=
4374 lines
209 KiB
HTML
4374 lines
209 KiB
HTML
<table border="1" class="dataframe">
|
|
<thead>
|
|
<tr style="text-align: right;">
|
|
<th>sha256</th>
|
|
<th>checkpoint</th>
|
|
<th>type</th>
|
|
<th>username</th>
|
|
<th>hostname</th>
|
|
<th>netdomain</th>
|
|
<th>filename_x</th>
|
|
<th>ppolicy</th>
|
|
<th>policyname</th>
|
|
<th>policyver</th>
|
|
<th>commandline</th>
|
|
<th>publisher_x</th>
|
|
<th>pprocess</th>
|
|
<th>gprocess</th>
|
|
<th>datetime_x</th>
|
|
<th>md5_x</th>
|
|
<th>sha128_x</th>
|
|
<th>sha384_x</th>
|
|
<th>sha512_x</th>
|
|
<th>ip</th>
|
|
<th>localip</th>
|
|
<th>num_devices</th>
|
|
<th>result</th>
|
|
<th>filename_y</th>
|
|
<th>filepath</th>
|
|
<th>description</th>
|
|
<th>filesize</th>
|
|
<th>md5_y</th>
|
|
<th>productname</th>
|
|
<th>productversion</th>
|
|
<th>publisher_y</th>
|
|
<th>createtime</th>
|
|
<th>modtime</th>
|
|
<th>sha128_y</th>
|
|
<th>sha384_y</th>
|
|
<th>sha512_y</th>
|
|
<th>datetime_y</th>
|
|
<th>applications</th>
|
|
<th>baselines</th>
|
|
<th>reputation_lastseen</th>
|
|
<th>reputation_scannercount</th>
|
|
<th>reputation_scannermatch</th>
|
|
<th>reputation_status</th>
|
|
<th>reputation_threatlevel</th>
|
|
<th>reputation_threatname</th>
|
|
<th>reputation_timestamp</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>670ddf1e8c8d970ff2d18e82ac1ebb0f9838d2d0af4359428bc630bd21a85ee2</td>
|
|
<td>[68a31e9eca7b7527f86c6ca9, 68a325d712844ae893875a09, 68a5ffc9536a7a985c76561d, 68a605e24d31d8fb8241a71c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCCMCPyxCCEP, i-nCCMCPyxCCET]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\cp.dll, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\cp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2253.852, v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[BeyondTrust Corporation]</td>
|
|
<td>[C:\Windows\System32\LogonUI.exe]</td>
|
|
<td>[C:\Windows\System32\winlogon.exe]</td>
|
|
<td>[2025-08-18T12:37:48Z, 2025-08-18T13:02:33Z, 2025-08-20T16:53:05Z, 2025-08-20T17:27:13Z]</td>
|
|
<td>[672aff5f06e5ac0ac9259768c54498d5]</td>
|
|
<td>[deb676605b5883a1afcefaadb06d2feba1959a5e]</td>
|
|
<td>[40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a]</td>
|
|
<td>[5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>cp.dll</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\68761134022\</td>
|
|
<td>ACH Credential Provider</td>
|
|
<td>1174696</td>
|
|
<td>672aff5f06e5ac0ac9259768c54498d5</td>
|
|
<td>Automated Credential Handling</td>
|
|
<td>24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6)</td>
|
|
<td>BeyondTrust Corporation</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>deb676605b5883a1afcefaadb06d2feba1959a5e</td>
|
|
<td>40b3366b1ebe2c043e0d6545a4320bb4e709718c24cbf5f6b481484b19e02b2cbfe5d33c3762d067c5e1eb959c542a5a</td>
|
|
<td>5dbcdfcff6c508a8eb654889766fa0a27389f177df196cb22683129187b8a29f89e9d9b5d66d07927f5b78f405759d9c9f394484240a980a92e4b1f4d4622a85</td>
|
|
<td>2025-07-15 08:28:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3a803dda1b5f33d0de97556e1cab952f0f97bb16bdff3657617328d29d35f3e5</td>
|
|
<td>[68a62c390de66b6bd84ed653, 68a62cbbbad0c3891c052034]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Magick.NET-Q16-AnyCPU.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[ImageMagick Studio LLC]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z]</td>
|
|
<td>[2eb1441d4b71f974045d417bf0d83244]</td>
|
|
<td>[19eb935d5c140f87e225a72d084e32a65302eca3]</td>
|
|
<td>[f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6]</td>
|
|
<td>[ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Magick.NET-Q16-AnyCPU.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Magick.NET Q16 AnyCPU net40</td>
|
|
<td>12438072</td>
|
|
<td>2eb1441d4b71f974045d417bf0d83244</td>
|
|
<td>Magick.NET-Q16-AnyCPU</td>
|
|
<td>7.4.3.0</td>
|
|
<td>ImageMagick Studio LLC</td>
|
|
<td>2018-03-12 04:16:00 +0000 UTC</td>
|
|
<td>2018-03-12 04:16:00 +0000 UTC</td>
|
|
<td>19eb935d5c140f87e225a72d084e32a65302eca3</td>
|
|
<td>f8914d2ebd84d7a1a95591b36418421e50358553b0c52fcaeda97fd8dd29f9a3b8acbe31755c009d684ee8c6d337c5c6</td>
|
|
<td>ba771709453cf435b7c4cc3dc54dbcf54cfd98f4ef4fb93954d7bf707492f66c06b462d42dfad0d7b25058d23b40ae5dd34c1a85322a47ea3de26ea61138e3eb</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-06-21 13:00:33 +0000 UTC</td>
|
|
<td>66</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-06 18:32:19.67 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>004cd2403dd39a5b0f37521d49d96e6aa5dc4cec3c497c18fb3e2ca7251f1839</td>
|
|
<td>[68a31e9eca7b7527f86c6ca8, 68a31fe23d59934069ead436, 68a31fe23d59934069ead437, 68a31fe23d59934069ead438, 68a31fe23d59934069ead439, 68a322138bd13b5696d44fb0, 68a325d712844ae893875a07, 68a325d712844ae893875a08, 68a325d712844ae893875a0a, 68a3282fff5407347547ca9e, 68a33191ac64423ea16822ee, 68a33191ac64423ea16822ef, 68a5fd7014523931e7db330f, 68a5ffc9536a7a985c76561c, 68a5ffc9536a7a985c76561e, 68a5ffc9536a7a985c76561f, 68a5ffc9536a7a985c765620, 68a605e24d31d8fb8241a71d, 68a6083bfcc918b33d1bbc03]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, CFNAdmin]</td>
|
|
<td>[i-nCCMCPyxCCEP, i-nCCMCPyxCCET]</td>
|
|
<td>[NT AUTHORITY, WVUHS]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2250.850, v2253.852, v2255.853, v2307.897]</td>
|
|
<td>["C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\scc-ui;qm=1;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A31E98028\\appdata\\bomgar-scc.cache\\ui-stream-server-2931303782688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-7bafb86c-77a0-425c-9aba-05e07f22a813.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" -execfunc enum_cp 632515080, "C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic1.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-5b3e7749-b40a-4dd4-9d9f-d7ab08f7e111.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" -execfunc enum_cp 1854494281, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --uninstall, "C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe" --kill-image-processes --kill-image-processes-exclude 7980, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --install-setup elevated --original-installer C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe --quiet, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --drone-manager, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --cxn-factory-proxy-detect west-traffic2.bd.com:443; 60 0 C:\Users\cfnadmin\AppData\Local\pd-493f53c1-5930-4a24-87e2-28e204cfa4e3.tmp Proxy 0, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040619106, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2040621110, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" -execfunc enum_cp 2042633891, "C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe" --uninstall]</td>
|
|
<td>[BeyondTrust Corporation]</td>
|
|
<td>[C:\Windows\SystemTemp\bomgar-scc-win_x64-s111305z7ydwyfz1751f8j7hffzwfihy878gz6cr0!sc90.exe, C:\Windows\System32\services.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s111301diizjdjf6dg7yyeez7xizf5hgxyedjwcr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Windows\SystemTemp\bomgar-scc-win_x64-s11130e5j5ii876d87edhezgjx7gh55585ye15cr0!sc90.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[C:\Program Files (x86)\CareFusion\RSS Remote Access Agent\RemoteAccess.Service.exe, C:\Windows\System32\wininit.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A31E98028\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A32466338\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5FD6E386\bomgar-scc.exe]</td>
|
|
<td>[2025-08-18T12:37:44Z, 2025-08-18T12:37:45Z, 2025-08-18T12:41:44Z, 2025-08-18T12:41:45Z, 2025-08-18T12:42:11Z, 2025-08-18T12:45:40Z, 2025-08-18T13:02:31Z, 2025-08-18T13:02:32Z, 2025-08-18T13:03:11Z, 2025-08-18T13:11:54Z, 2025-08-18T13:55:17Z, 2025-08-18T13:55:18Z, 2025-08-20T16:53:03Z, 2025-08-20T16:53:04Z, 2025-08-20T16:53:09Z, 2025-08-20T16:53:44Z, 2025-08-20T16:53:46Z, 2025-08-20T17:27:19Z, 2025-08-20T17:29:51Z]</td>
|
|
<td>[8447ea171cfef99d48c36cd3fe58e75e]</td>
|
|
<td>[277e7c83686ce8b1d840cd8b10b952121f8dddcb]</td>
|
|
<td>[cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab]</td>
|
|
<td>[a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>[172.17.22.217, 172.17.22.211]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>bomgar-scc.exe</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\68761134022\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>22436520</td>
|
|
<td>8447ea171cfef99d48c36cd3fe58e75e</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.3.4 (3289-7271497b6dcc54d5fc3eab4334f595b35a475cc6)</td>
|
|
<td>BeyondTrust Corporation</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>2025-07-15 08:28:36 +0000 UTC</td>
|
|
<td>277e7c83686ce8b1d840cd8b10b952121f8dddcb</td>
|
|
<td>cde1bdbfa1575f815cae9d99cc6330e406e879715f3d2b79894452168822987d1ef470d04a7a245eabbacaa2c63c3eab</td>
|
|
<td>a172b97bc46edfcc0e3af8581e3891a4781bbb0827f35eccbd5b864685943d750a40f5d5f8a69a3f666fee9335e3929d0725ccf04009fe8c7899a17018d8c83c</td>
|
|
<td>2025-07-15 08:28:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0444971c7c19df0c4e5f8ad75c12ac277638470460eb7747122539960ed5e99f</td>
|
|
<td>[68a5c64d54e5003d1abde4c4, 68a5c77e05aa879ada66b41f, 68a5c77e05aa879ada66b425, 68a5c77e05aa879ada66b42a, 68a5c77e05aa879ada66b42f, 68a5c77e05aa879ada66b433, 68a5c9d7599432010e418bd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech, SYSTEM]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS, NT AUTHORITY]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe, C:\Windows\Temp\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{58A25255-3CB8-4A17-A3C9-25023F29F7DC}, C:\Users\SVC_SL~1\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{B8671B6F-617B-4826-9178-B43475CF91A7}, C:\Users\SVC_SL~1\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{5E032894-5063-4E54-A90B-D897D40099F5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{D1371EF7-61B8-4622-BE96-DFE6C3D3E0A5}, C:\Users\SVC_SL~1\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{8AD7745A-E0F4-41FE-8319-EFF8019D00DB}, C:\Users\SVC_SL~1\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{A3368B19-6720-427C-9D69-260D34BE8359}, C:\Windows\TEMP\{54B16461-B6AE-4B6A-821D-8D6C87E8B87A}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{FBE48F2E-1398-48BF-8AE6-2A235E268844}]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE, D:\QS1\QIA\03050201002QiaInst.EXE]</td>
|
|
<td>[C:\Windows\explorer.exe, D:\QS1\QIA\Qia.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z, 2025-08-20T13:12:45Z]</td>
|
|
<td>[4b56c021299344676f123fcb48f53c1e]</td>
|
|
<td>[cbef3152c477c9176120030b164a4a807b527d8e]</td>
|
|
<td>[949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c]</td>
|
|
<td>[097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISBEW64.exe</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\</td>
|
|
<td>InstallShield (R) 64-bit Setup Engine</td>
|
|
<td>70064</td>
|
|
<td>4b56c021299344676f123fcb48f53c1e</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2006-05-17 14:21:40 +0000 UTC</td>
|
|
<td>cbef3152c477c9176120030b164a4a807b527d8e</td>
|
|
<td>949444011e90cb05aafe0524331300aeb0f6bd4ebd3630c0d1a94d384a7eeb20c73402c78560bee999881c63a23b487c</td>
|
|
<td>097bbc9f0140e9a14e494b6569e38b88ad390d6befa03e75a8c671e2e5fd93ee55ad50994733c957c32c85f2061d6f4d32b4b8257b3b44d5924ca10e940f779a</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-23 01:43:21 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1d2978f61d75fe69b8ed93b5bcc1b8fd25cb8a460294bdb695478118aa5ff636</td>
|
|
<td>[68a16bd60756fe54a9918fa8, 68a2149cb58debea69d7c753, 68a2bd5ff793a9057f329c0e, 68a3663261f8067c48423ec1, 68a40efceddb3a9f1a71a60a, 68a4b7cd36bc5d38057e236f]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMeshNetAgent.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[2bf5f0103f41ad0f489491f5449ed8fc]</td>
|
|
<td>[710375edab7207797e5c1934876f5aad0835c0ed]</td>
|
|
<td>[aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627]</td>
|
|
<td>[7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zMeshNetAgent.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>505656</td>
|
|
<td>2bf5f0103f41ad0f489491f5449ed8fc</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>710375edab7207797e5c1934876f5aad0835c0ed</td>
|
|
<td>aacdec17c5ed26e9dee589fe0e697121ca772e6b46329ca3258f2e9df3a8d856a053378779a9eedce91e6a8b19ac1627</td>
|
|
<td>7fe75a25b41506a4ae9eb6710e0ad3eee1df4b94aff1d57b4537edecf432323a54c80bfa1f7e5497964a1504c270027532173d06575c5b70badd45d68142bec7</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:45 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1bec31633cd92c7e7b6897b5b7a117c32f9bec3abc83a5ae122dc67cfe770e0f</td>
|
|
<td>[68a16bd60756fe54a9918f91, 68a2149cb58debea69d7c73f, 68a2bd5ff793a9057f329bf9, 68a3663261f8067c48423ead, 68a40efceddb3a9f1a71a5f3, 68a4b7cd36bc5d38057e235b]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\reslib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[db53771ef4c80df47010df1b9b74ccca]</td>
|
|
<td>[04235cf9f35465752309b98f0f11bcc5886f45db]</td>
|
|
<td>[2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410]</td>
|
|
<td>[7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>reslib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>57144</td>
|
|
<td>db53771ef4c80df47010df1b9b74ccca</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>04235cf9f35465752309b98f0f11bcc5886f45db</td>
|
|
<td>2482b4e57c3e2e0c39f2c6172e24695324bc0fe6d1c07a10f2432fb43a630d3f3086014fa3aac31640b83dbf79f36410</td>
|
|
<td>7381716771474f5d6af0d79608ba0e30553bc296c7c8971db91e0f6d53e9905bb9205ae78d7d58d7b7b6272118f540a5dddd90e7a00487df8e97e2def1337354</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:58 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>247834099661008e2e66f0f29941d1402246e7afdeafd3c902c36d3c280c6ccc</td>
|
|
<td>[68a48674c4cb2500be69260e, 68a48674c4cb2500be692624]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Formatting.Compact.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[a500c5577afb7e7c1fc08779e5447f39]</td>
|
|
<td>[f4fe77f7f9dbafb9a1f09302d9d7704762cd5048]</td>
|
|
<td>[9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb]</td>
|
|
<td>[fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Formatting.Compact.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>20744</td>
|
|
<td>a500c5577afb7e7c1fc08779e5447f39</td>
|
|
<td>Serilog.Formatting.Compact</td>
|
|
<td>1.1.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2019-10-17 10:18:46 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>f4fe77f7f9dbafb9a1f09302d9d7704762cd5048</td>
|
|
<td>9f3fc35eec41ea929bc7d85ac8104c1634306f3e9fc36348421b98d76f4ca45d4940b2cccb62084bdc452d246f1c0ccb</td>
|
|
<td>fc3e37515b24ed310e344a5a9f66c86b8fccf5319c910c2f46504afc8991c37ad816c93fce780dda56d5dba06cab547250f87025870f01cfd1f5821ca45ab031</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e154a29673d129414ab56b995d04afcfa1a02af47dabaa28cd11c25f7d6026a</td>
|
|
<td>[68a5c64d54e5003d1abde4c2, 68a5c77e05aa879ada66b41e, 68a5c77e05aa879ada66b424, 68a5c77e05aa879ada66b429, 68a5c77e05aa879ada66b42e, 68a5c77e05aa879ada66b432]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_IsRes.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\_IsRes.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[e54601d8a464a455de081d63d4b7927d]</td>
|
|
<td>[0ff6da399c123394cca3b4cc64a41d8037787b73]</td>
|
|
