ea20c3bb, 68a2082f5e302bb8f76a1c47, 68a20d8405e6e35077c2d29f, 68a2148da524a919a2880941, 68a21b919d11196cc9a616c8, 68a224516b6c4aefe37db14b, 68a229a21145934075cf7126, 68a230aa01dfad25d66e06ad, 68a237b34da7992cf394be68, 68a23ebc1a2eedb9e67ef5e6, 68a245c42c7d715a036f384d, 68a24ccd8e7f175fcd84e41f, 68a253d6ff6fb2ed210c0356, 68a25ade53979dd9da3732e3, 68a261e7f7947656655fe7f3, 68a268f0bf25183df43efe44, 68a26ff84abd96da16a47c80, 68a276fc59c12c68e71a249e, 68a27e04e0494e7574f3f455, 68a286c0c2c9f189b338b621, 68a28c1603b4ee1c551eca8b, 68a2931ece09f4c6f7c419ba, 68a29a274b7ddc2c84ed0de8, 68a2a13073586ea39d62a078, 68a2a83649f642cc5ae7b7cd, 68a2af3f4b461c4e4d1d89c8, 68a2b6470f9c8e52cbbbc6d5, 68a2bf0021586b29ef838133, 68a2c4594c433b4f88aee0d2, 68a2d26ac62ed9324f721122, 68a2db21e09739c45d0affdf, 68a2e07cbfa1fc05015beff7, 68a2e7801b323c2b294d5eef, 68a2ee88859e37426da93b3a, 68a2f73f59738bf4fccfab7d, 68a2fc9a63de2d038778f96b, 68a303a3f3e03189a3aa3911, 68a30aab0a4862a38db25377, 68a313622b6d412403ad79e7, 68a318bd8a60dcd0ab189d81, 68a31fe2a56bfbffe27a6f4a, 68a326d1b268d794f2486717, 68a32dda58c5336b9826ccf7, 68a335889425eeb6da079393, 68a33bf133704992ab564775, 68a342f93a3f2f2cfdc38a7e, 68a34a0193c9f2686216d5a4, 68a35109dcbdb9af79d6422e, 68a358166446b584fbeb48c3, 68a35f2142f657a8fa28b6de, 68a3662b8a74df93031e2923, 68a36d3468bb70b8808727af, 68a3743c4da128919d6758a4, 68a37b44fb7d353a77331404, 68a382515b1f8341940efc7d, 68a3895d4c9b0119e59522a1, 68a39066d0e53033691833c3, 68a3976f18606035299d68b7, 68a39e7854bebae70e617202, 68a3a580ce25cbb9eaded924, 68a3ac89afed4126737f38d2, 68a3b392ad655e1e5bbbb968, 68a3ba9a92f306c5b333cb4f, 68a3c1a1f23aad622f92975c, 68a3c8a9722676e14095e6f5, 68a3cfb4b1198f9d919d82d2, 68a3d6ba7bb221454426601c, 68a3ddc229b489dea56d4b00, 68a3e4cbc58c42da95af4e8a, 68a3ed57b89d663e9f8db999, 68a3f2dc83b11b3c1185cfc6, 68a3f9e36c6aa49846cec062, 68a400eb110dffa88df03c55, 68a4097a4aede4ad63908d0e, 68a40efc829243526b28a480, 68a41d0ec853cfc461d34dcb, 68a42416e061813ba1fb0b23, 68a4322671829e8c619d02f8, 68a4392fe2f86f318f61ae53, 68a440378219e384ff7cd411, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[ASCSvc]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[E:\OrecX_Export\fart.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2253.852, v2255.853, v2258.856, v2260.859, v2263.860, v2264.862, v2267.864, v2269.866, v2270.866, v2272.867, v2273.867, v2276.867, v2280.871, v2282.875, v2283.876, v2284.877, v2286.879, v2287.880, v2293.885, v2295.887, v2298.891, v2306.895, v2307.897, v2309.897, v2310.898, v2311.899, v2314.902, v2317.903, v2319.906, v2322.909, v2324.910]</td>
|
|
<td>[FART -i -r "\\wvuhs.com\files\callminer\orecx_TempMoved\*.xml" "<filename>/" "<filename>"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:39:49Z, 2025-08-17T06:09:49Z, 2025-08-17T06:39:49Z, 2025-08-17T07:09:50Z, 2025-08-17T07:39:46Z, 2025-08-17T08:09:49Z, 2025-08-17T08:39:59Z, 2025-08-17T09:09:48Z, 2025-08-17T10:09:47Z, 2025-08-17T10:39:50Z, 2025-08-17T11:09:47Z, 2025-08-17T11:39:49Z, 2025-08-17T12:09:49Z, 2025-08-17T12:39:50Z, 2025-08-17T13:09:47Z, 2025-08-17T13:39:48Z, 2025-08-17T14:09:50Z, 2025-08-17T14:39:49Z, 2025-08-17T15:09:49Z, 2025-08-17T15:39:49Z, 2025-08-17T16:09:50Z, 2025-08-17T16:39:48Z, 2025-08-17T17:09:48Z, 2025-08-17T17:39:49Z, 2025-08-17T18:09:49Z, 2025-08-17T18:39:49Z, 2025-08-17T19:09:50Z, 2025-08-17T19:39:50Z, 2025-08-17T20:09:50Z, 2025-08-17T20:39:48Z, 2025-08-17T21:09:50Z, 2025-08-17T21:39:49Z, 2025-08-17T22:09:51Z, 2025-08-17T22:39:50Z, 2025-08-17T23:09:47Z, 2025-08-17T23:39:50Z, 2025-08-18T00:09:47Z, 2025-08-18T00:39:49Z, 2025-08-18T01:09:50Z, 2025-08-18T01:39:49Z, 2025-08-18T02:09:50Z, 2025-08-18T02:39:47Z, 2025-08-18T03:09:49Z, 2025-08-18T03:39:50Z, 2025-08-18T04:09:48Z, 2025-08-18T04:39:48Z, 2025-08-18T05:09:48Z, 2025-08-18T05:39:50Z, 2025-08-18T06:09:49Z, 2025-08-18T07:09:49Z, 2025-08-18T07:39:49Z, 2025-08-18T08:09:50Z, 2025-08-18T08:39:50Z, 2025-08-18T09:09:50Z, 2025-08-18T09:39:51Z, 2025-08-18T10:09:50Z, 2025-08-18T10:39:47Z, 2025-08-18T11:09:48Z, 2025-08-18T11:39:53Z, 2025-08-18T12:09:54Z, 2025-08-18T12:39:56Z, 2025-08-18T13:09:59Z, 2025-08-18T13:40:01Z, 2025-08-18T14:09:59Z, 2025-08-18T14:40:00Z, 2025-08-18T15:09:59Z, 2025-08-18T15:39:57Z, 2025-08-18T16:09:55Z, 2025-08-18T16:39:56Z, 2025-08-18T17:09:54Z, 2025-08-18T17:39:59Z, 2025-08-18T18:09:59Z, 2025-08-18T18:40:01Z, 2025-08-18T19:09:59Z, 2025-08-18T19:39:57Z, 2025-08-18T20:09:59Z, 2025-08-18T20:39:57Z, 2025-08-18T21:09:54Z, 2025-08-18T21:39:51Z, 2025-08-18T22:09:50Z, 2025-08-18T22:39:48Z, 2025-08-18T23:09:51Z, 2025-08-18T23:39:51Z, 2025-08-19T00:10:00Z, 2025-08-19T00:39:52Z, 2025-08-19T01:09:49Z, 2025-08-19T01:39:50Z, 2025-08-19T02:09:48Z, 2025-08-19T02:39:49Z, 2025-08-19T03:09:50Z, 2025-08-19T03:39:49Z, 2025-08-19T04:09:50Z, 2025-08-19T04:39:49Z, 2025-08-19T05:09:51Z, 2025-08-19T05:39:50Z, 2025-08-19T06:39:50Z, 2025-08-19T07:09:49Z, 2025-08-19T08:09:50Z, 2025-08-19T08:39:50Z, 2025-08-19T09:09:50Z, ...]</td>
|
|
<td>[25936f3ce854af30d298199102a845a1]</td>
|
|
<td>[f6e0452325d7d325d802fbb1aa367cec50c37a03]</td>
|
|
<td>[6b0ae9f033be6801c9316787e7593bf9fd5c92d7d4f89b93a75afa93060a3985a5c6b36bf91a19b1725922fbd80f173d]</td>
|
|
<td>[98fcb3a19f7eab55122d9657e4616146136a1039bb896689a0d39289a9ed7808122d27c5e31cce3df05960692156fe2223d5ea2c01fddae1cbf1c3ed497349d5]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>fart.exe</td>
|
|
<td>E:\OrecX_Export\</td>
|
|
<td></td>
|
|
<td>69660</td>
|
|
<td>25936f3ce854af30d298199102a845a1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-06 17:10:54 +0000 UTC</td>
|
|
<td>2023-04-06 12:05:53 +0000 UTC</td>
|
|
<td>f6e0452325d7d325d802fbb1aa367cec50c37a03</td>
|
|
<td>6b0ae9f033be6801c9316787e7593bf9fd5c92d7d4f89b93a75afa93060a3985a5c6b36bf91a19b1725922fbd80f173d</td>
|
|
<td>98fcb3a19f7eab55122d9657e4616146136a1039bb896689a0d39289a9ed7808122d27c5e31cce3df05960692156fe2223d5ea2c01fddae1cbf1c3ed497349d5</td>
|
|
<td>2025-07-15 15:10:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-13 21:35:10 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-07-15 15:11:24.988 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b</td>
|
|
<td>[68a4f26f8c32b5989becd6c8, 68a4fcd0011d94a251a4ef40]</td>
|
|
<td>[2]</td>
|
|
<td>[ReevesJoe, CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\InstallOptions.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\InstallOptions.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Program Files\TAP-Windows\Uninstall.exe]</td>
|
|
<td>[2025-08-19T21:53:45Z, 2025-08-19T22:13:50Z]</td>
|
|
<td>[325b008aec81e5aaa57096f05d4212b5]</td>
|
|
<td>[27a2d89747a20305b6518438eff5b9f57f7df5c3]</td>
|
|
<td>[b8c14c65edc79a4a1805d1d881466b30dcdaab52aa95d0567f32431ba7becf85823cbb0f39d9b3e84cdd67247fcf97eb]</td>
|
|
<td>[18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallOptions.dll</td>
|
|
<td>C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\</td>
|
|
<td></td>
|
|
<td>14848</td>
|
|
<td>325b008aec81e5aaa57096f05d4212b5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-01 11:54:09 +0000 UTC</td>
|
|
<td>2025-07-01 11:54:09 +0000 UTC</td>
|
|
<td>27a2d89747a20305b6518438eff5b9f57f7df5c3</td>
|
|
<td>b8c14c65edc79a4a1805d1d881466b30dcdaab52aa95d0567f32431ba7becf85823cbb0f39d9b3e84cdd67247fcf97eb</td>
|
|
<td>18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf</td>
|
|
<td>2025-07-01 11:54:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-08 03:47:14 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-01 11:55:24.484 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9cc6face476f8d775daa32503e747868b65a73ee9eb306cf78c86c767ad09bb</td>
|
|
<td>[68a5e788692da313f892a122, 68a5f7f47c4424bb71e0a54b, 68a614164c5f9631798f265a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\cp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891, v2306.895, v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\Windows\System32\LogonUI.exe]</td>
|
|
<td>[C:\Windows\System32\winlogon.exe]</td>
|
|
<td>[2025-08-20T15:09:54Z, 2025-08-20T16:19:41Z, 2025-08-20T18:26:45Z]</td>
|
|
<td>[8d45b8ff739f914564f869bb37d05386]</td>
|
|
<td>[558f84d716b9a8e3de2ef25cef42c936315ba190]</td>
|
|
<td>[8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293]</td>
|
|
<td>[d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cp.dll</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\</td>
|
|
<td>ACH Credential Provider</td>
|
|
<td>1185872</td>
|
|
<td>8d45b8ff739f914564f869bb37d05386</td>
|
|
<td>Automated Credential Handling</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:09 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:09 +0000 UTC</td>
|
|
<td>558f84d716b9a8e3de2ef25cef42c936315ba190</td>
|
|
<td>8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293</td>
|
|
<td>d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39</td>
|
|
<td>2025-07-23 17:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9963a3f8abf6fedc8f983a9655a387d67c752bd59b0d16fd6fc2396b4b4ca67</td>
|
|
<td>[68a4e8a1ad898641af98fd99, 68a4e9b3061a87dd106e473f, 68a4f315247c4b5c9ccb9235, 68a4fcd0011d94a251a4ef35, 68a4fcd0011d94a251a4ef3f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109, ReevesJoe]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\TAP-Windows\bin\tapinstall.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>["C:\Program Files\TAP-Windows\bin\tapinstall.exe" hwids tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" install "C:\Program Files\TAP-Windows\driver\OemVista.inf" tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" remove tap0901]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Windows\Installer\MSI50B.tmp, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T21:11:57Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z]</td>
|
|
<td>[d10f74d86cd350732657f542df533f82]</td>
|
|
<td>[c54074f8f162a780819175e7169c43f6706ad46c]</td>
|
|
<td>[0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855]</td>
|
|
<td>[0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tapinstall.exe</td>
|
|
<td>C:\Program Files\TAP-Windows\bin\</td>
|
|
<td>Windows Setup API</td>
|
|
<td>92304</td>
|
|
<td>d10f74d86cd350732657f542df533f82</td>
|
|
<td>Windows (R) Win 7 DDK driver</td>
|
|
<td>6.1.7600.16385</td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 11:34:12 +0000 UTC</td>
|
|
<td>2016-04-21 11:34:12 +0000 UTC</td>
|
|
<td>c54074f8f162a780819175e7169c43f6706ad46c</td>
|
|
<td>0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855</td>
|
|
<td>0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 12:31:35 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9448c282682d6dcd44a45c57f7e86467ab4d1b9c2810d14ec339bee64373cfe</td>
|
|
<td>[68a558192779d54c7ac75dd5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t2efjwra.hhh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:07:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_t2efjwra.hhh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:07:34 +0000 UTC</td>
|
|
<td>2025-08-20 05:07:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:07:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c93a02f29261eb3cd4a6ea20651aa00d111b39dbd8fac6f9bc6bbab25e805335</td>
|
|
<td>[68a2c44535b1d4ea68c6ff9a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_cxplm4ri.gl2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:12:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cxplm4ri.gl2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:12:08 +0000 UTC</td>
|
|
<td>2025-08-18 06:12:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c8ed615889a62d7957c4ea44b0d1d290b9f308c88edabac325526957259d7f14</td>
|
|
<td>[68a472b1b022648922e2358f]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\log4j-1.2.13.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[52169b4a318e3246483f39f62b84b948]</td>
|
|
<td>[8b1b85d04eea979c33109ea42808b7d3f6d355ab]</td>
|
|
<td>[ec69e3071705a77a9e8c88abd39f2f061b7370153dcd3c03586703b6b7fa00524c9f42137feff7cee2ee30bd22114814]</td>
|
|
<td>[3fb663e1507e87680001ae678ed46d58cb4386bad363c3f07ff941a636da8599c4d4c9f9eb8e0128140a5d692dbaeaa31bf863e8c4a406ed9232b3a69090be4b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4j-1.2.13.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>358180</td>
|
|
<td>52169b4a318e3246483f39f62b84b948</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>8b1b85d04eea979c33109ea42808b7d3f6d355ab</td>
|
|
<td>ec69e3071705a77a9e8c88abd39f2f061b7370153dcd3c03586703b6b7fa00524c9f42137feff7cee2ee30bd22114814</td>
|
|
<td>3fb663e1507e87680001ae678ed46d58cb4386bad363c3f07ff941a636da8599c4d4c9f9eb8e0128140a5d692dbaeaa31bf863e8c4a406ed9232b3a69090be4b</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-10 06:43:15 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c8e0699e1ad7ef4335945a3df4a6b09fb48c4d6664c52528ef1b438a3f191dbc</td>
|
|
<td>[68a5239e621d09b2b1ed5e49]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[fdb5557de080a49af4fe2d6f23075dce]</td>
|
|
<td>[593450197694057604548da9fe073096fe4fb5dc]</td>
|
|
<td>[d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5]</td>
|
|
<td>[dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>125952</td>
|
|
<td>fdb5557de080a49af4fe2d6f23075dce</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>593450197694057604548da9fe073096fe4fb5dc</td>
|
|
<td>d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5</td>
|
|
<td>dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c8d41b93bca9f8a77314a18fb5484ae1f408f2ac6257a70a502fc1bb03104ae1</td>
|
|
<td>[68a4e94b8258ccd0ca80c68c, 68a4ec0d73c037b116f16924, 68a4f0bd96d8259b6fb14198, 68a4fcd0011d94a251a4ef3a, 68a4fcd0011d94a251a4ef45, 68a4fcd0011d94a251a4ef47]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\UpgradeOpenVpn.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Users\CA_GS1~1\AppData\Local\Temp\2\{6D2A95DD-7878-4173-A054-2C5C8E3A05BA}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{F27E6C83-3351-4D92-A677-9892A6651C41}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{2D0EBECB-0573-490E-BE9B-5F2DF93F480D}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{D464CC00-C9E1-418A-9BDB-FEE337D77CB0}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{4E1205BB-A26B-4AD2-B6F7-7F2CCF9E40F7}\.be\Capsule MDIP software Setup 11.8.0.328.exe, C:\Windows\Temp\{A95AC24C-5140-442C-925B-0978C16E3504}\.be\Capsule MDIP software Setup 11.8.0.328.exe]</td>
|
|
<td>[2025-08-19T21:14:48Z, 2025-08-19T21:19:32Z, 2025-08-19T21:41:39Z, 2025-08-19T22:11:25Z, 2025-08-19T22:18:26Z, 2025-08-19T22:27:20Z]</td>
|
|
<td>[2a4056367ecab3c800d65cbf14391e32]</td>
|
|
<td>[7d553db7049d990e5eddc5b68e2dfdf9c374bb2b]</td>
|
|
<td>[178e2319fe404f0862bc43f8303d7fb29f02926ea0df12f73dd0f8276447f844b0da8f977d84beb95881781d57b6189f]</td>
|
|
<td>[704fed8e9024340b2344c914452b81d396045de471c4a07445ca8c7e54a8b2c033b7e4c7052729c1118199335c441dde314aa3d057950e219fd0e4ed6c9d28b8]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UpgradeOpenVpn.bat</td>
|
|
<td>C:\ProgramData\Package Cache\C6E0EB411752855EAB2334C14BC998465CC9B1B9\</td>
|
|
<td></td>
|
|
<td>5921</td>
|
|
<td>2a4056367ecab3c800d65cbf14391e32</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>2024-11-12 21:43:14 +0000 UTC</td>
|
|
<td>7d553db7049d990e5eddc5b68e2dfdf9c374bb2b</td>
|
|
<td>178e2319fe404f0862bc43f8303d7fb29f02926ea0df12f73dd0f8276447f844b0da8f977d84beb95881781d57b6189f</td>
|
|
<td>704fed8e9024340b2344c914452b81d396045de471c4a07445ca8c7e54a8b2c033b7e4c7052729c1118199335c441dde314aa3d057950e219fd0e4ed6c9d28b8</td>
|
|
<td>2025-08-19 21:14:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-05 13:26:47 +0000 UTC</td>
|
|
<td>62</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c826e8208f2d2a00b4b3b99d67e4e058607f19a4ed623b7b0d541f3b6d51ab05</td>
|
|
<td>[68a3146b5f0c41860c8c84fe, 68a3146b5f0c41860c8c8531]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\copyreg.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[2e6e1613760385356bd6e3679ca43aef]</td>
|
|
<td>[61aee40c895eb5ae249aec746a1e337d43ec0537]</td>
|
|
<td>[cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e]</td>
|
|
<td>[b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>copyreg.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7544</td>
|
|
<td>2e6e1613760385356bd6e3679ca43aef</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>61aee40c895eb5ae249aec746a1e337d43ec0537</td>
|
|
<td>cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e</td>
|
|
<td>b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c7d8756c30a879fe1f41d094bac39382e5437a03d911dcbcc4b903d3eb2e7373</td>
|
|
<td>[68a48674c4cb2500be692615, 68a48674c4cb2500be69262b]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.BusinessLogic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[d27f531fe42e94037f1d13cbfb5e81ed]</td>
|
|
<td>[0972769cb0b0517846d9181e89115cacd8f530b9]</td>
|
|
<td>[79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86]</td>
|
|
<td>[bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.BusinessLogic.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.BusinessLogic</td>
|
|
<td>39176</td>
|
|
<td>d27f531fe42e94037f1d13cbfb5e81ed</td>
|
|
<td>StrykerIOTAPI.BusinessLogic</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>0972769cb0b0517846d9181e89115cacd8f530b9</td>
|
|
<td>79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86</td>
|
|
<td>bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c7cdeeed98e9230cb209e6a27aa4ee323544b37bef6d60f6a25a2b380d96c500</td>
|
|
<td>[68a5c81947601aee5f76e916, 68a5c9d7599432010e418bcd]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\ltkrn12n.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe]</td>
|
|
<td>[2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z]</td>
|
|
<td>[93edb390937aa43ef7a47a1dd5e210e4]</td>
|
|
<td>[887041d2e285cc18a7b0752df43262962c689f8d]</td>
|
|
<td>[3509b9f8415277dfb439fa20f0ff0669027eb23e0ca546b4ccd1e30a9c96d4824762d24b5cb31c859db4041456e51c6b]</td>
|
|
<td>[244cccac2e0f05f30dc0357a3ad64530bbf69a65e668c715942f592c0e2eda8dae8140ebf2502efc653a064cb93e9351105212531332345a085f6a372eea53bf]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltkrn12n.dll</td>
|
|
<td>E:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>782848</td>
|
|
<td>93edb390937aa43ef7a47a1dd5e210e4</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>12.1.0.020</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-14 13:01:48 +0000 UTC</td>
|
|
<td>2001-05-01 18:25:40 +0000 UTC</td>
|
|
<td>887041d2e285cc18a7b0752df43262962c689f8d</td>
|
|
<td>3509b9f8415277dfb439fa20f0ff0669027eb23e0ca546b4ccd1e30a9c96d4824762d24b5cb31c859db4041456e51c6b</td>
|
|
<td>244cccac2e0f05f30dc0357a3ad64530bbf69a65e668c715942f592c0e2eda8dae8140ebf2502efc653a064cb93e9351105212531332345a085f6a372eea53bf</td>
|
|
<td>2025-07-17 16:15:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-10-12 12:33:16 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c79f55277315bf61dcf751ced6a62eda0a6fc7513fe52797360e6f5977f1707f</td>
|
|
<td>[68a306a5ba5832f49fe9cf4e]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMA2.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[d8eacc58fcaf01c75bb860b492388043]</td>
|
|
<td>[076b4e75fea44dedceded8900e3d8c7c1561e5cd]</td>
|
|
<td>[3c04c1751df27531a5be1ee49eb8fb36dc2ce3e0fd86109df5eae00a937fd608ce16c40e1844424efcaf0079057ea3dc]</td>
|
|
<td>[5a4df1da6242edd1cd2154c8de3ab47a65558c146ef7293551f20a92f3f192f8053fdfea5f6c16ee9974aadb1d345fd4a499bdcc74aa46c874044a2209b3554d]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCHEMA2.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>28160</td>
|
|
<td>d8eacc58fcaf01c75bb860b492388043</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:35 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>076b4e75fea44dedceded8900e3d8c7c1561e5cd</td>
|
|
<td>3c04c1751df27531a5be1ee49eb8fb36dc2ce3e0fd86109df5eae00a937fd608ce16c40e1844424efcaf0079057ea3dc</td>
|
|
<td>5a4df1da6242edd1cd2154c8de3ab47a65558c146ef7293551f20a92f3f192f8053fdfea5f6c16ee9974aadb1d345fd4a499bdcc74aa46c874044a2209b3554d</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2016-12-19 17:09:58 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cdcb9886eec269fe986be220ddc0a58d7cd307bdf3ecc1f48390b918bd56101d</td>
|
|
<td>[68a24655c6a8e4430722eaf8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_ewmsmzj2.prq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:14:55Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ewmsmzj2.prq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:14:55 +0000 UTC</td>
|
|
<td>2025-08-17 21:14:55 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:15:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cd79a7570ed7d959919f8e7ceee95df75e07349692c2bbab9929ab608099ff36</td>
|
|
<td>[68a4c29edcf2a23051e711be]</td>
|
|
<td>[2]</td>
|
|
<td>[lindseye]</td>
|
|
<td>[i-HNOCnoc]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\Interop.Taskschd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Solarwinds Worldwide, LLC]</td>
|
|
<td>[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ScpServerTray.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:21:29Z]</td>
|
|
<td>[fec0d051646249d6e0b962e8af2bf997]</td>
|
|
<td>[d50af831c045c754b457eee80d0b4087d8a91d9a]</td>
|
|
<td>[e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d]</td>
|
|
<td>[35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b]</td>
|
|
<td>[172.18.0.16]</td>
|
|
<td>[172.18.0.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Interop.Taskschd.dll</td>
|
|
<td>C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\</td>
|
|
<td></td>
|
|
<td>61272</td>
|
|
<td>fec0d051646249d6e0b962e8af2bf997</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Solarwinds Worldwide, LLC</td>
|
|
<td>2023-08-07 15:09:26 +0000 UTC</td>
|
|
<td>2023-08-07 15:09:26 +0000 UTC</td>
|
|
<td>d50af831c045c754b457eee80d0b4087d8a91d9a</td>
|
|
<td>e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d</td>
|
|
<td>35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b</td>
|
|
<td>2025-05-20 13:40:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-11-24 14:44:41 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-20 13:41:46.619 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cd34acbad5993e309d24cffa925af6e5cb8e08a0c5b4a401dc8df4d306212be4</td>
|
|
<td>[68a16bd60756fe54a9918f9a, 68a2149cb58debea69d7c744, 68a2bd5ff793a9057f329bff, 68a3663261f8067c48423eb1, 68a40efceddb3a9f1a71a5fc, 68a4b7cd36bc5d38057e235f]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zContext.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[f58a3055af8d49f2bed351e9eeb27d79]</td>
|
|
<td>[a6df905855b434565f04c548ba5f7fbc22452446]</td>
|
|
<td>[e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6]</td>
|
|
<td>[34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zContext.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>53048</td>
|
|
<td>f58a3055af8d49f2bed351e9eeb27d79</td>
|
|
<td>Zoom</td>
|
|
<td>1,0,0,0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>a6df905855b434565f04c548ba5f7fbc22452446</td>
|
|
<td>e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6</td>
|
|
<td>34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:58:23 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cd2b03a835ed9cfdfa700e76fea8101d80de47b79dce14e63cd16afadfafc226</td>
|
|
<td>[68a717f82c01dbda38bdd3d8]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\BootstrapperCore.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2319.906]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe]</td>
|
|
<td>[C:\ProgramData\Package Cache\BBABC3362FBBB5C3B3543B252A5D7E5C9D9E6B36\redist\vsta_setup.exe]</td>
|
|
<td>[2025-08-21T12:58:30Z]</td>
|
|
<td>[7ae2481f6444721ee433edb5f396fb28]</td>
|
|
<td>[cabb4816b2ccc3f0a92e3a91ec6ddfe1951e3419]</td>
|
|
<td>[f1f3d5f2bc8fb59a1943eedb3497ebe8d664348375d8144298564796d42d2908537d53c002c05594481bdb5a648457c5]</td>
|
|
<td>[9c606889b1091babd2469ff53294d03bef3a9fcb55dc414bb730f129be40361c4a1f4d0610fc4ab16ed3479d704a4e46ef9118ebf29957bf6049686effada5c1]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BootstrapperCore.dll</td>
|
|
<td>C:\Users\Juggernaut\AppData\Local\Temp\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}\.ba1\</td>
|
|
<td>Managed Bootstrapper Application (WiX)</td>
|
|
<td>77824</td>
|
|
<td>7ae2481f6444721ee433edb5f396fb28</td>
|
|
<td>Windows Installer XML</td>
|
|
<td>3.7.3517.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2014-11-17 15:38:04 +0000 UTC</td>
|
|
<td>2014-11-17 15:38:04 +0000 UTC</td>
|
|
<td>cabb4816b2ccc3f0a92e3a91ec6ddfe1951e3419</td>
|
|
<td>f1f3d5f2bc8fb59a1943eedb3497ebe8d664348375d8144298564796d42d2908537d53c002c05594481bdb5a648457c5</td>
|
|
<td>9c606889b1091babd2469ff53294d03bef3a9fcb55dc414bb730f129be40361c4a1f4d0610fc4ab16ed3479d704a4e46ef9118ebf29957bf6049686effada5c1</td>
|
|
<td>2025-06-25 18:05:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-24 07:04:14 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-06-24 22:47:06.637 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ccfd4b0b29921797227890e20977974f0fe6926fb9f986a398ed037177b6857b</td>
|
|
<td>[68a375ce012e144044008db2]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\tmpEXO_panxtvgi.v0r.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:49:45Z]</td>
|
|
<td>[689e2c4d14099359d012d5e70e628648]</td>
|
|
<td>[d263ae2c2def641b81fa637242f6d8fc9e91210e]</td>
|
|
<td>[bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30]</td>
|
|
<td>[baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_panxtvgi.v0r.psm1</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\</td>
|
|
<td></td>
|
|
<td>2308296</td>
|
|
<td>689e2c4d14099359d012d5e70e628648</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 18:49:44 +0000 UTC</td>
|
|
<td>2025-08-18 18:49:44 +0000 UTC</td>
|
|
<td>d263ae2c2def641b81fa637242f6d8fc9e91210e</td>
|
|
<td>bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30</td>
|
|
<td>baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be</td>
|
|
<td>2025-08-18 18:49:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cce7f425a62f12d67abc77f70988d9a7d3825fea909f25f1bab56920c1547a13</td>
|
|
<td>[68a523a99ba7c92b34976f98]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViews.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[348f84ac608fd0a3180668c30900baba]</td>
|
|
<td>[0503248ce5fe744f1ee7cfad7988b298938e0be5]</td>
|
|
<td>[bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6]</td>
|
|
<td>[ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerViews.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerViews</td>
|
|
<td>1011712</td>
|
|
<td>348f84ac608fd0a3180668c30900baba</td>
|
|
<td>SystemManagerViews</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>0503248ce5fe744f1ee7cfad7988b298938e0be5</td>
|
|
<td>bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6</td>
|
|
<td>ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ccb32d4642faabe002c701e6be6e3b163a048083828be362348f794b0f9747a5</td>
|
|
<td>[68a5caae25c43d3642b34826, 68a5ccf2ddfdba423e48862c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_Talis1]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Talis\Atlas\temp\InstallSqlExpress.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:16:21Z, 2025-08-20T13:17:20Z]</td>
|
|
<td>[81440bc342bcb6afe5f64e770c1dbc77]</td>
|
|
<td>[6686557cf11cb209763c41f954d1cf9a8a700aa3]</td>
|
|
<td>[3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41]</td>
|
|
<td>[21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallSqlExpress.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>833</td>
|
|
<td>81440bc342bcb6afe5f64e770c1dbc77</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>6686557cf11cb209763c41f954d1cf9a8a700aa3</td>
|
|
<td>3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41</td>
|
|
<td>21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5</td>
|
|
<td>2025-08-20 13:16:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ccaaa857b6cabca57de07fc67d6069f2737c0bb306e8323748e7d0c76258769e</td>
|
|
<td>[68a5c90aab7f84c2d5a0971e]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\InstallMsiDll.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe]</td>
|
|
<td>[2025-08-20T13:09:27Z]</td>
|
|
<td>[7ee2f66086cad162ba1a7691506356da]</td>
|
|
<td>[1da4fbe65d54db4288abf9aaf7fe39e50b93c8d1]</td>
|
|
<td>[262cc27152b25c394be75ce943caef844a6a5f9930000ca8dae2cebbcb774f05c89a6aa9c89c41da911bd12d9e865508]</td>
|
|
<td>[18ff56640dc8e3fcf18f552aa26a4010d76cf9b3caa10567008ec23e62b6024d6d41f23453847e3d07020652058c58abfe01645c296d3acc9c631ebf77218a50]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallMsiDll.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Shared\</td>
|
|
<td>Installer GUI</td>
|
|
<td>1954304</td>
|
|
<td>7ee2f66086cad162ba1a7691506356da</td>
|
|
<td>Installer GUI</td>
|
|
<td>1.0.10.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:09:26 +0000 UTC</td>
|
|
<td>2015-02-09 09:55:40 +0000 UTC</td>
|
|
<td>1da4fbe65d54db4288abf9aaf7fe39e50b93c8d1</td>
|
|
<td>262cc27152b25c394be75ce943caef844a6a5f9930000ca8dae2cebbcb774f05c89a6aa9c89c41da911bd12d9e865508</td>
|
|
<td>18ff56640dc8e3fcf18f552aa26a4010d76cf9b3caa10567008ec23e62b6024d6d41f23453847e3d07020652058c58abfe01645c296d3acc9c631ebf77218a50</td>
|
|
<td>2025-08-20 13:09:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-11 15:46:14 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cc0de569518a5cd1c48e39444315deec0532cd42eb60b5d146e040515dd1c085</td>
|
|
<td>[68a472b1b022648922e235ab]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\vsphere-sdk-6.0-SNAPSHOT.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[63b3f9bc3cccd5b300ca3c3dcfc8db16]</td>
|
|
<td>[7a5b2e852df2953351249e50893cbd3004a77af8]</td>
|
|
<td>[ca2d02757b987c2c9cd3f20b726ec187c9285b22c54f7ea415f70e5893515d48b7bdfa36c853110e4f861e9341d449bd]</td>
|
|
<td>[7430a47394dd399fc18860894ad3f9bd641be00ce8b3014a7142a07feb7f04ab86dcb24c114a91f175c16a100287fdba013730aa5bd5d1bfef569b576f6f4ff3]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vsphere-sdk-6.0-SNAPSHOT.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>7688666</td>
|
|
<td>63b3f9bc3cccd5b300ca3c3dcfc8db16</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:56 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:56 +0000 UTC</td>
|
|
<td>7a5b2e852df2953351249e50893cbd3004a77af8</td>
|
|
<td>ca2d02757b987c2c9cd3f20b726ec187c9285b22c54f7ea415f70e5893515d48b7bdfa36c853110e4f861e9341d449bd</td>
|
|
<td>7430a47394dd399fc18860894ad3f9bd641be00ce8b3014a7142a07feb7f04ab86dcb24c114a91f175c16a100287fdba013730aa5bd5d1bfef569b576f6f4ff3</td>
|
|
<td>2025-03-28 16:04:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:52 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.10</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbe345399a7a40adc97084ceb3b564b8954687f82c1ff70e9ce060535e914c87</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20e]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Get-Sidhistory.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[20ba5446b5e3742b0af6bf5e74c11c45]</td>
|
|
<td>[1e0cd7d9ccc008749c121260de20c255f1dd168b]</td>
|
|
<td>[a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281]</td>
|
|
<td>[5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Get-Sidhistory.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>213</td>
|
|
<td>20ba5446b5e3742b0af6bf5e74c11c45</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-24 18:19:40 +0000 UTC</td>
|
|
<td>2022-06-10 20:28:02 +0000 UTC</td>
|
|
<td>1e0cd7d9ccc008749c121260de20c255f1dd168b</td>
|
|
<td>a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281</td>
|
|
<td>5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbce83feb3a1075e711a778264441ec9227105e1a9573289de7d59af2cf388ff</td>
|
|
<td>[68a5239e621d09b2b1ed5e5c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShortcutbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[314aa989c3340e2e4a88551949eec9f2]</td>
|
|
<td>[31bad1d1e4e96b06cf2f126a4e62be93446004da]</td>
|
|
<td>[f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252]</td>
|
|
<td>[7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShortcutbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>12288</td>
|
|
<td>314aa989c3340e2e4a88551949eec9f2</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>31bad1d1e4e96b06cf2f126a4e62be93446004da</td>
|
|
<td>f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252</td>
|
|
<td>7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbc1e9a027df224d6182596062ef744f07095fa259aef053f60330fdb55f44a1</td>
|
|
<td>[68a3146b5f0c41860c8c84f9, 68a3146b5f0c41860c8c8527]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\enum.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[b3d34b7698ce20e327b55db5543aa834]</td>
|
|
<td>[9ac116d05a984aff49961679e499920ef973f32f]</td>
|
|
<td>[a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066]</td>
|
|
<td>[602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>enum.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>84563</td>
|
|
<td>b3d34b7698ce20e327b55db5543aa834</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9ac116d05a984aff49961679e499920ef973f32f</td>
|
|
<td>a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066</td>
|
|
<td>602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cb91fc48deaa953fa6bc86e50101278ba472aa46d3997cf1d2f862e9d2faafc6</td>
|
|
<td>[68a17efae2809bffe9dd0ee5, 68a2d0803665ae20b1f78f7c, 68a42221091a6202e3d1b16e, 68a573b695791e485505569b, 68a6c64a54dcd30516737152]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\__SCRIPT REF Files\EpicHHEnvREF_SmartUpdate.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z, 2025-08-21T07:00:00Z]</td>
|
|
<td>[2b4fc9419788dc26cf2e48ff48ee8d59]</td>
|
|
<td>[d1cf90955367d76e04a1c2d0fb607bc614829af6]</td>
|
|
<td>[9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85]</td>
|
|
<td>[83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvREF_SmartUpdate.bat</td>
|
|
<td>C:\HomeHealth\__SCRIPT REF Files\</td>
|
|
<td></td>
|
|
<td>114</td>
|
|
<td>2b4fc9419788dc26cf2e48ff48ee8d59</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:44:28 +0000 UTC</td>
|
|
<td>d1cf90955367d76e04a1c2d0fb607bc614829af6</td>
|
|
<td>9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85</td>
|
|
<td>83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276</td>
|
|
<td>2025-08-09 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cad26ec2668965b7f85ebd6a033e660553c0924e270090a3769eb7c0c6571825</td>
|
|
<td>[68a5c81947601aee5f76e913, 68a5c9d7599432010e418bce]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\ltfil12n.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe]</td>
|
|
<td>[2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z]</td>
|
|
<td>[e07f24a80e597ccbb5166def70c4dcba]</td>
|
|
<td>[a86f707a4ad0ce4a6205759dba0e2b1770def80c]</td>
|
|
<td>[02371c3f3160bc320f608e3090ddfdb088f6baefec78040c25e52c69daacc29736b21ad0235ef19e6ea47f9d346b7aba]</td>
|
|
<td>[3037fe0f4e04e83b0d7bcb55ada8e786af88893f7c1868ffad31a58cf70285bb8ec46d44e42048682478bbd3cb75685a6468f6cdc70e788139238fadea625527]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltfil12n.DLL</td>
|
|
<td>E:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>146944</td>
|
|
<td>e07f24a80e597ccbb5166def70c4dcba</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>12.1.0.020</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-14 13:01:37 +0000 UTC</td>
|
|
<td>2001-05-02 14:18:38 +0000 UTC</td>
|
|
<td>a86f707a4ad0ce4a6205759dba0e2b1770def80c</td>
|
|
<td>02371c3f3160bc320f608e3090ddfdb088f6baefec78040c25e52c69daacc29736b21ad0235ef19e6ea47f9d346b7aba</td>
|
|
<td>3037fe0f4e04e83b0d7bcb55ada8e786af88893f7c1868ffad31a58cf70285bb8ec46d44e42048682478bbd3cb75685a6468f6cdc70e788139238fadea625527</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-10-12 12:30:13 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.30</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>caaad5beee085968aa4b7c606e87506f20d0a5fc9f86604c2f71804bea252c94</td>
|
|
<td>[68a4cf29dfc75d42acc2fee7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ca9e5214526a26c1426a88c635b711362bb42e2a12bc6a37bb05b855af9b5d57</td>
|
|
<td>[68a5c8eceb9e7b7716dce202, 68a5ca39b5df6e9c598d9a14, 68a5ca39b5df6e9c598d9a21, 68a5ccf2ddfdba423e488637, 68a5ccf2ddfdba423e488645, 68a5ccf2ddfdba423e488653, 68a5ccf2ddfdba423e488660, 68a5ccf2ddfdba423e48866d, 68a5ccf2ddfdba423e48867a, 68a5ccf2ddfdba423e488687, 68a5ccf2ddfdba423e488694]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\OutFunctions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:23Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[419d17d2343c1cd0219b5546b4fa27a2]</td>
|
|
<td>[de59feb5cc4ceaa0f1bec035647c9fb89348e274]</td>
|
|
<td>[22f8877efd87ac3467ba533663c9b26f4f82ee5729a734d71e2a94cb5dfa71ee7781c624c3d0013c1aa9c536428d8d06]</td>
|
|
<td>[e81a572144d180a72d272ddd1171db17bd99968945542993bffec7969ed9c4720ce9068cb945ad32d7c4b28c3d124a218280e6a42d2ee558158c46389ebcc075]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OutFunctions.ps1</td>
|
|
<td>C:\azagent\A2\_work\_tasks\IISWebAppManagementOnMachineGroup_1b2aec60-dc49-11e6-9b76-63056e018cac\0.241.1\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>3386</td>
|
|
<td>419d17d2343c1cd0219b5546b4fa27a2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-07-08 16:27:53 +0000 UTC</td>
|
|
<td>2024-06-18 17:58:02 +0000 UTC</td>
|
|
<td>de59feb5cc4ceaa0f1bec035647c9fb89348e274</td>
|
|
<td>22f8877efd87ac3467ba533663c9b26f4f82ee5729a734d71e2a94cb5dfa71ee7781c624c3d0013c1aa9c536428d8d06</td>
|
|
<td>e81a572144d180a72d272ddd1171db17bd99968945542993bffec7969ed9c4720ce9068cb945ad32d7c4b28c3d124a218280e6a42d2ee558158c46389ebcc075</td>
|
|
<td>2025-04-16 18:42:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 19:43:02 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-16 18:46:05.968 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d1acae5721d973102e9a1430bbe56065a631fbe6a593d3abdcbd6aad31da26df</td>
|
|
<td>[68a664031c5215248b78c9c0, 68a66656590bb14aa89a1bd7]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-B495E4A3-062F-4A9F-8DF6-D5625677E07B\CitrixReceiverUpdater.exe, C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe, C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-B495E4A3-062F-4A9F-8DF6-D5625677E07B\CitrixReceiverUpdater.exe]</td>
|
|
<td>[2025-08-21T00:07:08Z, 2025-08-21T00:07:09Z]</td>
|
|
<td>[de13e0378bbe3e7dfd33a89369348869]</td>
|
|
<td>[a5a218611db4f765b2cd7d8df8f9e07e0e83c79b]</td>
|
|
<td>[07c47ed04069c396643587c281b9a7bd3614a675ac57d538be798bd25108393ff965baa0c63cef6a7525e5366d2f6e13]</td>
|
|
<td>[cff762a61ff12c74ea86926c1f2be55e5b0bbf2bbba95bcc9179c5b13c439e1c6365bfe1883a5660d3600cf369b6fbbc342acee17e3cfa419ff457c175aed06a]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>de13e0378bbe3e7dfd33a89369348869</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 00:07:08 +0000 UTC</td>
|
|
<td>2025-08-21 00:07:08 +0000 UTC</td>
|
|
<td>a5a218611db4f765b2cd7d8df8f9e07e0e83c79b</td>
|
|
<td>07c47ed04069c396643587c281b9a7bd3614a675ac57d538be798bd25108393ff965baa0c63cef6a7525e5366d2f6e13</td>
|
|
<td>cff762a61ff12c74ea86926c1f2be55e5b0bbf2bbba95bcc9179c5b13c439e1c6365bfe1883a5660d3600cf369b6fbbc342acee17e3cfa419ff457c175aed06a</td>
|
|
<td>2025-08-21 00:10:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d1a2e822a1ea07df47bc922137f71f102d160466cabe022f2deea5317148a526</td>
|
|
<td>[68a3146b5f0c41860c8c8551, 68a3146b5f0c41860c8c8577]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_colorize.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[b7b78adc50cac8e240a21e27725b637a]</td>
|
|
<td>[a53749b2d528d575041644b00e9efe548bcf3000]</td>
|
|
<td>[43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0]</td>
|
|
<td>[0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_colorize.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>2722</td>
|
|
<td>b7b78adc50cac8e240a21e27725b637a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>a53749b2d528d575041644b00e9efe548bcf3000</td>