<td>[34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa]</td>
|
|
<td>[5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_IsRes.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\</td>
|
|
<td>FLEXnet (R) InstallShield (R) Dialog Resources</td>
|
|
<td>123312</td>
|
|
<td>e54601d8a464a455de081d63d4b7927d</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:15 +0000 UTC</td>
|
|
<td>2006-05-17 14:19:28 +0000 UTC</td>
|
|
<td>0ff6da399c123394cca3b4cc64a41d8037787b73</td>
|
|
<td>34801c09c0958c97095802985b4c84b4c8ae01869c757898e6a1fb8840c8fee8596f31a3891e24f45e090f4bb2488efa</td>
|
|
<td>5a213430fb8dc6a19c24122f8d9cd03479ee7ae421eac77d1026f16bf520a1f113d43380e2a60d5f0133e09aa7ad323a7ef9d1cccc3eea1e905f09701b118e05</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b3c5867c013952c0c01a0604e9fab348297e52f7a1ceee65318d3ebb2be888d</td>
|
|
<td>[68a25fb2e970d941642e7edd, 68a25fb2e970d941642e7eea, 68a3b2cf09045b56b2a707b5, 68a3b2cf09045b56b2a707c2, 68a502e12ae1a61fbf4caf13, 68a502e12ae1a61fbf4caf20]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\dbatools.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z]</td>
|
|
<td>[b51cf28a2350177a4572c66c016c2103]</td>
|
|
<td>[5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa]</td>
|
|
<td>[c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386]</td>
|
|
<td>[55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.dll</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\lib\</td>
|
|
<td>dbatools</td>
|
|
<td>160672</td>
|
|
<td>b51cf28a2350177a4572c66c016c2103</td>
|
|
<td>dbatools</td>
|
|
<td>1.0.0</td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 18:35:12 +0000 UTC</td>
|
|
<td>2024-03-09 14:53:34 +0000 UTC</td>
|
|
<td>5059dd3ac94f98b9fa0ba8899931e1b14a24a7fa</td>
|
|
<td>c30969c5915c4bf43c881dfb24a4da32388cb6fe88b961509030520744078fdc79472d26a0f113e2ce9eda0d4700d386</td>
|
|
<td>55c57bcdf51de2d89851e848ec9dd235d4b454d5d3631222644df3c232046a5c5b9c793d35d793d7de6b3570836f829a3604a7972d9d4f1ddf9820ed0d814ecb</td>
|
|
<td>2025-05-10 23:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-03-24 01:06:35 +0000 UTC</td>
|
|
<td>43</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-10 23:01:16.463 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e2080bfb96ee899e9ddbc4d7d3fc32bb0c8b70e167c44af62861c3b6bba2753</td>
|
|
<td>[68a16bd60756fe54a9918fa2, 68a2149cb58debea69d7c74d, 68a2bd5ff793a9057f329c08, 68a3663261f8067c48423ebb, 68a40efceddb3a9f1a71a604, 68a4b7cd36bc5d38057e2369]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zAutoUpdate.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[9f75a49b3b2b2629b9292a2500a37bb7]</td>
|
|
<td>[bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3]</td>
|
|
<td>[317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81]</td>
|
|
<td>[8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zAutoUpdate.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>56632</td>
|
|
<td>9f75a49b3b2b2629b9292a2500a37bb7</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>bd3ad4263df4ea2b8e77cba909e967a2ba2f34e3</td>
|
|
<td>317574a87d1b44ea31498efbd80f80f260e5aead28db2d7d833715c1f6dd42029ddc53767ee62e7b347111b08856bb81</td>
|
|
<td>8e1443d29f3ef5a0d111e5582ff96b1593cc548f3bbcd371604f3273783eb152a5ba17716249acc8cd8b16ad9afa83fb9d6fc4913b0b17e548459aa06e9c3cf4</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:17 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2fa0c8055ed4dd4b3be006b6ae7fb7f563b79393f21a66d682b56f92e221dc01</td>
|
|
<td>[68a611738671451adb8f5997]</td>
|
|
<td>[2]</td>
|
|
<td>[DEVSCCMADM]</td>
|
|
<td>[DP-Warehouse]</td>
|
|
<td>[DEV-WVUHS]</td>
|
|
<td>[C:\Windows\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>["C:\WINDOWS\TempInst\is-1LE8J.tmp\m2wlg08us14.tmp" /SL5="$70C2C,11857990,180224,C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe" /VERYSILENT /DIR=C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\ /EXTRACT="YES"]</td>
|
|
<td>[Lenovo]</td>
|
|
<td>[C:\ProgramData\Lenovo\SystemUpdate\sessionSE\Repository\m2wlg08us14_tcm920q_10\m2wlg08us14.exe]</td>
|
|
<td>[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe]</td>
|
|
<td>[2025-08-20T18:16:58Z]</td>
|
|
<td>[61431127214fa224f8da58e06ba8831e]</td>
|
|
<td>[472aa381a40e1455ce7aadd87d2a2b47d4e05cb5]</td>
|
|
<td>[1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc]</td>
|
|
<td>[c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>m2wlg08us14.tmp</td>
|
|
<td>C:\Windows\TempInst\is-Q9LLO.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2917392</td>
|
|
<td>61431127214fa224f8da58e06ba8831e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Lenovo</td>
|
|
<td>2025-05-12 18:26:03 +0000 UTC</td>
|
|
<td>2025-05-12 18:26:03 +0000 UTC</td>
|
|
<td>472aa381a40e1455ce7aadd87d2a2b47d4e05cb5</td>
|
|
<td>1cff07130e90dc1b63fbb8f05add638ce49411296c682d8340ee4113b91ddeb93cdd2f6708684da188ca56488b5259bc</td>
|
|
<td>c602e771c446631aee24864cf3230b156ab9e7cb259c0189ee1a030f50a2bed5cb8d29b215b6b3f1495c8ca335b1d1333d124685d1a860e03e5c1b6da8a583c7</td>
|
|
<td>2025-05-12 18:26:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-11-05 07:38:45 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-12 18:28:22.207 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30ba0c3d915cdd4487952120eba8205e1d1acd2017b272c1c1a30c08427bf548</td>
|
|
<td>[68a16bd60756fe54a9918f93, 68a2149cb58debea69d7c740, 68a2bd5ff793a9057f329bfa, 68a3663261f8067c48423eae, 68a40efceddb3a9f1a71a5f4, 68a4b7cd36bc5d38057e235c]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[230b8336c1852e9a94a3df36af12c82c]</td>
|
|
<td>[54d436628aa6c32a6e72b86ef79da23d455eeca9]</td>
|
|
<td>[3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd]</td>
|
|
<td>[36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNetUtils.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>638264</td>
|
|
<td>230b8336c1852e9a94a3df36af12c82c</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>54d436628aa6c32a6e72b86ef79da23d455eeca9</td>
|
|
<td>3e549ba264f3b476158f4df8e0f693339ff1084b3f9d8725d2eb3dddf2aa4af5a72f9ac1eb55ed2160ca8a342f8994bd</td>
|
|
<td>36381bb1abe1e1a500714f0770b31b274a2f96caca3b123d2f9c29dc962ea2c65b336ca2206a821938d1b5d2bca9f4102513b1b5daa4c8bf15773ffe62c59d4b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:39 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2be3b84d9b1ddf317e94d3345117c0192e80ff50445538ae0c54066ae2c8e607</td>
|
|
<td>[68a48674c4cb2500be692614, 68a48674c4cb2500be69262a]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.DataAccessLayer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[7585a161b995fa0f4eb3ddc40d2d0f48]</td>
|
|
<td>[00e62d3ef0e9c5eab320fb45443f6a5b77079a89]</td>
|
|
<td>[a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11]</td>
|
|
<td>[deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer</td>
|
|
<td>27920</td>
|
|
<td>7585a161b995fa0f4eb3ddc40d2d0f48</td>
|
|
<td>StrykerIOTAPI.DataAccessLayer</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>00e62d3ef0e9c5eab320fb45443f6a5b77079a89</td>
|
|
<td>a04455c53954526f0bd078ca1354cf76856dfba80912e7f167e27a68b44ab6d15192648af045d577d607edc3d110af11</td>
|
|
<td>deb1fac1e48dc682471b0d035b5e434faf00fbf7fded80eb3acc685c61f393d7be39b356b8d81d111030799ed9170b63ff4d8bc508fd4ba66c17102228cc7907</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>33a3d3d9bd487908bea1e47b090ea5599628d2f4ee8fe3fda515360828377884</td>
|
|
<td>[68a48674c4cb2500be692612, 68a48674c4cb2500be692628]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.DataAccessLayer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[a7216a138fc22c7273f6edec8e3b41a6]</td>
|
|
<td>[115294144ead55ae4d0975d87bf46e84d568a87b]</td>
|
|
<td>[6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8]</td>
|
|
<td>[ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.DataAccessLayer.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.DataAccessLayer</td>
|
|
<td>59648</td>
|
|
<td>a7216a138fc22c7273f6edec8e3b41a6</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>115294144ead55ae4d0975d87bf46e84d568a87b</td>
|
|
<td>6ddf6e6ead1857592165ed27092cc2e8d63af8e9b89cf3ae8c25485f29648411d0e61e94d3960a10ffad44592cc803f8</td>
|
|
<td>ab393667c9bb30a1760d83c9a054f1f901868c9c62d3426b2e74a19d57f6d8b372cdc026195dc4893c46db6d9dc20b4ae621abf90d20c43a908532445b4a4200</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3448afe3dc141186a6c6b620a1311cba33347e39cca4770bd490971f1ad4b720</td>
|
|
<td>[68a5e788692da313f892a120, 68a5e788692da313f892a121, 68a5e788692da313f892a123, 68a5e788692da313f892a124, 68a5f7f47c4424bb71e0a54c, 68a5f7f47c4424bb71e0a54d, 68a614164c5f9631798f265b, 68a614164c5f9631798f265c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM, GEHEALTHCARE]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY, U-NVIEWPOINT01]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891, v2306.895, v2307.897]</td>
|
|
<td>["C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --install-setup elevated --original-installer C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" --ui "path=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\scc-ui;qm=0;ssp=C:\\Program Files\\BeyondTrust\\bomgar-scc\\68A5E5401B4\\appdata\\bomgar-scc.cache\\ui-stream-server-2598735024688.sock", "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179926804, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1179928823, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184107212, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1184110252, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191731809, "C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe" -execfunc enum_cp 1191733079]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe, C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\bomgar-scc.exe]</td>
|
|
<td>[2025-08-20T15:09:53Z, 2025-08-20T15:09:54Z, 2025-08-20T15:10:10Z, 2025-08-20T15:10:12Z, 2025-08-20T16:19:50Z, 2025-08-20T16:19:53Z, 2025-08-20T18:26:55Z, 2025-08-20T18:26:56Z]</td>
|
|
<td>[0c77dd32f741f6067ac3e399b74f593e]</td>
|
|
<td>[e15772572e59e0f8609c248781896b10b164c38a]</td>
|
|
<td>[01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b]</td>
|
|
<td>[349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bomgar-scc.exe</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>21975120</td>
|
|
<td>0c77dd32f741f6067ac3e399b74f593e</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:08 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:08 +0000 UTC</td>
|
|
<td>e15772572e59e0f8609c248781896b10b164c38a</td>
|
|
<td>01177837f7a44ff23ea8c69eec1d1404e559f56eff89a42c93e3b9abea8b7491a533484de6d049c246fcd9d25a4d2e2b</td>
|
|
<td>349589c84b18cf8310e141e49f6bf2a5e9f31c89e9bd565692c86418399bd1d38e7cf872e40ec7f1d0698c3b82b1eb499b41c5e6f7be6045744c2b1c1c888d36</td>
|
|
<td>2025-07-23 17:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-23 06:26:22 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-23 17:51:40.399 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>369ed67f529db9ddc1b609f2c9340263faa72cd366a4e56589df29de1df74c5c</td>
|
|
<td>[68a48674c4cb2500be692611, 68a48674c4cb2500be692627]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Stryker.iBedServer.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[597d9c63bf971dd23ead4d6abf7295b8]</td>
|
|
<td>[9ba9d7d94b70830e230ef01b19bab207b253f1d5]</td>
|
|
<td>[442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5]</td>
|
|
<td>[8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Common.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>38664</td>
|
|
<td>597d9c63bf971dd23ead4d6abf7295b8</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>9ba9d7d94b70830e230ef01b19bab207b253f1d5</td>
|
|
<td>442be3c21b43cfa5f04ad903753c2a11f73120447df747cdeb1078885e465c215045b7896cda4ef5c530845dc7cd10e5</td>
|
|
<td>8e1db3b3a1916faa49371abf3b8b7eb613c1ce76795ccd92af2b9d8768386b1297c108bd3898fc1327f0de336d1d31256428eb4e8e492a797430e109484c74ee</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3742126367753aaa1e94fbbc1c0f86375127f0024d89b5f22406b39dc7082c02</td>
|
|
<td>[68a48674c4cb2500be692607, 68a48674c4cb2500be69261d]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[253a5be96bc1ef00690a3397f704cbe2]</td>
|
|
<td>[c15efe63cb85ec86abe7a6be8d185207ec6a7df4]</td>
|
|
<td>[1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517]</td>
|
|
<td>[c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog</td>
|
|
<td>148192</td>
|
|
<td>253a5be96bc1ef00690a3397f704cbe2</td>
|
|
<td>Serilog</td>
|
|
<td>2.11.0-main-da16aeab+da16aeab6b30900a98a8fa3dd5d0ce1187bf0f19</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-04-24 05:03:44 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>c15efe63cb85ec86abe7a6be8d185207ec6a7df4</td>
|
|
<td>1548ef7ff279cefc97f333bbadca96fb03087df3caa2f8f7e15d7aa3329d2796eb04f40515dd813dd65030a9ddff8517</td>
|
|
<td>c0dbc046dc5e58479bec1ba1fa24e596cef19e39c635320134ae1a4d22a3b246b1ae4e53becca12ba5508e27d65371d187dab3b2921e2d3dfcd5dc92aa68d259</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>14cff831fedb21345ae1e9d261be91db71cade583ee95eee142b420fa7f14bc6</td>
|
|
<td>[68a48674c4cb2500be692619, 68a48674c4cb2500be69262f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.BusinessEntities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[673377d67ea0e4d61e412e2511cdd987]</td>
|
|
<td>[62f1432c45e44d92fad2645de312136f6c729af3]</td>
|
|
<td>[7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228]</td>
|
|
<td>[6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.BusinessEntities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.BusinessEntities</td>
|
|
<td>139520</td>
|
|
<td>673377d67ea0e4d61e412e2511cdd987</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>62f1432c45e44d92fad2645de312136f6c729af3</td>
|
|
<td>7bf5391e40ba07e46bc5dc8440ce101a9ee63723fb2d12ea0a0cb3d3190e3a354cb9ba6822182db869eb14db8fbf1228</td>
|
|
<td>6bd791025e0d34b1ce5ebd6bf19ff4a58f4e64376ce564ca49bf9a1cf0feb8b59952b4568a48ea6a10bad8d1e5647933c3bdedbc2fe4a4dfaf7637bbe9fec08d</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39bbb6b1fcd1c8a929c0111fa2ebcc2fbf66c2ab7b987badcb37459a05e14b72</td>
|
|
<td>[68a48674c4cb2500be69260a, 68a48674c4cb2500be692620]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.File.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[be27dd9f311cd665785bbdeaea480d98]</td>
|
|
<td>[af0cfabc15f87dcc8e37b65d70480600a7bf5cb9]</td>
|
|
<td>[ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5]</td>
|
|
<td>[4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.File.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>43256</td>
|
|
<td>be27dd9f311cd665785bbdeaea480d98</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>5.0.0-main-7eb21bd+7eb21bd4d35d0b8b7d13e6a15851c9903ea9a468</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-06-25 13:00:48 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>af0cfabc15f87dcc8e37b65d70480600a7bf5cb9</td>
|
|
<td>ae906eb3f3cf04b0c6724e992f1d5eb6dea85a80e3fd881a405a61c0b7e78f4c88a39d75d71a080682c480b7da5bdee5</td>
|
|
<td>4756eeb0f8237874da05717ae2b66b135768d3308e331b39dfcfc507f3c97efd70b52600f66203431a24c3a82790b5c0779a58bd49446d2674230429695700bb</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>42e566b4052546e3dff1eadc7074fe9c78c7a23247ad65d4b2d5682a99be3ed0</td>
|
|
<td>[68a16bd60756fe54a9918fa6, 68a2149cb58debea69d7c751, 68a2bd5ff793a9057f329c0c, 68a3663261f8067c48423ebf, 68a40efceddb3a9f1a71a608, 68a4b7cd36bc5d38057e236d]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cares.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[4de26bd98f5b002370bb3332692dbf66]</td>