|
|
<td>43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0</td>
|
|
<td>0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d12bcbcfaed5f8dd7b8132ab68424aa19f72d76766fe3ae6db7b001a14c1daae</td>
|
|
<td>[68a472b1b022648922e23578]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\FluidFsWebClient-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:40Z]</td>
|
|
<td>[ba1d224efe62ee4724541e4d1a64b00e]</td>
|
|
<td>[8e7b7215b40daffc0cf08f861c7dc8ed4633d86e]</td>
|
|
<td>[33fd790b7b9f9bb5c534da48019ab9f11d4e0ec829104b31511d4e14103cb5488762bd6e69bf9496df7c84540a193c6b]</td>
|
|
<td>[389f7f0c7c5a7bc0c44874b317fc4386bff95adca78630b88f3e8677a26216b93d860bce2404c663a8804ce5462b246c087b4c45065b6027356920b52b186eb1]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FluidFsWebClient-20.1.2.14.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>13999</td>
|
|
<td>ba1d224efe62ee4724541e4d1a64b00e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>8e7b7215b40daffc0cf08f861c7dc8ed4633d86e</td>
|
|
<td>33fd790b7b9f9bb5c534da48019ab9f11d4e0ec829104b31511d4e14103cb5488762bd6e69bf9496df7c84540a193c6b</td>
|
|
<td>389f7f0c7c5a7bc0c44874b317fc4386bff95adca78630b88f3e8677a26216b93d860bce2404c663a8804ce5462b246c087b4c45065b6027356920b52b186eb1</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d095c35b7eefd84a40162c8fd75586439afdf8d43f8194e076806d6ba1d80ea8</td>
|
|
<td>[68a48674c4cb2500be692640]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Business.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[1282e0d899b8c6c77293157e628f8fe9]</td>
|
|
<td>[b1bc26f40ef3caf7a21eb88d27f9a8041234c646]</td>
|
|
<td>[17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4]</td>
|
|
<td>[fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Business.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Business</td>
|
|
<td>15360</td>
|
|
<td>1282e0d899b8c6c77293157e628f8fe9</td>
|
|
<td>Stryker.iBedServer.Clinical.Business</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:30 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:30 +0000 UTC</td>
|
|
<td>b1bc26f40ef3caf7a21eb88d27f9a8041234c646</td>
|
|
<td>17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4</td>
|
|
<td>fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d070b1af61401b6ac25e9d3acc825add99084a26832db9f5f5cb23017c2148a3</td>
|
|
<td>[68a38065cabe22b27c6c0f7d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4sxq3vi5.4r5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:34:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4sxq3vi5.4r5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:34:53 +0000 UTC</td>
|
|
<td>2025-08-18 19:34:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:35:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d02dde50a8ac8cff74d90ba4819f52d21b089f7add0407bfe8e41f2390d4be90</td>
|
|
<td>[68a523949cec397f02de9f48]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[a1566f1d2da1f9413f76dc2b914f4311]</td>
|
|
<td>[6dcf1ac94eb4a724f25d13833404c64f4a0f1f16]</td>
|
|
<td>[fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307]</td>
|
|
<td>[f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BaseGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BaseGUI</td>
|
|
<td>62464</td>
|
|
<td>a1566f1d2da1f9413f76dc2b914f4311</td>
|
|
<td>BaseGUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>6dcf1ac94eb4a724f25d13833404c64f4a0f1f16</td>
|
|
<td>fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307</td>
|
|
<td>f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cfc7ff5198de9882b23541e72a7e55009b732822186d4e0fbe5d4de605ac2fa9</td>
|
|
<td>[68a606ccc8c5aba8e6424dc3, 68a62c4fe0cb7d1d0b6ef98f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897, v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T17:27:31Z, 2025-08-20T20:05:48Z]</td>
|
|
<td>[72c43b468c92cb9fc0aff73b9a553afc]</td>
|
|
<td>[da0df395838297b918fa34920aed9a840c8b2c4b]</td>
|
|
<td>[1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5]</td>
|
|
<td>[2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HL7TrackerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\HL7TrackerService\</td>
|
|
<td>FormFast.FastPrint.HL7TrackerService</td>
|
|
<td>70656</td>
|
|
<td>72c43b468c92cb9fc0aff73b9a553afc</td>
|
|
<td>FormFast.FastPrint.HL7TrackerService</td>
|
|
<td>23.6.0.20130</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:04 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:04 +0000 UTC</td>
|
|
<td>da0df395838297b918fa34920aed9a840c8b2c4b</td>
|
|
<td>1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5</td>
|
|
<td>2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee</td>
|
|
<td>2025-07-01 15:13:40 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cfc2a838569a48d16a15269bb701de87b81b3d2bc303bb7c4c3724cc3bba0c50</td>
|
|
<td>[68a523949cec397f02de9f5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ICSharpCode.SharpZipLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[0b3b4e8d1de31f844e466d61cf7937b5]</td>
|
|
<td>[d699e5b46a14ea4d7c052e4193f85f0a4f2b29eb]</td>
|
|
<td>[5d6bf21d1dfed9fa73e93f700e58e05712487b133134331e88dec07ff81dbfe709c5c761113aa7ef7120df9279f9ac9d]</td>
|
|
<td>[a5e7d1f8b7d9242f213046cfe19b0e01d41fcb285072bd079a054293b6778ca78a76b3b2ec4aba8af396a7fc46d6eeb62c2df652187b77ef7f7900c130d26e12]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ICSharpCode.SharpZipLib.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SharpZipLib for .NET Framework 2.0</td>
|
|
<td>192512</td>
|
|
<td>0b3b4e8d1de31f844e466d61cf7937b5</td>
|
|
<td>#ZipLibrary</td>
|
|
<td>0.85.5</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>d699e5b46a14ea4d7c052e4193f85f0a4f2b29eb</td>
|
|
<td>5d6bf21d1dfed9fa73e93f700e58e05712487b133134331e88dec07ff81dbfe709c5c761113aa7ef7120df9279f9ac9d</td>
|
|
<td>a5e7d1f8b7d9242f213046cfe19b0e01d41fcb285072bd079a054293b6778ca78a76b3b2ec4aba8af396a7fc46d6eeb62c2df652187b77ef7f7900c130d26e12</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-14 02:01:00 +0000 UTC</td>
|
|
<td>55</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-19 07:04:27.695 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cf53580ed462204e6798cf3e5b7b95b46bfd77b6bbf98a5de5659f9b08b49f86</td>
|
|
<td>[68a31e1752cf7ae3b21d642b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCGChaSdb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Affymetrix\ChASDx\DBScripts\backup-db-dx.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:31:00Z]</td>
|
|
<td>[ba9bc91d6cf75474827bdbe5cb54143a]</td>
|
|
<td>[7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec]</td>
|
|
<td>[4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846]</td>
|
|
<td>[34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>backup-db-dx.bat</td>
|
|
<td>C:\Program Files\Affymetrix\ChASDx\DBScripts\</td>
|
|
<td></td>
|
|
<td>8176</td>
|
|
<td>ba9bc91d6cf75474827bdbe5cb54143a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-16 21:08:16 +0000 UTC</td>
|
|
<td>2024-04-16 21:08:16 +0000 UTC</td>
|
|
<td>7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec</td>
|
|
<td>4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846</td>
|
|
<td>34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543</td>
|
|
<td>2025-08-11 12:31:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ceb41d3db82f15d6adeca195e94fab52d8dba69de261c443f0fd070b85492df3</td>
|
|
<td>[68a34b98a6132bf659cce5a8, 68a34df0b71eea1289980a0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T15:47:07Z, 2025-08-18T15:58:02Z]</td>
|
|
<td>[51ed6c6f3a876991868784d8285350c0]</td>
|
|
<td>[89d12eb4b9d23a50803daba4fe898656d76a4d42]</td>
|
|
<td>[7855a64a62b5a92bce06cf8fb0a098544fab6374ce02fe95eb208f32faacea87d4f3db6582708e72a1789794c5728fa6]</td>
|
|
<td>[b380eb3f0ef7eef16aeacd4b1c50af3f94ee7d538559ea8e1c537684c21fb91309a4e972c7fe7f02eddb5388b7371996daa05fd31356bc0491eb183856b539df]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AIUniWksNET.exe</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\</td>
|
|
<td>Access It!</td>
|
|
<td>509952</td>
|
|
<td>51ed6c6f3a876991868784d8285350c0</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>89d12eb4b9d23a50803daba4fe898656d76a4d42</td>
|
|
<td>7855a64a62b5a92bce06cf8fb0a098544fab6374ce02fe95eb208f32faacea87d4f3db6582708e72a1789794c5728fa6</td>
|
|
<td>b380eb3f0ef7eef16aeacd4b1c50af3f94ee7d538559ea8e1c537684c21fb91309a4e972c7fe7f02eddb5388b7371996daa05fd31356bc0491eb183856b539df</td>
|
|
<td>2025-06-09 21:58:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-18 23:18:57 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce84c2abd2888d88b9eed0496c93a5a2ba355c1d7eca42db9bc19048c05b7261</td>
|
|
<td>[68a165183f1f36f01a2f3ff3, 68a2b69c8b983fbe0c82338e, 68a40846a972cb7f3cce6ebc, 68a5578d6ea23be9f4b23b72, 68a6a93bfd31eba40e58e7c9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vroggerb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\lb\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z]</td>
|
|
<td>[307a281df67046994ab424072bef8918]</td>
|
|
<td>[ab7e9aeb72c04a2b35eb308f42b3f6fed9012698]</td>
|
|
<td>[e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233]</td>
|
|
<td>[a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\lb\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>307a281df67046994ab424072bef8918</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>ab7e9aeb72c04a2b35eb308f42b3f6fed9012698</td>
|
|
<td>e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233</td>
|
|
<td>a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce6a9577d1e06139cd06bc9a39a07c301700792b3afac3878301dace79349d7c</td>
|
|
<td>[68a194caf9b0b5c55ccb01c0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[nt-compass5]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uic3pfdb.jpy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:37:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_uic3pfdb.jpy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:37:27 +0000 UTC</td>
|
|
<td>2025-08-17 08:37:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:37:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce5a107dad43a4101eeb3fe84ff6d173a6d55f34f0bff725b536366f10e99410</td>
|
|
<td>[68a31c5575f8857a10efc135, 68a33178be8bbcffc7c0e55c]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\workday\lib\itextsharp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:28Z, 2025-08-18T13:51:06Z]</td>
|
|
<td>[b31f086a89de327192a017df159084e6]</td>
|
|
<td>[7cefee1d2d80bc40172b7c9f677d6ccd874c1077]</td>
|
|
<td>[8b51c36269ba0543d2b4ee1aa3bc9341c43fa6d87b8ae5093d86178e2b642f7890283cfc637245e45f9beffe181ae3e3]</td>
|
|
<td>[6fb1408dbcc0034cd8580d9a8192bc88e7a510ff42ce2b89eb270891f04d7afc4ae417631f3a5f4bf2aa6b0e165043b8e25c79092414844c56a7726f9c8650bd]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>itextsharp.dll</td>
|
|
<td>D:\scripts\workday\lib\</td>
|
|
<td>iTextSharp</td>
|
|
<td>2592768</td>
|
|
<td>b31f086a89de327192a017df159084e6</td>
|
|
<td>iTextSharp</td>
|
|
<td>5.5.13.3</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:42:03 +0000 UTC</td>
|
|
<td>2022-02-24 17:50:06 +0000 UTC</td>
|
|
<td>7cefee1d2d80bc40172b7c9f677d6ccd874c1077</td>
|
|
<td>8b51c36269ba0543d2b4ee1aa3bc9341c43fa6d87b8ae5093d86178e2b642f7890283cfc637245e45f9beffe181ae3e3</td>
|
|
<td>6fb1408dbcc0034cd8580d9a8192bc88e7a510ff42ce2b89eb270891f04d7afc4ae417631f3a5f4bf2aa6b0e165043b8e25c79092414844c56a7726f9c8650bd</td>
|
|
<td>2025-07-30 13:02:09 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 23:01:27 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-30 12:32:47.889 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce1e0333b5608aa3bee2dba745c23ac32adc20f7928d7509aeaf494a5f53a69b</td>
|
|
<td>[68a48674c4cb2500be692643, 68a48674c4cb2500be692651]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Swashbuckle.AspNetCore.Swagger.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.Swagger.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:52Z, 2025-08-19T14:08:10Z]</td>
|
|
<td>[f3f7dcc7b2d5d547ac79d355d4d61855]</td>
|
|
<td>[38279903274231ca76033743cae7df32e5768260]</td>
|
|
<td>[03aefd5a330eab0b8adf00517d2dc1106434c49c7df7011ae59e65075211853418dd27af3b92fc434af78bfe9166c9bc]</td>
|
|
<td>[ea6d67039ad08478bac39278c10acf04390c74ea13742929632c061ecebc7cd3e8aae4bfcf74231f3d00050f7d3fe07009d6879e7d68e30682e02dd9ce5de0d9]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>15360</td>
|
|
<td>f3f7dcc7b2d5d547ac79d355d4d61855</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-01-11 11:48:20 +0000 UTC</td>
|
|
<td>2023-01-11 11:48:20 +0000 UTC</td>
|
|
<td>38279903274231ca76033743cae7df32e5768260</td>
|
|
<td>03aefd5a330eab0b8adf00517d2dc1106434c49c7df7011ae59e65075211853418dd27af3b92fc434af78bfe9166c9bc</td>
|
|
<td>ea6d67039ad08478bac39278c10acf04390c74ea13742929632c061ecebc7cd3e8aae4bfcf74231f3d00050f7d3fe07009d6879e7d68e30682e02dd9ce5de0d9</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-05-15 22:39:03 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-15 14:11:01.183 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cdf46074d14821e21128b09a9ee98fb39f61a843bcc71e0415e36bdba7fb2bf3</td>
|
|
<td>[68a25c735f19cff323c8f40b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zqbn2i55.u22.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:49:18Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zqbn2i55.u22.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:49:18 +0000 UTC</td>
|
|
<td>2025-08-17 22:49:18 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:49:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cdd309eaf023ea43c578ad53d4ca6881ab204851ea007d0e85d7a8df209da2be</td>
|
|
<td>[68a472a799ad3734d804e2e1]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-extension-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[2afe6d5160f1d0b2069319009aa5d688]</td>
|
|
<td>[e947026552361a3f6d100d92cde1ea1af8e231e4]</td>
|
|
<td>[1c233725261008833b29613787bab06c0de096df9eaa2983f0a79619ec92df93bf544839d7cbfbdd3386aeb8bb5b4b93]</td>
|
|
<td>[2731207029e96ab33bc80679556ac40baa9fa9b2067ab339253dbb6db1a788526bf60fde0e0223ff9de107488c229f864ce6a847c84690b278dc623bc225c970]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-extension-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>72081</td>
|
|
<td>2afe6d5160f1d0b2069319009aa5d688</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>e947026552361a3f6d100d92cde1ea1af8e231e4</td>
|
|
<td>1c233725261008833b29613787bab06c0de096df9eaa2983f0a79619ec92df93bf544839d7cbfbdd3386aeb8bb5b4b93</td>
|
|
<td>2731207029e96ab33bc80679556ac40baa9fa9b2067ab339253dbb6db1a788526bf60fde0e0223ff9de107488c229f864ce6a847c84690b278dc623bc225c970</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-10-11 05:23:29 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6</td>
|
|
<td>[68a5e788692da313f892a11f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe]</td>
|
|
<td>[2025-08-20T15:09:52Z]</td>
|
|
<td>[b7948c5b27f648de74db6918b1ecd775]</td>
|
|
<td>[6f077c46d82ba1b5b44d943eb167e0e99f92464f]</td>
|
|
<td>[289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5]</td>
|
|
<td>[8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe</td>
|
|
<td>C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>6610128</td>
|
|
<td>b7948c5b27f648de74db6918b1ecd775</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:07 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:07 +0000 UTC</td>
|
|
<td>6f077c46d82ba1b5b44d943eb167e0e99f92464f</td>
|
|
<td>289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5</td>
|
|
<td>8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b</td>
|
|
<td>2025-07-23 17:47:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6437530f4cba4030aec0cfaf564dc2f75ffee366a72651fea49297f3e4b4c9b</td>
|
|
<td>[68a31c8cd2481b6854d4f544]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_htoxxven.jj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:28:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_htoxxven.jj0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:28:57 +0000 UTC</td>
|
|
<td>2025-08-18 12:28:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:29:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d60b88c5d1932de8d98edd5a3ae2d5d5647793de3eb6157015807ee523cd2bee</td>
|
|
<td>[68a472a799ad3734d804e2f0]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\bcprov-jdk14-138.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:37Z]</td>
|
|
<td>[2cb031d0966bfebbdb7c60f799b24dc9]</td>
|
|
<td>[de366c3243a586eb3c0e2bcde1ed9bb1bfb985ff]</td>
|
|
<td>[8f73129646efcac79fff4ea664ed95b9fcc08ccadb9cd5fe0250517cca6dbe5ef3165997e3be3d5c4131db4537155fb9]</td>
|
|
<td>[2add1b0d82d79aa65051b1a273317fe43e5f6649fa41d4d32925cae1c8d919c31d7932f1ad96592d32b72382d1c569d7a7c09b16b034371d8ba01d3cd1feedd6]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bcprov-jdk14-138.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>1551468</td>
|
|
<td>2cb031d0966bfebbdb7c60f799b24dc9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>de366c3243a586eb3c0e2bcde1ed9bb1bfb985ff</td>
|
|
<td>8f73129646efcac79fff4ea664ed95b9fcc08ccadb9cd5fe0250517cca6dbe5ef3165997e3be3d5c4131db4537155fb9</td>
|
|
<td>2add1b0d82d79aa65051b1a273317fe43e5f6649fa41d4d32925cae1c8d919c31d7932f1ad96592d32b72382d1c569d7a7c09b16b034371d8ba01d3cd1feedd6</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-03 01:03:21 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d54451027064bc1d6df9f1c3ddee9ad674d26c622b11d3608f5afeb8bbfabf70</td>
|
|
<td>[68a523949cec397f02de9f47]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[b2a5050b7d0bc08167b05bfe29af445d]</td>
|
|
<td>[abaccb61e12a56d1efad87526af3a9e07a3fd55b]</td>
|
|
<td>[77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7]</td>
|
|
<td>[36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BaseData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BaseData</td>
|
|
<td>13824</td>
|
|
<td>b2a5050b7d0bc08167b05bfe29af445d</td>
|
|
<td>BaseData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>abaccb61e12a56d1efad87526af3a9e07a3fd55b</td>
|
|
<td>77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7</td>
|
|
<td>36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d4b66ff4d0d6b949b0514f402923fdb6ef388eb2b45f6c3414e0eb5c309cc390</td>
|
|
<td>[68a306a5ba5832f49fe9cf3c]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\FRMENGD.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[2d70500aa44310faec56619fb4c9f115]</td>
|
|
<td>[fa913d9a1b4ddecf7726f8bbce0f2439ba3d5abd]</td>
|
|
<td>[60084e85d7ab4d88371756bb17cb935670d38add0d32111ffdef08df325c560eadb5f8a587678ac5fcfc9930fe19479c]</td>
|
|
<td>[8bde69574d38446abf5e2dc14d86322254de2e084d4f387591b567db8ef8023a68957d1114a99b599b191ea0d7bc632eb72b25d3d5270255b2e09da49c34862f]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FRMENGD.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Form Engine DLL - Delphi</td>
|
|
<td>49152</td>
|
|
<td>2d70500aa44310faec56619fb4c9f115</td>
|
|
<td></td>
|
|
<td>1.17.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:15 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>fa913d9a1b4ddecf7726f8bbce0f2439ba3d5abd</td>
|
|
<td>60084e85d7ab4d88371756bb17cb935670d38add0d32111ffdef08df325c560eadb5f8a587678ac5fcfc9930fe19479c</td>
|
|
<td>8bde69574d38446abf5e2dc14d86322254de2e084d4f387591b567db8ef8023a68957d1114a99b599b191ea0d7bc632eb72b25d3d5270255b2e09da49c34862f</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:10:22 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d45a86e8eefb45e6d3246ea6244f969b8b01b9308364dec0aa47ef9f138c1891</td>
|
|
<td>[68a5e018c5b265f07bb9e53a]</td>
|
|
<td>[2]</td>
|
|
<td>[ghermanc]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\tmpEXO_rudypo3c.3fk.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2295.887]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T14:47:45Z]</td>
|
|
<td>[cf3be61b7b7864bd18276f2a15d1929e]</td>
|
|
<td>[5d5fdacd8a04903f4d950f608f12da17f71b1ee8]</td>
|
|
<td>[31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95]</td>
|
|
<td>[bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_rudypo3c.3fk.psm1</td>
|
|
<td>C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\</td>
|
|
<td></td>
|
|
<td>2308419</td>
|
|
<td>cf3be61b7b7864bd18276f2a15d1929e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 14:47:44 +0000 UTC</td>
|
|
<td>2025-08-20 14:47:44 +0000 UTC</td>
|
|
<td>5d5fdacd8a04903f4d950f608f12da17f71b1ee8</td>
|
|
<td>31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95</td>
|
|
<td>bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90</td>
|
|
<td>2025-08-20 14:47:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d43a2099c8fd9976bc0e46f7249032ac3e3856f5ba5bc427e68b2d4e7e186585</td>
|
|
<td>[68a4ccc785b914a60d739e48, 68a4ce1fc826337212f53be2, 68a4ce1fc826337212f53be8, 68a4d07753a851daf11e6932, 68a4d07753a851daf11e6945, 68a4d07753a851daf11e6956, 68a4d2d1ff2b441b8442812a, 68a4d2d1ff2b441b8442813d, 68a4d2d1ff2b441b8442814e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\Registry.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[a203fffcd1d985aadfef505588b0a4cb]</td>
|
|
<td>[76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b]</td>
|
|
<td>[227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c]</td>
|
|
<td>[0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Registry.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\</td>
|
|
<td></td>
|
|
<td>158208</td>
|
|
<td>a203fffcd1d985aadfef505588b0a4cb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:20 +0000 UTC</td>
|
|
<td>76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b</td>
|
|
<td>227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c</td>
|
|
<td>0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d40f30dca6093992b1c335a7d540862b1cf841e379d547a9ac8cafcbceed8328</td>
|
|
<td>[68a7159f4aa14456bb5cd160]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[u-hAADConnect]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_df2da3df-b1a0-4d36-8e49-5bedaf2442ba_Untitled2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-21T12:42:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.63]</td>
|
|
<td>[172.25.19.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_df2da3df-b1a0-4d36-8e49-5bedaf2442ba_Untitled2.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 12:27:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3f591e5750c86bedd1f9332364185b803e59927f06d2190aa78ec6e4411e888</td>
|
|
<td>[68a34b98a6132bf659cce5b1, 68a34df0b71eea1289980a16]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.RadDiagram.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:13Z, 2025-08-18T15:58:05Z]</td>
|
|
<td>[e91b9a358b526bbfe757d860acd190ed]</td>
|
|
<td>[76e2a1a5c8ec159281b188c58150c44f3f972dff]</td>
|
|
<td>[f3358dd1fb197c60711099848c769cf770be4ff36a28bd35f8bc7a6c3c612a8202ce8444e3d952f179dd8afe75ec37f3]</td>
|
|
<td>[1013617a066ffc14f629a7d36a22d1f2b6ac1f649fafe46ff8d700e5f29116a9a0687ad4d9970929271512894ba276d19bfeb88c4b55f47015f838e30ac11b0d]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.RadDiagram.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.RadDiagram</td>
|
|
<td>1788928</td>
|
|
<td>e91b9a358b526bbfe757d860acd190ed</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:00 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:00 +0000 UTC</td>
|
|
<td>76e2a1a5c8ec159281b188c58150c44f3f972dff</td>
|
|
<td>f3358dd1fb197c60711099848c769cf770be4ff36a28bd35f8bc7a6c3c612a8202ce8444e3d952f179dd8afe75ec37f3</td>
|
|
<td>1013617a066ffc14f629a7d36a22d1f2b6ac1f649fafe46ff8d700e5f29116a9a0687ad4d9970929271512894ba276d19bfeb88c4b55f47015f838e30ac11b0d</td>
|
|
<td>2025-06-09 21:58:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-23 05:15:44 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3d7a66293ebab3af9baba4a16e865aedbb74adae7d5d4cf6ae2dda125ae0e7f</td>
|
|
<td>[68a246235d01fff0e1ca28f1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_axjq3wng.oka.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:10:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_axjq3wng.oka.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:10:43 +0000 UTC</td>
|
|
<td>2025-08-17 21:10:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:14:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3c63e150036f10e73e8cb6478091077532ea4eef2720b551a7be14e35ae9c96</td>
|
|
<td>[68a48674c4cb2500be69260b, 68a48674c4cb2500be692621]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.AspNetCore.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[e5a12ea408c1bb924baba6710f8a210a]</td>
|
|
<td>[952925b6de0a96d202f1f965ab347745228e2973]</td>
|
|
<td>[1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94]</td>
|
|
<td>[bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.AspNetCore.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>27896</td>
|
|
<td>e5a12ea408c1bb924baba6710f8a210a</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>5.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-02-16 03:02:56 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>952925b6de0a96d202f1f965ab347745228e2973</td>
|
|
<td>1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94</td>
|
|
<td>bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3618219fd8422d3844101b0d57fa596aee7e01dfa8cb6e7dc95eb9c8cd4818f</td>
|
|
<td>[68a62a808890319de023d467]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T20:05:16Z]</td>
|
|
<td>[232c2871a4ec6371d7629acb78e34fe5]</td>
|
|
<td>[1feca74aa50c755fa4c7f8d79fa6fa1557a119f0]</td>
|
|
<td>[2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797]</td>
|
|
<td>[6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FFSchedulerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\Common\</td>
|
|
<td>FFSchedulerService</td>
|
|
<td>51200</td>
|
|
<td>232c2871a4ec6371d7629acb78e34fe5</td>
|
|
<td>FFSchedulerService</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:16 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:16 +0000 UTC</td>
|
|
<td>1feca74aa50c755fa4c7f8d79fa6fa1557a119f0</td>
|
|
<td>2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797</td>
|
|
<td>6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2</td>
|
|
<td>2025-08-20 20:05:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3445778ced79263ad697bbbeef21f6a13f06a58f291cec1a239efd0ef8bcbff</td>
|
|
<td>[68a4ccc785b914a60d739e57, 68a4d07753a851daf11e693f, 68a4d2d1ff2b441b84428137]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\Glob.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z]</td>
|
|
<td>[473ab010839c2be697c44e2949f9e203]</td>
|
|
<td>[00022b4d9500e922d2e442a721ba5ecde46ffa26]</td>
|
|
<td>[fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d]</td>
|
|
<td>[e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Glob.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>473ab010839c2be697c44e2949f9e203</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:31 +0000 UTC</td>
|
|
<td>00022b4d9500e922d2e442a721ba5ecde46ffa26</td>
|
|
<td>fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d</td>
|
|
<td>e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d326cab93b94da954e3255e3ae9798ccbb29cafdd6a42ec86f49db136837a447</td>
|
|
<td>[68a2cfaafd36357b5aad62ea]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\tmpEXO_vlwbbir4.r3y.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T07:00:50Z]</td>
|
|
<td>[8e1f2d25559f493185469321f6bbdb4c]</td>
|
|
<td>[d46dfdcb82328fa63f83d551ae51ef321adbbce9]</td>
|
|
<td>[3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759]</td>
|
|
<td>[d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_vlwbbir4.r3y.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>8e1f2d25559f493185469321f6bbdb4c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 07:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 07:00:48 +0000 UTC</td>
|
|
<td>d46dfdcb82328fa63f83d551ae51ef321adbbce9</td>
|
|
<td>3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759</td>
|
|
<td>d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d</td>
|
|
<td>2025-08-18 07:00:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d2a581d4a6d27c24440d4a37a52ded76d4f22cdb5d200ed7939e4f1cf9ef63d9</td>
|
|
<td>[68a2c16aad07b1f3cadf8bd3]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_yck4oyto.shs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-18T06:00:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yck4oyto.shs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-18 06:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:00:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d21817fe72ac59de692437e50c43dd1bae22fd9bfd9d5fe6f002ecc5001133aa</td>
|
|
<td>[68a4ccd13efa8341e1766c85]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db952a6299fb8c832b4006433c766c58a449e5b3da78577807051ea80e74724c</td>
|
|
<td>[68a4cc4fe7cc38673861dc6c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\software\WindowsDefenderATPLocalOnboardingScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T19:11:05Z]</td>
|
|
<td>[5cbcac73eacda04bf93734eac54ec250]</td>
|
|
<td>[b6a7d80a56fd86c90b2b84c0bea58308a83abad3]</td>
|
|
<td>[1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc]</td>
|
|
<td>[84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WindowsDefenderATPLocalOnboardingScript.cmd</td>
|
|
<td>C:\software\</td>
|
|
<td></td>
|
|
<td>17420</td>
|
|
<td>5cbcac73eacda04bf93734eac54ec250</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-15 21:00:30 +0000 UTC</td>
|
|
<td>2025-08-19 18:11:40 +0000 UTC</td>
|
|
<td>b6a7d80a56fd86c90b2b84c0bea58308a83abad3</td>
|
|
<td>1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc</td>
|
|
<td>84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4</td>
|
|
<td>2025-08-19 19:11:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db8489e9e278ffa12f9e253414e358380bddac21d2c3b574d6d63463fb13a767</td>
|
|
<td>[68a71d98771132224a617f81]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[ca261867dd7ae9bb2972af34c672134f]</td>
|
|
<td>[d3eb5f43ef58cbde6a08d444445b7b7d1ddd36f8]</td>
|
|
<td>[596da61248647797b1bbd6e2b9e7f04cd955deca0c68e16008c551f917bc009727f641de12a34e8400c5f3510a3d0714]</td>
|
|
<td>[256f5fda816febb5e14e752741ad8b4aeb2fba873ee08dc3879752cadeaafb9f8f3ec9991a2965632987a28ca6db8cd9ab23c736f7e6516cd47f0773eaafa908]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.dll</td>
|
|
<td>441856</td>
|
|
<td>ca261867dd7ae9bb2972af34c672134f</td>
|
|
<td>Mobile library assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:02:00 +0000 UTC</td>
|
|
<td>2020-05-11 15:02:00 +0000 UTC</td>
|
|
<td>d3eb5f43ef58cbde6a08d444445b7b7d1ddd36f8</td>
|
|
<td>596da61248647797b1bbd6e2b9e7f04cd955deca0c68e16008c551f917bc009727f641de12a34e8400c5f3510a3d0714</td>
|
|
<td>256f5fda816febb5e14e752741ad8b4aeb2fba873ee08dc3879752cadeaafb9f8f3ec9991a2965632987a28ca6db8cd9ab23c736f7e6516cd47f0773eaafa908</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-04-25 05:43:38 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db47e797535a71d7971867b3e33ada1549410843ca9d2a361bfe802c5ba86eeb</td>
|
|
<td>[68a523949cec397f02de9f55]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticUnitTests.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[7990057f38e4716679765f0a52c270d1]</td>
|
|
<td>[48fb434df935c9ab7759f840f7e7924663f6b621]</td>
|
|
<td>[f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3]</td>
|
|
<td>[cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticUnitTests.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>DiagnosticUnitTests</td>
|
|
<td>25088</td>
|
|
<td>7990057f38e4716679765f0a52c270d1</td>
|
|
<td>DiagnosticUnitTests</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>48fb434df935c9ab7759f840f7e7924663f6b621</td>
|
|
<td>f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3</td>
|
|
<td>cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db14786e73bc0ee8455dca51b61a6ccd8871c06886334a30c9a83d3b5716635e</td>
|
|
<td>[68a48674c4cb2500be69263d, 68a48674c4cb2500be69264f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Sinks.Debug.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Sinks.Debug.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[aaf27757b63c604c4545e853ad3b8d54]</td>
|
|
<td>[a35640ddc42571b881e15c9735d09b57a1698734]</td>
|
|
<td>[6b0aeeb1ef1333684ff97d7b00dc12ccd55827ab743ba7629420f6895d6112d7ade7906ff4c82ddf3a143c37c96ffe4b]</td>
|
|
<td>[d09de65e537792c9bcbfdc9d3d2857c811821ca26625d9da207e3462d49122f86446727892b7191377dfd66957d013a2a19586ed90d264f1a740c56303a4e2e0]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Debug.dll</td>
|
|
<td>C:\ProgramData\Laurel Bridge Software\Compass\www\</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>7168</td>
|
|
<td>aaf27757b63c604c4545e853ad3b8d54</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>2.0.0-master-68cc513</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>2024-08-30 13:04:08 +0000 UTC</td>
|
|
<td>a35640ddc42571b881e15c9735d09b57a1698734</td>
|
|
<td>6b0aeeb1ef1333684ff97d7b00dc12ccd55827ab743ba7629420f6895d6112d7ade7906ff4c82ddf3a143c37c96ffe4b</td>
|
|
<td>d09de65e537792c9bcbfdc9d3d2857c811821ca26625d9da207e3462d49122f86446727892b7191377dfd66957d013a2a19586ed90d264f1a740c56303a4e2e0</td>
|
|
<td>2025-04-29 13:21:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 15:57:31 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-29 01:04:12.861 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da692790deb2efd860d435719a2efc139b3cc1dd0d01b5b764d693e57a326554</td>
|
|
<td>[68a5c8eceb9e7b7716dce207]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:58Z]</td>
|
|
<td>[fcbd65813fcd1136ccc166072f2645f2]</td>
|
|
<td>[750592861995231496d153cd8968f6d0ec9d4b52]</td>
|
|
<td>[79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0]</td>
|
|
<td>[585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>379</td>
|
|
<td>fcbd65813fcd1136ccc166072f2645f2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:58 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:58 +0000 UTC</td>
|
|
<td>750592861995231496d153cd8968f6d0ec9d4b52</td>
|
|
<td>79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0</td>
|
|
<td>585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da41728504a6b8736b7af7e25b17c6b48777776cbbc6ff3872b28fb5d84d9fd1</td>
|
|
<td>[68a5c233a5c8de03b7ff4fb4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.879]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:40:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9f7d9e7bb23fea463e56b71f502481381b3814bd7cb29a8f6e9e8635902f75b</td>
|
|
<td>[68a55e78808b9b08c1edd7d3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mctygn31.xjd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:34:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mctygn31.xjd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:34:37 +0000 UTC</td>
|
|
<td>2025-08-20 05:34:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:34:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9d0fd73379de8bdc1eade22b7cc044fe5b529c69363603fe804c0532eb0c03c</td>
|
|
<td>[68a5119d85fcc7c992c6135c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:06:50Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:06:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d903abf447ce00d5dd900781f9d3bf38dd229cb581327acab35b9cf56ee0c4db</td>
|
|
<td>[68a25fb2e970d941642e7ee0, 68a25fb2e970d941642e7eed, 68a3b2cf09045b56b2a707b8, 68a3b2cf09045b56b2a707c5, 68a502e12ae1a61fbf4caf16, 68a502e12ae1a61fbf4caf23, 68a65489c4cae84feadc5716, 68a65489c4cae84feadc5723]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\message-transforms.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[ae2777418704ce0440e2ad1cd37a221c]</td>
|
|
<td>[d779623250a51664703e299e95177e7e0915ac50]</td>
|
|
<td>[4bf640c4184cb8648876afe84da1fe472cb5f9ad2a8d0709ca93847dfe02717ec1f26b10f678d09764ed2a60e681baa6]</td>
|
|
<td>[809b2b42593d70f9d9e85cb1cde53a7a3b3357cc85f6f8c83b464825a5f3611b54c5bdcd07f3f11a653816a666496714ec2d42a263be99dfacc376dee7179bec]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>message-transforms.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\</td>
|
|
<td></td>
|
|
<td>684</td>
|
|
<td>ae2777418704ce0440e2ad1cd37a221c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 19:42:27 +0000 UTC</td>
|
|
<td>2023-03-06 16:58:14 +0000 UTC</td>
|
|
<td>d779623250a51664703e299e95177e7e0915ac50</td>
|
|
<td>4bf640c4184cb8648876afe84da1fe472cb5f9ad2a8d0709ca93847dfe02717ec1f26b10f678d09764ed2a60e681baa6</td>
|
|
<td>809b2b42593d70f9d9e85cb1cde53a7a3b3357cc85f6f8c83b464825a5f3611b54c5bdcd07f3f11a653816a666496714ec2d42a263be99dfacc376dee7179bec</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-07-30 12:49:20 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d8787479d685a3ea387e552be8f051f2bdf3217c5f32e5c8f84a44d78f7ad179</td>
|
|
<td>[68a306a5ba5832f49fe9cf39]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RECGRIDD.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[fd8340b0dffcabd4edb7a129910cdbcd]</td>
|
|
<td>[0d122a7798cedae53732a4d24a2b7b71310ca87a]</td>
|
|
<td>[b7c0a153ed58565ae0d5de20b04576dcb93307fda7b47fc70fb8a623b168b2c725ee4f0cc5bb1d491416611a1541fb91]</td>
|
|
<td>[ba795955cedbdf07b31b700bae1cb6174688090cac37c49e081d8901017223fcfe43070d7da8f7f844781ef2700febb5ba831e7cdd46eaf46eb3a9eaa39288e5]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RECGRIDD.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>104960</td>
|
|
<td>fd8340b0dffcabd4edb7a129910cdbcd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:25 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>0d122a7798cedae53732a4d24a2b7b71310ca87a</td>
|
|
<td>b7c0a153ed58565ae0d5de20b04576dcb93307fda7b47fc70fb8a623b168b2c725ee4f0cc5bb1d491416611a1541fb91</td>
|
|
<td>ba795955cedbdf07b31b700bae1cb6174688090cac37c49e081d8901017223fcfe43070d7da8f7f844781ef2700febb5ba831e7cdd46eaf46eb3a9eaa39288e5</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:06:23 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d858454b7ca0629f84a0ba95b8257b00d4fbab318882d9882b6c5a15e67e2e34</td>
|
|
<td>[68a4f26f8c32b5989becd6c7, 68a4fcd0011d94a251a4ef3b]</td>
|
|
<td>[2]</td>
|
|
<td>[ReevesJoe, CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Program Files\TAP-Windows\Uninstall.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877, v2284]</td>
|
|
<td>["C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe" _?=C:\Program Files\TAP-Windows\, "C:\Program Files\TAP-Windows\Uninstall.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\System32\dllhost.exe]</td>
|
|
<td>[C:\Windows\ImmersiveControlPanel\SystemSettings.exe, C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T21:53:42Z, 2025-08-19T22:13:43Z]</td>
|
|
<td>[7a39c7e83f8dbb5835c354a30f4c47d9]</td>
|
|
<td>[270a2a94b06e55a34b78db33e18e83c207724ac4]</td>
|
|
<td>[dd4c34519e59d20e33ffcfd384f252e122b580b45ae555a0acb99d488dad848e5b563cd63648bc91006ff5e9ebe28cff]</td>
|
|
<td>[f942aea6a65cf9ee34cf2a9368f0e61fd6897c3e167288c6befb4a0da47bcdccd211bcb6c0ba09e8a85b5f479f7bbca39c21499e1783e21f6fcd5390790572c9]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Au_.exe</td>
|
|
<td>C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\</td>
|
|
<td></td>
|
|
<td>83811</td>
|
|
<td>7a39c7e83f8dbb5835c354a30f4c47d9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:53:42 +0000 UTC</td>
|
|
<td>2025-08-19 21:12:19 +0000 UTC</td>
|
|
<td>270a2a94b06e55a34b78db33e18e83c207724ac4</td>
|
|
<td>dd4c34519e59d20e33ffcfd384f252e122b580b45ae555a0acb99d488dad848e5b563cd63648bc91006ff5e9ebe28cff</td>
|
|
<td>f942aea6a65cf9ee34cf2a9368f0e61fd6897c3e167288c6befb4a0da47bcdccd211bcb6c0ba09e8a85b5f479f7bbca39c21499e1783e21f6fcd5390790572c9</td>
|
|
<td>2025-08-19 21:53:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 06:11:18 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:56:05.781 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d821a62802900b068dcf61ddc9fdff2f7ada04b706815ab6e5038b21543da8a5</td>
|
|
<td>[68a4e8a1ad898641af98fd90, 68a4fcd0011d94a251a4ef2c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\System.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:52Z, 2025-08-19T22:09:39Z]</td>
|
|
<td>[2e025e2cee2953cce0160c3cd2e1a64e]</td>
|
|
<td>[dec3da040ea72d63528240598bf14f344efb2a76]</td>
|
|
<td>[80b0a552b28cca460a8a08ed32a7fe321301797734d890fdf79a3683ef81b0906846bf9bab48fab4aee841a081537f07]</td>
|
|
<td>[3cafce382b605a68e5a3f35f95b32761685112c5a9da9f87b0a06ec13da4155145bd06ffb63131bf87c3dc8bd61cb085884c5e78c832386d70397e3974854860]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>System.dll</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\</td>
|
|
<td></td>
|
|
<td>24064</td>
|
|
<td>2e025e2cee2953cce0160c3cd2e1a64e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:11:52 +0000 UTC</td>
|
|
<td>2025-08-19 21:11:52 +0000 UTC</td>
|
|
<td>dec3da040ea72d63528240598bf14f344efb2a76</td>
|
|
<td>80b0a552b28cca460a8a08ed32a7fe321301797734d890fdf79a3683ef81b0906846bf9bab48fab4aee841a081537f07</td>
|
|
<td>3cafce382b605a68e5a3f35f95b32761685112c5a9da9f87b0a06ec13da4155145bd06ffb63131bf87c3dc8bd61cb085884c5e78c832386d70397e3974854860</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 12:24:28 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d79c2392afb4ba0f2422e52d1384a3c935e60c579ce42b2ad0c7ff9b4f41e6ea</td>
|
|
<td>[68a320afd74235903a162cdc]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\tmp_s4vxl2td.srp.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:32Z]</td>
|
|
<td>[3334cf3826bfe1d724ba53ca9ff4e71c]</td>
|
|
<td>[2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216]</td>
|
|
<td>[333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1]</td>
|
|
<td>[aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_s4vxl2td.srp.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>3334cf3826bfe1d724ba53ca9ff4e71c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:46:32 +0000 UTC</td>
|
|
<td>2025-08-18 12:46:32 +0000 UTC</td>
|
|
<td>2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216</td>
|
|
<td>333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1</td>
|
|
<td>aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f</td>
|
|
<td>2025-08-18 12:46:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d797eba683f29627641c38b9b2b040728c6af55bdae60aabe83fe51da73611c3</td>
|
|
<td>[68a480b9c5e8b0fd75ea7cdf, 68a5cda96d5ff24fa71bf7d3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-ScerisWeb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\Accusoft\{D5CE9ED4-28C2-461a-8EC5-2F81C1DF22B5}\Accusoft.BarcodeXpress.Common.10.0.0.10-10.0.ssm]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273.867, v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T13:40:24Z, 2025-08-20T13:28:16Z]</td>
|
|
<td>[bb6eed9250fcbff70388c02e5cf91051]</td>
|
|
<td>[1236a7a98ad10ce3fbdfe070f7f68a1ad2a9e1fc]</td>
|
|
<td>[4013f67a387e41166b49b3aa1ecf9f4796f8453b4316292c230612811b0d9e99bb12424dc2ae43b2b49ef0d34c3cbebd]</td>
|
|
<td>[5fdbb4f7f3668fdb3cf75fdbe93981970fe0900b79c115215933478ffe18bcde58570d9cce2fa8da45c6d0f2aaba370cd843c15666d1f475783c70b02e23a3c0]</td>
|
|
<td>[172.17.251.197]</td>
|
|
<td>[172.17.251.197]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Accusoft.BarcodeXpress.Common.10.0.0.10-10.0.ssm</td>
|
|
<td>C:\Windows\Temp\Accusoft\{D5CE9ED4-28C2-461a-8EC5-2F81C1DF22B5}\</td>
|
|
<td>Accusoft BarcodeXpress 10 Common</td>
|
|
<td>1974272</td>
|
|
<td>bb6eed9250fcbff70388c02e5cf91051</td>
|
|
<td>BarcodeXpress 10</td>
|
|
<td>10.0.0.10</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-12 14:49:20 +0000 UTC</td>
|
|
<td>2025-02-12 14:49:20 +0000 UTC</td>
|
|
<td>1236a7a98ad10ce3fbdfe070f7f68a1ad2a9e1fc</td>
|
|
<td>4013f67a387e41166b49b3aa1ecf9f4796f8453b4316292c230612811b0d9e99bb12424dc2ae43b2b49ef0d34c3cbebd</td>
|
|
<td>5fdbb4f7f3668fdb3cf75fdbe93981970fe0900b79c115215933478ffe18bcde58570d9cce2fa8da45c6d0f2aaba370cd843c15666d1f475783c70b02e23a3c0</td>
|
|
<td>2025-04-29 15:26:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-11-08 15:23:42 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-29 15:30:45.418 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d7972a6a2d0cb079067d8433e711207e7e3ba70b54db7169788b0ec4d994a9ca</td>
|
|
<td>[68a6afe50e0f3bd8deac4ced, 68a6afe50e0f3bd8deac4d22, 68a6afe50e0f3bd8deac4d2e, 68a6afe50e0f3bd8deac4d50, 68a6afe50e0f3bd8deac4d70, 68a6afe50e0f3bd8deac4d90, 68a6afe50e0f3bd8deac4dae, 68a6afe50e0f3bd8deac4dd0, 68a6afe50e0f3bd8deac4df0, 68a6afe50e0f3bd8deac4e10, 68a6afe50e0f3bd8deac4e30, 68a6afe50e0f3bd8deac4e50, 68a6afe50e0f3bd8deac4e70, 68a6afe50e0f3bd8deac4e90, 68a6afe50e0f3bd8deac4ec1, 68a6afe50e0f3bd8deac4ed0, 68a6afe50e0f3bd8deac4ef0, 68a6afe50e0f3bd8deac4f10, 68a6afe50e0f3bd8deac4f30, 68a6afe50e0f3bd8deac4f5a, 68a6afe50e0f3bd8deac4f7a, 68a6afe50e0f3bd8deac4f9a, 68a6afe50e0f3bd8deac4fba, 68a6afe50e0f3bd8deac4fda, 68a6afe50e0f3bd8deac4ffa, 68a6afe50e0f3bd8deac501a, 68a6afe50e0f3bd8deac503a, 68a6afe50e0f3bd8deac505a, 68a6afe50e0f3bd8deac507a, 68a6afe50e0f3bd8deac50a3, 68a6afe50e0f3bd8deac50c4, 68a6afe50e0f3bd8deac50e4, 68a6afe50e0f3bd8deac510e, 68a6afe50e0f3bd8deac512e, 68a6afe50e0f3bd8deac514e, 68a6afe50e0f3bd8deac5178, 68a6afe50e0f3bd8deac5198, 68a6afe50e0f3bd8deac51b8, 68a6afe50e0f3bd8deac51d9, 68a6afe50e0f3bd8deac520b, 68a6afe50e0f3bd8deac5221, 68a6afe50e0f3bd8deac5239, 68a6afe50e0f3bd8deac5259, 68a6afe50e0f3bd8deac528d, 68a6afe50e0f3bd8deac52ad, 68a6afe50e0f3bd8deac52cd, 68a6afe50e0f3bd8deac52ed, 68a6afe50e0f3bd8deac530d, 68a6afe50e0f3bd8deac532d, 68a6afe50e0f3bd8deac534d, 68a6afe50e0f3bd8deac536d, 68a6afe50e0f3bd8deac538d, 68a6afe50e0f3bd8deac5393, 68a6afe50e0f3bd8deac53ae, 68a6afe50e0f3bd8deac53d4, 68a6afe50e0f3bd8deac53f1, 68a6afe50e0f3bd8deac5413, 68a6afe50e0f3bd8deac544d, 68a6afe50e0f3bd8deac5452, 68a6afe50e0f3bd8deac5473, 68a6afe50e0f3bd8deac5492, 68a6afe50e0f3bd8deac54b3, 68a6afe50e0f3bd8deac54d3, 68a6afe50e0f3bd8deac54f3, 68a6afe50e0f3bd8deac5513, 68a6afe50e0f3bd8deac5533, 68a6afe50e0f3bd8deac555d, 68a6afe50e0f3bd8deac557d, 68a6afe50e0f3bd8deac559d, 68a6afe50e0f3bd8deac55bd, 68a6afe50e0f3bd8deac55dd, 68a6afe50e0f3bd8deac55fd, 68a6afe50e0f3bd8deac561d, 68a6afe50e0f3bd8deac5648, 68a6afe50e0f3bd8deac566c, 68a6afe50e0f3bd8deac569b, 68a6afe50e0f3bd8deac56bb, 68a6afe50e0f3bd8deac56da, 68a6afe50e0f3bd8deac56fa, 68a6afe50e0f3bd8deac5735, 68a6afe50e0f3bd8deac573b, 68a6afe50e0f3bd8deac576e, 68a6afe50e0f3bd8deac5782, 68a6afe50e0f3bd8deac57ae, 68a6afe50e0f3bd8deac57c5, 68a6afe50e0f3bd8deac57ef, 68a6afe50e0f3bd8deac5802, 68a6afe50e0f3bd8deac583f, 68a6afe50e0f3bd8deac5845, 68a6afe50e0f3bd8deac586d, 68a6afe50e0f3bd8deac5882, 68a6afe50e0f3bd8deac58b4, 68a6afe50e0f3bd8deac58c5, 68a6afe50e0f3bd8deac58f4, 68a6afe50e0f3bd8deac591e, 68a6afe50e0f3bd8deac5935, 68a6afe50e0f3bd8deac5945, 68a6afe50e0f3bd8deac5965, 68a6afe50e0f3bd8deac599c, 68a6afe50e0f3bd8deac59a4, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeFunction.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, ...]</td>
|
|
<td>[8b85c5d311d19ceaafb91dddda22bd33]</td>
|
|
<td>[df00e317fb9dc5476d831ab7609e030d421d1361]</td>
|
|
<td>[81b30eb9574d8435d515345adbbe7981132726162991d21284392f439fd0745f4936c701d2884fe7ec7ffd27c31ddab0]</td>
|
|
<td>[462b24f3d3702dc14a52f5fd2582af145fd7c1dae9235f42fe5c6a3d42fc93f69d7776dca062674f47336943cf1222a63c103b2bc3f46d39e73a6f072a83774b]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeFunction.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>2462208</td>
|
|
<td>8b85c5d311d19ceaafb91dddda22bd33</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:00:06 +0000 UTC</td>
|
|
<td>df00e317fb9dc5476d831ab7609e030d421d1361</td>
|
|
<td>81b30eb9574d8435d515345adbbe7981132726162991d21284392f439fd0745f4936c701d2884fe7ec7ffd27c31ddab0</td>
|
|
<td>462b24f3d3702dc14a52f5fd2582af145fd7c1dae9235f42fe5c6a3d42fc93f69d7776dca062674f47336943cf1222a63c103b2bc3f46d39e73a6f072a83774b</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d7116e047fbcb4bf045d2268cf418e6cb6fc8102c12196f3727597e8464497dd</td>
|
|
<td>[68a16556adb18f56bab6ec7b, 68a2b4a8c289c4a5fdc2edb1, 68a4085529d877e962e90ae7, 68a557e71e5d7a1efef2595c, 68a6a990a81c561389c37864]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG2B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[ddc535922ab8443cac70e8a5a1b1ca96]</td>
|
|
<td>[de0bed789f1c7a1ed257d4495b986eded933a71b]</td>
|
|
<td>[3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05]</td>
|
|
<td>[4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG2B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>ddc535922ab8443cac70e8a5a1b1ca96</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:37 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:37 +0000 UTC</td>
|
|
<td>de0bed789f1c7a1ed257d4495b986eded933a71b</td>
|
|
<td>3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05</td>
|
|
<td>4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>069dd4df7cdfca11d5020b7bb8c936289a03bcda8ad4ef950767612993b1e9d6</td>
|
|
<td>[68a4855388937a93ff144373]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Swashbuckle.AspNetCore.SwaggerGen.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[6562329298b4bd651e96c0d044f0700c]</td>
|
|
<td>[4323ce16c4771d31649ee2351e359aff1b8a8d3f]</td>
|
|
<td>[c2096eb2b862692cfbae91baaa6dcdd168d104d59b7c6d86a429edb311371208f6d4e1224e67e89ce93893883e4f35da]</td>
|
|
<td>[0f62441f28ae321d98cd0294f881380af1fe03310d12064e4a77deafe730dfad6b8ff1d1000d506397804a2e645cbf74047aa3a0ac3f3f08ec318db25ce84723]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen.dll</td>
|
|
<td>C:\ProgramData\Laurel Bridge Software\Navigator\www\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>90112</td>
|
|
<td>6562329298b4bd651e96c0d044f0700c</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>6.3.1+1bac30500de0a377405a9179710ec7bf69de3e92</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-10 11:27:37 +0000 UTC</td>
|
|
<td>2022-04-22 14:09:34 +0000 UTC</td>
|
|
<td>4323ce16c4771d31649ee2351e359aff1b8a8d3f</td>
|
|
<td>c2096eb2b862692cfbae91baaa6dcdd168d104d59b7c6d86a429edb311371208f6d4e1224e67e89ce93893883e4f35da</td>
|
|
<td>0f62441f28ae321d98cd0294f881380af1fe03310d12064e4a77deafe730dfad6b8ff1d1000d506397804a2e645cbf74047aa3a0ac3f3f08ec318db25ce84723</td>
|
|
<td>2025-07-16 13:33:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-13 09:57:46 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 13:34:05.73 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>067f2728e59cecc0bef49ec59b014348c57cca42920f9afeaf55a8a79770b32e</td>
|
|
<td>[68a46ee7124301f03a725ddb, 68a4728c1dfbce27769ea0bb]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\software\Storage Manager Client 20.1.2.14.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2272]</td>
|
|
<td>["C:\software\Storage Manager Client 20.1.2.14.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-19T12:32:28Z, 2025-08-19T12:34:22Z]</td>
|
|
<td>[6b05a6c9512ef97c49932eddaeb2a88b]</td>
|
|
<td>[cea62aad2165628db719065d3cc7850da0b169c6]</td>
|
|
<td>[7bdb94812c040a636720e3e10102b0d3b57becf859cc6351d90c13b9d32d7fc7fa7fc14fec55618bfc03daabcafeaa07]</td>
|
|
<td>[9b7629fecb397e1961d91e08f57f348014c2903810c8e06e555c0d42f9955af11a6d1e8aca298bf8565270ad696b6f52c95114b6c1cdc5b95fe86445b2a20269]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Storage Manager Client 20.1.2.14.exe</td>
|
|
<td>C:\software\</td>
|
|
<td>Dell Storage Manager Client</td>
|
|
<td>353369258</td>
|
|
<td>6b05a6c9512ef97c49932eddaeb2a88b</td>
|
|
<td>Dell Storage Manager Client</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:31:14 +0000 UTC</td>
|
|
<td>2022-08-17 14:31:21 +0000 UTC</td>
|
|
<td>cea62aad2165628db719065d3cc7850da0b169c6</td>
|
|
<td>7bdb94812c040a636720e3e10102b0d3b57becf859cc6351d90c13b9d32d7fc7fa7fc14fec55618bfc03daabcafeaa07</td>
|
|
<td>9b7629fecb397e1961d91e08f57f348014c2903810c8e06e555c0d42f9955af11a6d1e8aca298bf8565270ad696b6f52c95114b6c1cdc5b95fe86445b2a20269</td>
|
|
<td>2025-08-19 12:32:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-02 07:12:46 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 12:35:24.475 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>064def080c56265fe8621ad7b5f4e9a60f08b51475e7dccae02c6b86685a47b5</td>
|
|
<td>[68a19b31c2e510c554e3fb34]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jgzkpk0j.mzq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:04:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jgzkpk0j.mzq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:04:45 +0000 UTC</td>
|
|
<td>2025-08-17 09:04:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:04:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0629fc635898b51e5d2316c8f7d34ea75b613ae34e1034bb1179374ac9de65a6</td>
|
|
<td>[68a471ad04130eaeee8f8d04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:44:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:44:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcfbdfdbde9cbef28c79eddee54f0c2accb67f89728b7145fe46d42cce9aa9c5</td>
|
|
<td>[68a19d39565cc98ae4760187]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qedznpgp.ga2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:13:22Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qedznpgp.ga2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:13:22 +0000 UTC</td>
|
|
<td>2025-08-17 09:13:22 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcb83c4b7ea70aefe52299b701b5109ef1e0f8c9388fc04a8ed85e1425206a04</td>
|
|
<td>[68a3f8c69a8abcb93d00959e, 68a54a4f1d8af79f39037b08, 68a69be12de2cbdbda2d252d]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_utn_nemoq]</td>
|
|
<td>[I-NUHNQENG]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\NQS\Close Nemo-Q.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\NQS\NQStatistics\QstartE.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T04:02:00Z, 2025-08-20T04:02:00Z, 2025-08-21T04:02:00Z]</td>
|
|
<td>[f6d90142253043a52879717926747842]</td>
|
|
<td>[a0e1b1f4a0cdfedc917af0a14b818e8762af92fb]</td>
|
|
<td>[1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a]</td>
|
|
<td>[5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Close Nemo-Q.bat</td>
|
|
<td>E:\NQS\</td>
|
|
<td></td>
|
|
<td>335</td>
|
|
<td>f6d90142253043a52879717926747842</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-24 14:39:37 +0000 UTC</td>
|
|
<td>2015-05-26 13:24:58 +0000 UTC</td>
|
|
<td>a0e1b1f4a0cdfedc917af0a14b818e8762af92fb</td>
|
|
<td>1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a</td>
|
|
<td>5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e</td>
|
|
<td>2025-08-09 04:02:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcb6f710e34a6ba8e3494bd41b1847ee91db7430f961f80d5db0ff4c4feaeae9</td>
|
|
<td>[68a48674c4cb2500be69263e, 68a48674c4cb2500be692650]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Common.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[efce77c5c92dc4a8c516d430070e7b96]</td>
|
|
<td>[2baab49956994f6a532f589386b922aeb5ad1e6e]</td>
|
|
<td>[b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753]</td>
|
|
<td>[992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Common.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>26624</td>
|
|
<td>efce77c5c92dc4a8c516d430070e7b96</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2baab49956994f6a532f589386b922aeb5ad1e6e</td>
|
|
<td>b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753</td>
|
|
<td>992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc61a774db540e08caa944d187b5fe5a72904a7a67839ac49d20c67fcdf05b05</td>
|
|
<td>[68a245fbaa03fce1f3591138]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_itgpliwy.fxx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:09:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_itgpliwy.fxx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:09:58 +0000 UTC</td>
|
|
<td>2025-08-17 21:09:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:13:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f</td>
|
|
<td>[68a4e8a1ad898641af98fd97, 68a4f315247c4b5c9ccb9233, 68a4fcd0011d94a251a4ef33, 68a4fcd0011d94a251a4ef3d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109, ReevesJoe]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsoFEA1.tmp\System.dll, C:\Users\reevesjoe\AppData\Local\Temp\nso3B05.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsw182D.tmp\System.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsqBFD9.tmp\System.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe, C:\Users\reevesjoe\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_gs10109\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Program Files\TAP-Windows\Uninstall.exe, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T21:53:42Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:43Z]</td>
|
|
<td>[c17103ae9072a06da581dec998343fc1]</td>
|
|
<td>[b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d]</td>
|
|
<td>[2f9ce9fefa9bf07a4c288422041d0a9547e3d790fb0e54941e1b757a3e77d4ea69b5b18c39e98c24dc999025884ddea5]</td>
|
|
<td>[d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>System.dll</td>
|
|
<td>C:\Users\MEDITECH-ADMIN\AppData\Local\Temp\8\nsa37FF.tmp\</td>
|
|
<td></td>
|
|
<td>11264</td>
|
|
<td>c17103ae9072a06da581dec998343fc1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-01 11:54:16 +0000 UTC</td>
|
|
<td>2025-07-01 11:54:16 +0000 UTC</td>
|
|
<td>b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d</td>
|
|
<td>2f9ce9fefa9bf07a4c288422041d0a9547e3d790fb0e54941e1b757a3e77d4ea69b5b18c39e98c24dc999025884ddea5</td>
|
|
<td>d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f</td>
|
|
<td>2025-07-01 11:54:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-26 02:01:50 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-01 02:41:38.53 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc4656d6b231fd607385735cbcd7eed759506b2415bd7a40671abe8282eb0612</td>
|
|
<td>[68a1755706bbf9d9f204ab88]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kijrqnm.b1z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:23:11Z]</td>
|
|
<td>[a3bac681cf65fc3842b038012980eae3]</td>
|
|
<td>[54945680ce53b32d40e084ebe34cd3d4ac330594]</td>
|
|
<td>[dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a]</td>
|
|
<td>[d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1kijrqnm.b1z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>a3bac681cf65fc3842b038012980eae3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:23:11 +0000 UTC</td>
|
|
<td>2025-08-17 06:23:11 +0000 UTC</td>
|
|
<td>54945680ce53b32d40e084ebe34cd3d4ac330594</td>
|
|
<td>dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a</td>
|
|
<td>d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4</td>
|
|
<td>2025-08-17 06:23:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc2d377b573c836bcfbf1885b27a262786b50fb097e7a3d6a25d8a56f2771131</td>
|
|
<td>[68a275a87ae917016bf0f3a9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_w2kz3vcr.g3b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:36:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w2kz3vcr.g3b.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:36:45 +0000 UTC</td>
|
|
<td>2025-08-18 00:36:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:36:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc10a0514210898ed1dbd718a2c4e7b4c160d38483e64aa119d92eb55353f3bc</td>
|
|
<td>[68a3146b5f0c41860c8c8555]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\locale.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[1924fbd93c01ce7df32aa9d6789abc1e]</td>
|
|
<td>[5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b]</td>
|
|
<td>[a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1]</td>
|
|
<td>[e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>locale.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>58313</td>
|
|
<td>1924fbd93c01ce7df32aa9d6789abc1e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b</td>
|
|
<td>a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1</td>
|
|
<td>e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dbf253c13892b9f6daf8aa320f04defa7aa427bb9c70c33e37c0c4c9900b75fd</td>
|
|
<td>[68a6afe50e0f3bd8deac4cee, 68a6afe50e0f3bd8deac4d23, 68a6afe50e0f3bd8deac4d31, 68a6afe50e0f3bd8deac4d51, 68a6afe50e0f3bd8deac4d71, 68a6afe50e0f3bd8deac4d91, 68a6afe50e0f3bd8deac4db1, 68a6afe50e0f3bd8deac4dd1, 68a6afe50e0f3bd8deac4df1, 68a6afe50e0f3bd8deac4e11, 68a6afe50e0f3bd8deac4e31, 68a6afe50e0f3bd8deac4e51, 68a6afe50e0f3bd8deac4e71, 68a6afe50e0f3bd8deac4e91, 68a6afe50e0f3bd8deac4ec2, 68a6afe50e0f3bd8deac4ed1, 68a6afe50e0f3bd8deac4ef1, 68a6afe50e0f3bd8deac4f11, 68a6afe50e0f3bd8deac4f31, 68a6afe50e0f3bd8deac4f5b, 68a6afe50e0f3bd8deac4f7b, 68a6afe50e0f3bd8deac4f9b, 68a6afe50e0f3bd8deac4fbb, 68a6afe50e0f3bd8deac4fdb, 68a6afe50e0f3bd8deac4ffb, 68a6afe50e0f3bd8deac501b, 68a6afe50e0f3bd8deac503b, 68a6afe50e0f3bd8deac505b, 68a6afe50e0f3bd8deac507b, 68a6afe50e0f3bd8deac50a5, 68a6afe50e0f3bd8deac50c5, 68a6afe50e0f3bd8deac50e5, 68a6afe50e0f3bd8deac510f, 68a6afe50e0f3bd8deac512f, 68a6afe50e0f3bd8deac514f, 68a6afe50e0f3bd8deac5179, 68a6afe50e0f3bd8deac5199, 68a6afe50e0f3bd8deac51b9, 68a6afe50e0f3bd8deac51da, 68a6afe50e0f3bd8deac520c, 68a6afe50e0f3bd8deac5223, 68a6afe50e0f3bd8deac523a, 68a6afe50e0f3bd8deac525a, 68a6afe50e0f3bd8deac528e, 68a6afe50e0f3bd8deac52ae, 68a6afe50e0f3bd8deac52ce, 68a6afe50e0f3bd8deac52ee, 68a6afe50e0f3bd8deac530e, 68a6afe50e0f3bd8deac532e, 68a6afe50e0f3bd8deac534e, 68a6afe50e0f3bd8deac536e, 68a6afe50e0f3bd8deac5394, 68a6afe50e0f3bd8deac53af, 68a6afe50e0f3bd8deac53d3, 68a6afe50e0f3bd8deac53f3, 68a6afe50e0f3bd8deac5414, 68a6afe50e0f3bd8deac5438, 68a6afe50e0f3bd8deac5453, 68a6afe50e0f3bd8deac5474, 68a6afe50e0f3bd8deac5494, 68a6afe50e0f3bd8deac54b4, 68a6afe50e0f3bd8deac54d4, 68a6afe50e0f3bd8deac54f4, 68a6afe50e0f3bd8deac5514, 68a6afe50e0f3bd8deac5534, 68a6afe50e0f3bd8deac555e, 68a6afe50e0f3bd8deac557e, 68a6afe50e0f3bd8deac559e, 68a6afe50e0f3bd8deac55be, 68a6afe50e0f3bd8deac55de, 68a6afe50e0f3bd8deac55fe, 68a6afe50e0f3bd8deac561e, 68a6afe50e0f3bd8deac564b, 68a6afe50e0f3bd8deac566e, 68a6afe50e0f3bd8deac569c, 68a6afe50e0f3bd8deac56bc, 68a6afe50e0f3bd8deac56f3, 68a6afe50e0f3bd8deac56fb, 68a6afe50e0f3bd8deac5716, 68a6afe50e0f3bd8deac573c, 68a6afe50e0f3bd8deac576f, 68a6afe50e0f3bd8deac578b, 68a6afe50e0f3bd8deac57af, 68a6afe50e0f3bd8deac57c6, 68a6afe50e0f3bd8deac57f0, 68a6afe50e0f3bd8deac5805, 68a6afe50e0f3bd8deac583c, 68a6afe50e0f3bd8deac5846, 68a6afe50e0f3bd8deac586e, 68a6afe50e0f3bd8deac588a, 68a6afe50e0f3bd8deac58b5, 68a6afe50e0f3bd8deac58c6, 68a6afe50e0f3bd8deac58f5, 68a6afe50e0f3bd8deac5900, 68a6afe50e0f3bd8deac5936, 68a6afe50e0f3bd8deac5946, 68a6afe50e0f3bd8deac5966, 68a6afe50e0f3bd8deac599d, 68a6afe50e0f3bd8deac59aa, 68a6afe50e0f3bd8deac59c6, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeRegistration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, 2025-07-16T23:20:18Z, 2025-07-16T23:20:19Z, ...]</td>
|
|
<td>[dec31876aa64a7b08bfca9e775ab3a16]</td>
|
|
<td>[5fb12f096849f23353132d80d6660ab448507a0b]</td>
|
|
<td>[1f715ca7aa5b33fc8077564d8fc07552dba6c7a9e2887e583c4e1b58da17dd770acdc1dd63b4e91fee68929d18194985]</td>
|
|
<td>[ee676366ca355ba80e933358d891d5935dabe3687ca99e0ad75f19be220017b3721d6594f1b5a45eecc10a7ac128be92cb7b8489d358bb4f30508ec7b12d4320]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeRegistration.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>119296</td>
|
|
<td>dec31876aa64a7b08bfca9e775ab3a16</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:00:08 +0000 UTC</td>
|
|
<td>5fb12f096849f23353132d80d6660ab448507a0b</td>
|
|
<td>1f715ca7aa5b33fc8077564d8fc07552dba6c7a9e2887e583c4e1b58da17dd770acdc1dd63b4e91fee68929d18194985</td>
|
|
<td>ee676366ca355ba80e933358d891d5935dabe3687ca99e0ad75f19be220017b3721d6594f1b5a45eecc10a7ac128be92cb7b8489d358bb4f30508ec7b12d4320</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dbf17863020ad597586a772324b5f8a58d30e5317860ed83a8759f3fee25c2ae</td>
|
|
<td>[68a17c6313d38093271e4d7e, 68a2cde79ef546c806451f9c, 68a4212d6d0e46c2f152938e, 68a5711ca55e4f736b7b2bfb, 68a6c2bdb866e479a63a4424]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[i-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:51:03Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z, 2025-08-21T06:51:03Z]</td>
|
|
<td>[5359fd72aed1c21485d8508751b4089a]</td>
|
|
<td>[3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec]</td>
|
|
<td>[191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b]</td>
|
|
<td>[f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d]</td>
|
|
<td>[172.17.253.167]</td>
|
|
<td>[172.17.253.167]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1574</td>
|
|
<td>5359fd72aed1c21485d8508751b4089a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-17 12:28:16 +0000 UTC</td>
|
|
<td>2022-05-17 19:02:24 +0000 UTC</td>
|
|
<td>3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec</td>
|
|
<td>191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b</td>
|
|
<td>f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dbe1be4ea777f96af8e8efc887e486012f84255f819c5bc54016fbc01c0513b5</td>
|
|
<td>[68a3e79bb5e28efad9fbee2b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T02:55:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 02:55:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db9f7bd0a28a1567fd07b17ffb7689bf2e9b03d046a94003d0c62fc2f45bd648</td>
|
|
<td>[68a4ccc785b914a60d739e55, 68a4ce1fc826337212f53bf2, 68a4d07753a851daf11e693d, 68a4d07753a851daf11e6954, 68a4d2d1ff2b441b84428135, 68a4d2d1ff2b441b8442814c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\Pipe.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[33426740c0243bb202d68a135106ecb9]</td>
|
|
<td>[7b96d6dad1ed33ea163a6650fe03599778926ab5]</td>
|
|
<td>[7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307]</td>
|
|
<td>[5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Pipe.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\</td>
|
|
<td></td>
|
|
<td>20992</td>
|
|
<td>33426740c0243bb202d68a135106ecb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:48 +0000 UTC</td>
|
|
<td>7b96d6dad1ed33ea163a6650fe03599778926ab5</td>
|
|
<td>7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307</td>
|
|
<td>5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddc11b0935a1257cddc61739cb1d4792f21f2152223db450e927370695688375</td>
|
|
<td>[68a6afe50e0f3bd8deac4d05, 68a6afe50e0f3bd8deac4d15, 68a6afe50e0f3bd8deac4d47, 68a6afe50e0f3bd8deac4d63, 68a6afe50e0f3bd8deac4d87, 68a6afe50e0f3bd8deac4da7, 68a6afe50e0f3bd8deac4dc3, 68a6afe50e0f3bd8deac4de2, 68a6afe50e0f3bd8deac4e03, 68a6afe50e0f3bd8deac4e23, 68a6afe50e0f3bd8deac4e43, 68a6afe50e0f3bd8deac4e63, 68a6afe50e0f3bd8deac4e83, 68a6afe50e0f3bd8deac4ea3, 68a6afe50e0f3bd8deac4eb3, 68a6afe50e0f3bd8deac4ee3, 68a6afe50e0f3bd8deac4f03, 68a6afe50e0f3bd8deac4f23, 68a6afe50e0f3bd8deac4f43, 68a6afe50e0f3bd8deac4f71, 68a6afe50e0f3bd8deac4f8d, 68a6afe50e0f3bd8deac4fac, 68a6afe50e0f3bd8deac4fcd, 68a6afe50e0f3bd8deac4fed, 68a6afe50e0f3bd8deac500d, 68a6afe50e0f3bd8deac502d, 68a6afe50e0f3bd8deac5050, 68a6afe50e0f3bd8deac506d, 68a6afe50e0f3bd8deac508d, 68a6afe50e0f3bd8deac50b7, 68a6afe50e0f3bd8deac50da, 68a6afe50e0f3bd8deac50f7, 68a6afe50e0f3bd8deac5120, 68a6afe50e0f3bd8deac5141, 68a6afe50e0f3bd8deac5161, 68a6afe50e0f3bd8deac518b, 68a6afe50e0f3bd8deac51ab, 68a6afe50e0f3bd8deac51cf, 68a6afe50e0f3bd8deac51f0, 68a6afe50e0f3bd8deac51fe, 68a6afe50e0f3bd8deac5215, 68a6afe50e0f3bd8deac524c, 68a6afe50e0f3bd8deac526c, 68a6afe50e0f3bd8deac5284, 68a6afe50e0f3bd8deac52a0, 68a6afe50e0f3bd8deac52c0, 68a6afe50e0f3bd8deac52e0, 68a6afe50e0f3bd8deac5300, 68a6afe50e0f3bd8deac5320, 68a6afe50e0f3bd8deac5340, 68a6afe50e0f3bd8deac5360, 68a6afe50e0f3bd8deac5380, 68a6afe50e0f3bd8deac53a5, 68a6afe50e0f3bd8deac53c1, 68a6afe50e0f3bd8deac53ea, 68a6afe50e0f3bd8deac5405, 68a6afe50e0f3bd8deac5426, 68a6afe50e0f3bd8deac5441, 68a6afe50e0f3bd8deac5466, 68a6afe50e0f3bd8deac5486, 68a6afe50e0f3bd8deac54a9, 68a6afe50e0f3bd8deac54c6, 68a6afe50e0f3bd8deac54e6, 68a6afe50e0f3bd8deac5506, 68a6afe50e0f3bd8deac5526, 68a6afe50e0f3bd8deac5546, 68a6afe50e0f3bd8deac5570, 68a6afe50e0f3bd8deac5590, 68a6afe50e0f3bd8deac55b0, 68a6afe50e0f3bd8deac55d0, 68a6afe50e0f3bd8deac55f0, 68a6afe50e0f3bd8deac5610, 68a6afe50e0f3bd8deac5630, 68a6afe50e0f3bd8deac5639, 68a6afe50e0f3bd8deac5664, 68a6afe50e0f3bd8deac5684, 68a6afe50e0f3bd8deac56ae, 68a6afe50e0f3bd8deac56ce, 68a6afe50e0f3bd8deac56e6, 68a6afe50e0f3bd8deac570d, 68a6afe50e0f3bd8deac572c, 68a6afe50e0f3bd8deac574e, 68a6afe50e0f3bd8deac5757, 68a6afe50e0f3bd8deac5796, 68a6afe50e0f3bd8deac57a2, 68a6afe50e0f3bd8deac57db, 68a6afe50e0f3bd8deac57e2, 68a6afe50e0f3bd8deac5816, 68a6afe50e0f3bd8deac582e, 68a6afe50e0f3bd8deac5858, 68a6afe50e0f3bd8deac5860, 68a6afe50e0f3bd8deac588f, 68a6afe50e0f3bd8deac58ab, 68a6afe50e0f3bd8deac58db, 68a6afe50e0f3bd8deac58e0, 68a6afe50e0f3bd8deac5916, 68a6afe50e0f3bd8deac592d, 68a6afe50e0f3bd8deac5958, 68a6afe50e0f3bd8deac5978, 68a6afe50e0f3bd8deac598e, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\libpqxx.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:47Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:13Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:32Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:50Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[9b49d5560ec12a5b94486ad83f68b716]</td>
|
|
<td>[6675224f5d816590c6deb0fc830930e10f134891]</td>
|
|
<td>[12838c74b5ffe7ade8b1741d614998a5ddbbbd6e484a403bff7073bbc3f557eecf08f34a760764073a38ca5af9451964]</td>
|
|
<td>[c759b713910ddccee364a72c2e40ec3868283d55506716150d48b1c943d0bccbbc61d7c305fccdf225ffde8fce8f475a3d5a763f2129a6ffcf4c944174cf61c9]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libpqxx.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>366592</td>
|
|
<td>9b49d5560ec12a5b94486ad83f68b716</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:46 +0000 UTC</td>
|
|
<td>2023-03-07 00:33:42 +0000 UTC</td>
|
|
<td>6675224f5d816590c6deb0fc830930e10f134891</td>
|
|
<td>12838c74b5ffe7ade8b1741d614998a5ddbbbd6e484a403bff7073bbc3f557eecf08f34a760764073a38ca5af9451964</td>
|
|
<td>c759b713910ddccee364a72c2e40ec3868283d55506716150d48b1c943d0bccbbc61d7c305fccdf225ffde8fce8f475a3d5a763f2129a6ffcf4c944174cf61c9</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddb5478003d9e73dd5dd8700653c4556a0edc15ef9af2674058066621d20be35</td>
|
|
<td>[68a306a5ba5832f49fe9cf46]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DI2MISC.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[887be2143763b82d482004eb0c1ba6aa]</td>
|
|
<td>[58347c4d22a8391f152f61fd64cb71ba0ad3a88f]</td>
|
|
<td>[d16a633cdc707372d9a06e945fe43f2e8a237f16709a8344176453587db80a0db248cb27d251beffed039f13f86cd20f]</td>
|
|
<td>[4e1e3d5d1bf29e6ab2af201c45f13cf6f5d11ce9a0dd91325fb249bdd715846a843fd71a0647c0211529dc94618b0d768c4dcdaa6aeec254a0d2023f40ee192c]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DI2MISC.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>15872</td>
|
|
<td>887be2143763b82d482004eb0c1ba6aa</td>
|
|
<td></td>
|
|
<td>1.01</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:10 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>58347c4d22a8391f152f61fd64cb71ba0ad3a88f</td>
|
|
<td>d16a633cdc707372d9a06e945fe43f2e8a237f16709a8344176453587db80a0db248cb27d251beffed039f13f86cd20f</td>
|
|
<td>4e1e3d5d1bf29e6ab2af201c45f13cf6f5d11ce9a0dd91325fb249bdd715846a843fd71a0647c0211529dc94618b0d768c4dcdaa6aeec254a0d2023f40ee192c</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:11:23 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dd6a23c7089b29d9b9af510e2f872b5cc369c931923f5b21c9395923f098d9c1</td>
|
|
<td>[68a3146b5f0c41860c8c84eb, 68a3146b5f0c41860c8c851f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[489c61297357b3b99fc16ea3dc1721ab]</td>
|
|
<td>[5eae896c5218fd0730f2f34757a7d18ea262c3e4]</td>
|
|
<td>[b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40]</td>
|
|
<td>[b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pywin32_bootstrap.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>1024</td>
|
|
<td>489c61297357b3b99fc16ea3dc1721ab</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:26:08 +0000 UTC</td>
|
|
<td>2024-11-22 16:26:08 +0000 UTC</td>
|
|
<td>5eae896c5218fd0730f2f34757a7d18ea262c3e4</td>
|
|
<td>b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40</td>
|
|
<td>b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dd57120f1f0e0134e39fc66cab1a7663decce9115a80a252ce9a5793be13137e</td>
|
|
<td>[68a34b98a6132bf659cce5c4, 68a34df0b71eea1289980a29]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Reports.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:40Z, 2025-08-18T15:58:42Z]</td>
|
|
<td>[5f532decc4fe7a6cc887d3a1f58b0708]</td>
|
|
<td>[7692172ed549773ca24d98e7a532942ddc3fccc5]</td>
|
|
<td>[356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0]</td>
|
|
<td>[25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Reports.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td></td>
|
|
<td>264192</td>
|
|
<td>5f532decc4fe7a6cc887d3a1f58b0708</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:56 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:56 +0000 UTC</td>
|
|
<td>7692172ed549773ca24d98e7a532942ddc3fccc5</td>
|
|
<td>356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0</td>
|
|
<td>25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc</td>
|
|
<td>2025-06-09 22:00:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08b51bdd723445a16a1459d004236362881607ad0bda1cded1d8419840e45654</td>
|
|
<td>[68a45bd8dc6569137dd741b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kt0kbq03.23l.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T11:11:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kt0kbq03.23l.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:11:09 +0000 UTC</td>
|
|
<td>2025-08-19 11:11:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:11:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>087e4a37a25c5d223418e7436fb620da2355df097dc7e784d42a27eb285e705f</td>
|
|
<td>[68a3146b5f0c41860c8c84ef, 68a3146b5f0c41860c8c8549]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_weakrefset.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[c3a0dbdac023a9bed4a30ae4a485e887]</td>
|
|
<td>[59ea990ad4dc88bc52852b0d7349a1512269acb2]</td>
|
|
<td>[16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e]</td>
|
|
<td>[e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_weakrefset.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>12041</td>
|
|
<td>c3a0dbdac023a9bed4a30ae4a485e887</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>59ea990ad4dc88bc52852b0d7349a1512269acb2</td>
|
|
<td>16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e</td>
|
|
<td>e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>082ee54996b9d1c387dd5fba170e1b0ca068decddc056bf52d1ed770debb2743</td>
|
|
<td>[68a31b1aa6cbff78a3c29454]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:44Z]</td>
|
|
<td>[5178c69f2009d11787441469d3cf852c]</td>
|
|
<td>[b98a92206f5e709e937c34e092b2d601dd1408d0]</td>
|
|
<td>[ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568]</td>
|
|
<td>[9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>5178c69f2009d11787441469d3cf852c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:40 +0000 UTC</td>
|
|
<td>b98a92206f5e709e937c34e092b2d601dd1408d0</td>
|
|
<td>ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568</td>
|
|
<td>9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51</td>
|
|
<td>2025-08-18 12:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0804f04924c64975b554df69b97749068c8644ab6bdd250ce1302a8dbe4fb39f</td>
|
|
<td>[68a6afe50e0f3bd8deac4cea, 68a6afe50e0f3bd8deac4cf9, 68a6afe50e0f3bd8deac4d13, 68a6afe50e0f3bd8deac4d3b, 68a6afe50e0f3bd8deac4d5b, 68a6afe50e0f3bd8deac4d81, 68a6afe50e0f3bd8deac4da1, 68a6afe50e0f3bd8deac4dc1, 68a6afe50e0f3bd8deac4de1, 68a6afe50e0f3bd8deac4e02, 68a6afe50e0f3bd8deac4e21, 68a6afe50e0f3bd8deac4e41, 68a6afe50e0f3bd8deac4e61, 68a6afe50e0f3bd8deac4e81, 68a6afe50e0f3bd8deac4ea1, 68a6afe50e0f3bd8deac4eac, 68a6afe50e0f3bd8deac4ee1, 68a6afe50e0f3bd8deac4f01, 68a6afe50e0f3bd8deac4f1b, 68a6afe50e0f3bd8deac4f41, 68a6afe50e0f3bd8deac4f6b, 68a6afe50e0f3bd8deac4f8b, 68a6afe50e0f3bd8deac4fab, 68a6afe50e0f3bd8deac4fcb, 68a6afe50e0f3bd8deac4feb, 68a6afe50e0f3bd8deac500b, 68a6afe50e0f3bd8deac502b, 68a6afe50e0f3bd8deac504b, 68a6afe50e0f3bd8deac506b, 68a6afe50e0f3bd8deac508b, 68a6afe50e0f3bd8deac50af, 68a6afe50e0f3bd8deac50d5, 68a6afe50e0f3bd8deac50f5, 68a6afe50e0f3bd8deac511f, 68a6afe50e0f3bd8deac513e, 68a6afe50e0f3bd8deac515f, 68a6afe50e0f3bd8deac5189, 68a6afe50e0f3bd8deac51a9, 68a6afe50e0f3bd8deac51c9, 68a6afe50e0f3bd8deac51eb, 68a6afe50e0f3bd8deac51fc, 68a6afe50e0f3bd8deac522d, 68a6afe50e0f3bd8deac524a, 68a6afe50e0f3bd8deac526a, 68a6afe50e0f3bd8deac5278, 68a6afe50e0f3bd8deac529e, 68a6afe50e0f3bd8deac52be, 68a6afe50e0f3bd8deac52d8, 68a6afe50e0f3bd8deac52fe, 68a6afe50e0f3bd8deac531e, 68a6afe50e0f3bd8deac533e, 68a6afe50e0f3bd8deac535e, 68a6afe50e0f3bd8deac537e, 68a6afe50e0f3bd8deac539e, 68a6afe50e0f3bd8deac53c7, 68a6afe50e0f3bd8deac53de, 68a6afe50e0f3bd8deac5403, 68a6afe50e0f3bd8deac5424, 68a6afe50e0f3bd8deac543f, 68a6afe50e0f3bd8deac545e, 68a6afe50e0f3bd8deac5485, 68a6afe50e0f3bd8deac54a4, 68a6afe50e0f3bd8deac54c4, 68a6afe50e0f3bd8deac54e4, 68a6afe50e0f3bd8deac5504, 68a6afe50e0f3bd8deac5524, 68a6afe50e0f3bd8deac5544, 68a6afe50e0f3bd8deac556e, 68a6afe50e0f3bd8deac558e, 68a6afe50e0f3bd8deac55ae, 68a6afe50e0f3bd8deac55c8, 68a6afe50e0f3bd8deac55ee, 68a6afe50e0f3bd8deac5608, 68a6afe50e0f3bd8deac562e, 68a6afe50e0f3bd8deac565e, 68a6afe50e0f3bd8deac567e, 68a6afe50e0f3bd8deac56ac, 68a6afe50e0f3bd8deac56cd, 68a6afe50e0f3bd8deac56de, 68a6afe50e0f3bd8deac5706, 68a6afe50e0f3bd8deac5720, 68a6afe50e0f3bd8deac574c, 68a6afe50e0f3bd8deac5779, 68a6afe50e0f3bd8deac578e, 68a6afe50e0f3bd8deac57a0, 68a6afe50e0f3bd8deac57d6, 68a6afe50e0f3bd8deac57ff, 68a6afe50e0f3bd8deac580e, 68a6afe50e0f3bd8deac5827, 68a6afe50e0f3bd8deac5850, 68a6afe50e0f3bd8deac587f, 68a6afe50e0f3bd8deac588e, 68a6afe50e0f3bd8deac58a6, 68a6afe50e0f3bd8deac58d6, 68a6afe50e0f3bd8deac58ff, 68a6afe50e0f3bd8deac5910, 68a6afe50e0f3bd8deac5921, 68a6afe50e0f3bd8deac5950, 68a6afe50e0f3bd8deac5970, 68a6afe50e0f3bd8deac598f, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeMesa.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:07Z, 2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[57b5e3f139c1de2cf57df7af8b2403ca]</td>
|
|
<td>[647476be67f32160b2282f234c20f2f27495175f]</td>
|
|
<td>[0b2a38cc0299bc198b3bf15d5c97840ffca67df3cb43562a7f94fc83a50ddc0e247655672622aebc664279ae27112652]</td>
|
|
<td>[f69ca7368656af8daaed2770afd2cf14e7a22eb0d2e22cb60e083d4fc293c4b32e863bdb465b8d5a1678ff9743efe9363f8c5b419af6f64593d279c4d1d746ca]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeMesa.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>2047488</td>
|
|
<td>57b5e3f139c1de2cf57df7af8b2403ca</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2021-08-30 00:40:22 +0000 UTC</td>
|
|
<td>647476be67f32160b2282f234c20f2f27495175f</td>
|
|
<td>0b2a38cc0299bc198b3bf15d5c97840ffca67df3cb43562a7f94fc83a50ddc0e247655672622aebc664279ae27112652</td>
|
|
<td>f69ca7368656af8daaed2770afd2cf14e7a22eb0d2e22cb60e083d4fc293c4b32e863bdb465b8d5a1678ff9743efe9363f8c5b419af6f64593d279c4d1d746ca</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07e92a00627641ee1a5bd7dd8c11fca9dc02849587920392ed696a311e270f34</td>
|
|
<td>[68a1a4e2395a90b784ea5df9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zeppjcbv.oxo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zeppjcbv.oxo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:59 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:46:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07c5a9e87f8d1342d99a2d1d8ff7895f21fbb4d1eb322cd2420fb24fe5e51948</td>
|
|
<td>[68a36b1bb41b8f9dba5eed01]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\InterSystems\HSFoundation\bin\csystray.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T17:54:24Z]</td>
|
|
<td>[fdba33aaa9751de8b7604fbf6dfb51c8]</td>
|
|
<td>[71560cdf025fc32080b07eca0f4247a77d960368]</td>