|
|
<td>[54751e33aea7127bf9e82ad6efe87cbbfc27c009]</td>
|
|
<td>[364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d]</td>
|
|
<td>[8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cares.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>c-ares Shared Library</td>
|
|
<td>174904</td>
|
|
<td>4de26bd98f5b002370bb3332692dbf66</td>
|
|
<td>The c-ares library</td>
|
|
<td>1.27.0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>54751e33aea7127bf9e82ad6efe87cbbfc27c009</td>
|
|
<td>364936ac1c2c9113da1d7323966d776d82914611d5465742d3aa14061212a441cf3efd77f73620caeaa0939861cd464d</td>
|
|
<td>8104dc9b236e1705624a5e46b2e275b5d63c498369be27faf52d0eaf89f49f9edf4f48c94f9e091b7c3c9aa2e10cbf2af0803e169115b794acf7cde33a94077c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:35 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>436d5ae5ca7125b3a71d8c26b32dfa31d18f7a54e3919e8eaa7005aed2458567</td>
|
|
<td>[68a48674c4cb2500be692613, 68a48674c4cb2500be692629]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerGen.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:17Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[1ca814e6162846973fb2c387d0b9fb3c]</td>
|
|
<td>[0db114a6b28dc4baf9b46f724e3f679f31903ddc]</td>
|
|
<td>[4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d]</td>
|
|
<td>[6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>108824</td>
|
|
<td>1ca814e6162846973fb2c387d0b9fb3c</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerGen</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:48:24 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>0db114a6b28dc4baf9b46f724e3f679f31903ddc</td>
|
|
<td>4f807c4a09833cbe6acc6f7d7258d4c8b4fd40590ba2a6d627be79f9ae3f4628cdf14f207fa459fbd4382c260fb6244d</td>
|
|
<td>6900e47bd2cb3cc48b49bb66c3a35eb6bb805e6bffcb15b606e4e269250058bf94fe2a132d3c00d27463af9dba6f0d493e2ea5e391f4d52a60ca8b5a9feff50a</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4698d9455955cd75c09ba12cffbc46e561afb67dae454c6d4cfaa21e481639f9</td>
|
|
<td>[68a16bd60756fe54a9918f94, 68a2149cb58debea69d7c73c, 68a2bd5ff793a9057f329bfd, 68a3663261f8067c48423eac, 68a40efceddb3a9f1a71a5f8, 68a4b7cd36bc5d38057e235a]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\tp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[849f202bfe27a29199a8365d73f3079b]</td>
|
|
<td>[47561e1037201d35a1a22df95bbf0c1e6660d03b]</td>
|
|
<td>[b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033]</td>
|
|
<td>[be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tp.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Transport Module</td>
|
|
<td>2134328</td>
|
|
<td>849f202bfe27a29199a8365d73f3079b</td>
|
|
<td>Zoom Video Call</td>
|
|
<td>1, 0, 2012, 1222</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>47561e1037201d35a1a22df95bbf0c1e6660d03b</td>
|
|
<td>b26bc19e413dbb113719725e1878013998f0fc098885cd97eb93717d920cf4b437ed27c4c8e548aa0fd8be97288e7033</td>
|
|
<td>be66ef7301daa67a370c38d9adc2c7c5afe909191116fdb13cc5d6a9721ecb0d49c04d252de792bbe48f76b8b49550a5254d0342ac9cdc6afa1f831adeadebd8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:02 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c1fe405524586b09643b46738f06ab76006a4516a1830cf43f2db9af291a70b</td>
|
|
<td>[68a51e78b5a781145bf61337]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DataCaptorIS.exe"]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T01:01:38Z]</td>
|
|
<td>[4842e91bd9b7b98c4c699839dd969142]</td>
|
|
<td>[b658ce9655e9cf14aec4089ae2a1c257ea24eb19]</td>
|
|
<td>[cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861]</td>
|
|
<td>[67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DataCaptorIS.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\</td>
|
|
<td>DataCaptor Interface Server Service</td>
|
|
<td>297696</td>
|
|
<td>4842e91bd9b7b98c4c699839dd969142</td>
|
|
<td>DataCaptor</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:03:50 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>b658ce9655e9cf14aec4089ae2a1c257ea24eb19</td>
|
|
<td>cbf9999fb703692202fe1bb424c9238e730dd3436678ce660aafcfc9610fdf3902e5ac1acb21d07e2e51a78a7a272861</td>
|
|
<td>67166819ffe45a0431b6293b0b656d9d6e6b08f8e999e238f4e3ca08e540bb912d545b2078984cddddd4a352ad9b48b3e68cbeaa62e59f82fa5389d53ed16480</td>
|
|
<td>2025-08-20 01:01:44 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4818a0297cff2e7386a18a84c2c3bb66709c591669de6ab221e9c8e84561582c</td>
|
|
<td>[68a16bd60756fe54a9918fa9, 68a2149cb58debea69d7c754, 68a2bd5ff793a9057f329c0f, 68a3663261f8067c48423ec2, 68a40efceddb3a9f1a71a60b, 68a4b7cd36bc5d38057e2370]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zDiagnostic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[9efc68196d98f658640751c4762d005b]</td>
|
|
<td>[be6cd4a37d595a950c683b19744430ae3e2dac02]</td>
|
|
<td>[091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904]</td>
|
|
<td>[7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zDiagnostic.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2399032</td>
|
|
<td>9efc68196d98f658640751c4762d005b</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>be6cd4a37d595a950c683b19744430ae3e2dac02</td>
|
|
<td>091bca15205cc87b4f7dbc3b6e94cf45a77c83ba82d8d88ec1d5d27ce8802c8d1c4fc71b9cae09f43c5faab7a5ed1904</td>
|
|
<td>7187c726b44443e4961f3e9be03d4228912fc0ee6a622c97cde9410500b32a93a230fc41f64ae1cea28fa23af84e7f3c412a452e9683bfb351dc7ad06977bf90</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:43 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ec5a20b06f30a4643063c89804b78887d0a3f1705da59076aa1374691ae49c0</td>
|
|
<td>[68a25fb2e970d941642e7ed8, 68a25fb2e970d941642e7ee5, 68a3b2cf09045b56b2a707b0, 68a3b2cf09045b56b2a707bd, 68a502e12ae1a61fbf4caf0e, 68a502e12ae1a61fbf4caf1b]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\dbatools.library.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z]</td>
|
|
<td>[83b05d20cf1ac5d2691bd9e2bc7293ee]</td>
|
|
<td>[29965b7d9a477168b9868cc8c2102d6a093e6964]</td>
|
|
<td>[d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033]</td>
|
|
<td>[1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.library.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\</td>
|
|
<td></td>
|
|
<td>18766</td>
|
|
<td>83b05d20cf1ac5d2691bd9e2bc7293ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 18:35:33 +0000 UTC</td>
|
|
<td>2024-03-09 14:53:38 +0000 UTC</td>
|
|
<td>29965b7d9a477168b9868cc8c2102d6a093e6964</td>
|
|
<td>d7e825c0cd9d50460f7af79926a4f41ce918e160683edac9c5d1f7d1290f4bb13d05774378b9499527bad0035912c033</td>
|
|
<td>1f1f7505456fc143c0d9114a9b11d6b70c09e65aadde4cc30c4c4bdfd8be8af4fe4cd9f292c04ec3bde74466f1ce56c7b3d42b3eb339d5da4c4cef5175a5e88d</td>
|
|
<td>2025-08-08 23:00:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4af3d3e1a71f70b731ca3aaa9e00cc505835f9f8574e257760dd8679cf51ea32</td>
|
|
<td>[68a16bd60756fe54a9918f99, 68a2149cb58debea69d7c745, 68a2bd5ff793a9057f329c00, 68a3663261f8067c48423eb3, 68a40efceddb3a9f1a71a5fb, 68a4b7cd36bc5d38057e2361]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libssl-3-zm.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[ca33cbd72c623d073b7401dd2473ae85]</td>
|
|
<td>[fa6724135804a2757d2fb34956f45b537a70debc]</td>
|
|
<td>[fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf]</td>
|
|
<td>[61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libssl-3-zm.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>1340216</td>
|
|
<td>ca33cbd72c623d073b7401dd2473ae85</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>3.3.3</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>fa6724135804a2757d2fb34956f45b537a70debc</td>
|
|
<td>fff97becb5a276e477f8895a5c610fac09c8b6efbcad4c6562dbcd547246c44e27283f52d2b5791ab4bd7d2afefbacaf</td>
|
|
<td>61b605cafcb13be8db4fd0b6d610f1822a862e062582550233834092df6649da0da01bbae72ac27e556abe4da99ed854ca9750219f3392fe7e0afd99b638a1d5</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:30 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c623c30f0f4df4ae5f86ae7fcbdbb06dd130f24b338735f5a9976e4946ea25a</td>
|
|
<td>[68a51e6e706e3d7436cc664e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\Neuron Server\Capsule.Server.Cortex.Hosts.WindowsService.exe"]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T01:01:27Z]</td>
|
|
<td>[c856c6a75a00d53167951d3206715225]</td>
|
|
<td>[f8c8f8250c03f193ca35ff3c600e067a0533d85f]</td>
|
|
<td>[fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad]</td>
|
|
<td>[798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\Neuron Server\</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService</td>
|
|
<td>21216</td>
|
|
<td>c856c6a75a00d53167951d3206715225</td>
|
|
<td>Capsule.Server.Cortex.Hosts.WindowsService</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:08:04 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>f8c8f8250c03f193ca35ff3c600e067a0533d85f</td>
|
|
<td>fc6894bd4b302a0d97399609b2ecb2a140adff485235e23a67ab16212c7b4beb5a8fe4fe3a33994bfc1f9396d26208ad</td>
|
|
<td>798a4496bbebf4c2685de1a69a1b44507e53e4fefbf96936c9da074be0db60c5c7648b321e3f11f993fb9706cf2134e673d0faf1589e7b4911229375800c40e6</td>
|
|
<td>2025-08-20 01:01:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56d0f79bbdbff4255d2d70d497607968271b3065b3f96765a6211a8ba1b8bcb5</td>
|
|
<td>[68a16bd60756fe54a9918fa5, 68a2149cb58debea69d7c750, 68a2bd5ff793a9057f329c0b, 68a3663261f8067c48423ebe, 68a40efceddb3a9f1a71a607, 68a4b7cd36bc5d38057e236c]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNet.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[021ad60cb0c6b2defe570821010f08c8]</td>
|
|
<td>[e2be2678bb68af4e0a5eb2ca709140e7e48261ad]</td>
|
|
<td>[9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a]</td>
|
|
<td>[b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNet.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2385720</td>
|
|
<td>021ad60cb0c6b2defe570821010f08c8</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>e2be2678bb68af4e0a5eb2ca709140e7e48261ad</td>
|
|
<td>9fc8445d7d68b12273ba23b1e7b90b1afa74855da25fe5b8bcc8337e716494a4e29679122f62b2ec4ad046b53cd83b3a</td>
|
|
<td>b794aa6cafaa6627de97e45ee1785bedaf22a751772526cbcb13c772f7d2c1c2a28273311f091aa619aa0b5a5370c3d3ead04c8b3ea97656557697c4ffea6a6b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:48 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6339ff3a3b98f030ee18cb09698e5e48159211697d8c5d4849d1d022e1cece46</td>
|
|
<td>[68a5e5e6f3ba24788e4c61e7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\drivers\VirtFile.sys]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2298.891]</td>
|
|
<td>[]</td>
|
|
<td>[Symantec Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[2025-08-20T15:02:32Z]</td>
|
|
<td>[b6385c9cba13a1beaa7f38625bc0d803]</td>
|
|
<td>[ef0eeab606e4324fe12951421e21660416a99ea4]</td>
|
|
<td>[cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3]</td>
|
|
<td>[d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VirtFile.sys</td>
|
|
<td>C:\Windows\System32\drivers\</td>
|
|
<td>Allows granular display of back ups.</td>
|
|
<td>114848</td>
|
|
<td>b6385c9cba13a1beaa7f38625bc0d803</td>
|
|
<td>Symantec Backup Exec(TM) for Windows Servers</td>
|
|
<td>2.0.95</td>
|
|
<td>Symantec Corporation (Invalid Certificate Chain)</td>
|
|
<td>2013-06-11 19:10:48 +0000 UTC</td>
|
|
<td>2012-10-16 15:51:04 +0000 UTC</td>
|
|
<td>ef0eeab606e4324fe12951421e21660416a99ea4</td>
|
|
<td>cef10cf21fb157721a8f503eed0eb3b0886cec2d1b054244810034da58a73db9bdaacc3b7d33d9e41e04b2864b798cc3</td>
|
|
<td>d8cc5b0f63d2d06ca1dda3dd3244ab7415ee88af65e8fcab055cb43e55f00493ac2950e33c0654c4764ea5c985d012a4aa98f58a97fc3e67f6227b4d4681f44a</td>
|
|
<td>2025-07-21 22:05:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2022-01-23 16:45:00 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-21 22:11:52.243 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>645bee92ba4e9f32ddfdd9f8519dc1b9f9ff0b0a8e87e342f08d39da77e499a9</td>
|
|
<td>[68a4e8a1ad898641af98fd95, 68a4fcd0011d94a251a4ef31]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\AppData\Local\Temp\tap-windows.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>["C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe" /S /SELECT_UTILITIES=1]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Windows\Installer\MSI50B.tmp]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T22:09:43Z]</td>
|
|
<td>[47fa5f0670cf191d066e5dfbf4f4ee70]</td>
|
|
<td>[db9d441c209fb28b7c07286a74fe000738304dac]</td>
|
|
<td>[d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf]</td>
|
|
<td>[514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tap-windows.exe</td>
|
|
<td>C:\Users\CA_gs10109\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>256240</td>
|
|
<td>47fa5f0670cf191d066e5dfbf4f4ee70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 13:41:08 +0000 UTC</td>
|
|
<td>2016-04-21 13:41:08 +0000 UTC</td>
|
|
<td>db9d441c209fb28b7c07286a74fe000738304dac</td>
|
|
<td>d48a1d9373de95e14ec9e1f8ea4b099b95593b2dbc04e3bf675b16c39326e9d3952d612250688c913722090473faa6bf</td>
|
|
<td>514f0dd1b7d8c4aad5cc06882a96be2096e57eb4228df1d78f2bcc60003af8ebc057cce5eedda9b8a2dc851a52895c0a4b07556b4535271767817d9ea45e0713</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 13:19:27 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6ff536c7f6ed2e96f08f189984ec0ef5969ec88730b604a463c6cec22e20a9cd</td>
|
|
<td>[68a16bd60756fe54a9918f8c, 68a2149cb58debea69d7c737, 68a2bd5ff793a9057f329bf3, 68a3663261f8067c48423ea5, 68a40efceddb3a9f1a71a5ee, 68a4b7cd36bc5d38057e2353]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\UIBase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[9eedaf27cc28bd73c5ff41c49961872d]</td>
|
|
<td>[6b1abcc8e82fe290522c3bbc48ae7e525aecd356]</td>
|
|
<td>[d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e]</td>
|
|
<td>[318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UIBase.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2006840</td>
|
|
<td>9eedaf27cc28bd73c5ff41c49961872d</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>6b1abcc8e82fe290522c3bbc48ae7e525aecd356</td>
|
|
<td>d850be7a98055d7263435041c304f97e91a7d6d604400cac2770b22c4edde162de8cd6dd9d1d2a6a7768cb0a0bfd577e</td>
|
|
<td>318a2e8472b2513b3cc2395c7d6b6446e4a2a9e975cc30b1eadb6c632ac72858a4874db448a2a8fa74e8b4de9e209d8aeb6c9d9c383301e19e03b2a05d337fc8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:00 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d8d84c9c14201674d9a309f51e952cf148ad33cdb66507d9677ebf1b1e4432b</td>
|
|
<td>[68a5c661c3778510bbc82847]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\QS1\DataExportService\updater\Serilog.Sinks.File.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\DataExportService\updater\QS1.DataExportSQLUpdate.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE]</td>
|
|
<td>[2025-08-20T12:58:06Z]</td>
|
|
<td>[4c2b0737d9a73da09172d3c210b0265d]</td>
|
|
<td>[a35a98ec72154cc1d112f46bd177a7f043dbcd46]</td>
|
|
<td>[b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0]</td>
|
|
<td>[c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.File.dll</td>
|
|
<td>C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>28160</td>
|
|
<td>4c2b0737d9a73da09172d3c210b0265d</td>
|
|
<td>Serilog.Sinks.File</td>
|
|
<td>4.1.0-master-272085f+272085f4c9440e62448b65829ad35cc3dea15ab1</td>
|
|
<td>EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3</td>