|
|
<td>[56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426]</td>
|
|
<td>[18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>csystray.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Cube</td>
|
|
<td>1354240</td>
|
|
<td>fdba33aaa9751de8b7604fbf6dfb51c8</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:11:24 +0000 UTC</td>
|
|
<td>2019-07-16 21:11:24 +0000 UTC</td>
|
|
<td>71560cdf025fc32080b07eca0f4247a77d960368</td>
|
|
<td>56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426</td>
|
|
<td>18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d</td>
|
|
<td>2025-06-02 14:01:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07a30398c07f3854e1a7c3bd58c01fafe25c6a7d1bb13feea789727020a888b2</td>
|
|
<td>[68a17a44cb9bfce9795803bd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tw4phzvm.nwz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tw4phzvm.nwz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:12 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:44:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07968177016a718ed43b2924f24461437c58d6be3aca549059e7097eb38fe4d4</td>
|
|
<td>[68a4b0fb13fac5171eeef0db]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.WinSocket.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:26Z]</td>
|
|
<td>[e04f8c818fa02aab64810078da470416]</td>
|
|
<td>[be46d5ecd87559de68ef86566904698276e28a1c]</td>
|
|
<td>[01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755]</td>
|
|
<td>[944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Infrastructure.WinSocket.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Infrastructure.Socket</td>
|
|
<td>33280</td>
|
|
<td>e04f8c818fa02aab64810078da470416</td>
|
|
<td>Cyrun.Infrastructure.Socket</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:20 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:46 +0000 UTC</td>
|
|
<td>be46d5ecd87559de68ef86566904698276e28a1c</td>
|
|
<td>01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755</td>
|
|
<td>944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>074ce0f504955fa14064a7193cfba318e61c1b6dc27e59b6975601e39df50845</td>
|
|
<td>[68a19f422de3174858366afa]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gra3lynm.d1r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:22:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gra3lynm.d1r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:22:04 +0000 UTC</td>
|
|
<td>2025-08-17 09:22:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:22:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06df260c7f1ba98730dee7d60aff5ecc12aa9273592a62980464f2493eb4db25</td>
|
|
<td>[68a523949cec397f02de9f49]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BSSIDControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[de8df8b7c6fc4502d6f9335776b32154]</td>
|
|
<td>[850b37d6e0057b3ff641e78b7dd7f64fe1d7f109]</td>
|
|
<td>[8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f]</td>
|
|
<td>[9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BSSIDControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BSSIDControl</td>
|
|
<td>10240</td>
|
|
<td>de8df8b7c6fc4502d6f9335776b32154</td>
|
|
<td>BSSIDControl</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:22 +0000 UTC</td>
|
|
<td>850b37d6e0057b3ff641e78b7dd7f64fe1d7f109</td>
|
|
<td>8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f</td>
|
|
<td>9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06d6384eaa2d1376de884f3855044df87f2e12c1b92086a6f8723dd79a85457b</td>
|
|
<td>[68a4b0fb13fac5171eeef0d7]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[7d99492eba75b4117d502f502784bec7]</td>
|
|
<td>[3ec8beef2e968bb0740afb894a42a4cb412370a1]</td>
|
|
<td>[4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830]</td>
|
|
<td>[43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Infrastructure.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Infrastructure</td>
|
|
<td>125952</td>
|
|
<td>7d99492eba75b4117d502f502784bec7</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:18 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:46 +0000 UTC</td>
|
|
<td>3ec8beef2e968bb0740afb894a42a4cb412370a1</td>
|
|
<td>4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830</td>
|
|
<td>43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06aec840e3420e9ac5793a51e4fa034e6c50cd5ac7c77376db02fb17c10e8a4e</td>
|
|
<td>[68a5239e621d09b2b1ed5e55]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\protobuf-net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[cbf0121ce9830b1e0154e009e8f8890b]</td>
|
|
<td>[9239cf3c1d4028803976e503f617c293b6a0fa6c]</td>
|
|
<td>[708fcbe861118f6344cc76c7d77bdefaf14e8ac67fa6f55fe96b81996280dcfcafb2df45fbf4ec01f11ba8873f46d276]</td>
|
|
<td>[ede75d844b7a848a389dddcb610fe3f0b9767be886131dcaf2f4ff42c5c19531d7ad11538cfeaabd5b0151ae73ebd93648e1c4ef0b97de72679669caafb0bdb1]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>protobuf-net.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>protobuf-net</td>
|
|
<td>188928</td>
|
|
<td>cbf0121ce9830b1e0154e009e8f8890b</td>
|
|
<td>protobuf-net</td>
|
|
<td>2.0.0.621</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:18 +0000 UTC</td>
|
|
<td>9239cf3c1d4028803976e503f617c293b6a0fa6c</td>
|
|
<td>708fcbe861118f6344cc76c7d77bdefaf14e8ac67fa6f55fe96b81996280dcfcafb2df45fbf4ec01f11ba8873f46d276</td>
|
|
<td>ede75d844b7a848a389dddcb610fe3f0b9767be886131dcaf2f4ff42c5c19531d7ad11538cfeaabd5b0151ae73ebd93648e1c4ef0b97de72679669caafb0bdb1</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-23 02:39:51 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0c668862894797d5ef235021b63abf727ee5c656d490ee98fecd70afaef483a</td>
|
|
<td>[68a34d6610b57c5bffc57db0]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43</td>
|
|
<td>[68a4e8a1ad898641af98fd92, 68a4fcd0011d94a251a4ef2e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\nsxEE37.tmp\SimpleSC.dll, C:\Users\CA_gs10109\AppData\Local\Temp\nsp5DF.tmp\SimpleSC.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:53Z, 2025-08-19T22:09:40Z]</td>
|
|
<td>[d63975ce28f801f236c4aca5af726961]</td>
|
|
<td>[3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9]</td>
|
|
<td>[12329ec18fd8a4ef20e767657ebd3cd67557dfcde0f57ec77a99344d6af62315a32482f5cdc3ee6086aa5119aa2dde43]</td>
|
|
<td>[8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SimpleSC.dll</td>
|
|
<td>C:\Users\mountaineer\AppData\Local\Temp\nsnA49A.tmp\</td>
|
|
<td></td>
|
|
<td>62976</td>
|
|
<td>d63975ce28f801f236c4aca5af726961</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-06 18:46:03 +0000 UTC</td>
|
|
<td>2025-08-06 18:46:03 +0000 UTC</td>
|
|
<td>3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9</td>
|
|
<td>12329ec18fd8a4ef20e767657ebd3cd67557dfcde0f57ec77a99344d6af62315a32482f5cdc3ee6086aa5119aa2dde43</td>
|
|
<td>8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810</td>
|
|
<td>2025-08-06 18:46:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-05 01:53:54 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-08-06 18:51:16.389 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0bec8be6fc453c6af4051e4b801303bea9c328f59b7d7ff40251c10de600125</td>
|
|
<td>[68a232a8e87ce966b73e852e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eiug2m5n.wwg.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:50:51Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eiug2m5n.wwg.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:50:51 +0000 UTC</td>
|
|
<td>2025-08-17 19:50:51 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:51:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0b4a5a243fe5848fc77cefd16f94933d35229556186830f24fcf2065eec786a</td>
|
|
<td>[68a17bc07b632e8a862c1429]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xtfzriej.1md.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:50:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xtfzriej.1md.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:50:36 +0000 UTC</td>
|
|
<td>2025-08-17 06:50:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:50:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e006a3c090e787efe255b9971ccedae2e9c06e45a5651a93bad0264d16e059c5</td>
|
|
<td>[68a4a6605961c54c81f645ca]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\scripts\SSLCertCheck.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:16Z]</td>
|
|
<td>[14ef36866a2842bd51446da8d40d5cde]</td>
|
|
<td>[1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0]</td>
|
|
<td>[0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56]</td>
|
|
<td>[f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SSLCertCheck.ps1</td>
|
|
<td>C:\scripts\</td>
|
|
<td></td>
|
|
<td>2636</td>
|
|
<td>14ef36866a2842bd51446da8d40d5cde</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-08-09 13:18:30 +0000 UTC</td>
|
|
<td>2025-07-21 19:17:19 +0000 UTC</td>
|
|
<td>1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0</td>
|
|
<td>0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56</td>
|
|
<td>f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1</td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dfcf845f19db5636117dd95e7cf19c214cfb8e1e38fbff8f4bc16ca210800a3b</td>
|
|
<td>[68a472a799ad3734d804e2dd]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-constants-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[158034089399c239063fd00ebe5a99f0]</td>
|
|
<td>[5b29253d1cfa01e04c69e7c28bb8300feea8cc56]</td>
|
|
<td>[80da9f87d077574696d9e0a3c7eca35f441e81a5541d17dc9b12e802296a1f6a6c7eb63729b2a47111954911b0554cde]</td>
|
|
<td>[0bafd1005e776867c0a51970a515c7ccc0d7ed7b1543dd009c8d4e148e8d6fcd9d3241e2b52a2d272655ef46461c227e4e51029bf3070efa7e9f4afb52e10757]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-constants-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>8271</td>
|
|
<td>158034089399c239063fd00ebe5a99f0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>5b29253d1cfa01e04c69e7c28bb8300feea8cc56</td>
|
|
<td>80da9f87d077574696d9e0a3c7eca35f441e81a5541d17dc9b12e802296a1f6a6c7eb63729b2a47111954911b0554cde</td>
|
|
<td>0bafd1005e776867c0a51970a515c7ccc0d7ed7b1543dd009c8d4e148e8d6fcd9d3241e2b52a2d272655ef46461c227e4e51029bf3070efa7e9f4afb52e10757</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:08:33 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dfb65002256db6ec059ac1994861030cc37096640ef394054187e6e5df234542</td>
|
|
<td>[68a1b088a503d43204bbb9e4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sszg4ffh.uu5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:35:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_sszg4ffh.uu5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:35:39 +0000 UTC</td>
|
|
<td>2025-08-17 10:35:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:35:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dfb45ff554590eb9467d82835099f80d0f504c203845681b55292eaab0883644</td>
|
|
<td>[68a164c5390404f85b716adb, 68a2b64cfd812c7de4e545b0, 68a408129f3185cbaca3c5cb, 68a559bf118aff08c8ed4944, 68a6a931f7c977ec1548fcf2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vroggera]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\ra\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z, 2025-08-21T05:05:01Z]</td>
|
|
<td>[8cb39e842d0db0518f876501538e460b]</td>
|
|
<td>[77b6e192cbf04a40b6e0e32a73cc770695495f56]</td>
|
|
<td>[afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88]</td>
|
|
<td>[339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\ra\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>8cb39e842d0db0518f876501538e460b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:20 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:20 +0000 UTC</td>
|
|
<td>77b6e192cbf04a40b6e0e32a73cc770695495f56</td>
|
|
<td>afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88</td>
|
|
<td>339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>df59c90ff58eea7ae95fdc5e4c77dfdf4e9131bf9d53d9a86f572e18db33c8bc</td>
|
|
<td>[68a6afe50e0f3bd8deac4cff, 68a6afe50e0f3bd8deac4d12, 68a6afe50e0f3bd8deac4d42, 68a6afe50e0f3bd8deac4d61, 68a6afe50e0f3bd8deac4d80, 68a6afe50e0f3bd8deac4da0, 68a6afe50e0f3bd8deac4dc0, 68a6afe50e0f3bd8deac4de0, 68a6afe50e0f3bd8deac4e00, 68a6afe50e0f3bd8deac4e20, 68a6afe50e0f3bd8deac4e40, 68a6afe50e0f3bd8deac4e60, 68a6afe50e0f3bd8deac4e80, 68a6afe50e0f3bd8deac4ea0, 68a6afe50e0f3bd8deac4ebb, 68a6afe50e0f3bd8deac4ee0, 68a6afe50e0f3bd8deac4f00, 68a6afe50e0f3bd8deac4f21, 68a6afe50e0f3bd8deac4f40, 68a6afe50e0f3bd8deac4f6a, 68a6afe50e0f3bd8deac4f8a, 68a6afe50e0f3bd8deac4faa, 68a6afe50e0f3bd8deac4fca, 68a6afe50e0f3bd8deac4fea, 68a6afe50e0f3bd8deac500a, 68a6afe50e0f3bd8deac502a, 68a6afe50e0f3bd8deac504a, 68a6afe50e0f3bd8deac506a, 68a6afe50e0f3bd8deac508a, 68a6afe50e0f3bd8deac50b6, 68a6afe50e0f3bd8deac50d4, 68a6afe50e0f3bd8deac50f4, 68a6afe50e0f3bd8deac511e, 68a6afe50e0f3bd8deac513f, 68a6afe50e0f3bd8deac515e, 68a6afe50e0f3bd8deac5188, 68a6afe50e0f3bd8deac51a8, 68a6afe50e0f3bd8deac51c8, 68a6afe50e0f3bd8deac51e9, 68a6afe50e0f3bd8deac51fb, 68a6afe50e0f3bd8deac5233, 68a6afe50e0f3bd8deac5249, 68a6afe50e0f3bd8deac5269, 68a6afe50e0f3bd8deac527e, 68a6afe50e0f3bd8deac529d, 68a6afe50e0f3bd8deac52bc, 68a6afe50e0f3bd8deac52de, 68a6afe50e0f3bd8deac52fd, 68a6afe50e0f3bd8deac531d, 68a6afe50e0f3bd8deac533d, 68a6afe50e0f3bd8deac535d, 68a6afe50e0f3bd8deac537d, 68a6afe50e0f3bd8deac53a6, 68a6afe50e0f3bd8deac53c0, 68a6afe50e0f3bd8deac53e5, 68a6afe50e0f3bd8deac5402, 68a6afe50e0f3bd8deac5423, 68a6afe50e0f3bd8deac543e, 68a6afe50e0f3bd8deac5465, 68a6afe50e0f3bd8deac5483, 68a6afe50e0f3bd8deac54a3, 68a6afe50e0f3bd8deac54c3, 68a6afe50e0f3bd8deac54e3, 68a6afe50e0f3bd8deac5503, 68a6afe50e0f3bd8deac5523, 68a6afe50e0f3bd8deac5543, 68a6afe50e0f3bd8deac556d, 68a6afe50e0f3bd8deac558d, 68a6afe50e0f3bd8deac55ad, 68a6afe50e0f3bd8deac55ce, 68a6afe50e0f3bd8deac55ed, 68a6afe50e0f3bd8deac560f, 68a6afe50e0f3bd8deac562d, 68a6afe50e0f3bd8deac565d, 68a6afe50e0f3bd8deac567d, 68a6afe50e0f3bd8deac568e, 68a6afe50e0f3bd8deac56ab, 68a6afe50e0f3bd8deac56cb, 68a6afe50e0f3bd8deac56e5, 68a6afe50e0f3bd8deac570e, 68a6afe50e0f3bd8deac5726, 68a6afe50e0f3bd8deac574b, 68a6afe50e0f3bd8deac5756, 68a6afe50e0f3bd8deac5795, 68a6afe50e0f3bd8deac57bf, 68a6afe50e0f3bd8deac57d5, 68a6afe50e0f3bd8deac57e1, 68a6afe50e0f3bd8deac5815, 68a6afe50e0f3bd8deac582f, 68a6afe50e0f3bd8deac5855, 68a6afe50e0f3bd8deac587d, 68a6afe50e0f3bd8deac5895, 68a6afe50e0f3bd8deac58a5, 68a6afe50e0f3bd8deac58d5, 68a6afe50e0f3bd8deac58ee, 68a6afe50e0f3bd8deac590f, 68a6afe50e0f3bd8deac5927, 68a6afe50e0f3bd8deac5957, 68a6afe50e0f3bd8deac5976, 68a6afe50e0f3bd8deac598d, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\PrometheusWidgets.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:58Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[04f84304a7fd97a5eb0363d4531e0297]</td>
|
|
<td>[8f181688593bac27afaa0123b5291c97699fb3c4]</td>
|
|
<td>[f3df118553809d39653bc1d10af522fca6b756e60c59926f7cf8f9e07662d0b49d3f4591e1648ed691ea91632ea45026]</td>
|
|
<td>[5be9e8b256ad562b93ff6a0f0af0646af836e9732c79b54cd3d323245298fe8decddfbf87ff829e639e4b1c6e4b3cb151c63e89a2adbad15097cdad5f896baf7]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PrometheusWidgets.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>1012736</td>
|
|
<td>04f84304a7fd97a5eb0363d4531e0297</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:56 +0000 UTC</td>
|
|
<td>2023-06-16 03:04:22 +0000 UTC</td>
|
|
<td>8f181688593bac27afaa0123b5291c97699fb3c4</td>
|
|
<td>f3df118553809d39653bc1d10af522fca6b756e60c59926f7cf8f9e07662d0b49d3f4591e1648ed691ea91632ea45026</td>
|
|
<td>5be9e8b256ad562b93ff6a0f0af0646af836e9732c79b54cd3d323245298fe8decddfbf87ff829e639e4b1c6e4b3cb151c63e89a2adbad15097cdad5f896baf7</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>df58757712295dbb1f70447f2200ba2ecd8a06dc9ff15290548d1b3b80fb1b83</td>
|
|
<td>[68a387828e5327740b40aeae]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c02y5bwl.mpb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2268.865]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T20:05:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_c02y5bwl.mpb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 20:05:19 +0000 UTC</td>
|
|
<td>2025-08-18 20:05:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 20:05:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>df2e704c8013ebc148076e169fe6c5e9fcd74f25ce39e10aa1b600e19f35a643</td>
|
|
<td>[68a171b5b579a67a97fbd1f9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-belimed2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Belimed\ICS\ICSLogger.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>["C:\Program Files (x86)\Belimed\ICS\ICSLogger.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-17T06:02:02Z]</td>
|
|
<td>[a840b824e40da8993091320aebeb988f]</td>
|
|
<td>[60e7d969d14e0bc0796863d03c85d7948cd90e13]</td>
|
|
<td>[694d94fbf1f3d00454b40fa5f46cb07ef4368567d4dce705b27e76c1845ece35bb34899896a41096fce8d3bd0b79025d]</td>
|
|
<td>[7a3dc5e5728f82fb1f53403d2c378780b9bcbae511f73c384ebeb37d4ac895a445b826893436b4f7a1dd485fc2087a1cb14cb29f1d1d6dd8fec1b709c693bfcb]</td>
|
|
<td>[172.17.22.203]</td>
|
|
<td>[172.17.22.203]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ICSLogger.exe</td>
|
|
<td>C:\Program Files (x86)\Belimed\ICS\</td>
|
|
<td></td>
|
|
<td>6743520</td>
|
|
<td>a840b824e40da8993091320aebeb988f</td>
|
|
<td></td>
|
|
<td>R7.10.8LTeam</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-01-26 18:00:44 +0000 UTC</td>
|
|
<td>2021-01-26 18:00:44 +0000 UTC</td>
|
|
<td>60e7d969d14e0bc0796863d03c85d7948cd90e13</td>
|
|
<td>694d94fbf1f3d00454b40fa5f46cb07ef4368567d4dce705b27e76c1845ece35bb34899896a41096fce8d3bd0b79025d</td>
|
|
<td>7a3dc5e5728f82fb1f53403d2c378780b9bcbae511f73c384ebeb37d4ac895a445b826893436b4f7a1dd485fc2087a1cb14cb29f1d1d6dd8fec1b709c693bfcb</td>
|
|
<td>2025-04-27 06:05:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-27 03:57:33 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-04-27 06:06:00.166 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>deeeed5d028c5180fccf19db64c4d30026f7a273b58d1774209d7f54428a3049</td>
|
|
<td>[68a34b98a6132bf659cce5ab, 68a34df0b71eea1289980a10]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:11Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[07d33d36b0622bb8b733eda26be49820]</td>
|
|
<td>[68043af4b45668bd2e8612e56b764ec6e561ed42]</td>
|
|
<td>[e4ae19accf6e5b1a212bc2ae7e4f365f731e21b74a8e94a26da96d7ad7233975fb39d41c16f29a70da87d7946398a083]</td>
|
|
<td>[16d2374457689acbe084206777d08f42b9c811442e375d082212834a5827f365078cf75f3fab7a3e5553dfcbe88d7a9809cbf7b0337122e7a57c5ae741877125]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Telerik.WinControls</td>
|
|
<td>4848128</td>
|
|
<td>07d33d36b0622bb8b733eda26be49820</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-17 19:52:00 +0000 UTC</td>
|
|
<td>2023-03-17 19:52:00 +0000 UTC</td>
|
|
<td>68043af4b45668bd2e8612e56b764ec6e561ed42</td>
|
|
<td>e4ae19accf6e5b1a212bc2ae7e4f365f731e21b74a8e94a26da96d7ad7233975fb39d41c16f29a70da87d7946398a083</td>
|
|
<td>16d2374457689acbe084206777d08f42b9c811442e375d082212834a5827f365078cf75f3fab7a3e5553dfcbe88d7a9809cbf7b0337122e7a57c5ae741877125</td>
|
|
<td>2025-05-13 12:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-08 07:48:13 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-13 12:26:34.203 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>deb0e4cd69fbed160f4d6ac325d1dcc371d784f5824a379f46573385a66bb78a</td>
|
|
<td>[68a472a799ad3734d804e2e0]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-ext-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[a82eff915c881277c39a58de664c2fd4]</td>
|
|
<td>[a5850a5ae69a88ee18e961f8044dcba452d26e8f]</td>
|
|
<td>[de4767f77baa3a42db6564b04ab7b56508c29f903c229af7fe872c29f0a33246b188b722df0ff4f2226d3037acca2a14]</td>
|
|
<td>[6c778654a3edae2002e32efe29c8be9dd829fe620114e9263e3ad0a67598ba540f1450854feef4fcbfbbfed91598029249633b29c791c1112b1a9f3b8f67d187]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-ext-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>10075</td>
|
|
<td>a82eff915c881277c39a58de664c2fd4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>a5850a5ae69a88ee18e961f8044dcba452d26e8f</td>
|
|
<td>de4767f77baa3a42db6564b04ab7b56508c29f903c229af7fe872c29f0a33246b188b722df0ff4f2226d3037acca2a14</td>
|
|
<td>6c778654a3edae2002e32efe29c8be9dd829fe620114e9263e3ad0a67598ba540f1450854feef4fcbfbbfed91598029249633b29c791c1112b1a9f3b8f67d187</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-10-24 04:46:03 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dea56f31a5b1d22c57115b748b64d8166d83fe01daae5c95607bbb8a6f95e449</td>
|
|
<td>[68a1b5c50915c3775058adfa]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iouipeum.4l3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:58:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iouipeum.4l3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:58:08 +0000 UTC</td>
|
|
<td>2025-08-17 10:58:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:58:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>de70a46df02c58913df13c7654d2b50ebdcfeb522118e089e9aa8d6e6ef1e166</td>
|
|
<td>[68a16bd60756fe54a9918f96, 68a2149cb58debea69d7c741, 68a2bd5ff793a9057f329bf7, 68a3663261f8067c48423eb2, 68a40efceddb3a9f1a71a5f6, 68a4b7cd36bc5d38057e2360]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libcrypto-3-zm.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[a4f9cbff85279638dde688059cf9b9aa]</td>
|
|
<td>[0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19]</td>
|
|
<td>[84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919]</td>
|
|
<td>[8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libcrypto-3-zm.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>5671224</td>
|
|
<td>a4f9cbff85279638dde688059cf9b9aa</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>3.3.3</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19</td>
|
|
<td>84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919</td>
|
|
<td>8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:14:27 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddc733167b0596778d6e16240e331d1bb2883d883e36d7f1dfdc3776581914bb</td>
|
|
<td>[68a3146b5f0c41860c8c84e8, 68a3146b5f0c41860c8c851b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[0dc440c9e1c9be2baf0810e74c9235fd]</td>
|
|
<td>[deefe130f31490b275806f838ec6646ef01515a3]</td>
|
|
<td>[31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089]</td>
|
|
<td>[0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utf_8.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>2292</td>
|
|
<td>0dc440c9e1c9be2baf0810e74c9235fd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>deefe130f31490b275806f838ec6646ef01515a3</td>
|
|
<td>31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089</td>
|
|
<td>0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3c2629e3abf692e7083da7cf5fd646f4daa808b6c508101eb41967f95b21b79</td>
|
|
<td>[68a5239e621d09b2b1ed5e4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBTagDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[bd3f6d1a4e44a151f39dfbc24eaa84d3]</td>
|
|
<td>[d1b0ba350c91996b8911a34f503200aa28213ff7]</td>
|
|
<td>[c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435]</td>
|
|
<td>[8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PBTagDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PBTagDiagPlugIn</td>
|
|
<td>29184</td>
|
|
<td>bd3f6d1a4e44a151f39dfbc24eaa84d3</td>
|
|
<td>PBTagDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>d1b0ba350c91996b8911a34f503200aa28213ff7</td>
|
|
<td>c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435</td>
|
|
<td>8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3a2d912935cae9b54dfd538ee7eb7135947506037f46e5cd9b0bc84d16147a0</td>
|
|
<td>[68a195c4355950638b4c627b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1npvq1ae.jnp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:41:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1npvq1ae.jnp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:41:36 +0000 UTC</td>
|
|
<td>2025-08-17 08:41:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:41:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3896d85ff8aa537b728287b2594a76cca9651906b355a74d52b6a730daf0a2e</td>
|
|
<td>[68a37149a825b435e1c8aac0]</td>
|
|
<td>[2]</td>
|
|
<td>[sf10228]</td>
|
|
<td>[GRMC-NVR]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.MobileServer.TrayController.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.860]</td>
|
|
<td>["C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.MobileServer.TrayController.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T18:28:40Z]</td>
|
|
<td>[880facc6f6a0973dd69362cfe4716db1]</td>
|
|
<td>[fb385b47c764ca6da1ea9060069942aa9c6b73f7]</td>
|
|
<td>[6fb422acb0ab4cf1a64e75889ae11629e5cf8a8e88427bd774cfc26ab9ff5b2a5712b86580ee7c72cb5ebefdb4822aba]</td>
|
|
<td>[fe168027c75c7e8404aa7475023dc2170fc233574f608e916c17e67a83ea63a7ed62c042e336553a9a52b0fb2210788fa32a0b28ada00208bbac98632f4ca43c]</td>
|
|
<td>[172.30.33.7]</td>
|
|
<td>[172.30.33.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.MobileServer.TrayController.exe</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>Mobile Server Manager</td>
|
|
<td>306176</td>
|
|
<td>880facc6f6a0973dd69362cfe4716db1</td>
|
|
<td>Mobile server service manager (Tray controller)</td>
|
|
<td>23.3.43.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-10 20:52:42 +0000 UTC</td>
|
|
<td>2023-11-10 20:52:42 +0000 UTC</td>
|
|
<td>fb385b47c764ca6da1ea9060069942aa9c6b73f7</td>
|
|
<td>6fb422acb0ab4cf1a64e75889ae11629e5cf8a8e88427bd774cfc26ab9ff5b2a5712b86580ee7c72cb5ebefdb4822aba</td>
|
|
<td>fe168027c75c7e8404aa7475023dc2170fc233574f608e916c17e67a83ea63a7ed62c042e336553a9a52b0fb2210788fa32a0b28ada00208bbac98632f4ca43c</td>
|
|
<td>2025-05-30 14:06:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-03-26 00:17:02 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-30 14:10:39.404 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e35da10e61ba5f23b80e1a32f8babfe31a2770ec68b09b9f53192e88042b8568</td>
|
|
<td>[68a28bda3bdcd0703f76f645, 68a28bda3bdcd0703f76f646, 68a3dfd9dd64bcf44b32b6df, 68a3dfd9dd64bcf44b32b6e0, 68a533cd7c33c0fb7b88c887, 68a533cd7c33c0fb7b88c888, 68a6857e0fd019c48ec633dc, 68a6857e0fd019c48ec633dd]</td>
|
|
<td>[2]</td>
|
|
<td>[xpressions]</td>
|
|
<td>[vm-vmail]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Program Files\Unify\RSPsshServer\bin\rm.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[rm -f C:\Users\xpressions\SnmpTrapGen.exe , rm -f C:\Users\xpressions\UnixTime.vbs, rm -f C:\Users\Default\SnmpTrapGen.exe , rm -f C:\Users\Default\UnixTime.vbs]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe]</td>
|
|
<td>[2025-08-18T02:10:14Z, 2025-08-18T02:10:18Z, 2025-08-19T02:18:07Z, 2025-08-19T02:18:10Z, 2025-08-20T02:28:39Z, 2025-08-20T02:28:43Z, 2025-08-21T02:33:07Z, 2025-08-21T02:33:11Z]</td>
|
|
<td>[414dc024d7fd437d5efc06663e4b184b]</td>
|
|
<td>[c56f28d148f7ad8bba565beb8786ce3352289be0]</td>
|
|
<td>[5c3e0ab1824b61f53a794faefb374caf57b6c6497d12644d6e1234a890735be9b305d4f15af38539be914ae7f9b0053f]</td>
|
|
<td>[3a330db5941f4afdf081469a5d4bc7b6c4852861117e12233d98137ec373601db5b3d1481ece7b72ceea8312d8398593646dedcf08077ce04115c95333396cb0]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.exe</td>
|
|
<td>C:\Program Files\Unify\RSPsshServer\bin\</td>
|
|
<td></td>
|
|
<td>65536</td>
|
|
<td>414dc024d7fd437d5efc06663e4b184b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-16 13:44:54 +0000 UTC</td>
|
|
<td>2019-09-16 13:44:54 +0000 UTC</td>
|
|
<td>c56f28d148f7ad8bba565beb8786ce3352289be0</td>
|
|
<td>5c3e0ab1824b61f53a794faefb374caf57b6c6497d12644d6e1234a890735be9b305d4f15af38539be914ae7f9b0053f</td>
|
|
<td>3a330db5941f4afdf081469a5d4bc7b6c4852861117e12233d98137ec373601db5b3d1481ece7b72ceea8312d8398593646dedcf08077ce04115c95333396cb0</td>
|
|
<td>2025-08-16 02:26:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-22 15:57:23 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-16 02:27:03.497 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e33e6856e8edeae2c5890cc751457fb4e4cdc45d8ca536e16f4a16395c52a29c</td>
|
|
<td>[68a5cc2091727380a40e2b0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:32Z]</td>
|
|
<td>[3ed2304bef9e68e2fb6a30c735a1859c]</td>
|
|
<td>[16a7c5690e080a97e8c9cd6df223db64b6493010]</td>
|
|
<td>[d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795]</td>
|
|
<td>[9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>936</td>
|
|
<td>3ed2304bef9e68e2fb6a30c735a1859c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:32 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:32 +0000 UTC</td>
|
|
<td>16a7c5690e080a97e8c9cd6df223db64b6493010</td>
|
|
<td>d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795</td>
|
|
<td>9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394</td>
|
|
<td>2025-08-20 13:22:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3155f4c18e0f01cd09af5fcbdfb7f841db769e1df5e24dbd013f688beac7327</td>
|
|
<td>[68a25fb2e970d941642e7edb, 68a25fb2e970d941642e7ee8, 68a3b2cf09045b56b2a707b3, 68a3b2cf09045b56b2a707c0, 68a502e12ae1a61fbf4caf11, 68a502e12ae1a61fbf4caf1e, 68a65489c4cae84feadc5711, 68a65489c4cae84feadc571e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\LumenWorks.Framework.IO.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:05Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:05Z, 2025-08-19T23:00:15Z, 2025-08-20T23:00:05Z, 2025-08-20T23:00:15Z]</td>
|
|
<td>[5d44925a2cc697a34066331935d1f7f9]</td>
|
|
<td>[a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026]</td>
|
|
<td>[c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d]</td>
|
|
<td>[124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LumenWorks.Framework.IO.dll</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\</td>
|
|
<td>LumenWorks.Framework.IO</td>
|
|
<td>46080</td>
|
|
<td>5d44925a2cc697a34066331935d1f7f9</td>
|
|
<td>LumenWorks.Framework.IO</td>
|
|
<td>4.0.0 e6be48</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 18:35:30 +0000 UTC</td>
|
|
<td>2018-03-24 18:18:16 +0000 UTC</td>
|
|
<td>a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026</td>
|
|
<td>c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d</td>
|
|
<td>124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d</td>
|
|
<td>2025-05-10 23:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e306fe88cf422e654f8288933e3e3a31f27ad79e50a4b97c34cd9c7c3fd64130</td>
|
|
<td>[68a306a5ba5832f49fe9cf50]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\EQTLD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[c894b0d3fa03dfb74d11bc6f930a2cce]</td>
|
|
<td>[2d6b20ad44c3708ebcf6c682a2dc5d998f91760a]</td>
|
|
<td>[1203c7d40aa1e975bf09b7bb21870d3b99d651775119a1360c59fff146c5bae14720947785768d485f1bbd21f06e5781]</td>
|
|
<td>[88f5a035211dafa9cad03844744168f48eb101f4d89e5371fc04e79d610aa3659a3f6da98fc3ad6cb1a0a33194dd9c79e62ad99ac1eb01ca3502f28fa35e3edb]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EQTLD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express QuantumTreeList Components</td>
|
|
<td>588800</td>
|
|
<td>c894b0d3fa03dfb74d11bc6f930a2cce</td>
|
|
<td>ExpressQuantumGrid</td>
|
|
<td>3.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:12 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>2d6b20ad44c3708ebcf6c682a2dc5d998f91760a</td>
|
|
<td>1203c7d40aa1e975bf09b7bb21870d3b99d651775119a1360c59fff146c5bae14720947785768d485f1bbd21f06e5781</td>
|
|
<td>88f5a035211dafa9cad03844744168f48eb101f4d89e5371fc04e79d610aa3659a3f6da98fc3ad6cb1a0a33194dd9c79e62ad99ac1eb01ca3502f28fa35e3edb</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:13:19 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e2ee86365c2d7a10dc3e77887dcf7ad93c94f5d00128d0d3cb86d3501001a602</td>
|
|
<td>[68a354fa71d9fa85319f10b7]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\SCPWrap64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2259.858]</td>
|
|
<td>[]</td>
|
|
<td>[HID Global Corporation]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:28:49Z]</td>
|
|
<td>[199606fefa62618ab57440cf5e5cd511]</td>
|
|
<td>[3336a6a1aef2da51079da4f3166813bc777dc269]</td>
|
|
<td>[af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470]</td>
|
|
<td>[7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCPWrap64.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>SCPWrap</td>
|
|
<td>121752</td>
|
|
<td>199606fefa62618ab57440cf5e5cd511</td>
|
|
<td>SCPWrap</td>
|
|
<td>4.7.1.28</td>
|
|
<td>HID Global Corporation</td>
|
|
<td>2023-03-17 19:52:06 +0000 UTC</td>
|
|
<td>2023-03-17 19:52:06 +0000 UTC</td>
|
|
<td>3336a6a1aef2da51079da4f3166813bc777dc269</td>
|
|
<td>af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470</td>
|
|
<td>7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-05-15 12:39:24 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-13 05:20:32.095 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e28c7ee6c3458c61330546eddf643de294705d96fb0d6188f19cd83bb07f75e8</td>
|
|
<td>[68a42a0830e7648dae66944e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iax0wn2e.gzu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T07:38:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iax0wn2e.gzu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 07:38:39 +0000 UTC</td>
|
|
<td>2025-08-19 07:38:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 07:38:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e271a75dc1df53d0d0fdde966cbff22c973fbea56e4052783256f02c46c5cec4</td>
|
|
<td>[68a6537cecc6b6878d6687f7]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\hsntghov.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-20T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hsntghov.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 23:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e268fff64bd3b94a42537ecfae979fee397891e60cababe178a6564760931a0f</td>
|
|
<td>[68a472b1b022648922e2358d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jfreechart-1.0.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[e0ac6e8ecb858f946200b326209fe639]</td>
|
|
<td>[fa67c798b0ae80b84f3854d69e341abacd3867c5]</td>
|
|
<td>[008ac75aaeceb613b13e607e0144b92d0575f1fb6530bd79171629aa01fb1b173ac7631e9c453806799c31de15375bde]</td>
|
|
<td>[540911774565019bf18f15913dc699063c2bf25b57543d5b63eb14d7a1d4f9a8a7e44061c494a8285cae255ad9a654454dd5ff0af2e163ac2db3a54eef3ba95b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jfreechart-1.0.14.jar</td>
|
|
<td>C:\Program Files\DeploymentService\Tomcat\webapps\DeploymentService\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>1461633</td>
|
|
<td>e0ac6e8ecb858f946200b326209fe639</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-06-29 19:27:52 +0000 UTC</td>
|
|
<td>2020-06-29 19:27:52 +0000 UTC</td>
|
|
<td>fa67c798b0ae80b84f3854d69e341abacd3867c5</td>
|
|
<td>008ac75aaeceb613b13e607e0144b92d0575f1fb6530bd79171629aa01fb1b173ac7631e9c453806799c31de15375bde</td>
|
|
<td>540911774565019bf18f15913dc699063c2bf25b57543d5b63eb14d7a1d4f9a8a7e44061c494a8285cae255ad9a654454dd5ff0af2e163ac2db3a54eef3ba95b</td>
|
|
<td>2025-08-14 05:11:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-11-25 13:28:08 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-14 05:30:47.389 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e1ff597b34a621df3054f1feff304913055fd02bd0d002b5c5f2d01aedf6351a</td>
|
|
<td>[68a2f9ca170585b222da8a8a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-18T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 10:00:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e1c8c3702bc0abbf1b5ae61cc29d04c80a8a2bbd8d1fcbf0d11cc86ae6eaf444</td>
|
|
<td>[68a18e6597a47909aebcd988, 68a2ddd944d60e582ffc0d18, 68a42f7e81de93c2600b6ec4, 68a581188343e5a09486e03d, 68a6d2c66dc12cc4f77bd4a6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\NSI_Restart.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:12Z, 2025-08-18T08:00:11Z, 2025-08-19T08:00:11Z, 2025-08-20T08:00:11Z, 2025-08-21T08:00:11Z]</td>
|
|
<td>[643b85dab211d67f2a377645205e031b]</td>
|
|
<td>[a34d7f6dc0c990ae6dafaf6719be7f835dd6e680]</td>
|
|
<td>[218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0]</td>
|
|
<td>[851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NSI_Restart.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>239</td>
|
|
<td>643b85dab211d67f2a377645205e031b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-02-18 16:14:38 +0000 UTC</td>
|
|
<td>2021-02-18 16:14:38 +0000 UTC</td>
|
|
<td>a34d7f6dc0c990ae6dafaf6719be7f835dd6e680</td>
|
|
<td>218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0</td>
|
|
<td>851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f</td>
|
|
<td>2025-08-09 08:00:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e1ab53d75389187daefc4bc4afd07e5141ad01466e78bb43298a6eff447a4a5c</td>
|
|
<td>[68a523949cec397f02de9f43]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AltovaXML.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[6b3377712cc5ee2a837b01bb18fe290e]</td>
|
|
<td>[825203351fd9728e58a152c61042505a359daad8]</td>
|
|
<td>[91716685edd96a9e15564ab8d03ab92126b506a6a13428c5007df974f5219b15ea55799cb5da43c35fe9b87e0313de62]</td>
|
|
<td>[6679793183a7063b857863900b56bf32b45e8b8f913b007dce6ea88bde646ccf26229e3c60d28a4d20e5687ededd25112ba64b764e62b85826aa9f53f2c5ef2a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AltovaXML.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>45056</td>
|
|
<td>6b3377712cc5ee2a837b01bb18fe290e</td>
|
|
<td></td>
|
|
<td>1.0.3483.28697</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>825203351fd9728e58a152c61042505a359daad8</td>
|
|
<td>91716685edd96a9e15564ab8d03ab92126b506a6a13428c5007df974f5219b15ea55799cb5da43c35fe9b87e0313de62</td>
|
|
<td>6679793183a7063b857863900b56bf32b45e8b8f913b007dce6ea88bde646ccf26229e3c60d28a4d20e5687ededd25112ba64b764e62b85826aa9f53f2c5ef2a</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2017-01-01 20:47:20 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e15020453fd5682d980b735a7e1cfd739ff733d258644f24b48093d67b50f36d</td>
|
|
<td>[68a3146b5f0c41860c8c8532, 68a3146b5f0c41860c8c856f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_encoded_words.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[862e39ae2a4dad0447fb922787ad011b]</td>
|
|
<td>[059fdab715b03cf4f835efa17f6c2bfad339872c]</td>
|
|
<td>[a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718]</td>
|
|
<td>[4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_encoded_words.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>8291</td>
|
|
<td>862e39ae2a4dad0447fb922787ad011b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>059fdab715b03cf4f835efa17f6c2bfad339872c</td>
|
|
<td>a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718</td>
|
|
<td>4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e114d4f4cf4261ab76d144c49d6ee1d75ddcfbb7c195260d1a782ebe0c34cb87</td>
|
|
<td>[68a472b1b022648922e23593]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\management-api-3.0.0-b012.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[428636427bb6d92484320a9565f67394]</td>
|
|
<td>[707686d845faede060b79bdf018a25a469a611b4]</td>
|
|
<td>[ebbf1c28119dafa7da8ad0f02b2837347b6863a0603ed9fb464936c436cfa3490423ace2b08c8dcb76292124a12f0649]</td>
|
|
<td>[7639ae9d6c8d0171a293c3854dbe80da662d9d06c569b9e06b863ea9c985c898f52122270b4aabfcab9a3b71b68846ba4657011427f4957b7ab91fa0a313c27e]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>management-api-3.0.0-b012.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\management-api-3.0.0-b012.jar-799a2ea4f54b13c3\</td>
|
|
<td></td>
|
|
<td>42212</td>
|
|
<td>428636427bb6d92484320a9565f67394</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:14 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:14 +0000 UTC</td>
|
|
<td>707686d845faede060b79bdf018a25a469a611b4</td>
|
|
<td>ebbf1c28119dafa7da8ad0f02b2837347b6863a0603ed9fb464936c436cfa3490423ace2b08c8dcb76292124a12f0649</td>
|
|
<td>7639ae9d6c8d0171a293c3854dbe80da662d9d06c569b9e06b863ea9c985c898f52122270b4aabfcab9a3b71b68846ba4657011427f4957b7ab91fa0a313c27e</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-01 18:36:08 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e5e1f80535f5e0039465a7979f19dadcda3adbe7da288496f16a55add5657b14</td>
|
|
<td>[68a472a799ad3734d804e2e5]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-parser-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[06b83866799d9c983525b28fde4ebefc]</td>
|
|
<td>[90bfc41579c890d543acdb99b2b6390b09298b85]</td>
|
|
<td>[ec8333d72426fabc5f25d2798c75353759d4298125382098e1860253897dcf844f2e32335f557f525875e32db98a673d]</td>
|
|
<td>[0ee4427d49d79305c7d54c8ae0a602d1e334be58e53812c2b066aa66a6b1ee5eee58f10f51e1220df17c0f4af89de19c89322153fe8eea2229a688f129c0a7c2]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-parser-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>76504</td>
|
|
<td>06b83866799d9c983525b28fde4ebefc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>90bfc41579c890d543acdb99b2b6390b09298b85</td>
|
|
<td>ec8333d72426fabc5f25d2798c75353759d4298125382098e1860253897dcf844f2e32335f557f525875e32db98a673d</td>
|
|
<td>0ee4427d49d79305c7d54c8ae0a602d1e334be58e53812c2b066aa66a6b1ee5eee58f10f51e1220df17c0f4af89de19c89322153fe8eea2229a688f129c0a7c2</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:27:55 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e5b3d8c0cd787842469c3af1ecaa7fd338557ade687feda815ea46665f17bd2b</td>
|
|
<td>[68a34b98a6132bf659cce5c0, 68a34df0b71eea1289980a25]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\Telerik.WinControls.Themes.Windows8.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:18Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[152d886b60e07adfadd3864dda9198ce]</td>
|
|
<td>[ba76d202813f5039c8e639799ce9e35383feb595]</td>
|
|
<td>[929b6d279fd17c6252822129f5289494ce45b8b8f1916043051a605c9db5359dba5521a23ff7f81ce3b3d6e5ac016475]</td>
|
|
<td>[8b7324f67adda2d6fca966756d3ad54cea1481795ca244caf7e4b35bebc03cef2bd5dfd097fb4e0d8c39850b25567445dcd7b60ffc4667a7f87f89c07b32f790]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Telerik.WinControls.Themes.Windows8.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Telerik.WinControls.Themes.Windows8</td>
|
|
<td>265216</td>
|
|
<td>152d886b60e07adfadd3864dda9198ce</td>
|
|
<td>Progress® Telerik® UI for WinForms</td>
|
|
<td>2021.3.914.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>2023-07-25 16:12:01 +0000 UTC</td>
|
|
<td>ba76d202813f5039c8e639799ce9e35383feb595</td>
|
|
<td>929b6d279fd17c6252822129f5289494ce45b8b8f1916043051a605c9db5359dba5521a23ff7f81ce3b3d6e5ac016475</td>
|
|
<td>8b7324f67adda2d6fca966756d3ad54cea1481795ca244caf7e4b35bebc03cef2bd5dfd097fb4e0d8c39850b25567445dcd7b60ffc4667a7f87f89c07b32f790</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-04-22 07:51:14 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-06-09 22:01:23.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e5a63ba0b19e8a7a85ac7e9cbe80e31f55ad01e4dc9b74d3f1b3c52c17373ad9</td>
|
|
<td>[68a25fb2e970d941642e7edf, 68a25fb2e970d941642e7eec, 68a3b2cf09045b56b2a707b7, 68a3b2cf09045b56b2a707c4, 68a502e12ae1a61fbf4caf15, 68a502e12ae1a61fbf4caf22, 68a65489c4cae84feadc5715, 68a65489c4cae84feadc5722]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\insertTepp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:10Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:10Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[469a883bd4abdb8c110fe012194d82db]</td>
|
|
<td>[98442ad59dc0301977c2b0293b042ea784038527]</td>
|
|
<td>[85e28962ad6e8823300aed8ba0a141295bc1adf80f44cd314acea441fdac2ee49a6cbb718b79a26bad95dd2d65920433]</td>
|
|
<td>[2b520dae1ab1ae020f239f05b18eee7b4f2bc2924e660186d9b3d6e0283e9e3e73661c1b5fc55836de84d94df8c160a7e6c67a569bd9c6551e95d17dcb1c56d3]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>insertTepp.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\</td>
|
|
<td></td>
|
|
<td>8424</td>
|
|
<td>469a883bd4abdb8c110fe012194d82db</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 19:42:26 +0000 UTC</td>
|
|
<td>2023-04-10 15:39:06 +0000 UTC</td>
|
|
<td>98442ad59dc0301977c2b0293b042ea784038527</td>
|
|
<td>85e28962ad6e8823300aed8ba0a141295bc1adf80f44cd314acea441fdac2ee49a6cbb718b79a26bad95dd2d65920433</td>
|
|
<td>2b520dae1ab1ae020f239f05b18eee7b4f2bc2924e660186d9b3d6e0283e9e3e73661c1b5fc55836de84d94df8c160a7e6c67a569bd9c6551e95d17dcb1c56d3</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-07-30 12:50:08 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e58dfbc97ed3d3e3f47a55daa5aeb6493ea557ba779a31c9529a3f2c3118ec3e</td>
|
|
<td>[68a472b1b022648922e2356b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmChargebackApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[659ae9a317e0c485c402665810b92738]</td>
|
|
<td>[38760886fe5bca483988b5bf5ad7c51561778c37]</td>
|
|
<td>[dbe2fc017bc703d5b4f1252b1760ad3e3df61aa1f043d52ffb4c310b678395fc59606da9a597c9272ce9251708f27f0d]</td>
|
|
<td>[1f6b289cb2e2b5fef9ee2868d8fa28de11d2ce401313dfa3d5411cc9302cadb241398b34d5e3ef4b2bd60e583dc1c5d957ba8818c0819cdc31038a3649a4304f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmChargebackApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>119369</td>
|
|
<td>659ae9a317e0c485c402665810b92738</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>38760886fe5bca483988b5bf5ad7c51561778c37</td>
|
|
<td>dbe2fc017bc703d5b4f1252b1760ad3e3df61aa1f043d52ffb4c310b678395fc59606da9a597c9272ce9251708f27f0d</td>
|
|
<td>1f6b289cb2e2b5fef9ee2868d8fa28de11d2ce401313dfa3d5411cc9302cadb241398b34d5e3ef4b2bd60e583dc1c5d957ba8818c0819cdc31038a3649a4304f</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:51 +0000 UTC</td>
|
|
<td>59</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e575875c544fb1727f9016d19415241e94a0bafc82b05eaabb842c2b8e1bceec</td>
|
|
<td>[68a233fd88f628d5134f0d73]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3o4q5llx.mi5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3o4q5llx.mi5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:33 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e546c1ecd425ed469638ea9c8cd091f861f912c74e5d7afcfee51219c7a3c66f</td>
|
|
<td>[68a15602d61ba01a4f22a4fb, 68a2a78cc07c7d9334c20f46]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\adminscripts\SCMNightlyAdminRebuildOnly.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T04:05:00Z, 2025-08-18T04:05:00Z]</td>
|
|
<td>[c7ee3db23e15ef7844db279f1a285530]</td>
|
|
<td>[1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82]</td>
|
|
<td>[b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066]</td>
|
|
<td>[752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCMNightlyAdminRebuildOnly.bat</td>
|
|
<td>D:\adminscripts\</td>
|
|
<td></td>
|
|
<td>85</td>
|
|
<td>c7ee3db23e15ef7844db279f1a285530</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-17 15:10:50 +0000 UTC</td>
|
|
<td>2015-02-26 19:14:36 +0000 UTC</td>
|
|
<td>1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82</td>
|
|
<td>b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066</td>
|
|
<td>752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4</td>
|
|
<td>2025-08-09 04:05:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e536224c37c5601c639f163c66e4e2fec171992032474677c415056f891512cb</td>
|
|
<td>[68a306a5ba5832f49fe9cf48]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\RZ251N40.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[80e72ac8a829db2a006b406077c9dedf]</td>
|
|
<td>[29d0a82da12b6bca9cfcef4b5cf03eecfc1099ff]</td>
|
|
<td>[dfae8c6999992ecadeb4fb33d7b39d6cc3cd4173f1425faac31218effdc5f4d0c6553e135d564a149aa4a58a8122ae1a]</td>
|
|
<td>[fc632c2be61f5faca8675771ed769eed12113f6cc3fdd56e703eadd7e8a44c3c7d12948da0300f3ccc3af49c731fb685b008e63abd70d151cdf4da96b704a951]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RZ251N40.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Runtime package for Raize Components</td>
|
|
<td>795648</td>
|
|
<td>80e72ac8a829db2a006b406077c9dedf</td>
|
|
<td>Raize Components</td>
|
|
<td>2.51</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:35 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>29d0a82da12b6bca9cfcef4b5cf03eecfc1099ff</td>
|
|
<td>dfae8c6999992ecadeb4fb33d7b39d6cc3cd4173f1425faac31218effdc5f4d0c6553e135d564a149aa4a58a8122ae1a</td>
|
|
<td>fc632c2be61f5faca8675771ed769eed12113f6cc3fdd56e703eadd7e8a44c3c7d12948da0300f3ccc3af49c731fb685b008e63abd70d151cdf4da96b704a951</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:35:53 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e4f54569da175d2616aa1309a70f0d34cd6a812e20b7b126c4f76197c1024174</td>
|
|
<td>[68a306a5ba5832f49fe9cf5c]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXMDSD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[d11cb584c96ee3e29a4cf12fb1e68f41]</td>
|
|
<td>[c59ace4592fcb1b488e0bf204ed5e872881b24b5]</td>
|
|
<td>[9a5364d268dadcf9fceaa572027c44d8ea524fcd546c2c0831674f6664d52da37c32dd32e6c3aa725da533269f9513dd]</td>
|
|
<td>[1f1cb1d600014c5f69146a3deff7d3d0b733eb66af9c3f61e59e574a8d0c06d01324e73c9cc8a84ff58fd2d5b7ca7c3ee9521a360b95d8aafb43ebe07fd359df]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DXMDSD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express MemData Components</td>
|
|
<td>82432</td>
|
|
<td>d11cb584c96ee3e29a4cf12fb1e68f41</td>
|
|
<td>ExpressMemData</td>
|
|
<td>1.8</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:11 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>c59ace4592fcb1b488e0bf204ed5e872881b24b5</td>
|
|
<td>9a5364d268dadcf9fceaa572027c44d8ea524fcd546c2c0831674f6664d52da37c32dd32e6c3aa725da533269f9513dd</td>
|
|
<td>1f1cb1d600014c5f69146a3deff7d3d0b733eb66af9c3f61e59e574a8d0c06d01324e73c9cc8a84ff58fd2d5b7ca7c3ee9521a360b95d8aafb43ebe07fd359df</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:33:08 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e4dfdec293eb96ef212bcee5f794cf1ade434517929c37d21a4f41ca37a79b5e</td>
|
|
<td>[68a5cc2091727380a40e2b0f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\unzip_f3256ce0-a7ba-11e5-9412-1587795ee05c\0.1.14\unzip.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DevOps_Agent_MDI\externals\vstshost\LegacyVSTSPowerShellHost.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:22:37Z]</td>
|
|
<td>[d0a84cb87165412df6673807fda0ecc3]</td>
|
|
<td>[51212f269409b5a4859ba9fe1b31410f3229cf28]</td>
|
|
<td>[4b040c8675893d5c8ea46389bbd322e329c22ab35d6b5044364445cd3a9f29e3106491e5828b4906c091267233f96d85]</td>
|
|
<td>[61469298a56ed025523f0f77ac4f800eb04ee975570d73afc1a7072e746b23f352e89206e584c762cd5c7321049206d6222b5532a9d4d7a9f2e3a6a26499b86b]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>unzip.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\unzip_f3256ce0-a7ba-11e5-9412-1587795ee05c\0.1.14\</td>
|
|
<td></td>
|
|
<td>489</td>
|
|
<td>d0a84cb87165412df6673807fda0ecc3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:44 +0000 UTC</td>
|
|
<td>2025-04-25 19:46:34 +0000 UTC</td>
|
|
<td>51212f269409b5a4859ba9fe1b31410f3229cf28</td>
|
|
<td>4b040c8675893d5c8ea46389bbd322e329c22ab35d6b5044364445cd3a9f29e3106491e5828b4906c091267233f96d85</td>
|
|
<td>61469298a56ed025523f0f77ac4f800eb04ee975570d73afc1a7072e746b23f352e89206e584c762cd5c7321049206d6222b5532a9d4d7a9f2e3a6a26499b86b</td>
|
|
<td>2025-08-20 13:22:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-11-05 02:35:47 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:31:01.758 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e4a5eaff1f0000536fa3658ecd4cab4da69e1cf7a8a5477fbcbd1c04d12031d2</td>
|
|
<td>[68a3146b5f0c41860c8c850c, 68a3146b5f0c41860c8c855f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\html\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[07992cf118f6f4289bfbbd047fd6fb0d]</td>
|
|
<td>[8c8a01f4ffe2e1a05358d1016f61e1fdb432736e]</td>
|
|
<td>[11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036]</td>
|
|
<td>[dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\html\__pycache__\</td>
|
|
<td></td>
|
|
<td>4387</td>
|
|
<td>07992cf118f6f4289bfbbd047fd6fb0d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>8c8a01f4ffe2e1a05358d1016f61e1fdb432736e</td>
|
|
<td>11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036</td>
|
|
<td>dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e46e3f2b0c9ed8d7ecbd79530b3054260eb6b284f52d8bf8f2927034c9786d06</td>
|
|
<td>[68a34d6610b57c5bffc57dac]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e464c83307f9ee3bccc2f8e58a1a5cf19cff4dd16f52501a21ce7467107113e4</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20f]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindAccountLockouts.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[853693ccd74c3f9f1604548dd9906f01]</td>
|
|
<td>[ecbf76fe70056921b16d45cadb9a4e09bc8054c7]</td>
|
|
<td>[941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f]</td>
|
|
<td>[3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindAccountLockouts.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>6800</td>
|
|
<td>853693ccd74c3f9f1604548dd9906f01</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-01-12 15:17:36 +0000 UTC</td>
|
|
<td>2025-06-25 15:19:58 +0000 UTC</td>
|
|
<td>ecbf76fe70056921b16d45cadb9a4e09bc8054c7</td>
|
|
<td>941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f</td>
|
|
<td>3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e43742082134ff5d4d915ca172e8590e4514b785ec5e8502628ddd4a56928978</td>
|
|
<td>[68a17e2d75b9eb54d66b3e31]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\tmpEXO_dh1mrpen.jqt.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:50Z]</td>
|
|
<td>[ac7f8b7a05ad9ddcea083c53d571d542]</td>
|
|
<td>[6940392b4e96610355da57e6a1bbefa939d9c4a6]</td>
|
|
<td>[91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537]</td>
|
|
<td>[b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_dh1mrpen.jqt.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>ac7f8b7a05ad9ddcea083c53d571d542</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:00:48 +0000 UTC</td>
|
|
<td>2025-08-17 07:00:48 +0000 UTC</td>
|
|
<td>6940392b4e96610355da57e6a1bbefa939d9c4a6</td>
|
|
<td>91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537</td>
|
|
<td>b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4</td>
|
|
<td>2025-08-17 07:01:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e41c25b2cddca5e49140732debc1cecb6d24310050cd2d4751df81d7bff5dd70</td>
|
|
<td>[68a1a9b1552c0717cd81b68c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aa3qsaw5.zqk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:06:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aa3qsaw5.zqk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:06:35 +0000 UTC</td>
|
|
<td>2025-08-17 10:06:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:06:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3cee06479b6a97741b4a073f38b4d625530ce5fc7d5b6017ec03520a59f92cf</td>
|
|
<td>[68a24592503474046d560030, 68a6643ac834a71c320c303e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[IMAGENOW73-PROD]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\inet_gethost.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2314]</td>
|
|
<td>["C:\Program Files\erl8.3\erts-8.3\bin\inet_gethost.exe" 4 ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erl.exe]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe]</td>
|
|
<td>[2025-08-17T21:02:45Z, 2025-08-21T00:02:25Z]</td>
|
|
<td>[b323eb8ea66d680a0822c9272ec9667b]</td>
|
|
<td>[4ea3c3558f2f4b1fb8bc665095c03ed0e2f5d193]</td>
|
|
<td>[3a6f381b797e8608adb072844e396330581a17a0c15594ef79dce6b0973ce5ef1ae766ab78f4c05d17967f1af69641b0]</td>
|
|
<td>[9e8f62870d4022ff3cf7b311de2c3ee60381d7f54d628384e5ea54b8dd0148c011b41d480e561db5e55db8f2701af08689477d4204aafcbcefcb73d61964edb6]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>inet_gethost.exe</td>
|
|
<td>C:\Program Files\erl8.3\erts-8.3\bin\</td>
|
|
<td></td>
|
|
<td>45568</td>
|
|
<td>b323eb8ea66d680a0822c9272ec9667b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2017-03-14 21:37:04 +0000 UTC</td>
|
|
<td>2017-03-14 21:37:04 +0000 UTC</td>
|
|
<td>4ea3c3558f2f4b1fb8bc665095c03ed0e2f5d193</td>
|
|
<td>3a6f381b797e8608adb072844e396330581a17a0c15594ef79dce6b0973ce5ef1ae766ab78f4c05d17967f1af69641b0</td>
|
|
<td>9e8f62870d4022ff3cf7b311de2c3ee60381d7f54d628384e5ea54b8dd0148c011b41d480e561db5e55db8f2701af08689477d4204aafcbcefcb73d61964edb6</td>
|
|
<td>2025-07-17 00:02:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-09-15 08:02:50 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 00:06:14.119 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3c950092f766a680c42fedf935f167077aa38a8a8f4296537a95af623f0ecef</td>
|
|
<td>[68a48674c4cb2500be692636, 68a48674c4cb2500be692648]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Serilog.Settings.Configuration.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Serilog.Settings.Configuration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:50Z, 2025-08-19T14:08:08Z]</td>
|
|
<td>[04cc7245d80d1968583727b9ba884904]</td>
|
|
<td>[b3a8f8d587366dbb60a269398ebc0272036f2f98]</td>
|
|
<td>[51d8a279e9bde8efdf7e6a44f2d14401f530a565b788d57d4a251d6ac6398aba8713590d7c9859129b7aec97def0eff5]</td>
|
|
<td>[6ee5deb06671d30da27e4c194bf91dfa6dd4ac4cf6f2023697bf37c6d51a4ac55e569fb30052c6ceeb04d6abd08fca4c31e739d88ba0f56db628d2f5504f8e03]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Settings.Configuration.dll</td>
|
|
<td>C:\Program Files\acr-connect-apps\ConnectExpress\services\acrconnect-ai-lab-service\</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>64512</td>
|
|
<td>04cc7245d80d1968583727b9ba884904</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>3.3.0+651449dd4277217838b9224ba13acf66f5f95351</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-01-29 20:05:20 +0000 UTC</td>
|
|
<td>2021-10-07 12:46:44 +0000 UTC</td>
|
|
<td>b3a8f8d587366dbb60a269398ebc0272036f2f98</td>
|
|
<td>51d8a279e9bde8efdf7e6a44f2d14401f530a565b788d57d4a251d6ac6398aba8713590d7c9859129b7aec97def0eff5</td>
|
|
<td>6ee5deb06671d30da27e4c194bf91dfa6dd4ac4cf6f2023697bf37c6d51a4ac55e569fb30052c6ceeb04d6abd08fca4c31e739d88ba0f56db628d2f5504f8e03</td>
|
|
<td>2025-05-12 05:22:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-08 18:52:22 +0000 UTC</td>
|
|
<td>75</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-11 07:45:57.189 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8f5b4340d3b12a0cfa44ac2db4be4e0639e479ae847df04c4ed8b521734bb4a</td>
|
|
<td>[68a472b1b022648922e2359f]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\serializer-2.7.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[e8325763fd4235f174ab7b72ed815db1]</td>
|
|
<td>[24247f3bb052ee068971393bdb83e04512bb1c3c]</td>
|
|
<td>[9cc49e92c8f9c68db5caec6e9e550e880c7a3c73da01e958a023794ec8a8ce19a3561344b9a313444e15a5765403660d]</td>
|
|
<td>[884d865865858a46306a3680df69f3f0efa0df1313706b54e6900d36af21e17cb6828f5a6bac551c59f7f80bdd1cb64c3fdbde44e213519c4af87969e9e70774]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>serializer-2.7.2.jar</td>
|
|
<td>C:\opt\insideedge\jboss-4.2.3.GA\server\stc\deploy\JServer.war\WEB-INF\lib\</td>
|
|
<td></td>
|
|
<td>276420</td>
|
|
<td>e8325763fd4235f174ab7b72ed815db1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-18 18:38:25 +0000 UTC</td>
|
|
<td>2021-02-09 20:57:00 +0000 UTC</td>
|
|
<td>24247f3bb052ee068971393bdb83e04512bb1c3c</td>
|
|
<td>9cc49e92c8f9c68db5caec6e9e550e880c7a3c73da01e958a023794ec8a8ce19a3561344b9a313444e15a5765403660d</td>
|
|
<td>884d865865858a46306a3680df69f3f0efa0df1313706b54e6900d36af21e17cb6828f5a6bac551c59f7f80bdd1cb64c3fdbde44e213519c4af87969e9e70774</td>
|
|
<td>2025-08-08 17:07:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-21 10:42:54 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 17:16:07.228 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7</td>
|
|
<td>[68a472b1b022648922e235a5]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\stax-api-1.0-2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[7d18b63063580284c3f5734081fdc99f]</td>
|
|
<td>[d6337b0de8b25e53e81b922352fbea9f9f57ba0b]</td>
|
|
<td>[005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c]</td>
|
|
<td>[a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>stax-api-1.0-2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\stax-api-1.0-2.jar-1822c001758a163f\</td>
|
|
<td></td>
|
|
<td>23346</td>
|
|
<td>7d18b63063580284c3f5734081fdc99f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:12 +0000 UTC</td>
|
|
<td>d6337b0de8b25e53e81b922352fbea9f9f57ba0b</td>
|
|
<td>005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c</td>
|
|
<td>a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-07-16 00:46:28 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8c4c72afa24137920d6b8d2238f93b831de6fd96a6c1042d429f6ffaadf6c7f</td>
|
|
<td>[68a306a5ba5832f49fe9cf51]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\DXEDTRD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[7305181cdaf8b190b9badc84e3dff5ae]</td>
|
|
<td>[ad4cb486d36aa60ac16520b52231bc334b7ad3d4]</td>
|
|
<td>[01359fa140e8e0a435eec1c5452938b8cd492441c59dc4fb4f5ca9a46d261b72f8870a42f570a6a830d40ae698bc9d6e]</td>
|
|
<td>[38529f8773a22129028811112392d31569ce6f652b80b5e56031fd9f5f26f11e67e8b13df6546a43301f0e661f600e383ec18b7360426f72de0170247f0bc50c]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DXEDTRD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>Express Inplace Editors</td>
|
|
<td>415744</td>
|
|
<td>7305181cdaf8b190b9badc84e3dff5ae</td>
|
|
<td>ExpressEditors</td>
|
|
<td>3.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:11 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>ad4cb486d36aa60ac16520b52231bc334b7ad3d4</td>
|
|
<td>01359fa140e8e0a435eec1c5452938b8cd492441c59dc4fb4f5ca9a46d261b72f8870a42f570a6a830d40ae698bc9d6e</td>
|
|
<td>38529f8773a22129028811112392d31569ce6f652b80b5e56031fd9f5f26f11e67e8b13df6546a43301f0e661f600e383ec18b7360426f72de0170247f0bc50c</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:35:41 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8ade266edf46aa33f834a0cfce4dd7cb03c133394f8e795a495694d2dcf51dd</td>
|
|
<td>[68a6afe50e0f3bd8deac4d09, 68a6afe50e0f3bd8deac4d1d, 68a6afe50e0f3bd8deac4d2b, 68a6afe50e0f3bd8deac4d4b, 68a6afe50e0f3bd8deac4d6b, 68a6afe50e0f3bd8deac4d8b, 68a6afe50e0f3bd8deac4dab, 68a6afe50e0f3bd8deac4dcb, 68a6afe50e0f3bd8deac4deb, 68a6afe50e0f3bd8deac4e0b, 68a6afe50e0f3bd8deac4e2b, 68a6afe50e0f3bd8deac4e4b, 68a6afe50e0f3bd8deac4e6b, 68a6afe50e0f3bd8deac4e8b, 68a6afe50e0f3bd8deac4ebc, 68a6afe50e0f3bd8deac4ecb, 68a6afe50e0f3bd8deac4eeb, 68a6afe50e0f3bd8deac4f0b, 68a6afe50e0f3bd8deac4f2b, 68a6afe50e0f3bd8deac4f55, 68a6afe50e0f3bd8deac4f75, 68a6afe50e0f3bd8deac4f95, 68a6afe50e0f3bd8deac4fb5, 68a6afe50e0f3bd8deac4fd5, 68a6afe50e0f3bd8deac4ff5, 68a6afe50e0f3bd8deac5015, 68a6afe50e0f3bd8deac5035, 68a6afe50e0f3bd8deac5055, 68a6afe50e0f3bd8deac5075, 68a6afe50e0f3bd8deac509f, 68a6afe50e0f3bd8deac50bf, 68a6afe50e0f3bd8deac50df, 68a6afe50e0f3bd8deac5109, 68a6afe50e0f3bd8deac5129, 68a6afe50e0f3bd8deac5149, 68a6afe50e0f3bd8deac5173, 68a6afe50e0f3bd8deac5193, 68a6afe50e0f3bd8deac51b3, 68a6afe50e0f3bd8deac51d3, 68a6afe50e0f3bd8deac51d4, 68a6afe50e0f3bd8deac5206, 68a6afe50e0f3bd8deac521d, 68a6afe50e0f3bd8deac5234, 68a6afe50e0f3bd8deac5254, 68a6afe50e0f3bd8deac5288, 68a6afe50e0f3bd8deac52a8, 68a6afe50e0f3bd8deac52c8, 68a6afe50e0f3bd8deac52e8, 68a6afe50e0f3bd8deac5308, 68a6afe50e0f3bd8deac5328, 68a6afe50e0f3bd8deac5348, 68a6afe50e0f3bd8deac5368, 68a6afe50e0f3bd8deac5388, 68a6afe50e0f3bd8deac538e, 68a6afe50e0f3bd8deac53ca, 68a6afe50e0f3bd8deac53ce, 68a6afe50e0f3bd8deac540d, 68a6afe50e0f3bd8deac540e, 68a6afe50e0f3bd8deac5449, 68a6afe50e0f3bd8deac544e, 68a6afe50e0f3bd8deac546e, 68a6afe50e0f3bd8deac548e, 68a6afe50e0f3bd8deac54ae, 68a6afe50e0f3bd8deac54ce, 68a6afe50e0f3bd8deac54ee, 68a6afe50e0f3bd8deac550e, 68a6afe50e0f3bd8deac552e, 68a6afe50e0f3bd8deac5557, 68a6afe50e0f3bd8deac5578, 68a6afe50e0f3bd8deac5598, 68a6afe50e0f3bd8deac55b8, 68a6afe50e0f3bd8deac55d8, 68a6afe50e0f3bd8deac55f8, 68a6afe50e0f3bd8deac5618, 68a6afe50e0f3bd8deac563e, 68a6afe50e0f3bd8deac5668, 68a6afe50e0f3bd8deac5696, 68a6afe50e0f3bd8deac56b6, 68a6afe50e0f3bd8deac56ee, 68a6afe50e0f3bd8deac56f6, 68a6afe50e0f3bd8deac5730, 68a6afe50e0f3bd8deac5736, 68a6afe50e0f3bd8deac5769, 68a6afe50e0f3bd8deac579e, 68a6afe50e0f3bd8deac57aa, 68a6afe50e0f3bd8deac57c0, 68a6afe50e0f3bd8deac57ea, 68a6afe50e0f3bd8deac581e, 68a6afe50e0f3bd8deac5837, 68a6afe50e0f3bd8deac5840, 68a6afe50e0f3bd8deac5868, 68a6afe50e0f3bd8deac589e, 68a6afe50e0f3bd8deac58b0, 68a6afe50e0f3bd8deac58c0, 68a6afe50e0f3bd8deac58ef, 68a6afe50e0f3bd8deac591a, 68a6afe50e0f3bd8deac5931, 68a6afe50e0f3bd8deac5940, 68a6afe50e0f3bd8deac5960, 68a6afe50e0f3bd8deac5997, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>["C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "hXo1Zf6VLky_KmPbieDmPg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_4oagNq1uYkKW.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "l2dJdgmO0EKEcy3lbHO_DA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jMt802uamk-A.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "5yBV8M5ZKky8QVa2XjKXIQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OsWMQ5evTUao.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "bbKBJMhor0qSPjKEmObozg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_lWzCDbuYjECB.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "RWZCrGTxJEukWin4Cn6gpA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_fs8NQy_Tb0SC.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "H-_r9AR_9k2AFj8_pxAHOQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_qQ1l-5F7WU2y.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "h4tUC5Z8GUiDkvqup2gAyg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_rZAPvI9X7UW5.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "iRZ8oZpaD0ycmaV2_DF5xQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_PARt57I_A0OF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "ftbr4b3wiUaZv1QSU_XIpw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_yz0cIffcQkad.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ui5_HQcUKkKR0NPRbsBqRA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_wyzfHeXRaECP.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ljcm8wWPdU-P5tbZGS4dWQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1CORTouGuUO-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bWxeWBGgAkG3Sc_2EYl_ng" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_4HbpBje2ikyU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "BC9tIblMi0apUREbdamHmA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Fmwp3OvtikuG.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "JHE9EUCP702ZQsrxHHL-2Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9ezVqt1iP0Kd.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "MQEGqJpXjk-eXz9BoVa4dA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_3LIQ8VoYaESi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "LcHHyoJor0S9dU2IZKk1jA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UpEKXtFqjECQ.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "ZM2zLT4ir0u77PTtFCxUWA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_yyfNSynvNEKK.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "X_atkrV8OkO-XeijqfA07A" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bwPw7uL6xEWk.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "F9oLcjporEiseLAV33dlYw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OlOrZcRVvk-T.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "IvpBnNK01EWNfadRgDosSg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_22aGWAtXpEea.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "dXlIcX3rIUu7n7AXF-rJsA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9pPQvGhAj02k.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bupn0H0EOUqOuxBUx3YcsQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_KYSQnjMPb0Ol.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "3CNB0QVPq0qqFy_yVpSoJw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_hWDmOK-CM0CV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "w983Amzq_ka7MkqxzP9lfg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IRxumhnxm06r.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "A51sp4XK3kSaheRXHkT3JA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_FOmv3zSPVECh.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "R3b6QL6KfEWy6IitOCf1sg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_S9YOU6UzeEeA.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "7GgWxtr9ZEilieZrNbz7lw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_6v6GB9f50UCa.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "RKzT9sQBckm4s5hCT7pAow" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IQxXYxp0BUWr.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "CqucY4VIBEabezf8rYEYGg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UboXsl-UyEW4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Bjp0ExMR4E2TXhqMS1MWIg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_V0-AR7SijUCa.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "PWvsDFr3IUWoTLeNBCsY9g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_7FUYSVXUQkig.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "MoGFLl9i0US_6cPrmJO2kw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_oV4rNGkoC0GU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "nt1VpqgF6UmdRXHehzG2Cw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_CgoYZdXZVEG3.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "lYZp8PaBbkW17Kx2bbc_sw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_ffz8SCY_hUSb.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ksm2_bRrDEKPaJae-ke4Rw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jajHpoVQQU-i.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1jXxwtIon0uHo_s_iYITiQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_OUPYvATd4kGR.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "_OhOW5ZkZ0yZ0RvHdWqaHA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R4HAiBhiuUWF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "fdYdQp6-ikOO2yE9ckNqgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_6DRa3JzV10GT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "tkirIlsUq06HFxKCoGY_2Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Agbge0zK8UW0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "E3_MmXLH00ieT3Qu2Suc3g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_QCUb_G4FpUyi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "zUr4uzTuHk-I1hXuG9Ewdg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Jt45iQm6NE2O.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "OF2dKcf00U2W9hP7DirqHg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Q2Xs9GHvc0ud.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "y1Qrhlcdj0mxAqe903g3DQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IEykJ_dZmkij.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "XLP1Fo82p06YWS9ZmoacNw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bca0g6KNhka7.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "gG8SuQ25WUOWLAgtm4pSYA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_XA3-8t6CCkum.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "vPy8YM7zSkir3oeN8tHSkw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_hz5A3jDpMUGU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "B-ygLnt54Umj3e1qnn34AQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Ikt1RidAQkKb.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "BxZC8LBYokSAwwqzyXIjAg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R1Lltthh4kSt.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "-O1md1lCoEqaMgLjPTTpTA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_R5CN4hAI2kmi.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "5-XUCRrGZ0S0tuhYdEOMOQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_iFCXLj_CNkCU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "jm8LTArV1Ui0H4ks_LS4HQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_YugK_VLS5Eme.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "WJWpUqAiAkqSzeUBZ0Bxmg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_UiQQltyqu0C-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "osmipY6M4kS2dTV-RMkqxA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jHX16n7VuEex.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "r2x-12eePkGRIzQGLJSOOA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_xlMZsaf0_0a0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "SWR6NGVdik2wF54uNbUbmQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_oI4IFvrYMESu.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "9eY0gDEkt0uk2b7d9piP1w" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_L2ZZg8TNOkS9.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "3cNfhC0Hik-ZZKfDt4lyeQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_QbpgelKHJUuP.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "2ymdysd_bkK0kX6xA81Cgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_jRiHs2w1Okuh.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1_JUxYk_JEWZ7NdgQcRwEQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_t5_yVJ_V0UKf.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "_ZQxDF9K1Uu_eAEU8kH8wg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_XGL03zTQUUuU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "L4cjkrCzkEe-uE9vPywMAg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_nIO9hWmFC0e4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "L6kjzZZ3h0iH8Z4VFXreGA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_q1CJ6y4aWkKU.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "U5fopcKXBkiqBM90Utk-RQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_MP3IGGz-YEyr.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "hTHFcP30wE6fXX7s1RGL-g" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_SrBdiJpnB0qV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "GPns6pzJw0KaikwV8NcnLA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JInLjbLfvkmT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "iUU4XAAuWUOv7E_oBV1NCQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_3EpbNBjVtU6B.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bcGxtz6NVkmaTXuFdEpiqA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_tuXYrzaXHE6G.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "1BLTyk2p6kW6-Je6E5Whew" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_qeKSmn3s9UOI.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "aRDz4XeP40G4oTfzW1ZHwQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_C-DoNL9OWUGL.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "bdMHCccUikW_yJjV_yuUYA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_wajHBPKezEmc.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "giEdEkTcnEasjPN42s2XvA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_AV0DYdg0mkCH.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "70ZVJ8PDZEmeGNHdexmu8Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_IeTqNw2IDEWq.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "TUG22X17lUiZdZY7KKNaBQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JBPD4Np3PUGT.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "lajUKWcXx0SHGlgMAVrh_A" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1xclxMgXWku4.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "X_s-FIkN-kaT5K7uNUKBmw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_YD7_lywog0a_.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "u75jZleQ0kmYsZDOGAi2iQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_pwjUiF-m0EiO.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "N-HXEcSp7US-Or-3BqGkRA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1N3BZ-NyiEie.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "LOuaQBM69EiCYJb9tvZ_MA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_cMhwFpcIfUWo.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HzBdEpwMHkmpgqJ_v33dnw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_MoRoM5i2CkSX.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "Hd3N1jrWXUKRMfmWnEtkHQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_NojHU-UBWUyY.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "WShVbkAWx0-4h5_5OHMduw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_edN-WjHdQECC.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "CLxvFJ_IDkabXL_fXJzUDg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_nJBDeLgjFkSg.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "-Q1c_0gkhUKe9UY8wX9oMQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_5fPXzXQoeU2d.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "Ju8K_3cshEOfOuL4eiXyeQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_9wnNXXirxU2K.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "m-sR4xZ4dEewxYb8YqUiVQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_JtHf66uyykK-.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "MW_PHmBvckigUXapl5UlRQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_cYZ5a70A0Um0.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "8y-Mr3Dy8US7HWr6gzeTug" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_guwSxBfyj0GQ.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "xUIdpD5Y1EC3oqSUvONMxQ" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Ke7eulOk-EqV.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "KkYxvG7OjEOlrVvCejsr6w" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_a_0j9x_Xbkym.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "nF6HnXED0U26A1bBNJLswg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_c5zF2EtrWUic.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "KjBWtJZHVkuJ52EEv3vW6Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_1MuLB7WLr0qO.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "1VoiBcYmhUe4bey_QN9GDg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_pA0n5Ga04kO5.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "P6okzftwgUaD_L9Z6Qlfrg" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_VyYgaGgkWEOF.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "ZG0kzvi9S0mxvTMjw3mAWA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_bxNA-Z0bpkyp.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HzXnPbUSY0SjdRPkCgW40Q" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_Z0OK01EBj02Z.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "6D-aF7ax8UyDMGbJGZ3AtA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_p-TqTrPMNkif.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Calculate" -user snapshot -workstationID "lXULjJQvXU64tZrQZkRAgw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_mvsd7__IEUyL.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "edtt1e8alEOtHZolL9lfGw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_kPoWiQ7_0kiW.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "HWYLPMtJiU2nab3JqUhsiw" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_TDfgAgGcSEuj.tmp"}, "C:\Program Files\FUJIFILM\NaxisWS6\AmeWorkstation.exe" -appParamsSvr{-bootMode "Immediate" -user snapshot -workstationID "QBPl5GPUD0CIj0K02HogGA" -commandInfo "C:\Users\naxis\AppData\Local\Temp\NaxisNS6_clsvyRJmcUi3.tmp"}, ...]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:11Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:19Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:35Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:38Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:49Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:52Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:03Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:15Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:18Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:21Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:34Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:43Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[8bc414b5be933b0b478bc2caf4c3022c]</td>