|
|
<td>2023-10-20 19:06:01 +0000 UTC</td>
|
|
<td>2023-10-20 19:06:17 +0000 UTC</td>
|
|
<td>a35a98ec72154cc1d112f46bd177a7f043dbcd46</td>
|
|
<td>b74a7a1e498d26d2e39e8728053efc8716c3c61e638a6f074589812d3e25c518762ad3bb3fa1d85690b502f67352ffd0</td>
|
|
<td>c605bef0a7caa12b0d7c47564c3a214ea1db40f901dfdc4c5b35bf73610a5d9030b67e495b409a79c76ad5ec6ef9962cd56c050c51883a3151d34931a8361aa8</td>
|
|
<td>2025-03-24 14:02:17 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-03-28 01:13:07 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Microsoft attested file</td>
|
|
<td>2025-04-10 02:18:37.703 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6ded799728a24a6abd426120e7192d1ce5af4ecb86f36f605d703a0aead15a61</td>
|
|
<td>[68a48674c4cb2500be692616, 68a48674c4cb2500be69262c]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.ServiceClient.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[0e468c88955fd864f98ac6f9e1bf50e6]</td>
|
|
<td>[13cc23e673a7d51e2124ba64e5f9f7727687f0d7]</td>
|
|
<td>[795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53]</td>
|
|
<td>[6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.ServiceClient.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.ServiceClient</td>
|
|
<td>23816</td>
|
|
<td>0e468c88955fd864f98ac6f9e1bf50e6</td>
|
|
<td>StrykerIOTAPI.ServiceClient</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>13cc23e673a7d51e2124ba64e5f9f7727687f0d7</td>
|
|
<td>795f5a8d8793c8af2f28a18892631eab24cb9759f1af54ab621f67564587384f1d72b6ad34bfeb26ba41c88ec80b9c53</td>
|
|
<td>6e59261ca75c3af67dc9cde33494787a9687661bdffa5a533c9c173c282e65fbc2283f649f2c1284ac9122d4ff32d09deb664dd5a4fb99230bcd3827b42fba73</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>746001b9638c9979966e0b886bcd72105825eabc5c56d9e94521e8afe83fce98</td>
|
|
<td>[68a16bd60756fe54a9918faa, 68a2149cb58debea69d7c755, 68a2bd5ff793a9057f329c10, 68a3663261f8067c48423ec3, 68a40efceddb3a9f1a71a60c, 68a4b7cd36bc5d38057e2371]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zNetDiagnostic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[0333571cd1fe94145d29e4f8ee0412b9]</td>
|
|
<td>[0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663]</td>
|
|
<td>[b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958]</td>
|
|
<td>[a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zNetDiagnostic.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>240440</td>
|
|
<td>0333571cd1fe94145d29e4f8ee0412b9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0e5d23438fd6c3ffc2a66c4fe60e23fd55fce663</td>
|
|
<td>b9454e3bd18393010e4d97aeaa6d9decf079d854299268f61a4465b4c56f3929e7edeee1b8bbe581ac373453d9ebb958</td>
|
|
<td>a7d336260cba6b02c99d82855acfe8b5c04988b69fb1bbf518fbf86a140910c0998b3fbc4b1414d4fe03ef011d803ebbb5f17cedf6d65502d7cdc1d022327c27</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:07:17 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>70fa7f0aa2feb397597b2785a4bfdb2c9cd36e0edb51f4f0dfe6ac086290ac86</td>
|
|
<td>[68a5c64d54e5003d1abde4c1, 68a5c77e05aa879ada66b41d, 68a5c77e05aa879ada66b423, 68a5c77e05aa879ada66b428, 68a5c77e05aa879ada66b42d, 68a5c77e05aa879ada66b431]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{EBCDAF24-7B9C-491C-AA80-94A76ABD907A}\{c51ff2c4-74fe-43d8-ade7-901bcc8c9636}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{18B933C1-1F0B-46B1-BC89-C59665F944BE}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{8C83FD30-4EB2-403A-9DB4-0DB5C4906610}\{7003C4ED-D11B-4642-BAB2-F57507F2FE2B}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{222D02C3-1550-43C8-B32B-9932CD456D62}\{1AB6D796-D425-43BA-BF7A-4B13B31EFAFC}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\isrt.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{6BDB9F8F-37E3-4AE9-9C08-32CF6A7DF5B2}\{9A965D87-DC32-4240-9B2E-DFACC74C0BC3}\isrt.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:41Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:11Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[b35dde51d14f9400e73196693148734e]</td>
|
|
<td>[9410c5268f5558e57d044780d0d5dcc7aa181299]</td>
|
|
<td>[373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde]</td>
|
|
<td>[6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>isrt.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{CEA8628A-8BE0-4420-A1E3-D5A4B45469A9}\{dc09ae1b-5d67-4c05-b604-cddfc984a221}\</td>
|
|
<td>InstallShield (R) RunTime DLL</td>
|
|
<td>208304</td>
|
|
<td>b35dde51d14f9400e73196693148734e</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:15 +0000 UTC</td>
|
|
<td>2006-05-17 14:21:20 +0000 UTC</td>
|
|
<td>9410c5268f5558e57d044780d0d5dcc7aa181299</td>
|
|
<td>373e10e1f1cbcb36d3b5bde8872664b26b863587c17420222d85b8c54beeff7e7e51d259e213f1b6b1f373889fe1cfde</td>
|
|
<td>6bb24c8864078c923007c1818bb0a590ebe84e2fbe6f2642dc951b05c42da1c33861f150c4ea8943657259c1c309a69b8cb1817b6a207cb9e577bc3aa8bfa79d</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-04-28 10:02:02 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-17 15:57:43.354 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>766f9eeacde29ca3ebe85d8d233775dc8acba7a244dd24bc13896ec23d8c2c84</td>
|
|
<td>[68a48674c4cb2500be69260d, 68a48674c4cb2500be692623]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Logging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[1b4f4c9db2726c138f5ab17aaecd4d45]</td>
|
|
<td>[a35c56b96b73ff7667988001ac1b4a57ac024b9e]</td>
|
|
<td>[f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999]</td>
|
|
<td>[0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Logging.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>29448</td>
|
|
<td>1b4f4c9db2726c138f5ab17aaecd4d45</td>
|
|
<td>Serilog.Extensions.Logging</td>
|
|
<td>3.1.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-02 02:38:50 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>a35c56b96b73ff7667988001ac1b4a57ac024b9e</td>
|
|
<td>f9812332244dab64e14382ba718028f45ed75c899b64470f00a387f58a2963cd70450444bd9f2aecd34ddb351777b999</td>
|
|
<td>0510ea6ae3f5ddba6c0247ed6c7462b4030490efce2c2d0ac781aae6f63599fa006d1ddcb1327c0850217f489bcb2849366a53e49ba669b570c3e55ce287e378</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74f63a755ad1b7cc7ffdbd4d457a311b5fc3c773dc37766c345f749219f527b2</td>
|
|
<td>[68a25fb2e970d941642e7ee4, 68a25fb2e970d941642e7ef1, 68a3b2cf09045b56b2a707bc, 68a3b2cf09045b56b2a707c9, 68a502e12ae1a61fbf4caf1a, 68a502e12ae1a61fbf4caf27]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\type-extensions.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:11Z, 2025-08-17T23:00:16Z, 2025-08-18T23:00:12Z, 2025-08-18T23:00:17Z, 2025-08-19T23:00:11Z, 2025-08-19T23:00:16Z]</td>
|
|
<td>[838211c05894e640796e49104f1b37a4]</td>
|
|
<td>[fbcc36198fa33af6404259160ffc57cf8a604f22]</td>
|
|
<td>[b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810]</td>
|
|
<td>[6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>type-extensions.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\</td>
|
|
<td></td>
|
|
<td>13106</td>
|
|
<td>838211c05894e640796e49104f1b37a4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:23 +0000 UTC</td>
|
|
<td>2024-03-16 13:33:46 +0000 UTC</td>
|
|
<td>fbcc36198fa33af6404259160ffc57cf8a604f22</td>
|
|
<td>b98ee0a57571b71d764daa0ecfe60b5c4bc652a027c1ce10b303f4baf932dfa0ccc96c1bcc749ab1a0a63f95ae83c810</td>
|
|
<td>6cde430264642bfb114ba19909619b21150926468fabb13939d89820f80ef457e3ce413d9c7cbd8a88b38fdb4a236cab1e1183c663eb44afb6d40479c3c51c08</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-24 17:17:27 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84a92f1878d1db1c398f021aa01d0a12ec303ef540927b562e71134855b23f48</td>
|
|
<td>[68a16bd60756fe54a9918fa1, 68a2149cb58debea69d7c74c, 68a2bd5ff793a9057f329c07, 68a3663261f8067c48423eba, 68a40efceddb3a9f1a71a603, 68a4b7cd36bc5d38057e2368]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWebService.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[c1f4a307abccb3ff203409f4e41e68b9]</td>
|
|
<td>[4c9a363eec7a97f06a1db1b6d80b38c5e85e342d]</td>
|
|
<td>[079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460]</td>
|
|
<td>[8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zWebService.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>7973176</td>
|
|
<td>c1f4a307abccb3ff203409f4e41e68b9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>4c9a363eec7a97f06a1db1b6d80b38c5e85e342d</td>
|
|
<td>079f7b489ff189cbe8a231cb0186bb251f4661e70183d1667ba4357fa8c76f58aad76dc7cdf55557c672627963a6c460</td>
|
|
<td>8ac8a77841f86a0a0582af0dceec877fcff7df708a87d0daf2e632e0ecb649eb55dad59add9aa9e7ab91ffdc6346f7f4c165d974037f30a8c6a42d118e05d00e</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:15:04 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fc2a2df59b98cdead92680cfa9e0e56d54ae7ac3a0aa35470cf25c46702c7c7</td>
|
|
<td>[68a48674c4cb2500be692618, 68a48674c4cb2500be69262e]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.RuleLogic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[30a991d876163681c6baac37e99f0591]</td>
|
|
<td>[bb6e8c432d7c814f1164708197af529f0f4e2dc6]</td>
|
|
<td>[afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71]</td>
|
|
<td>[68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.RuleLogic.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.RuleLogic</td>
|
|
<td>39680</td>
|
|
<td>30a991d876163681c6baac37e99f0591</td>
|
|
<td>StrykerIOTAPI.RuleLogic</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>bb6e8c432d7c814f1164708197af529f0f4e2dc6</td>
|
|
<td>afa59666c62f8355c6f484e48942700074aa818e9e501e4a424bf62da951819ef1be9268e587c77dc36afd78c09e6a71</td>
|
|
<td>68d48af27f8a50f6c0213b962e916843db82f6bb0a258949cd7f7616cd855850ffb8efecc1da9d792e0f38ca2d5c7fb9eaec71a09d6497ccc574733e65216249</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>097bbfae1d0892c24236778e721ffe5fc95b840bc664d8a3913220a6d2d49d2e</td>
|
|
<td>[68a16bd60756fe54a9918f8e, 68a2149cb58debea69d7c739, 68a2bd5ff793a9057f329bf4, 68a3663261f8067c48423ea4, 68a40efceddb3a9f1a71a5f0, 68a4b7cd36bc5d38057e2352]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\msaalib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[6a50b127ea76fb89e03c2d875f6a7ac9]</td>
|
|
<td>[c28b7cddcfd0a7d635ebca504a463eef23e082db]</td>
|
|
<td>[85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985]</td>
|
|
<td>[16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>msaalib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>53560</td>
|
|
<td>6a50b127ea76fb89e03c2d875f6a7ac9</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>c28b7cddcfd0a7d635ebca504a463eef23e082db</td>
|
|
<td>85e4b4a4e70fe86ee457ec8a9102fef35d5e28174a81e15b9268e95f962e43d2b4e4e90d356d91c129a27eb8d7f0f985</td>
|
|
<td>16af7aed0d3e56db6473e24f1ad77f6e004116d17cd24b7d1690172305c00589aa7860ee1b45f176e3e10f6fd305bcf1605108c763e984dc9ab230f295313b43</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:40 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85e9971db788a2fbcb79a597f116557fdaefc0a2164cec5c139beb7a33776ae0</td>
|
|
<td>[68a48674c4cb2500be692608, 68a48674c4cb2500be69261e]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Settings.Configuration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[3730789496ff9f88accaf6bec1cbf7ba]</td>
|
|
<td>[4371262d52547a51dda48e130f70806dbe766284]</td>
|
|
<td>[23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd]</td>
|
|
<td>[80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Settings.Configuration.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>76560</td>
|
|
<td>3730789496ff9f88accaf6bec1cbf7ba</td>
|
|
<td>Serilog.Settings.Configuration</td>
|
|
<td>3.3.0+651449dd4277217838b9224ba13acf66f5f95351</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-10-07 13:46:44 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>4371262d52547a51dda48e130f70806dbe766284</td>
|
|
<td>23d543cac4e5529aac648d49fbadc8a666b5015e57bdbebda2442d97031281cdd10a1a6757bf4a0a980f3d8ca3080bcd</td>
|
|
<td>80b5ad0f23027609d7c19be4b410cae006235740d0084f764d69eae03cd5a905286942455c30440c429553deddd4bdb6e16608b754b2e3e0abd08cb4701aa15a</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8802e54ce01babf7bb22d0da5c83bebc5c05d0ccd73566a5f836690e9278a696</td>
|
|
<td>[68a5c64d54e5003d1abde4c0, 68a5c77e05aa879ada66b41c, 68a5c77e05aa879ada66b422, 68a5c77e05aa879ada66b427, 68a5c77e05aa879ada66b42c, 68a5c77e05aa879ada66b430]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{AED83D25-B48E-452C-A8D4-F90693B1D1FA}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{4F35679B-686D-4759-92B4-06782387D87F}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{E2AB659B-0C6F-49D1-92AD-4D2E2C49FC43}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{30ED587B-32F3-43CA-AEE8-DB6547ACA649}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{B0955497-C736-42B6-8322-2B5E241331F7}\_Setup.dll, C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A0FD8FF7-2376-44FF-BC44-DB5C3D6F7B24}\_Setup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Macrovision Corporation (Invalid Certificate Chain)]</td>
|
|
<td>[D:\QS1\QAU\Updates\767A003SERVERINST.EXE, D:\QS1\QAU\Updates\06700301002CLIENTINST.EXE, D:\QS1\QAU\Updates\064202006SYSDEP.EXE, D:\QS1\QAU\Updates\03050201002QiaInst.EXE, D:\QS1\QAU\Updates\02010125001WsgInst.EXE, D:\QS1\QAU\Updates\05010142001CccInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:57:40Z, 2025-08-20T12:58:48Z, 2025-08-20T13:00:33Z, 2025-08-20T13:00:54Z, 2025-08-20T13:01:10Z, 2025-08-20T13:01:48Z]</td>
|
|
<td>[30ebd4e80b1dda05eac709a1dc5965b4]</td>
|
|
<td>[2418232370026574baabc84b105f6dd9e458ad86]</td>
|
|
<td>[fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774]</td>
|
|
<td>[5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_Setup.dll</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\{B89E2B12-2654-4351-B523-F79A8B3DA9FB}\</td>
|
|
<td>FLEXnet (R) InstallShield (R) Setup Launcher Resources</td>
|
|
<td>164784</td>
|
|
<td>30ebd4e80b1dda05eac709a1dc5965b4</td>
|
|
<td>InstallShield</td>
|
|
<td>12.0</td>
|
|
<td>Macrovision Corporation (Invalid Certificate Chain)</td>
|
|
<td>2025-07-17 15:57:14 +0000 UTC</td>
|
|
<td>2025-04-14 15:20:00 +0000 UTC</td>
|
|
<td>2418232370026574baabc84b105f6dd9e458ad86</td>
|
|
<td>fd403d15966c09560c87753c452a421431f98351a03b9ac1cd7b839f3b09074d851e50f9891bc99326b5d40b43005774</td>
|
|
<td>5115afea66734fe53c9479a6569b7fbc1ef395432781367cd68c7f4878ca3884bad0a960f76db2a40314484f329c4288a6ecf4a93cc49642c5e412448c5a2557</td>
|
|
<td>2025-07-17 15:57:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-05-15 06:19:28 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-16 22:12:52.389 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89c5ca1440df186497ce158eb71c0c6bf570a75b6bc1880eac7c87a0250201c0</td>
|
|
<td>[68a4e8b52033a4a8e5a0e977, 68a4fcd0011d94a251a4ef36, 68a4fcd0011d94a251a4ef43]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\drivers\tap0901.sys]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284]</td>
|
|
<td>[]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[Non-existent]</td>
|
|
<td>[2025-08-19T21:12:19Z, 2025-08-19T22:09:45Z, 2025-08-19T22:18:18Z]</td>
|
|
<td>[d765f43cbea72d14c04af3d2b9c8e54b]</td>
|
|
<td>[daebe266073616e5fc931c319470fcf42a06867a]</td>
|
|
<td>[f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33]</td>
|
|
<td>[ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tap0901.sys</td>
|
|
<td>C:\Windows\System32\drivers\</td>
|
|
<td>TAP-Windows Virtual Network Driver (NDIS 6.0)</td>
|
|