|
|
<td>[f0732fd67e451ac305fc45e4fc86ec4a6a30488f]</td>
|
|
<td>[6f5642f7845e9c1a2afe1f778f939b34a5936ea0fd2feddceab674a8bd6b8b5cb4e6e2291bf9d97dad8541fa7b071c07]</td>
|
|
<td>[927ffd49b9fef74ec57aca82f9c9e518993dc193df4692e508ca0791529e86b5a4dc58ecb018bc7d72b571c03f777abd846cf988e7e506184d734d0f4bfca4b8]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AmeWorkstation.exe</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>974848</td>
|
|
<td>8bc414b5be933b0b478bc2caf4c3022c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:43 +0000 UTC</td>
|
|
<td>2023-06-16 03:15:07 +0000 UTC</td>
|
|
<td>f0732fd67e451ac305fc45e4fc86ec4a6a30488f</td>
|
|
<td>6f5642f7845e9c1a2afe1f778f939b34a5936ea0fd2feddceab674a8bd6b8b5cb4e6e2291bf9d97dad8541fa7b071c07</td>
|
|
<td>927ffd49b9fef74ec57aca82f9c9e518993dc193df4692e508ca0791529e86b5a4dc58ecb018bc7d72b571c03f777abd846cf988e7e506184d734d0f4bfca4b8</td>
|
|
<td>2025-05-07 14:27:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8871edd5a81b3ec00c8bd3a62c5151c8b07efe347a250f9962f96c82272052b</td>
|
|
<td>[68a5239e621d09b2b1ed5e54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PositioningServerInterface.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[3365edfac602c0aab571c97489df3f5a]</td>
|
|
<td>[f2a108f5b854cdf677b13fdf57d02f0452c8983d]</td>
|
|
<td>[fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af]</td>
|
|
<td>[6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PositioningServerInterface.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PositioningServerInterface</td>
|
|
<td>295424</td>
|
|
<td>3365edfac602c0aab571c97489df3f5a</td>
|
|
<td>PositioningServerInterface</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>f2a108f5b854cdf677b13fdf57d02f0452c8983d</td>
|
|
<td>fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af</td>
|
|
<td>6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e84cb02c1ab3298ff285dcd0295bd943457ba976193591a8f0577f1d2a017b56</td>
|
|
<td>[68a2529a2a645cc96ea797be]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_woxkkhvu.n5y.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:07:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_woxkkhvu.n5y.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:07:13 +0000 UTC</td>
|
|
<td>2025-08-17 22:07:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:07:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e825341353a932e915a4b47d42c60affc517e96299f8fd8175dc82c7b20fda91</td>
|
|
<td>[68a306a5ba5832f49fe9cf3e]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LIBCURL.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[cadb6482026d8d6faa091535e30ca20c]</td>
|
|
<td>[20fdf645983636ee5a77401d524d7cec45f2aafc]</td>
|
|
<td>[5afa2ec4d646a382de881999bd7911e0cfa61a0599424453dbc5afd6cda0ad251991b0abc5f6890ba6cd5718c9c108b7]</td>
|
|
<td>[8191d3bacb121d6e7d08f2209a3843273f73172c0ff55a6fede6f8aff083fd727cd78e0fa7c2a080658877f81519648d8ea71212b3f429cf3874e07633274939]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LIBCURL.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\SDL\APPS\</td>
|
|
<td>libcurl Shared Library</td>
|
|
<td>368128</td>
|
|
<td>cadb6482026d8d6faa091535e30ca20c</td>
|
|
<td>The cURL library</td>
|
|
<td>7.28.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>2024-12-13 21:18:02 +0000 UTC</td>
|
|
<td>20fdf645983636ee5a77401d524d7cec45f2aafc</td>
|
|
<td>5afa2ec4d646a382de881999bd7911e0cfa61a0599424453dbc5afd6cda0ad251991b0abc5f6890ba6cd5718c9c108b7</td>
|
|
<td>8191d3bacb121d6e7d08f2209a3843273f73172c0ff55a6fede6f8aff083fd727cd78e0fa7c2a080658877f81519648d8ea71212b3f429cf3874e07633274939</td>
|
|
<td>2025-05-01 08:09:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2016-12-27 00:48:27 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-01 08:11:29.212 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7cd8951956d349b568b7ccfd4f5b2529a8c113e67c32b028f52ffda371259d9</td>
|
|
<td>[68a472a799ad3734d804e2f7]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\commons-cli-1.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[bfdcae1ff93f0c07d733f03bdce28c9e]</td>
|
|
<td>[2bf96b7aa8b611c177d329452af1dc933e14501c]</td>
|
|
<td>[3e39c2926a3d022280dc6a706f0be11d073541500b641dfe485c7b054469a8a01902cbc8692e38ff976bc69fd974174f]</td>
|
|
<td>[0b8f4610d3a05a589026b1af605cf976f73e6fecb9b9cce9f572e5883ce0a78e8a9cfe48e06257bb68cb8eea080ffe84a2b0b73682036f85dbbb3c03cfdedfaa]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>commons-cli-1.2.jar</td>
|
|
<td>C:\B.Braun\OnlineSuite\wildfly\modules\system\layers\base\org\apache\commons\cli\main\</td>
|
|
<td></td>
|
|
<td>41123</td>
|
|
<td>bfdcae1ff93f0c07d733f03bdce28c9e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2016-08-18 17:12:48 +0000 UTC</td>
|
|
<td>2016-08-18 17:12:48 +0000 UTC</td>
|
|
<td>2bf96b7aa8b611c177d329452af1dc933e14501c</td>
|
|
<td>3e39c2926a3d022280dc6a706f0be11d073541500b641dfe485c7b054469a8a01902cbc8692e38ff976bc69fd974174f</td>
|
|
<td>0b8f4610d3a05a589026b1af605cf976f73e6fecb9b9cce9f572e5883ce0a78e8a9cfe48e06257bb68cb8eea080ffe84a2b0b73682036f85dbbb3c03cfdedfaa</td>
|
|
<td>2025-08-12 05:03:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-11 00:31:17 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-08-12 04:37:58.32 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7c8e7edd9112137895820e789baaaeca41626b01fb99fede82968ddb66d02cf</td>
|
|
<td>[68a717935475f1153dfd395b]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_pacs1]</td>
|
|
<td>[NT-COMPASS4]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_tsk_pacs1\AppData\Local\Temp\{f65db027-aff3-4070-886a-0d87064aabb1}\.ba1\wixstdba.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\ProgramData\Package Cache\DF7F0A73BFA077E483E51BFB97F5E2ECEEDFB6A3\2013\vcredist_x86.exe]</td>
|
|
<td>[C:\ProgramData\Package Cache\DF7F0A73BFA077E483E51BFB97F5E2ECEEDFB6A3\2013\vcredist_x86.exe]</td>
|
|
<td>[2025-08-21T12:56:42Z]</td>
|
|
<td>[a52e5220efb60813b31a82d101a97dcb]</td>
|
|
<td>[56e16e4df0944cb07e73a01301886644f062d79b]</td>
|
|
<td>[6919265d0d3175e6b44b660ed9db34778ad9ab5d28c6b5d5d408788e161d7153f686665fca382cc4d9833b85d419e88c]</td>
|
|
<td>[d6565ba18b5b9795d6bde3ef94d8f7cd77bf8bb69ba3fe7adefb80fc7c5d888cdfdc79238d86a0839846aea4a1e51fc0caed3d62f7054885e8b15fad9f6c654e]</td>
|
|
<td>[172.17.37.230]</td>
|
|
<td>[172.17.36.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>wixstdba.dll</td>
|
|
<td>C:\Users\lillyr\AppData\Local\Temp\{f65db027-aff3-4070-886a-0d87064aabb1}\.ba1\</td>
|
|
<td>WiX Standard Bootstrapper Application</td>
|
|
<td>120320</td>
|
|
<td>a52e5220efb60813b31a82d101a97dcb</td>
|
|
<td>Windows Installer XML</td>
|
|
<td>3.7.2514.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2014-01-14 19:38:42 +0000 UTC</td>
|
|
<td>2014-01-14 19:38:42 +0000 UTC</td>
|
|
<td>56e16e4df0944cb07e73a01301886644f062d79b</td>
|
|
<td>6919265d0d3175e6b44b660ed9db34778ad9ab5d28c6b5d5d408788e161d7153f686665fca382cc4d9833b85d419e88c</td>
|
|
<td>d6565ba18b5b9795d6bde3ef94d8f7cd77bf8bb69ba3fe7adefb80fc7c5d888cdfdc79238d86a0839846aea4a1e51fc0caed3d62f7054885e8b15fad9f6c654e</td>
|
|
<td>2025-05-12 13:22:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-31 13:22:55 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-05-12 01:13:46.618 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7c553ff1a507979ea54919f4443f196c968882b087280f0e1d45dfe08f84b9f</td>
|
|
<td>[68a3146b5f0c41860c8c8517, 68a3146b5f0c41860c8c856a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\base64.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[ff71871ad5f9fc74456c58065b29b949]</td>
|
|
<td>[d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd]</td>
|
|
<td>[05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc]</td>
|
|
<td>[2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>base64.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>25797</td>
|
|
<td>ff71871ad5f9fc74456c58065b29b949</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd</td>
|
|
<td>05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc</td>
|
|
<td>2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7c26f470749e005a957ceca6832cec2745e6c227dc8cde71bd07239ddb904f1</td>
|
|
<td>[68a16bd60756fe54a9918f95, 68a2149cb58debea69d7c73d, 68a2bd5ff793a9057f329bfe, 68a3663261f8067c48423eaa, 68a40efceddb3a9f1a71a5fa, 68a4b7cd36bc5d38057e2358]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zCrashReport64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[28fae224af5f7dbee89946acea3675f8]</td>
|
|
<td>[768587a2e2a33aa921b8b6cc2f94eca00928d414]</td>
|
|
<td>[d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b]</td>
|
|
<td>[3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zCrashReport64.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Crash Handling Module</td>
|
|
<td>260408</td>
|
|
<td>28fae224af5f7dbee89946acea3675f8</td>
|
|
<td>CrashRpt</td>
|
|
<td>1.0.0.2230</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>768587a2e2a33aa921b8b6cc2f94eca00928d414</td>
|
|
<td>d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b</td>
|
|
<td>3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:22 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7a68bf65d100ee688ccbd5bc3ae56686f7242c452236e20b3694cf8ed799bc8</td>
|
|
<td>[68a18e00ac9837c6e03c8389, 68a2df7d66d5c17a898e511e, 68a431051f4ef020faf2a7a9, 68a5828bc061ac4c45b0fd35, 68a6d41de3c533b4c1c96fa6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NUHNQENG]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\NQS\NQEngine\Engine2000S.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[E:\NQS\NQEngine\Engine2000S.exe]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:04Z, 2025-08-19T08:00:06Z, 2025-08-20T08:00:08Z, 2025-08-21T08:00:10Z]</td>
|
|
<td>[7ffb1ce555b054984ec466e3d928178c]</td>
|
|
<td>[9bbbe25bfedb1c4b4d5c61d441025d0ae882567c]</td>
|
|
<td>[3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8]</td>
|
|
<td>[e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Engine2000S.exe</td>
|
|
<td>E:\NQS\NQEngine\</td>
|
|
<td>NQ 2000</td>
|
|
<td>2737152</td>
|
|
<td>7ffb1ce555b054984ec466e3d928178c</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-24 14:39:41 +0000 UTC</td>
|
|
<td>2016-02-12 20:07:11 +0000 UTC</td>
|
|
<td>9bbbe25bfedb1c4b4d5c61d441025d0ae882567c</td>
|
|
<td>3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8</td>
|
|
<td>e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b</td>
|
|
<td>2025-07-17 08:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e74ce1799cb48cfd0822a610cf41a101f6b996f6246aac0ff28d21902a2df002</td>
|
|
<td>[68a2a5b5b3e0e8853da851bb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tgxzzgk2.4mz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:01:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tgxzzgk2.4mz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:01:54 +0000 UTC</td>
|
|
<td>2025-08-18 04:01:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:01:57 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e743f27f9e846bf66fec2e26d574dc11f7d1a16530aed8bf687fe1786a7c2ec6</td>
|
|
<td>[68a472b1b022648922e2357d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\hsqldb-2.3.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[c4cd9109348152a367192818f4e4fc11]</td>
|
|
<td>[970fd7b8f635e2c19305160459649569655b843c]</td>
|
|
<td>[53de0a78b761e59e058e65e8102ed4afa7e3eb3453040eb73bea2918b533724a21f54d1306d8b76c48a52f02a49860df]</td>
|
|
<td>[880647f17f67f97023078e003db822c5e42a3488a3148048b623664c6062841816cf132dabfc546937de79f980bc35686f14568e095d4ebf9f676f83f00db1cf]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hsqldb-2.3.2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>1473091</td>
|
|
<td>c4cd9109348152a367192818f4e4fc11</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>970fd7b8f635e2c19305160459649569655b843c</td>
|
|
<td>53de0a78b761e59e058e65e8102ed4afa7e3eb3453040eb73bea2918b533724a21f54d1306d8b76c48a52f02a49860df</td>
|
|
<td>880647f17f67f97023078e003db822c5e42a3488a3148048b623664c6062841816cf132dabfc546937de79f980bc35686f14568e095d4ebf9f676f83f00db1cf</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-06 17:17:56 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e642ba38c1b80ccb926e5d13c06a8ba9b700308edd6764b20b1d72973f1f7a3b</td>
|
|
<td>[68a3146b5f0c41860c8c8515, 68a3146b5f0c41860c8c8568]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\string.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[566c8c7cc2e8b6a0d8c56c8e9ecbaa3a]</td>
|
|
<td>[0034fdaf7b975f232e54048ebfde010287bb30bb]</td>
|
|
<td>[99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef]</td>
|
|
<td>[de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>string.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>11659</td>
|
|
<td>566c8c7cc2e8b6a0d8c56c8e9ecbaa3a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>0034fdaf7b975f232e54048ebfde010287bb30bb</td>
|
|
<td>99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef</td>
|
|
<td>de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e5f565e47b516aa1f41e0b4bcadf07d2dff275abedf5bb8409b01aafec982af2</td>
|
|
<td>[68a472b1b022648922e2356e]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\DsmFluidFsApi-6.0.0.94.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:38Z]</td>
|
|
<td>[1d3ab9e93f735a8f6b207e8f6fa5604f]</td>
|
|
<td>[5cac81386f94ca106b2337743d581a1de21cb742]</td>
|
|
<td>[5b86d2dbf4b4f9eda44d590822e55a203370adee7c9fd44999fdfb06b152271c67ffe0b1196597d55c4c332098ba3690]</td>
|
|
<td>[8ddad70f20c4ea9074d40344f04d37a919b3f87c10cd217970f345c15f20b68a3dd7b552eedd17cb5fe23ab8941aa44294a6058ffa863a892e3d12f88142fec2]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DsmFluidFsApi-6.0.0.94.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>1944037</td>
|
|
<td>1d3ab9e93f735a8f6b207e8f6fa5604f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>5cac81386f94ca106b2337743d581a1de21cb742</td>
|
|
<td>5b86d2dbf4b4f9eda44d590822e55a203370adee7c9fd44999fdfb06b152271c67ffe0b1196597d55c4c332098ba3690</td>
|
|
<td>8ddad70f20c4ea9074d40344f04d37a919b3f87c10cd217970f345c15f20b68a3dd7b552eedd17cb5fe23ab8941aa44294a6058ffa863a892e3d12f88142fec2</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:49 +0000 UTC</td>
|
|
<td>52</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed550633d5d9cca7b426dac56666ec9a076a0fd328a3578465617c705b9b7abf</td>
|
|
<td>[68a55bd959b5c4211a08ec3b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mc0sxuun.dbv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:23:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mc0sxuun.dbv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:23:31 +0000 UTC</td>
|
|
<td>2025-08-20 05:23:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:23:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed40ecd60e4ade1ed57b3949d0beb19565a6fbc9e9238e7d60ae5de0e431abea</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20d]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\LastReboot.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[fd0d3b6d86dba9dcf7ae484c4f0ee02e]</td>
|
|
<td>[a5c9075875cc116e1c0251652af618da238c7fe4]</td>
|
|
<td>[ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc]</td>
|
|
<td>[aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LastReboot.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3398</td>
|
|
<td>fd0d3b6d86dba9dcf7ae484c4f0ee02e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-10 13:26:50 +0000 UTC</td>
|
|
<td>2024-12-05 19:56:50 +0000 UTC</td>
|
|
<td>a5c9075875cc116e1c0251652af618da238c7fe4</td>
|
|
<td>ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc</td>
|
|
<td>aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ec71b467028b6db965ff8ab64c235215c598f54d4a63cad113024dd8fc771dc3</td>
|
|
<td>[68a3146b5f0c41860c8c853a, 68a3146b5f0c41860c8c8572]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\mimetypes.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[7603dbb91271b3fdb5f1bc8cb3ca1d91]</td>
|
|
<td>[570e0305f2409135f29de45c38bdcdb053c14bf0]</td>
|
|
<td>[1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d]</td>
|
|
<td>[8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mimetypes.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>24884</td>
|
|
<td>7603dbb91271b3fdb5f1bc8cb3ca1d91</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>570e0305f2409135f29de45c38bdcdb053c14bf0</td>
|
|
<td>1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d</td>
|
|
<td>8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ec11abdeb642ae755f7c7b4d017e7c78b5da4e2b575c721f71eb4d57f3e7a88d</td>
|
|
<td>[68a469504fb71ee844e91321]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5a52494c1f07448092c118c8e656989b.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:08:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5a52494c1f07448092c118c8e656989b.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:08:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ebed11e668287d54fa7671ec27caba844bc77d51026d96ba55b9223b02a274ed</td>
|
|
<td>[68a182e48913a6156189a448]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b10tnrr1.e0s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:21:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b10tnrr1.e0s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:21:03 +0000 UTC</td>
|
|
<td>2025-08-17 07:21:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:21:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ebb5ece0ff3bd72bb6cacd015548e2e5f470d1385d1aa9eb8bb26a949cbf2bb6</td>
|
|
<td>[68a472b1b022648922e2357a]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\flying-saucer-pdf-9.0.5.D2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:40Z]</td>
|
|
<td>[66aa48373671380d81c3d726f1b7ee73]</td>
|
|
<td>[53e8c4f02c3e7b8ef200dd579ede80300b3f3a76]</td>
|
|
<td>[70f37b8cf5b06f5a3f519c6978457cbf9d6243df26e8d0707c5c21c12e0cbe2c803482f6dbe6d4c817b64d5c16175e7f]</td>
|
|
<td>[bff0d28930c3e9555601d1abc88a9c645054b123b4c882d9a49f799548263d0330da9bfa798bc68b35d76883ab23c696af7c051cefe362de6eef8b00531a117f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>flying-saucer-pdf-9.0.5.D2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>109069</td>
|
|
<td>66aa48373671380d81c3d726f1b7ee73</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>53e8c4f02c3e7b8ef200dd579ede80300b3f3a76</td>
|
|
<td>70f37b8cf5b06f5a3f519c6978457cbf9d6243df26e8d0707c5c21c12e0cbe2c803482f6dbe6d4c817b64d5c16175e7f</td>
|
|
<td>bff0d28930c3e9555601d1abc88a9c645054b123b4c882d9a49f799548263d0330da9bfa798bc68b35d76883ab23c696af7c051cefe362de6eef8b00531a117f</td>
|
|
<td>2025-03-28 16:04:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-11 12:21:15 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:32:53.896 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ebb33e93bf4aa5605d294227a8093dc28a5320c6933101c7c95dbdabd8dd1256</td>
|
|
<td>[68a4709fa6c6568ae291d431]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\_isuser_0x0409.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:39:58Z]</td>
|
|
<td>[fd437e74f172ce8c5f247b12a3e5925a]</td>
|
|
<td>[4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc]</td>
|
|
<td>[fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5]</td>
|
|
<td>[753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_isuser_0x0409.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\</td>
|
|
<td></td>
|
|
<td>86016</td>
|
|
<td>fd437e74f172ce8c5f247b12a3e5925a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:39:55 +0000 UTC</td>
|
|
<td>2025-08-19 12:39:55 +0000 UTC</td>
|
|
<td>4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc</td>
|
|
<td>fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5</td>
|
|
<td>753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae</td>
|
|
<td>2025-08-19 12:39:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb842cd2ff4752c9c0be6f318f85fef85bf1a20766aa33afa806180fa4c4a68b</td>
|
|
<td>[68a171b5b579a67a97fbd1f8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-belimed2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Unify\SQLBase115\dbntsrv.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>["C:\Program Files (x86)\Unify\SQLBase115\dbntsrv.exe" "SERVICE=Unify SQLBase srvICS" "INI=C:\Program Files (x86)\Unify\SQLBase115\sql.ini"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-17T06:02:01Z]</td>
|
|
<td>[7ab7af097fccb82a4c7ff9351ca7e72e]</td>
|
|
<td>[fa81bb1ecb1a6c818aab63b64c679bff5086f5a4]</td>
|
|
<td>[c907cf979401fe7b166b39d03edb72b5dbefe20e8f8de650e304d6c6e72b41e56f69de08396d5acfc12a784e5ca176ea]</td>
|
|
<td>[b3e2b1b81e36d5e17f00473c01a3f79dce90edb0a4f403a12ca6ffa3d9dec9eaf424b1849612602e6c2d802a46d550251d1de0b82c2debac871a09ae86581502]</td>
|
|
<td>[172.17.22.203]</td>
|
|
<td>[172.17.22.203]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbntsrv.exe</td>
|
|
<td>C:\Program Files (x86)\Unify\SQLBase115\</td>
|
|
<td>DBNTSRV</td>
|
|
<td>1241088</td>
|
|
<td>7ab7af097fccb82a4c7ff9351ca7e72e</td>
|
|
<td>Unify SQLBase</td>
|
|
<td>11.5.4</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-01-26 18:00:57 +0000 UTC</td>
|
|
<td>2021-01-26 18:00:57 +0000 UTC</td>
|
|
<td>fa81bb1ecb1a6c818aab63b64c679bff5086f5a4</td>
|
|
<td>c907cf979401fe7b166b39d03edb72b5dbefe20e8f8de650e304d6c6e72b41e56f69de08396d5acfc12a784e5ca176ea</td>
|
|
<td>b3e2b1b81e36d5e17f00473c01a3f79dce90edb0a4f403a12ca6ffa3d9dec9eaf424b1849612602e6c2d802a46d550251d1de0b82c2debac871a09ae86581502</td>
|
|
<td>2025-04-27 06:05:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-08-13 16:28:22 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-27 06:06:00.166 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb7cb84c7f42b1080a828abf703d8c27e932b9d7e81a9975be379c513020d6fa</td>
|
|
<td>[68a6afe50e0f3bd8deac4f54, 68a6afe50e0f3bd8deac509e, 68a6afe50e0f3bd8deac5108, 68a6afe50e0f3bd8deac5172, 68a6afe50e0f3bd8deac5559, 68a6afe50e0f3bd8deac5657, 68a6afe50e0f3bd8deac5768, 68a6afe50e0f3bd8deac5d35, 68a6afe50e0f3bd8deac5db3, 68a6afe50e0f3bd8deac5ef6]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\lib\pg_stat_statements.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:35Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[565bddb6bc8cb2aca853a506d4dc2927]</td>
|
|
<td>[1f8996f7e8ab5a1bb5fadb19854b6b19dcd07e52]</td>
|
|
<td>[efc2c1fdb47ad5f88748766e2ee32acb7936d0039ccb303ddd048942ecd9e5a6d20b8ed7acbb4b26ba261b14e3a0271c]</td>
|
|
<td>[ab85c4036c9cdcf60972944ee9d4e20b8869c4201c22267206dc58093bc8e61ada71b565e4a0988a5d2982fb2f5fda55ebcaedf6bd6c94fae231d6aa5f2e017b]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pg_stat_statements.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\lib\</td>
|
|
<td>pg_stat_statements - execution statistics of SQL statements</td>
|
|
<td>36864</td>
|
|
<td>565bddb6bc8cb2aca853a506d4dc2927</td>
|
|
<td>PostgreSQL</td>
|
|
<td>12.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 18:02:07 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:37 +0000 UTC</td>
|
|
<td>1f8996f7e8ab5a1bb5fadb19854b6b19dcd07e52</td>
|
|
<td>efc2c1fdb47ad5f88748766e2ee32acb7936d0039ccb303ddd048942ecd9e5a6d20b8ed7acbb4b26ba261b14e3a0271c</td>
|
|
<td>ab85c4036c9cdcf60972944ee9d4e20b8869c4201c22267206dc58093bc8e61ada71b565e4a0988a5d2982fb2f5fda55ebcaedf6bd6c94fae231d6aa5f2e017b</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2021-10-31 11:34:06 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:01:04.066 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb74c255ef2059b0e4a07ec54eab6d24dd9807c9da0e695f343911b4001b62a8</td>
|
|
<td>[68a16bd60756fe54a9918fa3, 68a2149cb58debea69d7c74e, 68a2bd5ff793a9057f329c09, 68a3663261f8067c48423ebc, 68a40efceddb3a9f1a71a605, 68a4b7cd36bc5d38057e236a]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[5507945c8429858e9e88070ce5a42f1e]</td>
|
|
<td>[780c5bab6f9d26a9b0c213f0048ecf231c1404cb]</td>
|
|
<td>[bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a]</td>
|
|
<td>[2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zData.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>3605816</td>
|
|
<td>5507945c8429858e9e88070ce5a42f1e</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>780c5bab6f9d26a9b0c213f0048ecf231c1404cb</td>
|
|
<td>bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a</td>
|
|
<td>2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:27 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb717bf9e34c43fef95539bdc98c8c54edf0644f618f88734975d128c4818304</td>
|
|
<td>[68a16bd60756fe54a9918f92, 68a2149cb58debea69d7c73e, 68a2bd5ff793a9057f329bf8, 68a3663261f8067c48423eab, 68a40efceddb3a9f1a71a5f5, 68a4b7cd36bc5d38057e2359]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\util.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[996efd9d4e57041ce02ca6e95a59bda6]</td>
|
|
<td>[ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d]</td>
|
|
<td>[c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a]</td>
|
|
<td>[d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>util.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>467256</td>
|
|
<td>996efd9d4e57041ce02ca6e95a59bda6</td>
|
|
<td>Zoom</td>
|
|
<td>1, 0, 2012, 1222</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d</td>
|
|
<td>c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a</td>
|
|
<td>d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:59 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ead29daa0ec823d30c55d4ffe8236287216c32b6ff4534b1e99dbe8bcb18ffbf</td>
|
|
<td>[68a472b1b022648922e23598]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\org.mozilla.javascript-1.7.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[ec441f8787033e99da1eb599e021dc78]</td>
|
|
<td>[b520e18bd357a47deb2e902ce49533564236219b]</td>
|
|
<td>[f407bd7d2e82ea58842a822543e96dde41d4d782ec0f40ca99fb9587255c2896646b1177833cceb3e26890afcea155e7]</td>
|
|
<td>[6d1bc4538bbe9874218b3c74d62a13979791f19b3e7ef2de0d15a4928fba2bcd1e5237ca51fcdcd4f52ef9c6c7e728127507f3c97573756ea829dc978e320761]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>org.mozilla.javascript-1.7.2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\modules\system\layers\base\org\eclipse\birt\main\</td>
|
|
<td></td>
|
|
<td>899742</td>
|
|
<td>ec441f8787033e99da1eb599e021dc78</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-05 21:55:24 +0000 UTC</td>
|
|
<td>1980-02-01 05:00:00 +0000 UTC</td>
|
|
<td>b520e18bd357a47deb2e902ce49533564236219b</td>
|
|
<td>f407bd7d2e82ea58842a822543e96dde41d4d782ec0f40ca99fb9587255c2896646b1177833cceb3e26890afcea155e7</td>
|
|
<td>6d1bc4538bbe9874218b3c74d62a13979791f19b3e7ef2de0d15a4928fba2bcd1e5237ca51fcdcd4f52ef9c6c7e728127507f3c97573756ea829dc978e320761</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-06-07 04:17:20 +0000 UTC</td>
|
|
<td>61</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:58:11.933 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ea8ebc2434881a8707d0b7745bb45b216a93fc17cb44f7989e884986d3042ed4</td>
|
|
<td>[68a26d9b01bfd350e1216692]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_plvpuyxw.2rp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:02:27Z]</td>
|
|
<td>[e27a0a2d3577c6ec112ce253a21fd3da]</td>
|
|
<td>[3045a8bf5fe3e3e2ca9307923d50e98829725c76]</td>
|
|
<td>[c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9]</td>
|
|
<td>[c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_plvpuyxw.2rp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>e27a0a2d3577c6ec112ce253a21fd3da</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:02:27 +0000 UTC</td>
|
|
<td>2025-08-18 00:02:27 +0000 UTC</td>
|
|
<td>3045a8bf5fe3e3e2ca9307923d50e98829725c76</td>
|
|
<td>c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9</td>
|
|
<td>c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1</td>
|
|
<td>2025-08-18 00:02:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ea5de5f33b465433568ded888ad461e8cd74ae8297fe3e2fd6c8e9c9cf703715</td>
|
|
<td>[68a306a5ba5832f49fe9cf5d]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\pbfldrdlg.bpl]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[89af5a41cc0cddf1698a2f44c7df4668]</td>
|
|
<td>[250f2f9900e16fe53a94db1d1b01f7c6791fb023]</td>
|
|
<td>[b1715f0f5c6bcd515ca157346f192f8225461c6c9763bc0571131028fe37e6d67926701c73127f099e105490c97769a1]</td>
|
|
<td>[5a323a729e9369af907574ecd7c788f0f60a32b0da0ebb8a0550d9287f9ccb40398d4bdfcca992002d034247ace53792dcc0aa8588f3f0ee6fdb619dee828101]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pbfldrdlg.bpl</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>35328</td>
|
|
<td>89af5a41cc0cddf1698a2f44c7df4668</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:24 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:58 +0000 UTC</td>
|
|
<td>250f2f9900e16fe53a94db1d1b01f7c6791fb023</td>
|
|
<td>b1715f0f5c6bcd515ca157346f192f8225461c6c9763bc0571131028fe37e6d67926701c73127f099e105490c97769a1</td>
|
|
<td>5a323a729e9369af907574ecd7c788f0f60a32b0da0ebb8a0550d9287f9ccb40398d4bdfcca992002d034247ace53792dcc0aa8588f3f0ee6fdb619dee828101</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:33:06 +0000 UTC</td>
|
|
<td>56</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ea32bf08b24aa8101bacc2c780dcbd2a24ed18c63eee00f5543ca055d0c30477</td>
|
|
<td>[68a306a5ba5832f49fe9cf54]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\ECQDBCD4.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[4e46b346a6ced129018e6f0ce0e2ca1a]</td>
|
|
<td>[f295b22d136636a700bbc6a294470782ccd41525]</td>
|
|
<td>[4add4bc293959198bd27f132e42d2c75ba332adcd25ffd078307c76fbf84ce9389f380c61817457d12d52569cd882f9d]</td>
|
|
<td>[c42c24a608032509d2f70f0fca2d17b1478c0122e5f9c75921ce3368d875bc9d96c18bc60f8d706f2c8eeb781d71218d450faed31a4f978f996a6ca5ef2dd1e1]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ECQDBCD4.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>ExpressQuantumDBControl</td>
|
|
<td>322048</td>
|
|
<td>4e46b346a6ced129018e6f0ce0e2ca1a</td>
|
|
<td>ExpressQuantumGrid & ExpressQuantumTreeList</td>
|
|
<td>3.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:11 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:50 +0000 UTC</td>
|
|
<td>f295b22d136636a700bbc6a294470782ccd41525</td>
|
|
<td>4add4bc293959198bd27f132e42d2c75ba332adcd25ffd078307c76fbf84ce9389f380c61817457d12d52569cd882f9d</td>
|
|
<td>c42c24a608032509d2f70f0fca2d17b1478c0122e5f9c75921ce3368d875bc9d96c18bc60f8d706f2c8eeb781d71218d450faed31a4f978f996a6ca5ef2dd1e1</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2015-09-11 03:41:54 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e9fcae336dc75d1cb657622eeaa2ab81083a02b7daedf904f8ba15267c64c8d3</td>
|
|
<td>[68a1dc843e3eb3bfafb56906]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nOSCCAPP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr4qf3zl.d0p.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:43:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tr4qf3zl.d0p.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:43:24 +0000 UTC</td>
|
|
<td>2025-08-17 13:43:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:43:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eff71ebfb31f1822e569edc81990a969cf42a402a6a6f42cf4d1227e6ea0d1a7</td>
|
|
<td>[68a23457310f884f1ff6772d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rgmk0of0.40c.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:58:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rgmk0of0.40c.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:58:05 +0000 UTC</td>
|
|
<td>2025-08-17 19:58:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:58:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>efe3198f94732357b04ee6a7e13a5c0914d0db372c7b8889bff1ea2a925da1b8</td>
|
|
<td>[68a16bd60756fe54a9918f8f, 68a2149cb58debea69d7c73a, 68a2bd5ff793a9057f329bf5, 68a3663261f8067c48423ea8, 68a40efceddb3a9f1a71a5f2, 68a4b7cd36bc5d38057e2357]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cmmbiz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[41a96aedf2095d6e5e88c39173a010ac]</td>
|
|
<td>[e97e89687d29d309d2b56b2487276352e60ba184]</td>
|
|
<td>[f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f]</td>
|
|
<td>[f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cmmbiz.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>786232</td>
|
|
<td>41a96aedf2095d6e5e88c39173a010ac</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>e97e89687d29d309d2b56b2487276352e60ba184</td>
|
|
<td>f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f</td>
|
|
<td>f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:03 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>efdd8526ee90a02300ee6859ff21d3c192df2760b14c92d78e3f40657602b7f0</td>
|
|
<td>[68a5239e621d09b2b1ed5e4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBDeviceDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[fccd46d7671843dc7a4835197d775094]</td>
|
|
<td>[ece368dcb0767f9917a8d3afc0ed9082d6700894]</td>
|
|
<td>[f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1]</td>
|
|
<td>[b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PBDeviceDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PBDeviceDiagPlugIn</td>
|
|
<td>27648</td>
|
|
<td>fccd46d7671843dc7a4835197d775094</td>
|
|
<td>PBDeviceDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:04 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:04 +0000 UTC</td>
|
|
<td>ece368dcb0767f9917a8d3afc0ed9082d6700894</td>
|
|
<td>f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1</td>
|
|
<td>b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>efd67df7b6676e33189b4db8c65a8ca9c094d012f2458d417ba39815fba176c9</td>
|
|
<td>[68a5239e621d09b2b1ed5e60]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.MVVM.Behaviors.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[1f0a30782b0e92f4b0fc04d35cec0b37]</td>
|
|
<td>[e2ae44be93aaef47cf3b452997f278480e2ae488]</td>
|
|
<td>[cbb48b4aefa283eedcd5e5ae90800d1cfa7c9192124446c1f9ee474e4505c10337c320bc665a3de1ad708a806f881c0b]</td>
|
|
<td>[acf93a61014c82a7d80c19dad19ec8a0e271045034fc09e5fa3ea10763e2c2ab48b3b0e9b14c9f2f777a95eff4231cf009dd637c5416b534d22eda160b01f947]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.MVVM.Behaviors.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.MVVM.Behaviors</td>
|
|
<td>17920</td>
|
|
<td>1f0a30782b0e92f4b0fc04d35cec0b37</td>
|
|
<td>Stanley.Infra.MVVM.Behaviors</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>e2ae44be93aaef47cf3b452997f278480e2ae488</td>
|
|
<td>cbb48b4aefa283eedcd5e5ae90800d1cfa7c9192124446c1f9ee474e4505c10337c320bc665a3de1ad708a806f881c0b</td>
|
|
<td>acf93a61014c82a7d80c19dad19ec8a0e271045034fc09e5fa3ea10763e2c2ab48b3b0e9b14c9f2f777a95eff4231cf009dd637c5416b534d22eda160b01f947</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-19 17:25:21 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ef49fec713592f7784a3b04386a09ac7d743545acad8e07ffda9c94495eb4474</td>
|
|
<td>[68a306a5ba5832f49fe9cf60]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\SCHEMAI.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:38Z]</td>
|
|
<td>[b4593102f10c694c94424facfdf1fcf8]</td>
|
|
<td>[947d3c36975c6d70be3a88ea6e1818c931da13f5]</td>
|
|
<td>[c6a0ea3b47351edcee99f284585f66750f580bff1369d64b7084f3698b7211186a8f52b4148f64a1b50e405fe088fd57]</td>
|
|
<td>[ce61d29f9512a2b457b4ab94e2dc8adb0051f93d772ebb56bef390d7123f6978e6ef277bf47a56d024ba15e3e978d25077d9d272c455ac8f70127268ff97864e]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCHEMAI.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td></td>
|
|
<td>46592</td>
|
|
<td>b4593102f10c694c94424facfdf1fcf8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:36 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:56 +0000 UTC</td>
|
|
<td>947d3c36975c6d70be3a88ea6e1818c931da13f5</td>
|
|
<td>c6a0ea3b47351edcee99f284585f66750f580bff1369d64b7084f3698b7211186a8f52b4148f64a1b50e405fe088fd57</td>
|
|
<td>ce61d29f9512a2b457b4ab94e2dc8adb0051f93d772ebb56bef390d7123f6978e6ef277bf47a56d024ba15e3e978d25077d9d272c455ac8f70127268ff97864e</td>
|
|
<td>2025-04-30 20:03:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:06:43 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:11:11.217 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ef3c515399e7ff43836d58e76baa1e876cfdd27c358baab12a96a7e0032c30a3</td>
|
|
<td>[68a472b1b022648922e2357c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ha-api-3.1.9.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:40Z]</td>
|
|
<td>[c347dede33d4a25276c7d6a4af22b8ff]</td>
|
|
<td>[c68b600634d4d4bae3fc54575ae850e734dc1af5]</td>
|
|
<td>[a90e507d1bf5d49ad7a779445ef4a6ec3f2a25247660a525b7f28b613787d4027c7f570edd9a08f3792f75268901a54e]</td>
|
|
<td>[ba5558d832cbc4b8b387ce2bdaae97ef2e56ed0e5eb1ba06c6e3510e28b3bc8b74bc2df443900ce140d2be56faad30b57e7bfb1ca0918552f793e4ea6ab4203f]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ha-api-3.1.9.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\ha-api-3.1.9.jar-4456d6bc718d3490\</td>
|
|
<td></td>
|
|
<td>36383</td>
|
|
<td>c347dede33d4a25276c7d6a4af22b8ff</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:17 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:17 +0000 UTC</td>
|
|
<td>c68b600634d4d4bae3fc54575ae850e734dc1af5</td>
|
|
<td>a90e507d1bf5d49ad7a779445ef4a6ec3f2a25247660a525b7f28b613787d4027c7f570edd9a08f3792f75268901a54e</td>
|
|
<td>ba5558d832cbc4b8b387ce2bdaae97ef2e56ed0e5eb1ba06c6e3510e28b3bc8b74bc2df443900ce140d2be56faad30b57e7bfb1ca0918552f793e4ea6ab4203f</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-17 15:37:26 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ee4054fd2936ad6c0c3eec4328e9018272e8e3790e2c6ad97ef88cd7982f06ce</td>
|
|
<td>[68a311cdc2d0d6e3eb77f211]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GetForestDCInfo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[f365fc9dfa1de8d074ba768da6120a73]</td>
|
|
<td>[82ec0308883dd686ab4009e644bf5cc0b1710f80]</td>
|
|
<td>[3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e]</td>
|
|
<td>[b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GetForestDCInfo.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>4362</td>
|
|
<td>f365fc9dfa1de8d074ba768da6120a73</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2025-03-06 21:51:56 +0000 UTC</td>
|
|
<td>82ec0308883dd686ab4009e644bf5cc0b1710f80</td>
|
|
<td>3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e</td>
|
|
<td>b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ee3cc7db22713da029361eb122a24463f48437a6e404852e50a494ffc1d1de56</td>
|
|
<td>[68a5239e621d09b2b1ed5e66]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\StatusbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[1a5715a26857fd5d1e91a011de5b5c8b]</td>
|
|
<td>[5d84c1c6eee8a6c260438cbcc5a1c387e51aa715]</td>
|
|
<td>[c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87]</td>
|
|
<td>[c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StatusbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>9728</td>
|
|
<td>1a5715a26857fd5d1e91a011de5b5c8b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>5d84c1c6eee8a6c260438cbcc5a1c387e51aa715</td>
|
|
<td>c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87</td>
|
|
<td>c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ede283f1a0bfd2ba1d9bedbda056808d0212b16b063a96054c5410c4185b75a9</td>
|
|
<td>[68a6b5eadda894c091fd5431]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_ozpshkal.tuj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-21T06:00:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ozpshkal.tuj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-21 06:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-21 06:00:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ede24c40e2a7bb0b0143ac595073abf7055867b9f35425d41dee9d3c8ad546ca</td>
|
|
<td>[68a16bd60756fe54a9918fa4, 68a2149cb58debea69d7c74f, 68a2bd5ff793a9057f329c0a, 68a3663261f8067c48423ebd, 68a40efceddb3a9f1a71a606, 68a4b7cd36bc5d38057e236b]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTelemetry.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[6773863edb1abd984c61ad490a95e2a0]</td>