<td>27136</td>
|
|
<td>d765f43cbea72d14c04af3d2b9c8e54b</td>
|
|
<td>TAP-Windows Virtual Network Driver (NDIS 6.0)</td>
|
|
<td>9.21.2 9/21</td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 09:10:04 +0000 UTC</td>
|
|
<td>2016-04-21 09:10:04 +0000 UTC</td>
|
|
<td>daebe266073616e5fc931c319470fcf42a06867a</td>
|
|
<td>f1126585faaffc4256fde7c628d8f5014ad421a0c1015fe85c6a9c19b6edefbc84ad473be4733b63bd21a2e0db063e33</td>
|
|
<td>ff83225ed348aa8558fb3055ceb43863bad5cf775e410ed8acda7316b56cd5c9360e63ed71abbc8929f7dcf51fd9a948b16d58242a7a2b16108e696c11d548b2</td>
|
|
<td>2025-08-19 21:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 13:01:34 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93e1c58a8b37a06fd12513dac10c56cb4f8142f59bf22ade44711fc3fa700549</td>
|
|
<td>[68a16bd60756fe54a9918f97, 68a2149cb58debea69d7c742, 68a2bd5ff793a9057f329bfb, 68a3663261f8067c48423eaf, 68a40efceddb3a9f1a71a5f7, 68a4b7cd36bc5d38057e235d]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zLooper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[09bccc0138705459b9770a748b63b844]</td>
|
|
<td>[63ea04e8e1d4267982eafc40cd7f408dcb17f0d1]</td>
|
|
<td>[ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a]</td>
|
|
<td>[bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zLooper.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>69432</td>
|
|
<td>09bccc0138705459b9770a748b63b844</td>
|
|
<td>Zoom</td>
|
|
<td>1,0,0,0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>63ea04e8e1d4267982eafc40cd7f408dcb17f0d1</td>
|
|
<td>ae560847f61b3cad5fbe5715c95918a99127f287ffee6392c96d6bd5b32e327a7998aa52b012de3c277874305ac6fb1a</td>
|
|
<td>bc1c6669f48b93950819e7d588fddf664dc828d473d035684bb1743a313c2c512a8e9910a32bf7645b97a8d71e78980d9fa024657f724848ec0845449dab0331</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:04:30 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>950b75c140c5d9c3199f5ca51b4100e7cca3bc9e0f71724a32881ef7f8a287d9</td>
|
|
<td>[68a16bd60756fe54a9918f8d, 68a2149cb58debea69d7c738, 68a2bd5ff793a9057f329bf1, 68a3663261f8067c48423ea7, 68a40efceddb3a9f1a71a5ef, 68a4b7cd36bc5d38057e2355]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Cmmlib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[b394dfb05ceb80ac63edb50de392a1c7]</td>
|
|
<td>[63c411b9ee55ddc4710dc2658a330b3a40fae4e0]</td>
|
|
<td>[91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4]</td>
|
|
<td>[49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cmmlib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2822456</td>
|
|
<td>b394dfb05ceb80ac63edb50de392a1c7</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>63c411b9ee55ddc4710dc2658a330b3a40fae4e0</td>
|
|
<td>91430185a94347a1ab9de7a30bb31bc2e8aac5f91f75da596f9fd23894ca89cf401e0ec82d73ff99b071365167335ca4</td>
|
|
<td>49d08c7f08f92417c2c04703ecceb2098c4331217312174306c3af855164f80c5593d7e82d977c12ce814a2e223c3cbef3627cf7102990a8804eaeb3def08ee8</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:05 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8df0f98abff9c236fe721fb72e8aeebd922e8066668caa17a4dd205b0b7c0943</td>
|
|
<td>[68a16bd60756fe54a9918f98, 68a2149cb58debea69d7c743, 68a2bd5ff793a9057f329bfc, 68a3663261f8067c48423eb0, 68a40efceddb3a9f1a71a5f9, 68a4b7cd36bc5d38057e235e]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZMDB.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[0df7de126b6940fc83fe88611d07038b]</td>
|
|
<td>[0c05bb0be9131cbd3773e063e501f8be8f417fdb]</td>
|
|
<td>[71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe]</td>
|
|
<td>[e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZMDB.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>1188152</td>
|
|
<td>0df7de126b6940fc83fe88611d07038b</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0c05bb0be9131cbd3773e063e501f8be8f417fdb</td>
|
|
<td>71c47f30eb0e3f2c8dd17afba3689f779492a7dd2f04d302caae2d918937072bc94aa7017dd72410869b50321a4b7cfe</td>
|
|
<td>e607fd522942a471a9f30a1e6f8eb9170ee85ebd796fe9d0ea5037334c7d5d1e5e8e01e05f7cf581be7f38918e4c958826f182574b24ecb63a8c4a0b53c9497c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:56 +0000 UTC</td>
|
|
<td>67</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8e1e1cc17ababa2e966888d3f24f6433f1ed6321d262827bd46c1d761d6d6955</td>
|
|
<td>[68a16bd60756fe54a9918f9f, 68a2149cb58debea69d7c749, 68a2bd5ff793a9057f329c05, 68a3663261f8067c48423eb6, 68a40efceddb3a9f1a71a5ff, 68a4b7cd36bc5d38057e2364]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zEventTracker.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[74bc3a324486e7932736ad47214c0260]</td>
|
|
<td>[075fca7b2ec409d0fc70c07c24e2df41fd84890a]</td>
|
|
<td>[05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd]</td>
|
|
<td>[fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zEventTracker.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>226104</td>
|
|
<td>74bc3a324486e7932736ad47214c0260</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>075fca7b2ec409d0fc70c07c24e2df41fd84890a</td>
|
|
<td>05358d7e157c63d47e3e1fe13524d9e4fac38fcc3a670ff447308a234a03b1a582f20559250b03f7983074bcf4db74fd</td>
|
|
<td>fae1edee048f60b03a2aace0d369856ef0a475d87551e55138c9f0003fc9e2cb895109fcfb377c78f2420a11d9b3e7039b950705f59a407eef9d504c5979518c</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:42 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98a95506abccaa35c07debc753da55a30e02cdb9ebf9bf1c4cb2c893db23c09e</td>
|
|
<td>[68a50bca7779aa65cf4b6098]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MarquetteA5_5_3_10_3.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:41:53Z]</td>
|
|
<td>[0626022f937e6547de857658b88f7e30]</td>
|
|
<td>[a320f0c9212d7d0249b75c3c1c0a5a7708f0e224]</td>
|
|
<td>[f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84]</td>
|
|
<td>[67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MarquetteA5_5_3_10_3.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>3076096</td>
|
|
<td>0626022f937e6547de857658b88f7e30</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2025-08-19 23:41:50 +0000 UTC</td>
|
|
<td>2025-08-19 23:41:52 +0000 UTC</td>
|
|
<td>a320f0c9212d7d0249b75c3c1c0a5a7708f0e224</td>
|
|
<td>f77aa4c446063ea5ed9476f66dd4f65dca425b7788dbc6db404f3b6828204d92d8e554d9bb3ecb6bc940ff2106962f84</td>
|
|
<td>67ffbfd3d47e713346838d6bc9c50115d39dd72ac41d45a6effb1c397d75da817e3161747dfb45aefccf9226be71e76c38e95dd617baa3e0cac45b76b44872cc</td>
|
|
<td>2025-08-19 23:42:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9bd06859f2cfb88267330b32599fa526ab2549b8ea71c724e57f6d7378a5d416</td>
|
|
<td>[68a16bd60756fe54a9918f9c, 68a2149cb58debea69d7c747, 68a2bd5ff793a9057f329c02, 68a3663261f8067c48423eb5, 68a40efceddb3a9f1a71a5fe, 68a4b7cd36bc5d38057e2363]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zPTApp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[58b22b0d320b83af6d80cff0f993ee31]</td>
|
|
<td>[c0478b771792203787592fe5485a5face9f4eb9c]</td>
|
|
<td>[30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069]</td>
|
|
<td>[8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zPTApp.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>8505656</td>
|
|
<td>58b22b0d320b83af6d80cff0f993ee31</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>c0478b771792203787592fe5485a5face9f4eb9c</td>
|
|
<td>30a5ecee2453f8f4e178be158ede0795351da3cd4c0d1f00b012a4a69a7462d8ad9e181f6feedde034f236a98879e069</td>
|
|
<td>8a741c94a4d689790a77e43f9f68f0963ba16387a6a0ab84ef3ed73869ae0d92612632636257442493cb1815f1e7e7520c33dcdc65ae677e8495b3e1be60666b</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:15:00 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>99f5ef22213d7e971d8bc8b5484f3e933cf66bf37b94e8d5aa5acf5e2220ca5a</td>
|
|
<td>[68a48674c4cb2500be69260c, 68a48674c4cb2500be692622]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Extensions.Hosting.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[54fea61134ad099f7ca3485319f3c4de]</td>
|
|
<td>[b4dc1558d037e14add30d135864a478c444ca0c7]</td>
|
|
<td>[db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3]</td>
|
|
<td>[48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Extensions.Hosting.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>40200</td>
|
|
<td>54fea61134ad099f7ca3485319f3c4de</td>
|
|
<td>Serilog.Extensions.Hosting</td>
|
|
<td>4.2.0+383bcb1514ea20d5847fd7ab107670cecb941ebd</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-09 03:00:30 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>b4dc1558d037e14add30d135864a478c444ca0c7</td>
|
|
<td>db989878f2e8798aaacac69c665236e912f0d7e6e72d3bc228a45292a083e75cd3200aed7dbd559ba840323f83581ba3</td>
|
|
<td>48cb6501928e17052119f28902c970c09f035c0f219f04da979e0bf60a952049f28e9b288fdca4c2911e093d3c28d5cdb38b91254fd273cf7c419be443469a53</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a11bb160641b9f5e4b916fe8c1332a7daea7cb5bec0ff20aca1ed56cd38403c9</td>
|
|
<td>[68a25fb2e970d941642e7ede, 68a25fb2e970d941642e7eeb, 68a3b2cf09045b56b2a707b6, 68a3b2cf09045b56b2a707c3, 68a502e12ae1a61fbf4caf14, 68a502e12ae1a61fbf4caf21]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\typealiases.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:07Z, 2025-08-18T23:00:16Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z]</td>
|
|
<td>[6edb4820eefbf4bf8f34890da9a4df9a]</td>
|
|
<td>[d8b1ce8e599da18ebf86d4082cfd62d30a68f185]</td>
|
|
<td>[e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712]</td>
|
|
<td>[fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>typealiases.ps1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\bin\</td>
|
|
<td></td>
|
|
<td>13502</td>
|
|
<td>6edb4820eefbf4bf8f34890da9a4df9a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:23 +0000 UTC</td>
|
|
<td>2024-03-16 13:33:48 +0000 UTC</td>
|
|
<td>d8b1ce8e599da18ebf86d4082cfd62d30a68f185</td>
|
|
<td>e3681deddebb6f6b7b3b685774d81822fbf23acc8fc8b797de4274274e420ae6523d7d30da59f65dd13f7a9bec18b712</td>
|
|
<td>fe265acedfc2aadf82afa55a3d0c50da8593333ce4620c4466d6f59d64c09c3c9a3d96e1f35c11d0c757da4c6e0b78d116cffa6d8200f41f17bd8dfeac7b2f8d</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-09-24 17:17:25 +0000 UTC</td>
|
|
<td>63</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-08 23:01:52.488 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4a5a9bd80cb73fd325ee15e645a860069e36ff5c05c932e2efd9626bee05efe</td>
|
|
<td>[68a25fb2e970d941642e7edc, 68a25fb2e970d941642e7ee9, 68a3b2cf09045b56b2a707b4, 68a3b2cf09045b56b2a707c1, 68a502e12ae1a61fbf4caf12, 68a502e12ae1a61fbf4caf1f]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\dbatools.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:06Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:06Z, 2025-08-19T23:00:15Z]</td>
|
|
<td>[cbadc5b980f5f88524209de74cb9d288]</td>
|
|
<td>[841515e5cc99849bb746688968e5a2f9b2800d69]</td>
|
|
<td>[dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a]</td>
|
|
<td>[d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools\2.1.11\</td>
|
|
<td></td>
|
|
<td>51056</td>
|
|
<td>cbadc5b980f5f88524209de74cb9d288</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-03-28 19:42:27 +0000 UTC</td>
|
|
<td>2024-03-16 13:34:02 +0000 UTC</td>
|
|
<td>841515e5cc99849bb746688968e5a2f9b2800d69</td>
|
|
<td>dbae4a8d00ae3646a8ed3b9d00599a2327b0a1a4065c4487f0fe83c611affb86db7e2565e8f08b58f5d2ff785a6f263a</td>
|
|
<td>d60fe15b1c00f3194f4ec142ec248c8f34f3f4c9346e8a3b413fddfd6d05cef995dd6fbbce23ee69ae0164e4008cb690db9fcebe289baaadae08118f05c98fc9</td>
|
|
<td>2025-08-08 23:00:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a6cd66e10949aed9399a361660c3a31728d676132440d32d9b7edb1a005f580f</td>
|
|
<td>[68a51e96c8556d85247b1372]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\DCAdmin.exe" /COMPUTER:localhost]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-20T01:02:09Z]</td>
|
|
<td>[99df7d512c46663d311ff21b6a397a7c]</td>
|
|
<td>[fd2dbd2766b4a205081e88640035ed1ad5ce7781]</td>
|
|
<td>[01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab]</td>
|
|
<td>[9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DCAdmin.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\DataCaptor Interface Server\</td>
|
|
<td>DCAdmin Module</td>
|
|
<td>2647776</td>
|
|
<td>99df7d512c46663d311ff21b6a397a7c</td>
|
|
<td>DataCaptor</td>
|
|
<td>11.8.1.345</td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2024-11-12 22:03:52 +0000 UTC</td>
|
|
<td>2025-08-20 01:01:22 +0000 UTC</td>
|
|
<td>fd2dbd2766b4a205081e88640035ed1ad5ce7781</td>
|
|
<td>01d2bddadd9915c184de93b523bd431be31dce66a90d1678911386ed1ac743aa5f5338ea2b215f5f3cde92badade29ab</td>
|
|
<td>9b2792903ca6e5bc6850b1268524d86114200b7dda0b2d969f6f4edd108f81d1f8322a779975a99b7395977f78ec0c86fb1176c764eadae0364899348c84b59f</td>
|
|
<td>2025-08-20 01:02:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a03926359987dde8bfa14905c2e91b0dcb912cc1c5c4e5cc4e08a3f410a51975</td>
|
|
<td>[68a48674c4cb2500be69261b, 68a48674c4cb2500be692631]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\log4net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[3b9e164c32b6dde7701c518e1c515196]</td>
|
|
<td>[0b7e5cedc915c5952cdaf018df7f46d91cabe893]</td>
|
|
<td>[eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684]</td>
|
|
<td>[8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4net.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Apache log4net for .NET Standard 2.0</td>
|
|
<td>270048</td>
|
|
<td>3b9e164c32b6dde7701c518e1c515196</td>
|
|
<td>log4net</td>
|
|
<td>2.0.15.0-.NET Standard 2.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-07-25 12:40:06 +0000 UTC</td>
|
|
<td>2024-02-15 18:01:58 +0000 UTC</td>
|
|
<td>0b7e5cedc915c5952cdaf018df7f46d91cabe893</td>
|
|
<td>eae3d777a43d9615a06a9e3e1407a3d65e7c5a28ef5dc69b0afb8b7543943ab7f2101cb9583c61ac36f463f16192a684</td>
|
|
<td>8cae20bbd1d7fda535a287ba6c2e956b1322fa65989b6fda69864a0ba1f203a42d8bf4f6a8a640a74fe4d65524f5c4e4a9eff7a825915366aaa8ef61b05c4f68</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a89d98e45048ab6c95c9bcd763368cdba07ce23cccae4c0397a21465a704f696</td>
|
|
<td>[68a16bd60756fe54a9918f9d, 68a2149cb58debea69d7c748, 68a2bd5ff793a9057f329c03, 68a3663261f8067c48423eb8, 68a40efceddb3a9f1a71a600, 68a4b7cd36bc5d38057e2365]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\XmppDll.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[e9993b2952f59b356b8d698593ee395c]</td>
|
|
<td>[918396277f3549bc9b03d29c6e39a4daf0493ef0]</td>
|
|
<td>[8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a]</td>
|
|
<td>[9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>XmppDll.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>gloox Jabber/XMPP library</td>
|
|
<td>2290488</td>
|
|
<td>e9993b2952f59b356b8d698593ee395c</td>
|
|
<td></td>
|
|
<td>1.0.11</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>918396277f3549bc9b03d29c6e39a4daf0493ef0</td>
|
|
<td>8709999dc52507153068e1a4eb856068ec5d606657bc4328159bdc9f3623a5e09fc8dce91dbee60114fa70c9698a8b0a</td>
|
|
<td>9e7180277e48096996b09c1971f07977f457248cf400939b9c107dba07d90ca5d34d3d6697e1c449815d6e79d37f6e539b56ca87b3206285cf8dab64442321dc</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:43 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad7c0b2129710ddf993b52f160a9045d9ba52aadc123df4370360ea7f70b3152</td>
|
|
<td>[68a16bd60756fe54a9918f9e, 68a2149cb58debea69d7c74a, 68a2bd5ff793a9057f329c04, 68a3663261f8067c48423eb7, 68a40efceddb3a9f1a71a601, 68a4b7cd36bc5d38057e2366]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zMsgAppCommon.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[8ebe28011c96596c46449bb1073ef46e]</td>
|
|
<td>[14337012084411cbc0624f820c9fea5072ca6c1b]</td>
|
|
<td>[a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421]</td>
|
|
<td>[66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zMsgAppCommon.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>10472248</td>
|
|
<td>8ebe28011c96596c46449bb1073ef46e</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>14337012084411cbc0624f820c9fea5072ca6c1b</td>
|
|
<td>a8a70dec5a96b64ad13930bc264e7fbe2507ddba6c058431b73a578dc3cd68487e66cd019df92b5c9a33388141d0a421</td>
|
|
<td>66aedfc0a3eb2e07fa16e302b3b0e94a1a0a1b5da94ce19a00b7548d48fce057f476db6b043ea0761f03738816429d72cd47322f4ef2edce4c855498eb3fc21e</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:17:11 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b07f775760a7fe4a33f58c4db6d53037c94625def8cfde62ebe8b7971c53c987</td>
|
|
<td>[68a48674c4cb2500be69260f, 68a48674c4cb2500be692625]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Async.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[8ad6b881cc4d5180f4d24828d54d78ae]</td>
|
|
<td>[c86a4f3444888a9c12414814d12e71c3e6bedbe6]</td>
|
|
<td>[f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3]</td>
|
|
<td>[2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Async.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Async</td>
|
|
<td>21240</td>
|
|
<td>8ad6b881cc4d5180f4d24828d54d78ae</td>
|
|
<td>Serilog.Sinks.Async</td>
|
|
<td>1.5.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-06-25 13:05:08 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>c86a4f3444888a9c12414814d12e71c3e6bedbe6</td>
|
|
<td>f62d2c10b3e3cf5968eae2164b7537525caab1f55b5be9f782a72ea85bb136987058e56332876cbb19419868097b36a3</td>
|
|
<td>2ab8b56bf6b1b40bd898da8d27a03683197894cbb6319347bedb430cd3f4ca4a08e1a47924974db4f3a99ef45bacb23c588c953a29ddd9bf6137eaefa9afab1c</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b22a5bd87191cfbc9e6edb3e9a804f120c7da8eb995d56d8c6aeff8ad3da2d86</td>
|
|
<td>[68a5c90aab7f84c2d5a0971d]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\Package.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>["C:\Users\SVC_SL~1\AppData\Local\Temp\RarSFX0\Package.exe" ]</td>
|
|
<td>[Lexmark International, Inc.]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\Desktop\Lexmark_Universal_v2_UD1_PCL_XL_Emul_08162017.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:09:26Z]</td>
|
|
<td>[5c64c62f044ea1fae6d3adc7f4be5688]</td>
|
|
<td>[f86c5dea9f6931b69fc490414635ae398efe5229]</td>
|
|
<td>[e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5]</td>
|
|
<td>[0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Package.exe</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\RarSFX0\</td>
|
|
<td>Package Selection Options</td>
|
|
<td>3653920</td>
|
|
<td>5c64c62f044ea1fae6d3adc7f4be5688</td>
|
|
<td></td>
|
|
<td>1.0.0.1</td>
|
|
<td>Lexmark International, Inc.</td>
|
|
<td>2025-08-20 13:09:26 +0000 UTC</td>
|
|
<td>2017-08-16 14:18:52 +0000 UTC</td>
|
|
<td>f86c5dea9f6931b69fc490414635ae398efe5229</td>
|
|
<td>e3befdba5fc6a9f9b78b964060788a231be34ca99e83e15f77135a14794da698d3f6526bbc58aad0da16f096e7e967a5</td>
|
|
<td>0e5a652de1928c6cd195741463c8c27cd4a8f8a40a5f31da9c4fa044ad55eb22ae70aa092589dae9bb8861546004168bfd32e41a5dc5d66b4ff71b7b494a2bca</td>
|
|
<td>2025-08-20 13:09:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-08-19 23:25:52 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-20 13:10:54.011 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b5c4840198ec973d3f940a1a54639be4eb24bb6a8ebe6519dd1810ea2d437f98</td>
|
|
<td>[68a2d482450a223d0231431b, 68a57528577ea16290f09fee]</td>
|
|
<td>[2]</td>
|
|
<td>[1801910989]</td>
|
|
<td>[UH-LIBRX]</td>
|
|
<td>[UH-LIBRX]</td>
|
|
<td>[C:\Program Files\Siber Systems\GoodSync\gsync.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2284.877]</td>
|
|
<td>["C:\Program Files\Siber Systems\GoodSync\gsync.exe" /runner-service=(user)]</td>
|
|
<td>[Siber Systems]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-18T07:00:38Z, 2025-08-20T07:00:41Z]</td>
|
|
<td>[6d0db0f2170f8b674f059587ed5d89bc]</td>
|
|
<td>[bfd4582ba3e95eec900600e9a60cf57d0ca9dcec]</td>
|
|
<td>[9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737]</td>
|
|
<td>[b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c]</td>
|
|
<td>[10.101.101.35]</td>
|
|
<td>[10.101.101.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>gsync.exe</td>
|
|
<td>C:\Program Files\Siber Systems\GoodSync\</td>
|
|
<td>Command Line GoodSync</td>
|
|
<td>8298240</td>
|
|
<td>6d0db0f2170f8b674f059587ed5d89bc</td>
|
|
<td>GoodSync</td>
|
|
<td>10.20.9.9</td>
|
|
<td>Siber Systems</td>
|
|
<td>2022-11-21 14:59:15 +0000 UTC</td>
|
|
<td>2022-11-21 14:59:16 +0000 UTC</td>
|
|
<td>bfd4582ba3e95eec900600e9a60cf57d0ca9dcec</td>
|
|
<td>9319eca340bb19af319276ef65692e49d219fd55c4ba9c43ddcec4d047858f99546d374dda67cafe8860c4243ab70737</td>
|
|
<td>b58cd88bbda06805c18b95a7bc0b4c2040cb5724fbbbae2bc1d8bd92b0936b152f43d2eadf64694f83c8b98b04c866e37f52fdcacae30cd86ef4c0f4d24b8a7c</td>
|
|
<td>2025-07-18 07:00:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-07-31 00:16:36 +0000 UTC</td>
|
|
<td>68</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-07-18 07:05:17.975 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bddc530b9300a27f70c238d542f107dd3fe56831bf9c2b46fc5f2490358bedee</td>
|
|
<td>[68a50cecb4890326e80ca020]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MaquetC_5_4_9_24.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[PHILIPS FRANCE COMMERCIAL SAS]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:46:44Z]</td>
|
|
<td>[0c379659877fcb46c2b1ed42e5f08649]</td>
|
|
<td>[8b35c794af260f72bfaa4b9eb93a634e911231fb]</td>
|
|
<td>[bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36]</td>
|
|
<td>[9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MaquetC_5_4_9_24.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>2547712</td>
|
|
<td>0c379659877fcb46c2b1ed42e5f08649</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>PHILIPS FRANCE COMMERCIAL SAS</td>
|
|
<td>2025-08-19 23:46:40 +0000 UTC</td>
|
|
<td>2025-08-19 23:46:42 +0000 UTC</td>
|
|
<td>8b35c794af260f72bfaa4b9eb93a634e911231fb</td>
|
|
<td>bde74a423144efa520f580311a8d81ae8ac91ca6a9ad19140b58aed340a67b8c24ba9d506e095588ee1c28fb83214b36</td>
|
|
<td>9b76f93825e6242c2fe6d09f6932eeffa9b08ca1429beafea23c60d7b10477b70658cb0758a46126ef1319f2242b26549b3487b90b61eb1bf3091e4e0ff6916a</td>
|
|
<td>2025-08-19 23:46:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b9589642180b32d9a18ca52398fb0d53893e3f8a35611ce3f854492fa0349871</td>
|
|
<td>[68a48674c4cb2500be692617, 68a48674c4cb2500be69262d]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.ServiceAgents.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[b49ebe2365863c63c5fa3d96eb031469]</td>
|
|
<td>[b3fb3dd5136ae2fe56a4cd7646029f67dd46980d]</td>
|
|
<td>[3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a]</td>
|
|
<td>[1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.ServiceAgents.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.ServiceAgents</td>
|
|
<td>61176</td>
|
|
<td>b49ebe2365863c63c5fa3d96eb031469</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>b3fb3dd5136ae2fe56a4cd7646029f67dd46980d</td>
|
|
<td>3f839a897d14d82556d8c6b5aea3c98aa6bc19790e77c7ab09838fc7333a8388850716a68275a01bfae9855dae2e378a</td>
|
|
<td>1b5293e4dbff4c1a2b685acd0790b355ce9dcf6e5789f68b7d91def22dab565265020bc3ca4abba8a354f171a46ca2c0a6fb2f3975ae2c0bfbc0709e3e0a7fd6</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c2ed1c813c3e9df1cce05bdae49d2c20edf56502f916ca8c55d8ac08f1b7f682</td>
|
|
<td>[68a16bd60756fe54a9918f8b, 68a2149cb58debea69d7c736, 68a2bd5ff793a9057f329bf2, 68a3663261f8067c48423ea6, 68a40efceddb3a9f1a71a5ed, 68a4b7cd36bc5d38057e2354]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\DuiLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[46daed87222362c75d0f93c9ceebecee]</td>
|
|
<td>[5d2aa57dbda3c6914acd7024280a2cb71a290cc5]</td>
|
|
<td>[2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14]</td>
|
|
<td>[e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DuiLib.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>2146104</td>
|
|
<td>46daed87222362c75d0f93c9ceebecee</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>5d2aa57dbda3c6914acd7024280a2cb71a290cc5</td>
|
|
<td>2d4548d22f9ba8c90c2bc019ce9d682f388709fe8589693300adb74fd9cfd9bdc936c7f214ff55444d19416f75bf6a14</td>
|
|
<td>e06c0b5bb10069278f543aa774ae22fe4003f871631c005248db7de1d242cbfc1aa7b7da8f266ab7ac2fea2df10e15678748c671163410a218a24a614f2a9d85</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:10 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba81e8ceff38640c2aef358ea04002dbdd2231c3c987001c15b6fc73ba75466d</td>
|
|
<td>[68a25fb2e970d941642e7ed9, 68a25fb2e970d941642e7ee6, 68a3b2cf09045b56b2a707b1, 68a3b2cf09045b56b2a707be, 68a502e12ae1a61fbf4caf0f, 68a502e12ae1a61fbf4caf1c]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\dbatools.library.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[dbatools]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z, 2025-08-17T23:00:14Z, 2025-08-18T23:00:04Z, 2025-08-18T23:00:14Z, 2025-08-19T23:00:03Z, 2025-08-19T23:00:14Z]</td>
|
|
<td>[5654ec4ceddb9b01a8f94166ba14091d]</td>
|
|
<td>[5cfeb2b421fd0881a3ec31af07e3a285404d1fb4]</td>
|
|
<td>[b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb]</td>
|
|
<td>[2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dbatools.library.psm1</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2023.9.21\</td>
|
|
<td></td>
|
|
<td>18768</td>
|
|
<td>5654ec4ceddb9b01a8f94166ba14091d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>dbatools</td>
|
|
<td>2024-02-21 21:01:13 +0000 UTC</td>
|
|
<td>2023-09-21 14:59:12 +0000 UTC</td>
|
|
<td>5cfeb2b421fd0881a3ec31af07e3a285404d1fb4</td>
|
|
<td>b0b8a11df8a3e44d3ba8600a685a4f4590704d41416e4c2f534432c1896ec30cc85a35d9a29068ddec3eef0a46257acb</td>
|
|
<td>2366c02eba42959d362ac27feccde19ecdd34784e6051f3e2acda064d554b4a8c4d93fe28219bee8b857b4147f56b342bb8c92defc77406a63787289ccc2ffb6</td>
|
|
<td>2025-08-08 23:00:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bac8eb3f47e2f86cc0c63b0e0ddf4d59f7f484f12e636d3dc485555944a9fc44</td>
|
|
<td>[68a16bd60756fe54a9918f90, 68a2149cb58debea69d7c73b, 68a2bd5ff793a9057f329bf6, 68a3663261f8067c48423ea9, 68a40efceddb3a9f1a71a5f1, 68a4b7cd36bc5d38057e2356]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTask.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[cba32f4fc85fa047780b98586445d649]</td>
|
|
<td>[bf00992713ad9d38e3090bf52e8b1e82b1647fdb]</td>
|
|
<td>[f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc]</td>
|
|
<td>[79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZoomTask.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>389432</td>
|
|
<td>cba32f4fc85fa047780b98586445d649</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>bf00992713ad9d38e3090bf52e8b1e82b1647fdb</td>
|
|
<td>f560a93af8b9dd186027e669aaf6cd1c30dacb4b056150c9574d3cd8ef2ded756adf4c719e0a4fdc0a0b345c412caafc</td>
|
|
<td>79bda79444f8d67fd331c40ae9620d2f0ce632b679a3371168e5df26a77347d01eb40980ddad0747454a55d1329ee192edd2e10cdde85e5de9090d4fa57d7798</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:01:42 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c596c3c0daaf9055213284e42bd337e3b6754890efe1c480f0e7731ad4060af5</td>
|
|
<td>[68a16bd60756fe54a9918fa7, 68a2149cb58debea69d7c752, 68a2bd5ff793a9057f329c0d, 68a3663261f8067c48423ec0, 68a40efceddb3a9f1a71a609, 68a4b7cd36bc5d38057e236e]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\CmmBrowserEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[097f29d6fcdb18a270a67a77726f02e0]</td>
|
|
<td>[572c07086245d07726fa885459d62fe77733dfbc]</td>
|
|
<td>[0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d]</td>
|
|
<td>[f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CmmBrowserEngine.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>199480</td>
|
|
<td>097f29d6fcdb18a270a67a77726f02e0</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>572c07086245d07726fa885459d62fe77733dfbc</td>
|
|
<td>0e7acbc08903ca09e40c4d065be97579392b4ee72b9318e025ea3552f922c043d180402e2784085d5209d397357fdc9d</td>
|
|
<td>f1e3e8d83c0183f02cb1e3ab23d8048f69309f1fe836819cb2206b5aa07c815390a68fca2f734ee1e52636d57d68a5288102da37c589a0602dd0aff3f8470b16</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:02:28 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bf941354d209769734c601d7d725941fb53ce6cfeb77bac36709c89ec9bc8b50</td>
|
|
<td>[68a4e8fbf38f9e1f8274ab4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>["C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\openssl.exe" req -new -x509 -extensions rootca_cert -passout pass:V]7H:]Vp#>3l:&mj/I#F -keyout "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.key" -out "C:\Users\CA_gs10109\AppData\Local\Temp\m2cblehj.5tc\Capsule Api Root.crt" -days 3653 -config "C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\Root.cnf"]</td>
|
|
<td>[Open Source Developer, François PIETTE]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[2025-08-19T21:13:27Z]</td>
|
|
<td>[36a5d769ada5511b269cd7f028f80b36]</td>
|
|
<td>[568b532bef2967af9fef30d860972fc5b67827e4]</td>
|
|
<td>[11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d]</td>
|
|
<td>[c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>openssl.exe</td>
|
|
<td>C:\Program Files (x86)\Capsule Technologie\Web Administration\OpenSSL\</td>
|
|
<td>OpenSSL application</td>
|
|
<td>732016</td>
|
|
<td>36a5d769ada5511b269cd7f028f80b36</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>1.1.1b</td>
|
|
<td>Open Source Developer, François PIETTE</td>
|
|
<td>2019-02-27 14:53:24 +0000 UTC</td>
|
|
<td>2019-02-27 14:53:24 +0000 UTC</td>
|
|
<td>568b532bef2967af9fef30d860972fc5b67827e4</td>
|
|
<td>11d5ab59c0af3a17b22f218d8a8ae973575677e134dd8c1dccfaf325f334b9dc4b862e5982f5e750cae41f52d90aab8d</td>
|
|
<td>c7952116d5e0362ac89555facca499a6984dbc29000e6fe51c35703e62fc756d9b341f4a2fbb1d7e51d4ba8f4419f79449a89adeaada739fc38db2e790308cda</td>
|
|
<td>2025-08-19 21:13:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2019-05-07 09:32:58 +0000 UTC</td>
|
|
<td>69</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9963a3f8abf6fedc8f983a9655a387d67c752bd59b0d16fd6fc2396b4b4ca67</td>
|
|
<td>[68a4e8a1ad898641af98fd99, 68a4e9b3061a87dd106e473f, 68a4f315247c4b5c9ccb9235, 68a4fcd0011d94a251a4ef35, 68a4fcd0011d94a251a4ef3f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109, ReevesJoe]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\TAP-Windows\bin\tapinstall.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283, v2284.877, v2284]</td>
|
|
<td>["C:\Program Files\TAP-Windows\bin\tapinstall.exe" hwids tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" install "C:\Program Files\TAP-Windows\driver\OemVista.inf" tap0901, "C:\Program Files\TAP-Windows\bin\tapinstall.exe" remove tap0901]</td>
|
|
<td>[OpenVPN Technologies, Inc.]</td>
|
|
<td>[C:\Users\CA_GS1~1\AppData\Local\Temp\tap-windows.exe, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[C:\Windows\Installer\MSIED82.tmp, C:\Users\REEVES~1\AppData\Local\Temp\~nsu.tmp\Au_.exe, C:\Windows\Installer\MSI50B.tmp, C:\Users\CA_GS1~1\AppData\Local\Temp\~nsu.tmp\Au_.exe]</td>
|
|
<td>[2025-08-19T21:11:56Z, 2025-08-19T21:11:57Z, 2025-08-19T21:53:44Z, 2025-08-19T22:09:44Z, 2025-08-19T22:13:47Z]</td>