|
|
<td>[a497082bdb7108c86a21700754553550185474cf]</td>
|
|
<td>[56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67]</td>
|
|
<td>[2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZoomTelemetry.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>4784440</td>
|
|
<td>6773863edb1abd984c61ad490a95e2a0</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>a497082bdb7108c86a21700754553550185474cf</td>
|
|
<td>56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67</td>
|
|
<td>2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:03:31 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>edd691fc6ad7c7f3167e1a6833372367bedf6f4f2a4b8230df444a59bb3718b1</td>
|
|
<td>[68a472b1b022648922e23589]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\jaxb-impl-2.3.0.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:42Z]</td>
|
|
<td>[5d6b1dc4f9ba545681a10b11090dde3e]</td>
|
|
<td>[3a3c6a62719d967175b76b63925f1fb495f11437]</td>
|
|
<td>[1c547bac0752716582b7c95091ce91343d033d4405f8bdaade622ebb47e26526d6de1c247071c3bae3a1cb58bb7cd053]</td>
|
|
<td>[c8808d7309fc6404cb23aebe9c3a65247e9d177a9e1d02aeb9bec09b717ced15a63d06f7ea037ce1b11ad8823b05d46f596c98e93e538e437154d4db4ea160bc]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>jaxb-impl-2.3.0.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\jaxb-impl-2.3.0.jar-36109ad0f6e25152\</td>
|
|
<td></td>
|
|
<td>963660</td>
|
|
<td>5d6b1dc4f9ba545681a10b11090dde3e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:09 +0000 UTC</td>
|
|
<td>3a3c6a62719d967175b76b63925f1fb495f11437</td>
|
|
<td>1c547bac0752716582b7c95091ce91343d033d4405f8bdaade622ebb47e26526d6de1c247071c3bae3a1cb58bb7cd053</td>
|
|
<td>c8808d7309fc6404cb23aebe9c3a65247e9d177a9e1d02aeb9bec09b717ced15a63d06f7ea037ce1b11ad8823b05d46f596c98e93e538e437154d4db4ea160bc</td>
|
|
<td>2025-03-28 16:06:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-06 23:15:13 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-10 12:45:43.084 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed8404ca8de2d42007eb59ba5c0404491b6eb7daeefeda349d13935753b126d8</td>
|
|
<td>[68a1d19347b05a9454215684, 68a322aceb4930c1ec69c2bb, 68a4746a6d77d97c70e006c6, 68a5c3cdc942eaeb78c702a0, 68a7159a30ca3ea9ba7fb514]</td>
|
|
<td>[2]</td>
|
|
<td>[jessie.pennington]</td>
|
|
<td>[PCH-DR001]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[D:\HRG\HrgRun.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2251.851, v2272.867, v2287.879, v2317.903]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T12:43:21Z, 2025-08-18T12:43:21Z, 2025-08-19T12:43:21Z, 2025-08-20T12:43:21Z, 2025-08-21T12:43:22Z]</td>
|
|
<td>[7fcaa24a7148c75338c0bacced15af5b]</td>
|
|
<td>[30c8b042cf900a9cf906b1c755d5d1d25b32cacf]</td>
|
|
<td>[4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff]</td>
|
|
<td>[cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335]</td>
|
|
<td>[10.20.22.43]</td>
|
|
<td>[10.20.22.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HrgRun.bat</td>
|
|
<td>D:\HRG\</td>
|
|
<td></td>
|
|
<td>1416</td>
|
|
<td>7fcaa24a7148c75338c0bacced15af5b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-22 14:08:08 +0000 UTC</td>
|
|
<td>2023-09-19 12:47:54 +0000 UTC</td>
|
|
<td>30c8b042cf900a9cf906b1c755d5d1d25b32cacf</td>
|
|
<td>4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff</td>
|
|
<td>cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335</td>
|
|
<td>2025-08-09 12:46:51 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed7f0c624fbdcf4020d4e80f6baf68134ed79f0fc414c9c57c225247b62bc875</td>
|
|
<td>[68a5d47cc6760b09dc6a843f, 68a5d5c523f474b5ba76fd33]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVA12]</td>
|
|
<td>[I-CA-PSM]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\MDE2016\install.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:58:13Z, 2025-08-20T14:01:29Z]</td>
|
|
<td>[15d5a2e4c9399180703644f6cec95845]</td>
|
|
<td>[ef5ac362659dfeacbfd6c52814339a25e653b7bc]</td>
|
|
<td>[f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a]</td>
|
|
<td>[b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>install.ps1</td>
|
|
<td>C:\MDE2016\</td>
|
|
<td></td>
|
|
<td>99053</td>
|
|
<td>15d5a2e4c9399180703644f6cec95845</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-15 17:19:00 +0000 UTC</td>
|
|
<td>2025-01-28 14:53:54 +0000 UTC</td>
|
|
<td>ef5ac362659dfeacbfd6c52814339a25e653b7bc</td>
|
|
<td>f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a</td>
|
|
<td>b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947</td>
|
|
<td>2025-07-15 17:19:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed773640ab6238e82a8b581f64b7be6fef438e081d84fca14b6dc8aaaff468c9</td>
|
|
<td>[68a5c81947601aee5f76e914, 68a5c9d7599432010e418bcf]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\ltimg12n.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\regsvr32.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{D34C96D8-46E8-4190-BC93-EA074FD97DA4}\191042001Depends.exe, D:\QS1\DEPENDS\DependencyChecker.exe]</td>
|
|
<td>[2025-08-20T13:05:20Z, 2025-08-20T13:05:37Z]</td>
|
|
<td>[bb535cf2602ee57acfc07a15f61a3a88]</td>
|
|
<td>[9f26f91a2e67f41798f1b551923d6cdaf576bfd0]</td>
|
|
<td>[440ef9d268ac6600c74fd8eb014869bab2d39231a5a0e0edca026de1dff6fb4fc56da800e731273474a124ad63024c9e]</td>
|
|
<td>[731ccc509e8cb13e244f51669a229315f986d2c59d8a7f5b043061d1211aacd7dfe7e2bb426e07e67a4e4dd49f02a985fcb7f2bc70414cddb1445ff58f260930]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ltimg12n.dll</td>
|
|
<td>E:\QS1\</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>166400</td>
|
|
<td>bb535cf2602ee57acfc07a15f61a3a88</td>
|
|
<td>LEADTOOLS(r) DLL for Win32</td>
|
|
<td>12.1.0.020</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-14 13:01:47 +0000 UTC</td>
|
|
<td>2001-04-30 20:52:56 +0000 UTC</td>
|
|
<td>9f26f91a2e67f41798f1b551923d6cdaf576bfd0</td>
|
|
<td>440ef9d268ac6600c74fd8eb014869bab2d39231a5a0e0edca026de1dff6fb4fc56da800e731273474a124ad63024c9e</td>
|
|
<td>731ccc509e8cb13e244f51669a229315f986d2c59d8a7f5b043061d1211aacd7dfe7e2bb426e07e67a4e4dd49f02a985fcb7f2bc70414cddb1445ff58f260930</td>
|
|
<td>2025-07-17 16:15:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-09-01 06:16:04 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 16:17:46.576 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed728dd8ff1738114e51955b8a8e18e26bfd61f721db5aae1bd2639d01035b5c</td>
|
|
<td>[68a1642ad1ecd8b85d19b5b0, 68a2b3a6e6ca2bd5ba2a7ac0, 68a4054c9ee88c99993abccd, 68a556e8217e3b11fe5ae34c, 68a6a894e86d16536c59918b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\RestartDataService.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-18T05:00:02Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:01Z, 2025-08-21T05:00:01Z]</td>
|
|
<td>[84ca3a5b98517c455870e62ca343e1a8]</td>
|
|
<td>[3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8]</td>
|
|
<td>[e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549]</td>
|
|
<td>[67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RestartDataService.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>1168</td>
|
|
<td>84ca3a5b98517c455870e62ca343e1a8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-08-07 19:53:41 +0000 UTC</td>
|
|
<td>2018-08-07 19:55:10 +0000 UTC</td>
|
|
<td>3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8</td>
|
|
<td>e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549</td>
|
|
<td>67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed6a94369257cf5aeacc1717ba2325547c74f196b10586c90d35e25dbe1032a1</td>
|
|
<td>[68a523949cec397f02de9f5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GUIUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[e69064234c54b30c82038104ca321e12]</td>
|
|
<td>[1a8fe23753edb0a3136a87dc35a492fef353f2ca]</td>
|
|
<td>[96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69]</td>
|
|
<td>[38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GUIUtils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>69632</td>
|
|
<td>e69064234c54b30c82038104ca321e12</td>
|
|
<td></td>
|
|
<td>1.0.8565.40691</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>1a8fe23753edb0a3136a87dc35a492fef353f2ca</td>
|
|
<td>96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69</td>
|
|
<td>38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f3a4af65d68e66f116133795437228c5942fba8f339a37fe2a0cee89c7143489</td>
|
|
<td>[68a25fb2e970d941642e7ee1, 68a25fb2e970d941642e7eee, 68a3b2cf09045b56b2a707b9, 68a3b2cf09045b56b2a707c6, 68a502e12ae1a61fbf4caf17, 68a502e12ae1a61fbf4caf24, 68a65489c4cae84feadc5717, 68a65489c4cae84feadc5724]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\logfilescript.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:11Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:10Z, 2025-08-19T23:00:16Z, 2025-08-20T23:00:11Z, 2025-08-20T23:00:17Z]</td>
|
|
<td>[596da6f850c65ab8be34900752cffce5]</td>
|
|
<td>[d483748ef566843d55587b68232ff609be9bc468]</td>
|
|
<td>[5b37bfe7647fcee9b7621b92d1d4f4998b4e9bf2895284fe4d49d175fc3e7c724660d80f25bbe877a27a7b0c8fb441ca]</td>
|
|
<td>[69825fbf0924754ceb2c637adea128238b54f3a0e4130ce125ef1df5723046d85c6fb957f862ac7b9bfad2e6171960fceca01ed7eb5671b90415633918b34de8]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>logfilescript.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\private\scripts\</td>
|
|
<td></td>
|
|
<td>5902</td>
|
|
<td>596da6f850c65ab8be34900752cffce5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 19:42:26 +0000 UTC</td>
|
|
<td>2023-03-06 16:58:14 +0000 UTC</td>
|
|
<td>d483748ef566843d55587b68232ff609be9bc468</td>
|
|
<td>5b37bfe7647fcee9b7621b92d1d4f4998b4e9bf2895284fe4d49d175fc3e7c724660d80f25bbe877a27a7b0c8fb441ca</td>
|
|
<td>69825fbf0924754ceb2c637adea128238b54f3a0e4130ce125ef1df5723046d85c6fb957f862ac7b9bfad2e6171960fceca01ed7eb5671b90415633918b34de8</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-10 17:44:47 +0000 UTC</td>
|
|
<td>60</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f39a93d4ec3f32e339b3a6cbf96208f8e057ee7483ae8d857b0a03848aacd045</td>
|
|
<td>[68a48674c4cb2500be69261a, 68a48674c4cb2500be692630]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.Swagger.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[ec116545a1a3e9c526cab69658fe0500]</td>
|
|
<td>[754ebdc6c68455197432fc9cc8617ca28c227372]</td>
|
|
<td>[3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d]</td>
|
|
<td>[8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>27408</td>
|
|
<td>ec116545a1a3e9c526cab69658fe0500</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:48:20 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>754ebdc6c68455197432fc9cc8617ca28c227372</td>
|
|
<td>3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d</td>
|
|
<td>8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f389e16e78bc34be5aa9bd3ce9fd6539ffc61387d71c29f8c5cb4fa989727f6d</td>
|
|
<td>[68a16bd60756fe54a9918fa0, 68a2149cb58debea69d7c74b, 68a2bd5ff793a9057f329c06, 68a3663261f8067c48423eb9, 68a40efceddb3a9f1a71a602, 68a4b7cd36bc5d38057e2367]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\LibphoneWrapper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[6b15ab371446e9308f6c7760dac4485c]</td>
|
|
<td>[230e1cdc4416240c11e78e0f54b50e441858e2cb]</td>
|
|
<td>[f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9]</td>
|
|
<td>[a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LibphoneWrapper.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>846136</td>
|
|
<td>6b15ab371446e9308f6c7760dac4485c</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>230e1cdc4416240c11e78e0f54b50e441858e2cb</td>
|
|
<td>f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9</td>
|
|
<td>a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:27 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 14:43:31.3 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f2a56d8f2246e6174f8df6ca2eafd67db543951fa68c243fc30e948863fd63e6</td>
|
|
<td>[68a523a99ba7c92b34976f9f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Xceed.Wpf.Controls.v7.0.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:44Z]</td>
|
|
<td>[31f8c82d5822b89ed6c6acea1715d744]</td>
|
|
<td>[96479ad5a70f75b20e19d2d7fcce8b60d8f49215]</td>
|
|
<td>[7cfbe3503f4f9846864f2c67c8c37df43fbfd9054abd985d8e127338f6c8b6f061fa0c0d557941489a090e99e117427a]</td>
|
|
<td>[f893b9c33b787f3146ad11b1559b0c3e56dd96a6172f0023a3858faca749423367f947b3e9127432b322ec60f812d32653137e445f84fc2b9b52a325a4c41d97]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Xceed.Wpf.Controls.v7.0.XmlSerializers.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>16384</td>
|
|
<td>31f8c82d5822b89ed6c6acea1715d744</td>
|
|
<td></td>
|
|
<td>7.0.20452.13100</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:34 +0000 UTC</td>
|
|
<td>96479ad5a70f75b20e19d2d7fcce8b60d8f49215</td>
|
|
<td>7cfbe3503f4f9846864f2c67c8c37df43fbfd9054abd985d8e127338f6c8b6f061fa0c0d557941489a090e99e117427a</td>
|
|
<td>f893b9c33b787f3146ad11b1559b0c3e56dd96a6172f0023a3858faca749423367f947b3e9127432b322ec60f812d32653137e445f84fc2b9b52a325a4c41d97</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-12-28 16:32:19 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f2782880edc138832f75cd69dc0c6828c60da4a688c8890c5b0ffc48923ee4e5</td>
|
|
<td>[68a5239e621d09b2b1ed5e64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Jms.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:39Z]</td>
|
|
<td>[a9718f9d3fe1e994d65410cbb3247fe7]</td>
|
|
<td>[07de5a6d30f9c398bdd133d45d866ab31b110436]</td>
|
|
<td>[4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c]</td>
|
|
<td>[d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.PeCommServices.Jms.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.PeCommServices.Jms</td>
|
|
<td>12800</td>
|
|
<td>a9718f9d3fe1e994d65410cbb3247fe7</td>
|
|
<td>Stanley.PeCommServices.Jms</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>07de5a6d30f9c398bdd133d45d866ab31b110436</td>
|
|
<td>4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c</td>
|
|
<td>d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f233a5d2bc2e0d7ee62f6b8cd56f3aff7a23e26da415e956b388d307cd07da48</td>
|
|
<td>[68a24592503474046d56002e, 68a6643ac834a71c320c303c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[IMAGENOW73-PROD]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\crypto.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2314]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erl.exe]</td>
|
|
<td>[C:\Program Files\erl8.3\erts-8.3\bin\erlsrv.exe]</td>
|
|
<td>[2025-08-17T21:02:23Z, 2025-08-21T00:02:18Z]</td>
|
|
<td>[b22ec974693b97a3a59f63997e5c0637]</td>
|
|
<td>[91b3ee580bc9075191e9732cf6238709f81a7b22]</td>
|
|
<td>[140e202c46c8315a1c412b6d8c7edbd1a8813e30d1cde1ae3969b83fd0e81f03f77dacbde999de84a41312447ad096e1]</td>
|
|
<td>[9454100bf3f326e5ecd63b9aa4307d85430ec6c3a8fef70e0b19f3eee1d166f82d2f631aff6e4088ec44914adeacac60f9ce89bdd0c77a2112aa7018040032e1]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>[10.101.100.216]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>crypto.dll</td>
|
|
<td>C:\Program Files\erl8.3\lib\crypto-3.7.3\priv\lib\</td>
|
|
<td></td>
|
|
<td>1518592</td>
|
|
<td>b22ec974693b97a3a59f63997e5c0637</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2017-03-14 21:32:04 +0000 UTC</td>
|
|
<td>2017-03-14 21:32:04 +0000 UTC</td>
|
|
<td>91b3ee580bc9075191e9732cf6238709f81a7b22</td>
|
|
<td>140e202c46c8315a1c412b6d8c7edbd1a8813e30d1cde1ae3969b83fd0e81f03f77dacbde999de84a41312447ad096e1</td>
|
|
<td>9454100bf3f326e5ecd63b9aa4307d85430ec6c3a8fef70e0b19f3eee1d166f82d2f631aff6e4088ec44914adeacac60f9ce89bdd0c77a2112aa7018040032e1</td>
|
|
<td>2025-07-17 00:02:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-29 23:26:19 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-07-17 00:06:14.119 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f22fa52b2c27e95cd2a6cac5cfa0f131563e6a977b30d71196f1162fe4a5688b</td>
|
|
<td>[68a330781adb06bf567189ac]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:53:53Z]</td>
|
|
<td>[f9d67ab54445d23d6c36da84993679bc]</td>
|
|
<td>[dbf31330f49f312513c003971506ed9206865011]</td>
|
|
<td>[62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7]</td>
|
|
<td>[bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2202</td>
|
|
<td>f9d67ab54445d23d6c36da84993679bc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 13:53:45 +0000 UTC</td>
|
|
<td>dbf31330f49f312513c003971506ed9206865011</td>
|
|
<td>62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7</td>
|
|
<td>bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e</td>
|
|
<td>2025-08-18 13:54:00 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f1ac711cb8491e226815bb95418502d495f41482bed0240646feb118260cfdbe</td>
|
|
<td>[68a48674c4cb2500be692610, 68a48674c4cb2500be692626]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Debug.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[e7e39224cd91face931f14064a638698]</td>
|
|
<td>[2e2c1e01a10fdddc7d9a842413484e407191f92e]</td>
|
|
<td>[af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb]</td>
|
|
<td>[0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Debug.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>19192</td>
|
|
<td>e7e39224cd91face931f14064a638698</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>2.0.0-master-68cc513</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-02-14 12:47:26 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>2e2c1e01a10fdddc7d9a842413484e407191f92e</td>
|
|
<td>af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb</td>
|
|
<td>0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f143981b39642060db0d79ca61d54d93831de9f62af0b4958067fecf1e483a55</td>
|
|
<td>[68a156984663bd83db8ebc96]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wse2sex4.g1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:12:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wse2sex4.g1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:12:01 +0000 UTC</td>
|
|
<td>2025-08-17 04:12:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:12:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f1191cabd6ae91f32bb606241c4010e039a595fecc2c6921f09504c88a431774</td>
|
|
<td>[68a472b1b022648922e235a3]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\sqlite-jdbc-3.7.2.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[1a6796add6898d6a17923d35fc539fd6]</td>
|
|
<td>[7a3d67f00508d3881650579f7f228c61bfc1b196]</td>
|
|
<td>[3876096f82674fefc1da152abe61abef0a39bc4bff2833d3d2b7bf57db6ca62c330d2ad29c9b7759858375580efd9482]</td>
|
|
<td>[08aaa094fdd0b4a31e667f24c4d58c6d7337dfa9791f6c2b26015ffcc87173072affde6d6bd4492c9bb1247b0ac95e4d7a3776126a97deafdfc0f4e3fddf69f6]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>sqlite-jdbc-3.7.2.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>3201133</td>
|
|
<td>1a6796add6898d6a17923d35fc539fd6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>7a3d67f00508d3881650579f7f228c61bfc1b196</td>
|
|
<td>3876096f82674fefc1da152abe61abef0a39bc4bff2833d3d2b7bf57db6ca62c330d2ad29c9b7759858375580efd9482</td>
|
|
<td>08aaa094fdd0b4a31e667f24c4d58c6d7337dfa9791f6c2b26015ffcc87173072affde6d6bd4492c9bb1247b0ac95e4d7a3776126a97deafdfc0f4e3fddf69f6</td>
|
|
<td>2025-03-28 16:04:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-07-21 21:36:33 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0d4b9c238d24b510f54549e58b65ca771cec784837dcce1afed90b9fa76aeb0</td>
|
|
<td>[68a311cdc2d0d6e3eb77f205]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\RestoreMailboxToOtherMailbox-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[1aceb94194ecbedc4297e2942461bb42]</td>
|
|
<td>[fff9c984488a363dede782841598d4a7d6ea65c9]</td>
|
|
<td>[cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7]</td>
|
|
<td>[f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RestoreMailboxToOtherMailbox-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>25506</td>
|
|
<td>1aceb94194ecbedc4297e2942461bb42</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:55:32 +0000 UTC</td>
|
|
<td>2025-07-02 12:22:49 +0000 UTC</td>
|
|
<td>fff9c984488a363dede782841598d4a7d6ea65c9</td>
|
|
<td>cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7</td>
|
|
<td>f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0d097448b58a879149fea8c0fd5bfd34b72db3a858fb2f371e8438dbb8717c7</td>
|
|
<td>[68a233e95f55f21b103cd9c5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vvd1ao.f0e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_h3vvd1ao.f0e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:13 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:25 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0beb78ece32bce4af1a1d371df7681e3f9d57e54b0caa0d6f833f391218432c</td>
|
|
<td>[68a472b1b022648922e23597]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\mimepull-1.9.7.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:43Z]</td>
|
|
<td>[c40355c6207b1a32fd0ad0eaff96dbbe]</td>
|
|
<td>[3085dfe507b6ce43c1fcc60f228d65a7731b8e7d]</td>
|
|
<td>[4c4f54f324e681140a2e805f4eef8bf92cf15ea5346c4427504286cb231dff683f34f557b8776fc481e72237034c161c]</td>
|
|
<td>[fa27d069c4e8f0f0cfee0609e06d99e8b4406c07b008ca23504b57730b38ea7111d54899495e68ee05cd1637217845293b31ef64484dc021b0a54eaadf2cb672]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mimepull-1.9.7.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\mimepull-1.9.7.jar-de84824ebfd8ed8a\</td>
|
|
<td></td>
|
|
<td>63985</td>
|
|
<td>c40355c6207b1a32fd0ad0eaff96dbbe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>3085dfe507b6ce43c1fcc60f228d65a7731b8e7d</td>
|
|
<td>4c4f54f324e681140a2e805f4eef8bf92cf15ea5346c4427504286cb231dff683f34f557b8776fc481e72237034c161c</td>
|
|
<td>fa27d069c4e8f0f0cfee0609e06d99e8b4406c07b008ca23504b57730b38ea7111d54899495e68ee05cd1637217845293b31ef64484dc021b0a54eaadf2cb672</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-05 22:12:41 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0901d66025505ba75703951e37a08b7079d7077fb98a506057fe8fc141e06ef</td>
|
|
<td>[68a242b8fcb6ba0be2122339]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_kiw23hmo.z5k.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:59:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kiw23hmo.z5k.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:59:23 +0000 UTC</td>
|
|
<td>2025-08-17 20:59:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:59:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f057202970b8bf95c8a587bd6c4e319eb753010daaeea4944e1ec5e269b3e120</td>
|
|
<td>[68a4dda823653165b0c6ea27]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Assessments\ADSecurityAssessment\run.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T20:20:40Z]</td>
|
|
<td>[8bd1e8d9b600a129656078512f623ff0]</td>
|
|
<td>[5745c02ec0e1eae0b43b16753beb8e1ccb8081a6]</td>
|
|
<td>[14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c]</td>
|
|
<td>[c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>run.cmd</td>
|
|
<td>C:\Assessments\ADSecurityAssessment\</td>
|
|
<td></td>
|
|
<td>215</td>
|
|
<td>8bd1e8d9b600a129656078512f623ff0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-29 19:20:40 +0000 UTC</td>
|
|
<td>2024-10-29 19:20:40 +0000 UTC</td>
|
|
<td>5745c02ec0e1eae0b43b16753beb8e1ccb8081a6</td>
|
|
<td>14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c</td>
|
|
<td>c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094</td>
|
|
<td>2025-08-12 20:20:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f01539ab85e7769cbf9e046fc9f87e3c6abd74bebff765b77a9c48972f0da67f</td>
|
|
<td>[68a48674c4cb2500be692609, 68a48674c4cb2500be69261f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Console.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[f2c3352f41741807403c460ed4759bb7]</td>
|
|
<td>[a23e5c02ab076c8c8dab1a2bd2c7306541de034e]</td>
|
|
<td>[57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592]</td>
|
|
<td>[7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Console.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>46336</td>
|
|
<td>f2c3352f41741807403c460ed4759bb7</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>4.0.1-main-37f02f5</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-19 05:04:50 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>a23e5c02ab076c8c8dab1a2bd2c7306541de034e</td>
|
|
<td>57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592</td>
|
|
<td>7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6885c6338d93c57a296003ea20f58cacf2a4b610f3031d4b64135cfa9eb00b2</td>
|
|
<td>[68a472b1b022648922e235a0]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\ServerAgentApi-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:44Z]</td>
|
|
<td>[b7ee60c4bb333bfae6dcf018d9dd05c9]</td>
|
|
<td>[0d5ba16f8359167f17a827ab7b2b46ada9c30293]</td>
|
|
<td>[f18bb1caf1de663c98afd18de92b40b8902d4520ca291cef00bdd9df056c2c554890fc2c2e528dea52960e92456e67ad]</td>
|
|
<td>[bfce31fdd14e43f5f0efff4953d3652016c76ffdba9155ab16490505c40cc58f3a562a7cadfa6e996c978bc4ece63451ea934de7a18b9c3c32a40fa53e2f0053]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ServerAgentApi-20.1.2.14.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\lib\</td>
|
|
<td></td>
|
|
<td>466475</td>
|
|
<td>b7ee60c4bb333bfae6dcf018d9dd05c9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:54 +0000 UTC</td>
|
|
<td>0d5ba16f8359167f17a827ab7b2b46ada9c30293</td>
|
|
<td>f18bb1caf1de663c98afd18de92b40b8902d4520ca291cef00bdd9df056c2c554890fc2c2e528dea52960e92456e67ad</td>
|
|
<td>bfce31fdd14e43f5f0efff4953d3652016c76ffdba9155ab16490505c40cc58f3a562a7cadfa6e996c978bc4ece63451ea934de7a18b9c3c32a40fa53e2f0053</td>
|
|
<td>2025-03-28 16:04:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:48 +0000 UTC</td>
|
|
<td>57</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 01:37:57.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f654c9b2dceafe4f15f3510da91c3339020918a5f8bdf3a7e3f4f90aaf6c5919</td>
|
|
<td>[68a6afe50e0f3bd8deac4f4d, 68a6afe50e0f3bd8deac5096, 68a6afe50e0f3bd8deac5102, 68a6afe50e0f3bd8deac516b, 68a6afe50e0f3bd8deac5550, 68a6afe50e0f3bd8deac5642, 68a6afe50e0f3bd8deac5762, 68a6afe50e0f3bd8deac5d2b, 68a6afe50e0f3bd8deac5dad, 68a6afe50e0f3bd8deac5eeb]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\libcrypto-1_1-x64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[C:\Program Files\PostgreSQL\12\bin\postgres.exe]</td>
|
|
<td>[2025-07-16T23:18:34Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:55Z, 2025-07-16T23:19:00Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:51Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:46Z, 2025-07-16T23:20:51Z, 2025-07-16T23:21:00Z]</td>
|
|
<td>[1495f1326e12d1a1adc4c12d6aa02ebe]</td>
|
|
<td>[acc6e01929787add69ad6e13b549cac4d9d91829]</td>
|
|
<td>[cbf9fccb5df344160c8348943cfa18cd8dea0b4673279de9dfcb02e5a5248bb9153c692515b3c643058ce98d15b14414]</td>
|
|
<td>[e1175b30f30f49ee81a7e612bf79f9471c11136d6e7c635b9cede2e81f5c266d423e9e274780a4371009d8a87b7994d80231714cddbc45c22040d957a1820cbc]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libcrypto-1_1-x64.dll</td>
|
|
<td>C:\Program Files\PostgreSQL\12\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>2842112</td>
|
|
<td>1495f1326e12d1a1adc4c12d6aa02ebe</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1d</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-19 17:59:22 +0000 UTC</td>
|
|
<td>2019-12-13 12:43:49 +0000 UTC</td>
|
|
<td>acc6e01929787add69ad6e13b549cac4d9d91829</td>
|
|
<td>cbf9fccb5df344160c8348943cfa18cd8dea0b4673279de9dfcb02e5a5248bb9153c692515b3c643058ce98d15b14414</td>
|
|
<td>e1175b30f30f49ee81a7e612bf79f9471c11136d6e7c635b9cede2e81f5c266d423e9e274780a4371009d8a87b7994d80231714cddbc45c22040d957a1820cbc</td>
|
|
<td>2025-04-30 19:59:33 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-03-20 16:00:51 +0000 UTC</td>
|
|
<td>74</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:01:04.066 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6485e39c6fa29ecdba34ef2f1f186c0f4440027c9b0b0a32af03a7cdcea0866</td>
|
|
<td>[68a6afe50e0f3bd8deac4cfa, 68a6afe50e0f3bd8deac4d0d, 68a6afe50e0f3bd8deac4d3c, 68a6afe50e0f3bd8deac4d5c, 68a6afe50e0f3bd8deac4d7b, 68a6afe50e0f3bd8deac4d9b, 68a6afe50e0f3bd8deac4dbb, 68a6afe50e0f3bd8deac4ddb, 68a6afe50e0f3bd8deac4dfb, 68a6afe50e0f3bd8deac4e1b, 68a6afe50e0f3bd8deac4e3b, 68a6afe50e0f3bd8deac4e5b, 68a6afe50e0f3bd8deac4e7b, 68a6afe50e0f3bd8deac4e9b, 68a6afe50e0f3bd8deac4ead, 68a6afe50e0f3bd8deac4edb, 68a6afe50e0f3bd8deac4efb, 68a6afe50e0f3bd8deac4f1e, 68a6afe50e0f3bd8deac4f3b, 68a6afe50e0f3bd8deac4f65, 68a6afe50e0f3bd8deac4f85, 68a6afe50e0f3bd8deac4fa5, 68a6afe50e0f3bd8deac4fc5, 68a6afe50e0f3bd8deac4fe5, 68a6afe50e0f3bd8deac5005, 68a6afe50e0f3bd8deac5025, 68a6afe50e0f3bd8deac5045, 68a6afe50e0f3bd8deac5065, 68a6afe50e0f3bd8deac5085, 68a6afe50e0f3bd8deac50b0, 68a6afe50e0f3bd8deac50cf, 68a6afe50e0f3bd8deac50ef, 68a6afe50e0f3bd8deac5119, 68a6afe50e0f3bd8deac5139, 68a6afe50e0f3bd8deac5159, 68a6afe50e0f3bd8deac5183, 68a6afe50e0f3bd8deac51a3, 68a6afe50e0f3bd8deac51c3, 68a6afe50e0f3bd8deac51e4, 68a6afe50e0f3bd8deac51f6, 68a6afe50e0f3bd8deac522e, 68a6afe50e0f3bd8deac5244, 68a6afe50e0f3bd8deac5264, 68a6afe50e0f3bd8deac5279, 68a6afe50e0f3bd8deac5298, 68a6afe50e0f3bd8deac52b8, 68a6afe50e0f3bd8deac52d9, 68a6afe50e0f3bd8deac52f8, 68a6afe50e0f3bd8deac5318, 68a6afe50e0f3bd8deac5338, 68a6afe50e0f3bd8deac5358, 68a6afe50e0f3bd8deac5378, 68a6afe50e0f3bd8deac539f, 68a6afe50e0f3bd8deac53ba, 68a6afe50e0f3bd8deac53df, 68a6afe50e0f3bd8deac53fd, 68a6afe50e0f3bd8deac541e, 68a6afe50e0f3bd8deac5439, 68a6afe50e0f3bd8deac545f, 68a6afe50e0f3bd8deac547e, 68a6afe50e0f3bd8deac549e, 68a6afe50e0f3bd8deac54be, 68a6afe50e0f3bd8deac54de, 68a6afe50e0f3bd8deac54fe, 68a6afe50e0f3bd8deac551e, 68a6afe50e0f3bd8deac553e, 68a6afe50e0f3bd8deac5568, 68a6afe50e0f3bd8deac5588, 68a6afe50e0f3bd8deac55a8, 68a6afe50e0f3bd8deac55c9, 68a6afe50e0f3bd8deac55e8, 68a6afe50e0f3bd8deac5609, 68a6afe50e0f3bd8deac5628, 68a6afe50e0f3bd8deac5658, 68a6afe50e0f3bd8deac5679, 68a6afe50e0f3bd8deac5689, 68a6afe50e0f3bd8deac56a6, 68a6afe50e0f3bd8deac56c6, 68a6afe50e0f3bd8deac56df, 68a6afe50e0f3bd8deac5707, 68a6afe50e0f3bd8deac5721, 68a6afe50e0f3bd8deac5746, 68a6afe50e0f3bd8deac577a, 68a6afe50e0f3bd8deac578f, 68a6afe50e0f3bd8deac57ba, 68a6afe50e0f3bd8deac57d0, 68a6afe50e0f3bd8deac57fa, 68a6afe50e0f3bd8deac580f, 68a6afe50e0f3bd8deac5828, 68a6afe50e0f3bd8deac5851, 68a6afe50e0f3bd8deac5878, 68a6afe50e0f3bd8deac5892, 68a6afe50e0f3bd8deac58a0, 68a6afe50e0f3bd8deac58d0, 68a6afe50e0f3bd8deac58e4, 68a6afe50e0f3bd8deac590a, 68a6afe50e0f3bd8deac5922, 68a6afe50e0f3bd8deac5951, 68a6afe50e0f3bd8deac5971, 68a6afe50e0f3bd8deac5987, ...]</td>
|
|
<td>[2]</td>
|
|
<td>[naxis]</td>
|
|
<td>[i-vsyn3d]</td>
|
|
<td>[I-VSYN3D]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\turbojpeg.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v1617]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisWS6\AmeWorkstation.exe]</td>
|
|
<td>[C:\Program Files\Fujifilm\NaxisNS6\AmeNetServer.exe]</td>
|
|
<td>[2025-07-16T23:18:08Z, 2025-07-16T23:18:09Z, 2025-07-16T23:18:10Z, 2025-07-16T23:18:12Z, 2025-07-16T23:18:13Z, 2025-07-16T23:18:15Z, 2025-07-16T23:18:16Z, 2025-07-16T23:18:18Z, 2025-07-16T23:18:20Z, 2025-07-16T23:18:21Z, 2025-07-16T23:18:23Z, 2025-07-16T23:18:24Z, 2025-07-16T23:18:26Z, 2025-07-16T23:18:27Z, 2025-07-16T23:18:28Z, 2025-07-16T23:18:29Z, 2025-07-16T23:18:31Z, 2025-07-16T23:18:32Z, 2025-07-16T23:18:34Z, 2025-07-16T23:18:36Z, 2025-07-16T23:18:37Z, 2025-07-16T23:18:39Z, 2025-07-16T23:18:40Z, 2025-07-16T23:18:42Z, 2025-07-16T23:18:43Z, 2025-07-16T23:18:45Z, 2025-07-16T23:18:46Z, 2025-07-16T23:18:48Z, 2025-07-16T23:18:50Z, 2025-07-16T23:18:51Z, 2025-07-16T23:18:53Z, 2025-07-16T23:18:54Z, 2025-07-16T23:18:56Z, 2025-07-16T23:18:57Z, 2025-07-16T23:18:59Z, 2025-07-16T23:19:01Z, 2025-07-16T23:19:02Z, 2025-07-16T23:19:04Z, 2025-07-16T23:19:05Z, 2025-07-16T23:19:06Z, 2025-07-16T23:19:07Z, 2025-07-16T23:19:08Z, 2025-07-16T23:19:09Z, 2025-07-16T23:19:10Z, 2025-07-16T23:19:11Z, 2025-07-16T23:19:12Z, 2025-07-16T23:19:14Z, 2025-07-16T23:19:16Z, 2025-07-16T23:19:17Z, 2025-07-16T23:19:19Z, 2025-07-16T23:19:20Z, 2025-07-16T23:19:22Z, 2025-07-16T23:19:23Z, 2025-07-16T23:19:24Z, 2025-07-16T23:19:25Z, 2025-07-16T23:19:26Z, 2025-07-16T23:19:27Z, 2025-07-16T23:19:28Z, 2025-07-16T23:19:29Z, 2025-07-16T23:19:30Z, 2025-07-16T23:19:31Z, 2025-07-16T23:19:33Z, 2025-07-16T23:19:35Z, 2025-07-16T23:19:36Z, 2025-07-16T23:19:38Z, 2025-07-16T23:19:39Z, 2025-07-16T23:19:41Z, 2025-07-16T23:19:42Z, 2025-07-16T23:19:44Z, 2025-07-16T23:19:45Z, 2025-07-16T23:19:46Z, 2025-07-16T23:19:48Z, 2025-07-16T23:19:49Z, 2025-07-16T23:19:51Z, 2025-07-16T23:19:52Z, 2025-07-16T23:19:53Z, 2025-07-16T23:19:54Z, 2025-07-16T23:19:55Z, 2025-07-16T23:19:56Z, 2025-07-16T23:19:57Z, 2025-07-16T23:19:58Z, 2025-07-16T23:19:59Z, 2025-07-16T23:20:00Z, 2025-07-16T23:20:01Z, 2025-07-16T23:20:02Z, 2025-07-16T23:20:03Z, 2025-07-16T23:20:04Z, 2025-07-16T23:20:05Z, 2025-07-16T23:20:06Z, 2025-07-16T23:20:07Z, 2025-07-16T23:20:08Z, 2025-07-16T23:20:09Z, 2025-07-16T23:20:10Z, 2025-07-16T23:20:11Z, 2025-07-16T23:20:12Z, 2025-07-16T23:20:13Z, 2025-07-16T23:20:14Z, 2025-07-16T23:20:15Z, 2025-07-16T23:20:16Z, 2025-07-16T23:20:17Z, ...]</td>
|
|
<td>[36f8aece55749b696a3a5ea37551966a]</td>
|
|
<td>[7f6ba6012858519ed64838b29d4162e9e9b9eed0]</td>
|
|
<td>[8d494127f8afb632320bc1b0f95a1bf981e902cd0cbb3cd6ada9a3d962093c09d32125f4850ac0028f3ddb2537ce03ec]</td>
|
|
<td>[b08930ba0999f84f17033c6705c77efeacac58f378182fa11db170089e22fa75b2955005dc69005f2ec20a007ae122a5432a04cdf01e570b87dcca011a179f92]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>[172.17.30.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>turbojpeg.dll</td>
|
|
<td>C:\Program Files\Fujifilm\NaxisWS6\</td>
|
|
<td></td>
|
|
<td>259584</td>
|
|
<td>36f8aece55749b696a3a5ea37551966a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-03 20:25:56 +0000 UTC</td>
|
|
<td>2021-08-30 00:40:28 +0000 UTC</td>
|
|
<td>7f6ba6012858519ed64838b29d4162e9e9b9eed0</td>
|
|
<td>8d494127f8afb632320bc1b0f95a1bf981e902cd0cbb3cd6ada9a3d962093c09d32125f4850ac0028f3ddb2537ce03ec</td>
|
|
<td>b08930ba0999f84f17033c6705c77efeacac58f378182fa11db170089e22fa75b2955005dc69005f2ec20a007ae122a5432a04cdf01e570b87dcca011a179f92</td>
|
|
<td>2025-05-07 14:27:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6136e0ffb0c22bc0011234c50eaa14f7b30b94b0fc3607b11b566a0d1886d61</td>
|
|
<td>[68a26ea46e6b6ee6bc972e27, 68a3c03623c2934753962dcb, 68a511ca8c3c7fce901b5863, 68a6636795891065d1c7cc47]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nGRNTBaxterDB]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[F:\app\oracle\fast_recovery_area\CEDB0601\rman_backup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T00:00:01Z, 2025-08-19T00:00:01Z, 2025-08-20T00:00:01Z, 2025-08-21T00:00:01Z]</td>
|
|
<td>[608b8e09fac55079d60755d6fdbe776f]</td>
|
|
<td>[611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd]</td>
|
|
<td>[fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8]</td>
|
|
<td>[5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c]</td>
|
|
<td>[172.17.20.124]</td>
|
|
<td>[172.17.20.124]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rman_backup.bat</td>
|
|
<td>F:\app\oracle\fast_recovery_area\CEDB0601\</td>
|
|
<td></td>
|
|
<td>141</td>
|
|
<td>608b8e09fac55079d60755d6fdbe776f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-07 13:44:13 +0000 UTC</td>
|
|
<td>2025-05-07 13:45:30 +0000 UTC</td>
|
|
<td>611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd</td>
|
|
<td>fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8</td>
|
|
<td>5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c</td>
|
|
<td>2025-08-09 00:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f612f6b0afdb39d4572bc89b2ebb6a01dd88f1828c98808590def513221921eb</td>
|
|
<td>[68a6ee3f37e900aa18bf637e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_00a56212d69048fa97059041b89400e2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-21T10:00:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_00a56212d69048fa97059041b89400e2.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-21 10:00:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f5db951701b43d9e065c4d5548acbf9b2e8dc765caaccf137d33c2df17e42915</td>
|
|
<td>[68a31a5c2c2fd909a9789515]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yot1w4e0.sl3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:19:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yot1w4e0.sl3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:19:33 +0000 UTC</td>
|
|
<td>2025-08-18 12:19:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:19:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f5730988fcea216c2807c08c31f0f047cd77bfa91f500368883ab178cea72b05</td>
|
|
<td>[68a1dee6de61d9c2d3f810de]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nOSCCAPP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_404hqnm2.awk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:53:30Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_404hqnm2.awk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:53:30 +0000 UTC</td>
|
|
<td>2025-08-17 13:53:30 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:53:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f559c9fe76d2df0b25758225c303c7f4f9d5e01ef2cd59428decbc100fa54260</td>
|
|
<td>[68a71d98771132224a617f85]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.SDK.Portable.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:40Z]</td>
|
|
<td>[5a74fdf42288a4a712e241e39f1a3b5d]</td>
|
|
<td>[059cd0634b1e3feb553241f73a2682cabe5e2c06]</td>
|
|
<td>[d4d6378752fb4effb753e444dea7cad9816ffe81ef0eeb159dbef4941404028a81d4abf40bd9f48c12dca5f32c4fd772]</td>
|
|
<td>[6ad010dc22552b1dd05f42052613249064e8ce785a4ae43608434018f069461ed2db902bb0c9e7c75312b8584abca53348ebb93f8edbc502c5be0bb504ce279b]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.SDK.Portable.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.SDK.Portable.dll</td>
|
|
<td>223744</td>
|
|
<td>5a74fdf42288a4a712e241e39f1a3b5d</td>
|
|
<td>Mobile SDK portable library assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:01:58 +0000 UTC</td>
|
|
<td>2020-05-11 15:01:58 +0000 UTC</td>
|
|
<td>059cd0634b1e3feb553241f73a2682cabe5e2c06</td>
|
|
<td>d4d6378752fb4effb753e444dea7cad9816ffe81ef0eeb159dbef4941404028a81d4abf40bd9f48c12dca5f32c4fd772</td>
|
|
<td>6ad010dc22552b1dd05f42052613249064e8ce785a4ae43608434018f069461ed2db902bb0c9e7c75312b8584abca53348ebb93f8edbc502c5be0bb504ce279b</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-05-18 05:49:08 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f530fa19af4b883e5fa5cded7db4d38f87828b68adda565f42a9f47dcb237d0e</td>
|
|
<td>[68a2b38b161afab772184bd4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\tmpEXO_iibpe4mm.2kz.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T05:00:48Z]</td>
|
|
<td>[beb8c90fe57930da08c3e3ceeeefca0d]</td>
|
|
<td>[c983a10d79f3df73d3413c98e661499bb2163e0b]</td>
|
|
<td>[fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb]</td>
|
|
<td>[be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_iibpe4mm.2kz.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>beb8c90fe57930da08c3e3ceeeefca0d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 05:00:47 +0000 UTC</td>
|
|
<td>2025-08-18 05:00:47 +0000 UTC</td>
|
|
<td>c983a10d79f3df73d3413c98e661499bb2163e0b</td>
|
|
<td>fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb</td>
|
|
<td>be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b</td>
|
|
<td>2025-08-18 05:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f529e182b51d5b8921bc0134e5e6fab317321babe9fb10ba92da457f46c53793</td>
|
|
<td>[68a5239e621d09b2b1ed5e45]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Module.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:32Z]</td>