|
|
<td>[d10f74d86cd350732657f542df533f82]</td>
|
|
<td>[c54074f8f162a780819175e7169c43f6706ad46c]</td>
|
|
<td>[0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855]</td>
|
|
<td>[0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tapinstall.exe</td>
|
|
<td>C:\Program Files\TAP-Windows\bin\</td>
|
|
<td>Windows Setup API</td>
|
|
<td>92304</td>
|
|
<td>d10f74d86cd350732657f542df533f82</td>
|
|
<td>Windows (R) Win 7 DDK driver</td>
|
|
<td>6.1.7600.16385</td>
|
|
<td>OpenVPN Technologies, Inc.</td>
|
|
<td>2016-04-21 11:34:12 +0000 UTC</td>
|
|
<td>2016-04-21 11:34:12 +0000 UTC</td>
|
|
<td>c54074f8f162a780819175e7169c43f6706ad46c</td>
|
|
<td>0c7a3a864c0908d7b0c11c79112461bfd5e5bb75d77c62fa1f94dbb78e30c2800123fc0150a167e1c6abe16b92745855</td>
|
|
<td>0d7cb060e4a9482d4862ff47c9d6f52a060c4fb4e3b8388769fa2974ccf081af6bea7b1d4325c03d128bc4de6e0525d6e9bf3a42564391f2acd980435a0dd87e</td>
|
|
<td>2025-08-19 21:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-08-18 12:31:35 +0000 UTC</td>
|
|
<td>73</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-19 21:16:02.876 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9cc6face476f8d775daa32503e747868b65a73ee9eb306cf78c86c767ad09bb</td>
|
|
<td>[68a5e788692da313f892a122, 68a5f7f47c4424bb71e0a54b, 68a614164c5f9631798f265a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\BeyondTrust\bomgar-scc\68A5E5401B4\cp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891, v2306.895, v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\Windows\System32\LogonUI.exe]</td>
|
|
<td>[C:\Windows\System32\winlogon.exe]</td>
|
|
<td>[2025-08-20T15:09:54Z, 2025-08-20T16:19:41Z, 2025-08-20T18:26:45Z]</td>
|
|
<td>[8d45b8ff739f914564f869bb37d05386]</td>
|
|
<td>[558f84d716b9a8e3de2ef25cef42c936315ba190]</td>
|
|
<td>[8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293]</td>
|
|
<td>[d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cp.dll</td>
|
|
<td>C:\Program Files\BeyondTrust\bomgar-scc\6881201C0FA\</td>
|
|
<td>ACH Credential Provider</td>
|
|
<td>1185872</td>
|
|
<td>8d45b8ff739f914564f869bb37d05386</td>
|
|
<td>Automated Credential Handling</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:09 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:09 +0000 UTC</td>
|
|
<td>558f84d716b9a8e3de2ef25cef42c936315ba190</td>
|
|
<td>8d8edf7a9a9206575d08e71ba713b0a17a8aaf892472e996b07c8fc7176017fea0a7e2dd007750943a826fc9a5a90293</td>
|
|
<td>d12948eb17dfc18345ec086f0ddbcb20e3cc8c55f9d484e88669130da69b8bf7b2bb77b2f89a08bfe3c28812870f7aac24105f837fcf0cd6406214c3d6a2ce39</td>
|
|
<td>2025-07-23 17:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9fc184e1ca62fe686fbd38a18904c7d84f091a080e009089e170d1b30b664f0</td>
|
|
<td>[68a48674c4cb2500be692633]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.SwaggerUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:15Z]</td>
|
|
<td>[4d6da26c03021f4618d9339970734fcf]</td>
|
|
<td>[1f147bd82cbdc20c0f3edf7844e0096e65201b69]</td>
|
|
<td>[98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0]</td>
|
|
<td>[4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>3265296</td>
|
|
<td>4d6da26c03021f4618d9339970734fcf</td>
|
|
<td>Swashbuckle.AspNetCore.SwaggerUI</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:49:02 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:07 +0000 UTC</td>
|
|
<td>1f147bd82cbdc20c0f3edf7844e0096e65201b69</td>
|
|
<td>98012df96211d1c5ce2e342671d6c432ca10bb93acdcb7e4b057a255dcefc8001862991fd184ef855ec0511ad6aaf7f0</td>
|
|
<td>4ea465ea857c5f166cbe7e4e0559b8145aa9f82773dded831d62c4fa002a71c6c87088d795905710ccbc4c36e3452e62b00bc046f3fff44f41afabe62ecbd660</td>
|
|
<td>2025-07-15 14:07:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3796735f397c34b8190c04151071a3700e9356214c940fc7a16781c1678c998</td>
|
|
<td>[68a16bd60756fe54a9918f9b, 68a2149cb58debea69d7c746, 68a2bd5ff793a9057f329c01, 68a3663261f8067c48423eb4, 68a40efceddb3a9f1a71a5fd, 68a4b7cd36bc5d38057e2362]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zWinRes.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[ea160d8a356d92ab1ce2cef57b69cd5a]</td>
|
|
<td>[4e49b884b2592720404e91cdd2d526af82c02c6b]</td>
|
|
<td>[77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56]</td>
|
|
<td>[917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zWinRes.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>10790712</td>
|
|
<td>ea160d8a356d92ab1ce2cef57b69cd5a</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>4e49b884b2592720404e91cdd2d526af82c02c6b</td>
|
|
<td>77c4c8632b63e5c5f5c9d2f1ca1ed4c5530507c341f7c56c05d43def955c90199c3843b8e484e8aac3fbf2bfbc3d2e56</td>
|
|
<td>917d7e74467bef53fd059140ab87f6bd2dcf5785e85842010bd77d614002028462f12037978777cf90ad856d77092735bfd1a449a3879487fe88c60f2cb44cb6</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:14:39 +0000 UTC</td>
|
|
<td>51</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cd34acbad5993e309d24cffa925af6e5cb8e08a0c5b4a401dc8df4d306212be4</td>
|
|
<td>[68a16bd60756fe54a9918f9a, 68a2149cb58debea69d7c744, 68a2bd5ff793a9057f329bff, 68a3663261f8067c48423eb1, 68a40efceddb3a9f1a71a5fc, 68a4b7cd36bc5d38057e235f]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zContext.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[f58a3055af8d49f2bed351e9eeb27d79]</td>
|
|
<td>[a6df905855b434565f04c548ba5f7fbc22452446]</td>
|
|
<td>[e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6]</td>
|
|
<td>[34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zContext.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>53048</td>
|
|
<td>f58a3055af8d49f2bed351e9eeb27d79</td>
|
|
<td>Zoom</td>
|
|
<td>1,0,0,0</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>a6df905855b434565f04c548ba5f7fbc22452446</td>
|
|
<td>e5337fc5831f665924c5028ab0285e4865185520e38f0e888de185e5100b120c5228ca5d8f31e0a12549e08ade0c88b6</td>
|
|
<td>34dce3827b4a5012185ba2cc83c06ca7793339970b532174bcd989c54c5d8605802e6572697469e8b9b5c3dd8c07eb9c90d12f57e79a78772197b5d73249f427</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:58:23 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cd79a7570ed7d959919f8e7ceee95df75e07349692c2bbab9929ab608099ff36</td>
|
|
<td>[68a4c29edcf2a23051e711be]</td>
|
|
<td>[2]</td>
|
|
<td>[lindseye]</td>
|
|
<td>[i-HNOCnoc]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\Interop.Taskschd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Solarwinds Worldwide, LLC]</td>
|
|
<td>[C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\ScpServerTray.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:21:29Z]</td>
|
|
<td>[fec0d051646249d6e0b962e8af2bf997]</td>
|
|
<td>[d50af831c045c754b457eee80d0b4087d8a91d9a]</td>
|
|
<td>[e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d]</td>
|
|
<td>[35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b]</td>
|
|
<td>[172.18.0.16]</td>
|
|
<td>[172.18.0.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Interop.Taskschd.dll</td>
|
|
<td>C:\Program Files (x86)\SolarWinds\SFTP & SCP Server\</td>
|
|
<td></td>
|
|
<td>61272</td>
|
|
<td>fec0d051646249d6e0b962e8af2bf997</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Solarwinds Worldwide, LLC</td>
|
|
<td>2023-08-07 15:09:26 +0000 UTC</td>
|
|
<td>2023-08-07 15:09:26 +0000 UTC</td>
|
|
<td>d50af831c045c754b457eee80d0b4087d8a91d9a</td>
|
|
<td>e1b3ae410ce954d83fa1b7aa7feb7b8e1740ff77c063df219e0df6b950ff052eb213d820a77e412f09fa330dd6caba3d</td>
|
|
<td>35ada718e86a43ce86b7b87e3173f915296226390258823fa9e4f7cfc9d84b1868547dea49a7365a21b09c0450c23c27c3f06ce54674e4e7ff7aa876576d7d6b</td>
|
|
<td>2025-05-20 13:40:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-11-24 14:44:41 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-20 13:41:46.619 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c7d8756c30a879fe1f41d094bac39382e5437a03d911dcbcc4b903d3eb2e7373</td>
|
|
<td>[68a48674c4cb2500be692615, 68a48674c4cb2500be69262b]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\StrykerIOTAPI.BusinessLogic.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:18Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[d27f531fe42e94037f1d13cbfb5e81ed]</td>
|
|
<td>[0972769cb0b0517846d9181e89115cacd8f530b9]</td>
|
|
<td>[79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86]</td>
|
|
<td>[bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StrykerIOTAPI.BusinessLogic.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>StrykerIOTAPI.BusinessLogic</td>
|
|
<td>39176</td>
|
|
<td>d27f531fe42e94037f1d13cbfb5e81ed</td>
|
|
<td>StrykerIOTAPI.BusinessLogic</td>
|
|
<td>1.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:38 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>0972769cb0b0517846d9181e89115cacd8f530b9</td>
|
|
<td>79ccda5755a9122bb3a2454473cb98a8d2b7a33f4614f1293e2fd7dadc525e71c191cbd2c43195eb50003446655e6c86</td>
|
|
<td>bcea6f0213816e5623e10328029ef168078c6cb7b107ccacef90bd8df01ed3cab6eccc12fbbf8bde43fbd68e92771b10eab5904ed84f46eaa1f04221f17d7f75</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3c63e150036f10e73e8cb6478091077532ea4eef2720b551a7be14e35ae9c96</td>
|
|
<td>[68a48674c4cb2500be69260b, 68a48674c4cb2500be692621]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.AspNetCore.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[e5a12ea408c1bb924baba6710f8a210a]</td>
|
|
<td>[952925b6de0a96d202f1f965ab347745228e2973]</td>
|
|
<td>[1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94]</td>
|
|
<td>[bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.AspNetCore.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>27896</td>
|
|
<td>e5a12ea408c1bb924baba6710f8a210a</td>
|
|
<td>Serilog.AspNetCore</td>
|
|
<td>5.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-02-16 03:02:56 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>952925b6de0a96d202f1f965ab347745228e2973</td>
|
|
<td>1e5ce066a5c79c5d366520066f4e2a96bd4413e2bd0189df7ed73dfd8607b073d729df18b8e64236e7c29b04fcf37d94</td>
|
|
<td>bac3cd49c60faf5cf219a403ed21ca59f599b1da48fa855b33c5406a21febf959af87699039fecf6a2c7a259cbd0620a68835bab3e150960cfb9972146254526</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6</td>
|
|
<td>[68a5e788692da313f892a11f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nviewpoint01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2299.891]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe --start-info 11030de8768zwe7i1i767g716zw8h5iexe7h7cr0q_]]xyc90]</td>
|
|
<td>[Bomgar Corporation]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe]</td>
|
|
<td>[C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.exe]</td>
|
|
<td>[2025-08-20T15:09:52Z]</td>
|
|
<td>[b7948c5b27f648de74db6918b1ecd775]</td>
|
|
<td>[6f077c46d82ba1b5b44d943eb167e0e99f92464f]</td>
|
|
<td>[289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5]</td>
|
|
<td>[8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>[172.25.17.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>launch-d6828f731bc57ed6676835c8bf08b8d7fe56a929c33da44666efc0636bdc1ea6-bomgar-scc-adhoc-win64.exe</td>
|
|
<td>C:\ProgramData\bomgar-scc-0x68526efa\bomgar-scc.cache\</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>6610128</td>
|
|
<td>b7948c5b27f648de74db6918b1ecd775</td>
|
|
<td>Remote Support Customer Client</td>
|
|
<td>24.2.4 (3110-506ff210e961624883cf454a3a831c70766ca49b)</td>
|
|
<td>Bomgar Corporation</td>
|
|
<td>2025-07-23 17:47:07 +0000 UTC</td>
|
|
<td>2025-07-23 17:47:07 +0000 UTC</td>
|
|
<td>6f077c46d82ba1b5b44d943eb167e0e99f92464f</td>
|
|
<td>289ef7365bc1f3e263989ea4986e8b461132557b79bc42a57624d0b3e612028873cadf97fcaf392e7f98f39965b1fce5</td>
|
|
<td>8e44e7890bb0a4c14c02c9ec1014daac912789a5df5d285154563e87f952cc7b19184702b2191b37eeff2ea5ab5f55d63a44a64be52ad463505669cbd482247b</td>
|
|
<td>2025-07-23 17:47:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>de70a46df02c58913df13c7654d2b50ebdcfeb522118e089e9aa8d6e6ef1e166</td>
|
|
<td>[68a16bd60756fe54a9918f96, 68a2149cb58debea69d7c741, 68a2bd5ff793a9057f329bf7, 68a3663261f8067c48423eb2, 68a40efceddb3a9f1a71a5f6, 68a4b7cd36bc5d38057e2360]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\libcrypto-3-zm.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[a4f9cbff85279638dde688059cf9b9aa]</td>
|
|
<td>[0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19]</td>
|
|
<td>[84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919]</td>
|
|
<td>[8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>libcrypto-3-zm.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>OpenSSL library</td>
|
|
<td>5671224</td>
|
|
<td>a4f9cbff85279638dde688059cf9b9aa</td>
|
|
<td>The OpenSSL Toolkit</td>
|
|
<td>3.3.3</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>0fd7b8c8f18c322f0a2cb8eb9958774d9a0ddc19</td>
|
|
<td>84cb00b21612c51e7bc6407fc4301946d79022d3ba2c30840b22eb79fe3f91cdbef56eeecc1df893c61031e38c88f919</td>
|
|
<td>8384a81c2e3ce3bb158322e78fd15033e764a3bf258b04b057ce58a14bae779c3cf515f00be45e217526c26cad940a023c595d37d7cb5d9515164a8302a496b5</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-06-12 09:14:27 +0000 UTC</td>
|
|
<td>64</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e2ee86365c2d7a10dc3e77887dcf7ad93c94f5d00128d0d3cb86d3501001a602</td>
|
|
<td>[68a354fa71d9fa85319f10b7]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\SCPWrap64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2259.858]</td>
|
|
<td>[]</td>
|
|
<td>[HID Global Corporation]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:28:49Z]</td>
|
|
<td>[199606fefa62618ab57440cf5e5cd511]</td>
|
|
<td>[3336a6a1aef2da51079da4f3166813bc777dc269]</td>
|
|
<td>[af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470]</td>
|
|
<td>[7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCPWrap64.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>SCPWrap</td>
|
|
<td>121752</td>
|
|
<td>199606fefa62618ab57440cf5e5cd511</td>
|
|
<td>SCPWrap</td>
|
|
<td>4.7.1.28</td>
|
|
<td>HID Global Corporation</td>
|
|
<td>2023-03-17 19:52:06 +0000 UTC</td>
|
|
<td>2023-03-17 19:52:06 +0000 UTC</td>
|
|
<td>3336a6a1aef2da51079da4f3166813bc777dc269</td>
|
|
<td>af065c99d8bc842559b88065d706ed57e02cfa3fcf6bb2443ad07bed99e119819fa059470cd09f7845be5bcdeff5f470</td>
|
|
<td>7494c4d855b314603579cdc921df560652b55b06795cd871a5c6c76d59ee63113a941d97723f81ac65af08038f89f97534d7dd254fb0d51b4476de2e114f37f3</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2023-05-15 12:39:24 +0000 UTC</td>
|
|
<td>70</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-05-13 05:20:32.095 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7c26f470749e005a957ceca6832cec2745e6c227dc8cde71bd07239ddb904f1</td>
|
|
<td>[68a16bd60756fe54a9918f95, 68a2149cb58debea69d7c73d, 68a2bd5ff793a9057f329bfe, 68a3663261f8067c48423eaa, 68a40efceddb3a9f1a71a5fa, 68a4b7cd36bc5d38057e2358]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zCrashReport64.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[28fae224af5f7dbee89946acea3675f8]</td>
|
|
<td>[768587a2e2a33aa921b8b6cc2f94eca00928d414]</td>
|
|
<td>[d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b]</td>
|
|
<td>[3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zCrashReport64.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Crash Handling Module</td>
|
|
<td>260408</td>
|
|
<td>28fae224af5f7dbee89946acea3675f8</td>
|
|
<td>CrashRpt</td>
|
|
<td>1.0.0.2230</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>768587a2e2a33aa921b8b6cc2f94eca00928d414</td>
|
|