|
|
<td>[dc2407a1a6409b2c68fb0cb6e69ec180]</td>
|
|
<td>[40155aeb60dffe49e6461c76fa66dc89b8ea9437]</td>
|
|
<td>[e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73]</td>
|
|
<td>[495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Module.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>126976</td>
|
|
<td>dc2407a1a6409b2c68fb0cb6e69ec180</td>
|
|
<td></td>
|
|
<td>1.0.8565.40727</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:36 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:36 +0000 UTC</td>
|
|
<td>40155aeb60dffe49e6461c76fa66dc89b8ea9437</td>
|
|
<td>e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73</td>
|
|
<td>495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d78ec3aacc15e34bbcacd91f643ed1824f2dc7bd50ab1002f2e01e95456a4d</td>
|
|
<td>[68a17e9d450b6af860b2a048, 68a2d02202d2333d8d83417e, 68a421c7cf2d938484290f3b, 68a5735c4174cee301f60528, 68a6c50b0f01f5b632e5224b]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_Iatric]</td>
|
|
<td>[i-nSamDB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[G:\SAMImports\Provation\ExtractYesterday.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z, 2025-08-21T07:00:00Z]</td>
|
|
<td>[e2132d40c92ea49fc2ba6f5a48a4e5e1]</td>
|
|
<td>[9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db]</td>
|
|
<td>[b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56]</td>
|
|
<td>[3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ExtractYesterday.bat</td>
|
|
<td>G:\SAMImports\Provation\</td>
|
|
<td></td>
|
|
<td>128</td>
|
|
<td>e2132d40c92ea49fc2ba6f5a48a4e5e1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-06 16:35:20 +0000 UTC</td>
|
|
<td>2023-12-13 12:57:26 +0000 UTC</td>
|
|
<td>9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db</td>
|
|
<td>b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56</td>
|
|
<td>3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213</td>
|
|
<td>2025-08-09 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d0d3de3348731c003a4021605d4d86a38d8d915555494bde85645d748ffc4f</td>
|
|
<td>[68a15a1322e6ea61a3496d50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1opx1ngt.s4i.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:26:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1opx1ngt.s4i.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:26:52 +0000 UTC</td>
|
|
<td>2025-08-17 04:26:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:26:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f49dccf8c52375ecf81ee59c608154723828fc7c43863dba72e19ce5cb9e289d</td>
|
|
<td>[68a70bf158372bc3075d1d4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_ControlSystem]</td>
|
|
<td>[vm-bmcntx-bas1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Yabe\Plugins\GlobalCommander.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2314.900]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Yabe\Yabe.exe]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\13\is-00LB0.tmp\SetupYabe_v2.1.0.tmp]</td>
|
|
<td>[2025-08-21T12:07:06Z]</td>
|
|
<td>[d6d15d149241c88879eee3836d31ad03]</td>
|
|
<td>[6eff88fe42731a9e15e40bdf728c07242587a17c]</td>
|
|
<td>[7d2c325ef0487c9b9aacf9b94450fd9ea5cd66163cc377475173141a6da67e275202887f96828bd5b9a064c3f8330b3f]</td>
|
|
<td>[0865b9351d87763f421095d4323d58fe3668218dcc3da8f62a34513019e2867cca7a32d4a07cbc430ec5df8e1ee355f9529cb7ff005497bb874a786bb2b6e3e2]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>[172.17.20.75]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GlobalCommander.dll</td>
|
|
<td>C:\Program Files\Yabe\Plugins\</td>
|
|
<td>GlobalCommander</td>
|
|
<td>779776</td>
|
|
<td>d6d15d149241c88879eee3836d31ad03</td>
|
|
<td>GlobalCommander</td>
|
|
<td>1.3.4.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-21 12:07:01 +0000 UTC</td>
|
|
<td>2025-01-17 11:17:44 +0000 UTC</td>
|
|
<td>6eff88fe42731a9e15e40bdf728c07242587a17c</td>
|
|
<td>7d2c325ef0487c9b9aacf9b94450fd9ea5cd66163cc377475173141a6da67e275202887f96828bd5b9a064c3f8330b3f</td>
|
|
<td>0865b9351d87763f421095d4323d58fe3668218dcc3da8f62a34513019e2867cca7a32d4a07cbc430ec5df8e1ee355f9529cb7ff005497bb874a786bb2b6e3e2</td>
|
|
<td>2025-08-21 12:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-02-25 18:29:06 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 12:10:27.595 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f484f3a80aa0ae9108b1876a147263a9fb5e87ec1065deadc3cb93ff70492723</td>
|
|
<td>[68a36b076a7f8fce5714f797]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\CTerm.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["d:\intersystems\hsfoundation\bin\cterm.exe" /console=cn_ap:HSFOUNDATION2017[]:]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\Ccontrol.exe]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[2025-08-18T18:03:45Z]</td>
|
|
<td>[d1b5aeda78111abc1b7b6a79a00626e3]</td>
|
|
<td>[91005476734d54bd9b933eb07d058f9cd4d57132]</td>
|
|
<td>[bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17]</td>
|
|
<td>[f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CTerm.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Terminal</td>
|
|
<td>286208</td>
|
|
<td>d1b5aeda78111abc1b7b6a79a00626e3</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:11:30 +0000 UTC</td>
|
|
<td>2019-07-16 21:11:30 +0000 UTC</td>
|
|
<td>91005476734d54bd9b933eb07d058f9cd4d57132</td>
|
|
<td>bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17</td>
|
|
<td>f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc</td>
|
|
<td>2025-08-18 18:03:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f43f8ca10941606fb675785286981c166be1393f584020ffd965c6863f62232c</td>
|
|
<td>[68a472b1b022648922e23583]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\javax.annotation-api-1.3.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:41Z]</td>
|
|
<td>[707336a61fa1a548342bc793362bd9da]</td>
|
|
<td>[67747496d8b5c1f300ed3cde4ba69d6f453ba984]</td>
|
|
<td>[b0d1d17647746f6a165246a8753215f98c67dde3a7f38aef8974a44f420f5eb992eca2ac138ae228143c53aebcc23c5b]</td>
|
|
<td>[fe9337099610158f51866502304fd72213e4ac65358ca0e5ede1c09771cc636da306ef23a9ecf096ae8f994cdbe2b797e746748177b6f2d7ba073ce43a1737b9]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>javax.annotation-api-1.3.jar</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\wildfly-17.0.0.Final\standalone\tmp\vfs\deployment\deployment3ca42d7f020d460d\javax.annotation-api-1.3.jar-3d93462ae1776342\</td>
|
|
<td></td>
|
|
<td>26430</td>
|
|
<td>707336a61fa1a548342bc793362bd9da</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>2025-03-28 16:06:16 +0000 UTC</td>
|
|
<td>67747496d8b5c1f300ed3cde4ba69d6f453ba984</td>
|
|
<td>b0d1d17647746f6a165246a8753215f98c67dde3a7f38aef8974a44f420f5eb992eca2ac138ae228143c53aebcc23c5b</td>
|
|
<td>fe9337099610158f51866502304fd72213e4ac65358ca0e5ede1c09771cc636da306ef23a9ecf096ae8f994cdbe2b797e746748177b6f2d7ba073ce43a1737b9</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-12-30 09:45:40 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-11 02:08:19.668 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f40681b66d49369219f31f15fe7a0e73a787651ce357f5e86e2d6bddb49c0c97</td>
|
|
<td>[68a48674c4cb2500be69261c, 68a48674c4cb2500be692632]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Polly.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:22Z, 2025-08-19T14:05:04Z]</td>
|
|
<td>[1d281597aef8d59107117c53584acc44]</td>
|
|
<td>[38e2d5449d89bb84e313d080e7969a5261a459a6]</td>
|
|
<td>[a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db]</td>
|
|
<td>[3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Polly.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Polly</td>
|
|
<td>287456</td>
|
|
<td>1d281597aef8d59107117c53584acc44</td>
|
|
<td>Polly</td>
|
|
<td>7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-01-17 18:25:08 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>38e2d5449d89bb84e313d080e7969a5261a459a6</td>
|
|
<td>a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db</td>
|
|
<td>3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f838f549fd861f3358e3264cad8927bdb217d2cc84945325a8f4952f516023b7</td>
|
|
<td>[68a3146b5f0c41860c8c8502, 68a3146b5f0c41860c8c8526]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[abb6e699fbac4a89b4b96a0923590806]</td>
|
|
<td>[3f0314f1612edc949568cb9863516b712df68f2f]</td>
|
|
<td>[546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968]</td>
|
|
<td>[846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>19374</td>
|
|
<td>abb6e699fbac4a89b4b96a0923590806</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>3f0314f1612edc949568cb9863516b712df68f2f</td>
|
|
<td>546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968</td>
|
|
<td>846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fbc7fdf61a20576e09a33947853cc2024cd0249137e7db6b4674632ccacde896</td>
|
|
<td>[68a3146b5f0c41860c8c850d, 68a3146b5f0c41860c8c8560]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\html\__pycache__\entities.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[41e82f02e4f6d79a79511257656da6c4]</td>
|
|
<td>[7643352f9bd86afb0c0981f14b6ec2e360f9805f]</td>
|
|
<td>[bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b]</td>
|
|
<td>[f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>entities.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\html\__pycache__\</td>
|
|
<td></td>
|
|
<td>97677</td>
|
|
<td>41e82f02e4f6d79a79511257656da6c4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>7643352f9bd86afb0c0981f14b6ec2e360f9805f</td>
|
|
<td>bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b</td>
|
|
<td>f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb8e16e14064e438e124ed8bf8a1cf7723be42adc5d8c9a04c728aefc4211c02</td>
|
|
<td>[68a71d98771132224a617f82]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[UHC-XPROTECT]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\Milestone\XProtect Mobile Server\VideoOS.Mobile.TrayController.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2321.907]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~1\MILEST~1\XP8D32~1\VIDEOO~1.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-21T13:14:39Z]</td>
|
|
<td>[58741ea77e2b8684d07e79434e301323]</td>
|
|
<td>[d253c7c1b6b3049c576ad7d67f240eb821e7e02a]</td>
|
|
<td>[15e59189d657083f523f19aaad87b4ad73249d89ee9a4f051a3d3dcee7d5f1e282b9415e43a48d0a07a75803f317ba44]</td>
|
|
<td>[c1b91a6769991287df8fe2e6b7d0caea2f9beac819f2aa9635b8a4e4f0746700858dcf12c6d85029b333a554f3fb6b98b8b707222680dbde10be8a4016604830]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>[172.25.19.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VideoOS.Mobile.TrayController.Common.dll</td>
|
|
<td>C:\Program Files\Milestone\XProtect Mobile Server\</td>
|
|
<td>VideoOS.Mobile.TrayController.Common</td>
|
|
<td>451072</td>
|
|
<td>58741ea77e2b8684d07e79434e301323</td>
|
|
<td>Mobile library assembly</td>
|
|
<td>20.2.2516.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2020-05-11 15:02:16 +0000 UTC</td>
|
|
<td>2020-05-11 15:02:16 +0000 UTC</td>
|
|
<td>d253c7c1b6b3049c576ad7d67f240eb821e7e02a</td>
|
|
<td>15e59189d657083f523f19aaad87b4ad73249d89ee9a4f051a3d3dcee7d5f1e282b9415e43a48d0a07a75803f317ba44</td>
|
|
<td>c1b91a6769991287df8fe2e6b7d0caea2f9beac819f2aa9635b8a4e4f0746700858dcf12c6d85029b333a554f3fb6b98b8b707222680dbde10be8a4016604830</td>
|
|
<td>2025-07-16 19:27:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2021-08-13 08:28:18 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 19:30:32.656 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00d51b889a3889f2b5a293eba542001db0bb43f7728f60a860265a7d9b81f0d5</td>
|
|
<td>[68a3146b5f0c41860c8c8520, 68a3146b5f0c41860c8c856c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\encoders.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[629e2a9c50daf9538c8417fc8dcf7c14]</td>
|
|
<td>[f298e5565bd87637c224fad6b00e79e7376caed6]</td>
|
|
<td>[f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b]</td>
|
|
<td>[e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>encoders.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>2061</td>
|
|
<td>629e2a9c50daf9538c8417fc8dcf7c14</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>f298e5565bd87637c224fad6b00e79e7376caed6</td>
|
|
<td>f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b</td>
|
|
<td>e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb65774774f37bf9b61dfd39c7fc27ec58ecedc6cc2d6c9bedee2b6054b0711f</td>
|
|
<td>[68a36b076a7f8fce5714f796]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\Ccontrol.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CCONTROL.EXE" cterminal HSFOUNDATION2017]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:03:45Z]</td>
|
|
<td>[becf6336d139fb201df8f0c25344fa85]</td>
|
|
<td>[83aaab5f7fe72010d6f1b45366fad34568ea330d]</td>
|
|
<td>[8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f]</td>
|
|
<td>[66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Ccontrol.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Control Program</td>
|
|
<td>25600</td>
|
|
<td>becf6336d139fb201df8f0c25344fa85</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:09:26 +0000 UTC</td>
|
|
<td>2019-07-16 21:09:26 +0000 UTC</td>
|
|
<td>83aaab5f7fe72010d6f1b45366fad34568ea330d</td>
|
|
<td>8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f</td>
|
|
<td>66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634</td>
|
|
<td>2025-08-12 13:26:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>02887edb4e2a570dca14f9262e9c5574ca92cf067895889e6e38691990a61fd3</td>
|
|
<td>[68a48674c4cb2500be692634]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.Utilities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:15Z]</td>
|
|
<td>[7eaac1bd4e2e852dee8286407c142ade]</td>
|
|
<td>[a2cd6b02e50e058fd187534faf01d9a321be6ed1]</td>
|
|
<td>[b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8]</td>
|
|
<td>[d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.Utilities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.Utilities</td>
|
|
<td>28912</td>
|
|
<td>7eaac1bd4e2e852dee8286407c142ade</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>a2cd6b02e50e058fd187534faf01d9a321be6ed1</td>
|
|
<td>b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8</td>
|
|
<td>d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf</td>
|
|
<td>2025-07-15 14:07:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0241e737daa4255049e24dc3271c297bd1bde6963d7c3f990ec60ecdb59b616f</td>
|
|
<td>[68a25a433ab41f2de26688e3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tquqr5iv.tb1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:39:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tquqr5iv.tb1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:39:58 +0000 UTC</td>
|
|
<td>2025-08-17 22:39:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:40:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0240c288a723d59ab3c098c2479928dad48ac1f5ba1bb5180056ef7d24c84c68</td>
|
|
<td>[68a17c189d49ad1bd9c4b8c9, 68a2cfae9ae51e4be825c7e4, 68a41f348cf879e8d23db674, 68a572add36d57a95b891e68, 68a6c42dc23cc368090acfb3]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[U-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:51:02Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z, 2025-08-21T06:51:03Z]</td>
|
|
<td>[1d1e0f45227d3a637e81d25a2a508187]</td>
|
|
<td>[61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a]</td>
|
|
<td>[27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776]</td>
|
|
<td>[7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1456</td>
|
|
<td>1d1e0f45227d3a637e81d25a2a508187</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-16 20:03:59 +0000 UTC</td>
|
|
<td>2022-05-17 19:04:29 +0000 UTC</td>
|
|
<td>61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a</td>
|
|
<td>27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776</td>
|
|
<td>7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>020f21b1a2944cc57671cc061c101cab4786e324fd6ccc4003184002a4b8f5b3</td>
|
|
<td>[68a28bda3bdcd0703f76f644, 68a3dfd9dd64bcf44b32b6de, 68a533cd7c33c0fb7b88c886, 68a6857e0fd019c48ec633db]</td>
|
|
<td>[2]</td>
|
|
<td>[xpressions]</td>
|
|
<td>[vm-vmail]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\xpressions\SnmpTrapGen.exe, C:\Users\Default\SnmpTrapGen.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.901]</td>
|
|
<td>[C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755482987009, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755569859435, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755656891824, C:\Users\Default\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755743559464]</td>
|
|
<td>[SnmpSoft Company (Invalid Certificate Chain)]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe]</td>
|
|
<td>[2025-08-18T02:10:02Z, 2025-08-19T02:17:54Z, 2025-08-20T02:28:27Z, 2025-08-21T02:32:55Z]</td>
|
|
<td>[14a8db10bf75b483c14cd1a649fffbf1]</td>
|
|
<td>[4de404c9b6058e7d67cd437b96c0eb4e553dbfdd]</td>
|
|
<td>[5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5]</td>
|
|
<td>[97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SnmpTrapGen.exe</td>
|
|
<td>C:\Users\xpressions\</td>
|
|
<td>SnmpTrapGen</td>
|
|
<td>154872</td>
|
|
<td>14a8db10bf75b483c14cd1a649fffbf1</td>
|
|
<td>SnmpTrapGen</td>
|
|
<td>1.1</td>
|
|
<td>SnmpSoft Company (Invalid Certificate Chain)</td>
|
|
<td>2025-08-16 02:25:56 +0000 UTC</td>
|
|
<td>2025-08-16 02:25:57 +0000 UTC</td>
|
|
<td>4de404c9b6058e7d67cd437b96c0eb4e553dbfdd</td>
|
|
<td>5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5</td>
|
|
<td>97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a</td>
|
|
<td>2025-08-16 02:26:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-14 04:26:11 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-16 02:27:03.497 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0193bed6287dff0234554d9d0b50949e96abf8acaca8a301f02332a7349276cf</td>
|
|
<td>[68a164af314711b37247c0a1, 68a2b633bc43c5800255e65e, 68a408552c9c833f6d66b3fb, 68a559867a66111383e972e3, 68a6ab388907e10b3b3c7b0b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG2A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877, v2314.902]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z, 2025-08-21T05:05:00Z]</td>
|
|
<td>[592b171e23708bb8d19631cab6bd3ea6]</td>
|
|
<td>[256cda95b6960107ebebdb31310acd3adee827b1]</td>
|
|
<td>[a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae]</td>
|
|
<td>[f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG2A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>592b171e23708bb8d19631cab6bd3ea6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:38 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:38 +0000 UTC</td>
|
|
<td>256cda95b6960107ebebdb31310acd3adee827b1</td>
|
|
<td>a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae</td>
|
|
<td>f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>013824dd98d654ae6fa35cbb46d29d79ca49f6f084fef8b95f4abff4fe4ce2f7</td>
|
|
<td>[68a36b2f814a7aa0d93290c9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\CStudio.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CSTUDIO.EXE" /servername="HSFOUNDATION2017"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:04:27Z]</td>
|
|
<td>[b41afb09655750e9caf2bd657d3e3d8c]</td>
|
|
<td>[2b26fa2dc7200223a73563e63392f3caf4cb9440]</td>
|
|
<td>[034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a]</td>
|
|
<td>[27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CStudio.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Studio</td>
|
|
<td>3734016</td>
|
|
<td>b41afb09655750e9caf2bd657d3e3d8c</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:09:56 +0000 UTC</td>
|
|
<td>2019-07-16 21:09:56 +0000 UTC</td>
|
|
<td>2b26fa2dc7200223a73563e63392f3caf4cb9440</td>
|
|
<td>034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a</td>
|
|
<td>27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5</td>
|
|
<td>2025-08-18 18:04:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0120c65751377d7c151d92059b5b01184b00e9a6579a8c1099d5fb7c54fd1276</td>
|
|
<td>[68a3146b5f0c41860c8c8547]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\bisect.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[f29725aff50c74333893a8c32d856e5e]</td>
|
|
<td>[506feae5c909e2b9651a60062b9ce938a685f18f]</td>
|
|
<td>[80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee]</td>
|
|
<td>[823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bisect.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>3505</td>
|
|
<td>f29725aff50c74333893a8c32d856e5e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>506feae5c909e2b9651a60062b9ce938a685f18f</td>
|
|
<td>80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee</td>
|
|
<td>823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0116f69207083393f3afc16c63a0a7fbfdedb8a22034bf8c2cf8081f851ff4dd</td>
|
|
<td>[68a472a799ad3734d804e2e4]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-i18n-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[7ea1d725fb3b508b99af33fac5ba38bd]</td>
|
|
<td>[06044c6026b1178c078371e271222455671b5bd7]</td>
|
|
<td>[07dea9f24f4e2a64fc5f861f267694a1161cf4eb6f9a9353f85c9cb983b8ed956683ed4ee8e486a89e42bcdb4aa964ee]</td>
|
|
<td>[669ef3672d75b17b2b86491fd6f5c9d321e469baf74d63f6e63045f6c2f84ec7c9283b26dfc81f2bddb181c0f66faf5965eba4022269be8ed3ac6a56c91cee16]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-i18n-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>11263</td>
|
|
<td>7ea1d725fb3b508b99af33fac5ba38bd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>06044c6026b1178c078371e271222455671b5bd7</td>
|
|
<td>07dea9f24f4e2a64fc5f861f267694a1161cf4eb6f9a9353f85c9cb983b8ed956683ed4ee8e486a89e42bcdb4aa964ee</td>
|
|
<td>669ef3672d75b17b2b86491fd6f5c9d321e469baf74d63f6e63045f6c2f84ec7c9283b26dfc81f2bddb181c0f66faf5965eba4022269be8ed3ac6a56c91cee16</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-12-26 03:22:36 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f75b13c1a5390c281129aec20b64eda82ecdebfccf050514ad487a5979c44eea</td>
|
|
<td>[68a3b085a65533c1207e5253]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\s4wkumbz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>s4wkumbz.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f743dd1cf384c304dbafa96084aa9bc85be8ca4988f640af0d4f0ec468d82f55</td>
|
|
<td>[68a5caea367f7de967f1ebcb, 68a5d0ddcffcb4e65b3a935b]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVA10, seawolfajb]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\QDirect\QDirectMgr.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>["D:\QS1\QDirect\QDirectMgr.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-20T13:17:24Z, 2025-08-20T13:33:46Z]</td>
|
|
<td>[0308c4855f6303697434a385aad01de5]</td>
|
|
<td>[f280f28af8e39dca5b8d00927e2dc6e84ef9a0a9]</td>
|
|
<td>[a47e10f5d7e8700b3879df0efbdaba6f91c0368da5f18f563f892fa307a4b07fcb4254041f3d4b6ceb55cd46edfa6772]</td>
|
|
<td>[5615a91bc2f009d82741dec8dc9d1a72f33aafa0260d58f67769d1df237a275e86b966bab40cf06edc33323932b4972f797304d125cdbd8901afa0586133d6ee]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QDirectMgr.exe</td>
|
|
<td>D:\QS1\QDirect\</td>
|
|
<td>QDirectServiceManager</td>
|
|
<td>417792</td>
|
|
<td>0308c4855f6303697434a385aad01de5</td>
|
|
<td>QDirectServiceManager</td>
|
|
<td>1.0.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:07:33 +0000 UTC</td>
|
|
<td>2012-08-21 17:41:44 +0000 UTC</td>
|
|
<td>f280f28af8e39dca5b8d00927e2dc6e84ef9a0a9</td>
|
|
<td>a47e10f5d7e8700b3879df0efbdaba6f91c0368da5f18f563f892fa307a4b07fcb4254041f3d4b6ceb55cd46edfa6772</td>
|
|
<td>5615a91bc2f009d82741dec8dc9d1a72f33aafa0260d58f67769d1df237a275e86b966bab40cf06edc33323932b4972f797304d125cdbd8901afa0586133d6ee</td>
|
|
<td>2025-08-20 13:17:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2020-12-07 07:40:00 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:20:55.36 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f70d6adc3e13a9bc178a81276700632d870a559aa4b2aa3c45c162cf6a1e7333</td>
|
|
<td>[68a306a5ba5832f49fe9cf5a]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\LMD45.BPL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:37Z]</td>
|
|
<td>[f881e04538dd4335068b2362a87aa05a]</td>
|
|
<td>[41084264242baafaddfd51f2a262f54ed339d916]</td>
|
|
<td>[542a7a03b9625c6e4f9bc0530708b165966fc21fafc1626cfd6fce2adee9c38276b0a0ed20d9977ecb83e9fb3ac2eaf1]</td>
|
|
<td>[f377a1e3139afcf93334d474f87fd4746504e42ddbcb70adf446419c7060624d7f4ccd96176d8347f75da62abcef3f399c5d27c928f5a4c521a673525540000d]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LMD45.BPL</td>
|
|
<td>C:\DICORP\DICORP_V5\RW\APPS\</td>
|
|
<td>LMD-Tools Components</td>
|
|
<td>1612800</td>
|
|
<td>f881e04538dd4335068b2362a87aa05a</td>
|
|
<td>LMD-Tools</td>
|
|
<td>4.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:52:21 +0000 UTC</td>
|
|
<td>2024-09-14 04:02:52 +0000 UTC</td>
|
|
<td>41084264242baafaddfd51f2a262f54ed339d916</td>
|
|
<td>542a7a03b9625c6e4f9bc0530708b165966fc21fafc1626cfd6fce2adee9c38276b0a0ed20d9977ecb83e9fb3ac2eaf1</td>
|
|
<td>f377a1e3139afcf93334d474f87fd4746504e42ddbcb70adf446419c7060624d7f4ccd96176d8347f75da62abcef3f399c5d27c928f5a4c521a673525540000d</td>
|
|
<td>2025-04-30 20:02:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 17:17:17 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-04-30 20:06:08.08 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>02e08f7294deeca480e69bbabfbf8ecefddad28db941fcac0ff3c6f577a28425</td>
|
|
<td>[68a306a5ba5832f49fe9cf3d]</td>
|
|
<td>[2]</td>
|
|
<td>[nc10100]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\STDFRMS1.DLL]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\keygen.exe]</td>
|
|
<td>[C:\DICORP\DICORP_V5\CV5TRAUMA\APPS\APPLDR2.EXE]</td>
|
|
<td>[2025-08-18T10:46:36Z]</td>
|
|
<td>[67dbeba4fa41581a157fd2f2386c5e00]</td>
|
|
<td>[5e55bc43907a915d84de80b9ddc6498b8612083b]</td>
|
|
<td>[1c05d2390986b9feebd66542195934bd4fcf8fcf5de5ab41e7e7a0f7fe4dac99f537f01f1ef5e7b85c81e14866f3bfbf]</td>
|
|
<td>[c71b9db29d8bd0afffce15dd5fea06ce4e3ac465e19da9857c2c90259bcf9d64571767cb73955b62c1375fd9896e1b11aaa71ca79aec970947af466117c037ab]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STDFRMS1.DLL</td>
|
|
<td>C:\DICORP\DICORP_V5\CV5TRAUMA\SERVER\NTDS\SERVER\TVAVVSDK\TVAVVSDK\CentralizedValidator\SDK\KeyGenerator\APPS\</td>
|
|
<td></td>
|
|
<td>36352</td>
|
|
<td>67dbeba4fa41581a157fd2f2386c5e00</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-07-06 14:45:26 +0000 UTC</td>
|
|
<td>2024-10-23 17:06:46 +0000 UTC</td>
|
|
<td>5e55bc43907a915d84de80b9ddc6498b8612083b</td>
|
|
<td>1c05d2390986b9feebd66542195934bd4fcf8fcf5de5ab41e7e7a0f7fe4dac99f537f01f1ef5e7b85c81e14866f3bfbf</td>
|
|
<td>c71b9db29d8bd0afffce15dd5fea06ce4e3ac465e19da9857c2c90259bcf9d64571767cb73955b62c1375fd9896e1b11aaa71ca79aec970947af466117c037ab</td>
|
|
<td>2025-05-19 12:23:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-04 18:07:10 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>1</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.20</td>
|
|
<td>2025-05-19 12:26:16.193 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>029979e088bcb493e4582579eac4ec99faa48c615fe5ab74737fa8746b820228</td>
|
|
<td>[68a31fecb457e7ec963d10ec]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-13 14:15:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>028bd42e9714e87b218317f756774037dbaedaacd8db68165a92932cefbd09f4</td>
|
|
<td>[68a5239e621d09b2b1ed5e4e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PieChart.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[e9db2d046f26b953b99f1b33b8f21fa7]</td>
|
|
<td>[e7042e01111ede7bb14467f24d57048a748b890a]</td>
|
|
<td>[6482b74f2378dc53cac8d0965b5332d90d0728ffb7b5942ea93b38a996280269f1a2e14863a0377a23d19e51871de211]</td>
|
|
<td>[347dd5161b3312b045beec02562cb86291c1466036a28250e6e5c7e5832228edc440d011ee3306fcc82cac9f66ac9fd2188afc47259079bf30c5a1f168e55a61]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PieChart.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Pie Chart</td>
|
|
<td>40960</td>
|
|
<td>e9db2d046f26b953b99f1b33b8f21fa7</td>
|
|
<td></td>
|
|
<td>1.3.0.6</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:35:58 +0000 UTC</td>
|
|
<td>e7042e01111ede7bb14467f24d57048a748b890a</td>
|
|
<td>6482b74f2378dc53cac8d0965b5332d90d0728ffb7b5942ea93b38a996280269f1a2e14863a0377a23d19e51871de211</td>
|
|
<td>347dd5161b3312b045beec02562cb86291c1466036a28250e6e5c7e5832228edc440d011ee3306fcc82cac9f66ac9fd2188afc47259079bf30c5a1f168e55a61</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-01-14 09:21:33 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 01:26:27.286 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fe09daf4764de2e4439e7c9c58316f63bd9403f1d0d40691f4110a920efdf9de</td>
|
|
<td>[68a472b1b022648922e235a8]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\StorageCenterExplorerAPI-20.1.2.14.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[243d8e82c5b4e540915323a72a956690]</td>
|
|
<td>[55e91470c4595f17e3693728e2790ad06b68dc79]</td>
|
|
<td>[b43956810e2efe1a64be931807e2a4dd2c325286653b69b2dbbe1d160ab6e544cccc9ffd1dbde7ffa94615016a2a1f1b]</td>
|
|
<td>[f36eacc0ddea38d7cf8efaca8bb73c3425af4273a1d4ce34a4ca2c98e297087f176bc8aa374ce53ef16466e476d3d39488e1381f046a8f09723d6c9268203aa6]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StorageCenterExplorerAPI-20.1.2.14.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>19936</td>
|
|
<td>243d8e82c5b4e540915323a72a956690</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>55e91470c4595f17e3693728e2790ad06b68dc79</td>
|
|
<td>b43956810e2efe1a64be931807e2a4dd2c325286653b69b2dbbe1d160ab6e544cccc9ffd1dbde7ffa94615016a2a1f1b</td>
|
|
<td>f36eacc0ddea38d7cf8efaca8bb73c3425af4273a1d4ce34a4ca2c98e297087f176bc8aa374ce53ef16466e476d3d39488e1381f046a8f09723d6c9268203aa6</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-03-17 18:11:51 +0000 UTC</td>
|
|
<td>58</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fe090ee4cb6244f48dbe88ad3cd1e54500b54e8a040571bc0cc02a8bcbc437d0</td>
|
|
<td>[68a472a799ad3734d804e2df]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\batik-dom-1.12.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:36Z]</td>
|
|
<td>[0aa02df1ee76506d46839e10acf687fd]</td>
|
|
<td>[1f7a51f02419a5b20333ec8116382fd7bca78bd5]</td>
|
|
<td>[03870aa1b114fd042ccd154500511fc43fe7c2d2f9be58b5389bf39ec645f7904594e9914bfb27c64f4c49ed5f4c6708]</td>
|
|
<td>[4a6012a1279fbe3584d7c92c3ac3acbcdbc2a4b135e8673722ab406a5f63ed620a0ff0e7a93692cdb11ee2038a9687dc2bc89a403148bd18f45e9fe88674c8bb]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>batik-dom-1.12.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>182590</td>
|
|
<td>0aa02df1ee76506d46839e10acf687fd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>1f7a51f02419a5b20333ec8116382fd7bca78bd5</td>
|
|
<td>03870aa1b114fd042ccd154500511fc43fe7c2d2f9be58b5389bf39ec645f7904594e9914bfb27c64f4c49ed5f4c6708</td>
|
|
<td>4a6012a1279fbe3584d7c92c3ac3acbcdbc2a4b135e8673722ab406a5f63ed620a0ff0e7a93692cdb11ee2038a9687dc2bc89a403148bd18f45e9fe88674c8bb</td>
|
|
<td>2025-08-19 11:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-09-26 13:09:53 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 11:30:19.65 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fdb926e2256cde49c147fd8d3d59d73598ba9d09c498c6d52cfbe6285cc6048e</td>
|
|
<td>[68a3146b5f0c41860c8c8511, 68a3146b5f0c41860c8c8564]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\errors.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[49174a480c734fd1a4b7c0b4f048d18b]</td>
|
|
<td>[f134bd12839067b16c719dcddd7feb54e228645f]</td>
|
|
<td>[26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e]</td>
|
|
<td>[c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>errors.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>7588</td>
|
|
<td>49174a480c734fd1a4b7c0b4f048d18b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>f134bd12839067b16c719dcddd7feb54e228645f</td>
|
|
<td>26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e</td>
|
|
<td>c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fda97f6ec8bc3a28270dd0d5800b6e1309e711a0fef9ec6984819c59092fd1f2</td>
|
|
<td>[68a17b3ec86486ccb41646c3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-v3MAppTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tzzqoamc.4zw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:48:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tzzqoamc.4zw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:48:25 +0000 UTC</td>
|
|
<td>2025-08-17 06:48:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:48:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fda37cbb903f43d9b3649e44db493160207ccaaa1f24542ffa035682ac8a8e07</td>
|
|
<td>[68a4ccc785b914a60d739e4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fd451e5b061a4b3db0872c23ae17414ac8815eee11cce644fe1d63abc8c122b0</td>
|
|
<td>[68a3146b5f0c41860c8c84fb, 68a3146b5f0c41860c8c8558]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\server.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[eeb247742b582d6575eb73a83ad57a68]</td>
|
|
<td>[683d7c49128654f5cb1609e957808e12e1b16dcf]</td>
|
|
<td>[a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf]</td>
|
|
<td>[f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>server.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>55819</td>
|
|
<td>eeb247742b582d6575eb73a83ad57a68</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 22:08:48 +0000 UTC</td>
|
|
<td>2024-11-22 22:08:48 +0000 UTC</td>
|
|
<td>683d7c49128654f5cb1609e957808e12e1b16dcf</td>
|
|
<td>a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf</td>
|
|
<td>f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fd3e9c6e0f45f9430b1a3062cc405d0be931c2d09a930b4ca60f52cb324fa5fb</td>
|
|
<td>[68a738e862adf0b4a306f92c, 68a73b27c33d19c40473afe0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-VAS-01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\spool\drivers\x64\3\cioum64.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2324.911]</td>
|
|
<td>[]</td>
|
|
<td>[Microsoft Windows Hardware Compatibility Publisher (Invalid Signature)]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\PrintIsolationHost.exe]</td>
|
|
<td>[2025-08-21T15:18:52Z, 2025-08-21T15:19:04Z]</td>
|
|
<td>[1f6a7580f0cacf27d5c4b204ff7cbd1e]</td>
|
|
<td>[5ed279ca75eb42a4208cfa3f1c432de633d0bd9a]</td>
|
|
<td>[5c01054ad178e98af5a5633714eab8f9ae040234f0b7e45017b00e9701c4a12497dbefd3b32d55e4e550b5d900a761c7]</td>
|
|
<td>[8462a55ac6febab0e68e4efb7b4aa064e020fb23816b91d7deba2b58de3ec8509bb7694431e4b26fb4627caa73202c1e6f5e132c1ef582c1b6007b56b83a612c]</td>
|
|
<td>[10.21.0.116]</td>
|
|
<td>[10.21.0.116]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cioum64.msi</td>
|
|
<td>C:\Windows\System32\spool\drivers\x64\3\</td>
|
|
<td></td>
|
|
<td>532480</td>
|
|
<td>1f6a7580f0cacf27d5c4b204ff7cbd1e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Microsoft Windows Hardware Compatibility Publisher (Invalid Signature)</td>
|
|
<td>2013-08-02 09:33:36 +0000 UTC</td>
|
|
<td>2014-06-17 08:58:22 +0000 UTC</td>
|
|
<td>5ed279ca75eb42a4208cfa3f1c432de633d0bd9a</td>
|
|
<td>5c01054ad178e98af5a5633714eab8f9ae040234f0b7e45017b00e9701c4a12497dbefd3b32d55e4e550b5d900a761c7</td>
|
|
<td>8462a55ac6febab0e68e4efb7b4aa064e020fb23816b91d7deba2b58de3ec8509bb7694431e4b26fb4627caa73202c1e6f5e132c1ef582c1b6007b56b83a612c</td>
|
|
<td>2025-08-21 15:19:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-01-23 15:23:54 +0000 UTC</td>
|
|
<td>46</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-21 15:20:44.067 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fcae2074a7a5deea742cb25c4efb09ae63fa3367e2f17c2d0e5487fa26500914</td>
|
|
<td>[68a31c78c8293406e9c76873]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gxd1sdoj.agw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:28:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gxd1sdoj.agw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:28:37 +0000 UTC</td>
|
|
<td>2025-08-18 12:28:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:28:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc4523c52329ec0e4c6c37175aa7dce0ce9ca97709430cda952ebc5c33f45af7</td>
|
|
<td>[68a177ff5edefd4d66a3be1f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bkndjlvo.aen.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:34:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bkndjlvo.aen.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:34:29 +0000 UTC</td>
|
|
<td>2025-08-17 06:34:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:34:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc331eb357b655d600c2d206e7ecfc70febb0f298b81a190f1c7444258d15d48</td>
|
|
<td>[68a34d6610b57c5bffc57dad]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fbdd4672faf5ce1f6d58b336dd2cba9cab2624ea92c91371f8ca26c47c06adc4</td>
|
|
<td>[68a1933a637eb74a714c329b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ic5gp5jg.stn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:30:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ic5gp5jg.stn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:30:43 +0000 UTC</td>
|
|
<td>2025-08-17 08:30:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:30:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc110f30f53ee8362931a98ed1af4c37dadcf79a8dc5f09b4070eaa4a758698d</td>
|
|
<td>[68a523949cec397f02de9f59]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GenConfigDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[a4540f55360e91330d7228e9b59bc092]</td>
|
|
<td>[5500674149e61c84977326de17b4029f1ee8f286]</td>
|
|
<td>[e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197]</td>
|
|
<td>[4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GenConfigDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GenConfigDiagPlugIn</td>
|
|
<td>22016</td>
|
|
<td>a4540f55360e91330d7228e9b59bc092</td>
|
|
<td>GenConfigDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>5500674149e61c84977326de17b4029f1ee8f286</td>
|
|
<td>e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197</td>
|
|
<td>4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0364119f9cdcaa5b1db6e501277878666ef6c4cb230447705d8f48eb271fe13f</td>
|
|
<td>[68a5df780cc0a5ff8577d94b]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[PCH-PRINTER003]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Seagull\Printer Drivers\Packages\2018.3\Seagull_ConfigModule_ZPL.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2295.887]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\wbem\WmiPrvSE.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T14:41:35Z]</td>
|
|
<td>[1668b0610022f2c1e46479a0150c8b8e]</td>
|
|
<td>[aa77f71d96c5a94109ac38d9887601c380a01432]</td>
|
|
<td>[750f7e058136241bcac20e8ca59bcef624d5384f35e07508653c8e2f363dab276ccf3c9adc149aa62ecdd04591f96f60]</td>
|
|
<td>[e117568a32b001a654b41746829aa07f3633782bcb48eceea840aa5e5af48acdbe728c6922250ff991255dd44f6244bd943a93f3d7f3ec347a4905738b33b82e]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Seagull_ConfigModule_ZPL.dll</td>
|
|
<td>C:\Program Files\Seagull\Printer Drivers\Packages\2018.3\</td>
|
|
<td>ZPL Configuration Module</td>
|
|
<td>455168</td>
|
|
<td>1668b0610022f2c1e46479a0150c8b8e</td>
|
|
<td>ALL Driver Driver (UI)</td>
|
|
<td>2018.3</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-02-26 18:32:32 +0000 UTC</td>
|
|
<td>2018-09-27 06:08:56 +0000 UTC</td>
|
|
<td>aa77f71d96c5a94109ac38d9887601c380a01432</td>
|
|
<td>750f7e058136241bcac20e8ca59bcef624d5384f35e07508653c8e2f363dab276ccf3c9adc149aa62ecdd04591f96f60</td>
|
|
<td>e117568a32b001a654b41746829aa07f3633782bcb48eceea840aa5e5af48acdbe728c6922250ff991255dd44f6244bd943a93f3d7f3ec347a4905738b33b82e</td>
|
|
<td>2025-08-20 14:45:12 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>2025-05-22 21:38:59 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 14:46:06.568 +0000 UTC</td>
|
|
</tr>
|
|
</tbody>
|
|
</table> |