<td>d457c28797e1551867cca2d94c8d4dc817218c38e5c2ed37ed8fb304147e0e179e7b4358cfbfe8e171645726ae63774b</td>
|
|
<td>3a5712366f4c3e7d79997521201b2adaf0a964d02d0421166a06bd6977020da214b5d83fd86796057faed353a6bf5529a73f46a1d2fed6475594a1c294b0bfe4</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:22 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb717bf9e34c43fef95539bdc98c8c54edf0644f618f88734975d128c4818304</td>
|
|
<td>[68a16bd60756fe54a9918f92, 68a2149cb58debea69d7c73e, 68a2bd5ff793a9057f329bf8, 68a3663261f8067c48423eab, 68a40efceddb3a9f1a71a5f5, 68a4b7cd36bc5d38057e2359]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\util.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[996efd9d4e57041ce02ca6e95a59bda6]</td>
|
|
<td>[ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d]</td>
|
|
<td>[c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a]</td>
|
|
<td>[d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>util.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>467256</td>
|
|
<td>996efd9d4e57041ce02ca6e95a59bda6</td>
|
|
<td>Zoom</td>
|
|
<td>1, 0, 2012, 1222</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>ff1a39d3c1fee5835b0d4a3a8f9af1bff7a2863d</td>
|
|
<td>c98d6418fb406f93802adb4106374f9634b2c98515156f4d699a65bf6c2f8c9c45e99d38b02bdbc14e65a297f361243a</td>
|
|
<td>d91a5e1e9ca0437ea4fd7839c4709b6c16f540c027efb2b833a73bbc7e601a95edcc6e50c999b17bb44b7cff7639357e2610cb29227431eff5e90c8dd58ef3ea</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:59 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eb74c255ef2059b0e4a07ec54eab6d24dd9807c9da0e695f343911b4001b62a8</td>
|
|
<td>[68a16bd60756fe54a9918fa3, 68a2149cb58debea69d7c74e, 68a2bd5ff793a9057f329c09, 68a3663261f8067c48423ebc, 68a40efceddb3a9f1a71a605, 68a4b7cd36bc5d38057e236a]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[5507945c8429858e9e88070ce5a42f1e]</td>
|
|
<td>[780c5bab6f9d26a9b0c213f0048ecf231c1404cb]</td>
|
|
<td>[bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a]</td>
|
|
<td>[2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zData.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>3605816</td>
|
|
<td>5507945c8429858e9e88070ce5a42f1e</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>780c5bab6f9d26a9b0c213f0048ecf231c1404cb</td>
|
|
<td>bc987e343cc529f1ace36ec4ad89e7e96c320a1ac90c02d7b7a43a3370b56e04c80a5432d6c9258cdb278943ce6a3c7a</td>
|
|
<td>2ef6233b6a45184e032d4e36ca2e330603f9b0f15cabf350fce2b3a079857170ee09f98be7cf6ae5f0c90a2fec5fce175e91606458ad80b38b8f61eb14829b5d</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:27 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ede24c40e2a7bb0b0143ac595073abf7055867b9f35425d41dee9d3c8ad546ca</td>
|
|
<td>[68a16bd60756fe54a9918fa4, 68a2149cb58debea69d7c74f, 68a2bd5ff793a9057f329c0a, 68a3663261f8067c48423ebd, 68a40efceddb3a9f1a71a606, 68a4b7cd36bc5d38057e236b]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\ZoomTelemetry.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[6773863edb1abd984c61ad490a95e2a0]</td>
|
|
<td>[a497082bdb7108c86a21700754553550185474cf]</td>
|
|
<td>[56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67]</td>
|
|
<td>[2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ZoomTelemetry.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>4784440</td>
|
|
<td>6773863edb1abd984c61ad490a95e2a0</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:37 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>a497082bdb7108c86a21700754553550185474cf</td>
|
|
<td>56a6ce79579ffcd6d746fa5935055ab3f76b94e498fbbef8c8333ae1622b8fba6efdff9e356026c227512672522b5e67</td>
|
|
<td>2c838304e935e8118ba21f104c879d23c26ee4e7e7399fc08215e3778174a01cdf2a654ec9c05209d68888237f51fcc36583d0be205650245c214320724b2c48</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:03:31 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f1ac711cb8491e226815bb95418502d495f41482bed0240646feb118260cfdbe</td>
|
|
<td>[68a48674c4cb2500be692610, 68a48674c4cb2500be692626]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Debug.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:16Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[e7e39224cd91face931f14064a638698]</td>
|
|
<td>[2e2c1e01a10fdddc7d9a842413484e407191f92e]</td>
|
|
<td>[af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb]</td>
|
|
<td>[0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Debug.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>19192</td>
|
|
<td>e7e39224cd91face931f14064a638698</td>
|
|
<td>Serilog.Sinks.Debug</td>
|
|
<td>2.0.0-master-68cc513</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-02-14 12:47:26 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>2e2c1e01a10fdddc7d9a842413484e407191f92e</td>
|
|
<td>af2d6b2fa06f19feafac676510a2c14ba08e07cddbe411f7ab177c98556e8ad3263abb68eeb3c246b6c8c514de9d8deb</td>
|
|
<td>0d7428b3883271b4d2d967ea0fe780112e9f1770e09187186fd9404c779d46ef8099387c0d1f52c3ffe06fb1344da6a7bde52dbf789ce76e9f03c9f41151c9ba</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f389e16e78bc34be5aa9bd3ce9fd6539ffc61387d71c29f8c5cb4fa989727f6d</td>
|
|
<td>[68a16bd60756fe54a9918fa0, 68a2149cb58debea69d7c74b, 68a2bd5ff793a9057f329c06, 68a3663261f8067c48423eb9, 68a40efceddb3a9f1a71a602, 68a4b7cd36bc5d38057e2367]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\LibphoneWrapper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:01Z, 2025-08-17T17:37:02Z, 2025-08-18T05:37:01Z, 2025-08-18T17:37:02Z, 2025-08-19T05:37:01Z, 2025-08-19T17:37:02Z]</td>
|
|
<td>[6b15ab371446e9308f6c7760dac4485c]</td>
|
|
<td>[230e1cdc4416240c11e78e0f54b50e441858e2cb]</td>
|
|
<td>[f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9]</td>
|
|
<td>[a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LibphoneWrapper.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>846136</td>
|
|
<td>6b15ab371446e9308f6c7760dac4485c</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>230e1cdc4416240c11e78e0f54b50e441858e2cb</td>
|
|
<td>f36d9cb5d46465526ec776dd046dbff6b498d1cf1d70e9e5ac844ec55fb659a3a4b8b04481bca8e973e958666411f3c9</td>
|
|
<td>a5891de56dd42d65e1cce2660e99f1740eab1f2439b63e0153ac2df17f3847931c199ff8d083860623e8a778d19447afc01e751bdbe2577c066450b84119d65a</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:27 +0000 UTC</td>
|
|
<td>72</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 14:43:31.3 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>efe3198f94732357b04ee6a7e13a5c0914d0db372c7b8889bff1ea2a925da1b8</td>
|
|
<td>[68a16bd60756fe54a9918f8f, 68a2149cb58debea69d7c73a, 68a2bd5ff793a9057f329bf5, 68a3663261f8067c48423ea8, 68a40efceddb3a9f1a71a5f2, 68a4b7cd36bc5d38057e2357]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\cmmbiz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:00Z, 2025-08-17T17:37:01Z, 2025-08-18T05:37:00Z, 2025-08-18T17:37:01Z, 2025-08-19T05:37:00Z, 2025-08-19T17:37:01Z]</td>
|
|
<td>[41a96aedf2095d6e5e88c39173a010ac]</td>
|
|
<td>[e97e89687d29d309d2b56b2487276352e60ba184]</td>
|
|
<td>[f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f]</td>
|
|
<td>[f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cmmbiz.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>786232</td>
|
|
<td>41a96aedf2095d6e5e88c39173a010ac</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:36 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:18 +0000 UTC</td>
|
|
<td>e97e89687d29d309d2b56b2487276352e60ba184</td>
|
|
<td>f228c38eed0442e9039327e3aeb9b8e085511289d8fcf865975ac2eb3ba918a6d6e55353f026881dc1e15d5dcd422f8f</td>
|
|
<td>f5bf1a21c6351837f79aa131319890acd992653e19c9a254be8a765631ecd6d1d04b0e137d65114540c62623a27aef2630dd328241aca53d96f257e872d845e3</td>
|
|
<td>2025-07-15 17:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 06:00:03 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-15 11:38:01.347 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f01539ab85e7769cbf9e046fc9f87e3c6abd74bebff765b77a9c48972f0da67f</td>
|
|
<td>[68a48674c4cb2500be692609, 68a48674c4cb2500be69261f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Serilog.Sinks.Console.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:15Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[f2c3352f41741807403c460ed4759bb7]</td>
|
|
<td>[a23e5c02ab076c8c8dab1a2bd2c7306541de034e]</td>
|
|
<td>[57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592]</td>
|
|
<td>[7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Serilog.Sinks.Console.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>46336</td>
|
|
<td>f2c3352f41741807403c460ed4759bb7</td>
|
|
<td>Serilog.Sinks.Console</td>
|
|
<td>4.0.1-main-37f02f5</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2021-11-19 05:04:50 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:04 +0000 UTC</td>
|
|
<td>a23e5c02ab076c8c8dab1a2bd2c7306541de034e</td>
|
|
<td>57011b68967fdc9afdfee1235e36d4a163ed7040b2860489cd5fd496770115e824f5500d9d3824ce1dd1d2bbf1d11592</td>
|
|
<td>7f6ca2e5af799d8185d2dcf9995875ecffd1094983b6207230380dfe4abc1a6b3670691b6fb289a6d5f6cec1cefc84e09e9114ea3c4e5fbacf875fbaea7bbab8</td>
|
|
<td>2025-07-15 14:07:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fa86ea9326765d5be075d1129e08150246ac0bd2f394d97c39cafae921f0e1ff</td>
|
|
<td>[68a16bd60756fe54a9918fab, 68a2149cb58debea69d7c756, 68a2bd5ff793a9057f329c11, 68a3663261f8067c48423ec4, 68a40efceddb3a9f1a71a60d, 68a4b7cd36bc5d38057e2372]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\zTelemetryBiz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2264.862, v2272.867, v2282.875]</td>
|
|
<td>[]</td>
|
|
<td>[Zoom Video Communications, Inc.]</td>
|
|
<td>[C:\Users\teknicor\AppData\Roaming\Zoom\bin\Zoom.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:37:02Z, 2025-08-17T17:37:03Z, 2025-08-18T05:37:02Z, 2025-08-18T17:37:03Z, 2025-08-19T05:37:02Z, 2025-08-19T17:37:03Z]</td>
|
|
<td>[74980fb5a35295d4c1aace7f401a721a]</td>
|
|
<td>[0dfbd25d4b0994b137a2f914752804d5edba75b3]</td>
|
|
<td>[bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c]</td>
|
|
<td>[dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>zTelemetryBiz.dll</td>
|
|
<td>C:\Users\teknicor\AppData\Roaming\Zoom\bin\</td>
|
|
<td>Zoom</td>
|
|
<td>134968</td>
|
|
<td>74980fb5a35295d4c1aace7f401a721a</td>
|
|
<td>Zoom</td>
|
|
<td>6,4,12,64384</td>
|
|
<td>Zoom Video Communications, Inc.</td>
|
|
<td>2025-07-07 01:28:38 +0000 UTC</td>
|
|
<td>2025-07-07 01:28:19 +0000 UTC</td>
|
|
<td>0dfbd25d4b0994b137a2f914752804d5edba75b3</td>
|
|
<td>bb6b388e042e2db4559620d1e3a4552037b7f807dab8f5062caab452ab6c344d87d1a03e5c5823902f02ebd9ea37886c</td>
|
|
<td>dd3a183fc887795bdd21686a135c5dae9f663e513838ae26ee6ba91f559678934a5846550e02cd35031845a9897fca7299c85583185f244217960638e7ac447f</td>
|
|
<td>2025-07-15 17:40:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2025-07-03 05:59:41 +0000 UTC</td>
|
|
<td>71</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Signature Verified (DigiCert)</td>
|
|
<td>2025-07-14 22:31:10.091 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f39a93d4ec3f32e339b3a6cbf96208f8e057ee7483ae8d857b0a03848aacd045</td>
|
|
<td>[68a48674c4cb2500be69261a, 68a48674c4cb2500be692630]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Swashbuckle.AspNetCore.Swagger.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:19Z, 2025-08-19T14:05:03Z]</td>
|
|
<td>[ec116545a1a3e9c526cab69658fe0500]</td>
|
|
<td>[754ebdc6c68455197432fc9cc8617ca28c227372]</td>
|
|
<td>[3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d]</td>
|
|
<td>[8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>27408</td>
|
|
<td>ec116545a1a3e9c526cab69658fe0500</td>
|
|
<td>Swashbuckle.AspNetCore.Swagger</td>
|
|
<td>6.5.0+8f363f7359cb1cb8fa5de5195ec6d97aefaa16b3</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-01-11 11:48:20 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:06 +0000 UTC</td>
|
|
<td>754ebdc6c68455197432fc9cc8617ca28c227372</td>
|
|
<td>3785a88ddbb02bca9473da6fe3494e76b22c6470ee51ad7a690cfce96d61bbed1838ef29b68e52ddc11cb127a9841c1d</td>
|
|
<td>8c4021a41fdf0d029a6bbcc22b22a86c0f5899a4a825a228209c09f87f8abaa43fa5190c1444dbe62d36c650a07b06fc81efa201f24c65c7df9a36b1deadf9d6</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f40681b66d49369219f31f15fe7a0e73a787651ce357f5e86e2d6bddb49c0c97</td>
|
|
<td>[68a48674c4cb2500be69261c, 68a48674c4cb2500be692632]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE, SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\Polly.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:03:22Z, 2025-08-19T14:05:04Z]</td>
|
|
<td>[1d281597aef8d59107117c53584acc44]</td>
|
|
<td>[38e2d5449d89bb84e313d080e7969a5261a459a6]</td>
|
|
<td>[a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db]</td>
|
|
<td>[3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Polly.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>Polly</td>
|
|
<td>287456</td>
|
|
<td>1d281597aef8d59107117c53584acc44</td>
|
|
<td>Polly</td>
|
|
<td>7.2.3.0+c27faf89ef459fd9a8e0131ae1d4cd835ca4f31d</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2022-01-17 18:25:08 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:03 +0000 UTC</td>
|
|
<td>38e2d5449d89bb84e313d080e7969a5261a459a6</td>
|
|
<td>a2210786b308e60550154ae3abaeac3dbc0e414f857400212cdff80d30e0145f35501024cfa8df2d4624f66436d714db</td>
|
|
<td>3cda2d7d01a7bda05e2d973a9ccc48d963b1386ae65879a3f6bfb91f6dffc441d66c018fb19e4256dc7e538b857c03ee3071f044f97f8c388061a14c709b980a</td>
|
|
<td>2025-07-15 14:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>020f21b1a2944cc57671cc061c101cab4786e324fd6ccc4003184002a4b8f5b3</td>
|
|
<td>[68a28bda3bdcd0703f76f644, 68a3dfd9dd64bcf44b32b6de, 68a533cd7c33c0fb7b88c886]</td>
|
|
<td>[2]</td>
|
|
<td>[xpressions]</td>
|
|
<td>[vm-vmail]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\xpressions\SnmpTrapGen.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755482987009, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755569859435, C:\Users\xpressions\SnmpTrapGen.exe -c:SENSnmp -r:172.17.180.139 -to:.1.3.6.1.4.1.13203.99991.0.4 -vid:.1.3.6.1.4.1.13203.99991.4 -vtp:str -val:1755656891824]</td>
|
|
<td>[SnmpSoft Company (Invalid Certificate Chain)]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Program Files\Unify\RSPsshServer\bin\sshserver.exe]</td>
|
|
<td>[2025-08-18T02:10:02Z, 2025-08-19T02:17:54Z, 2025-08-20T02:28:27Z]</td>
|
|
<td>[14a8db10bf75b483c14cd1a649fffbf1]</td>
|
|
<td>[4de404c9b6058e7d67cd437b96c0eb4e553dbfdd]</td>
|
|
<td>[5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5]</td>
|
|
<td>[97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SnmpTrapGen.exe</td>
|
|
<td>C:\Users\xpressions\</td>
|
|
<td>SnmpTrapGen</td>
|
|
<td>154872</td>
|
|
<td>14a8db10bf75b483c14cd1a649fffbf1</td>
|
|
<td>SnmpTrapGen</td>
|
|
<td>1.1</td>
|
|
<td>SnmpSoft Company (Invalid Certificate Chain)</td>
|
|
<td>2025-08-16 02:25:56 +0000 UTC</td>
|
|
<td>2025-08-16 02:25:57 +0000 UTC</td>
|
|
<td>4de404c9b6058e7d67cd437b96c0eb4e553dbfdd</td>
|
|
<td>5dafed3f66201e6c1f5cff2ad9b39545557adba5f1ec5d5d645b32b19aa84e0a2e09920092b0ed6a810e1256a27ab6d5</td>
|
|
<td>97e25fcfc41454111a2bb08f81acabbc42bb537dfd1f136dfac220f8d03df0416acd944f4206663a4ddb617be75956bd5154760c87cd32dfa5166cb00975b75a</td>
|
|
<td>2025-08-16 02:26:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>2024-04-14 04:26:11 +0000 UTC</td>
|
|
<td>65</td>
|
|
<td>0</td>
|
|
<td>KNOWN</td>
|
|
<td>0</td>
|
|
<td>Benign 0.00</td>
|
|
<td>2025-08-16 02:27:03.497 +0000 UTC</td>
|
|
</tr>
|
|
<tr>
|
|
<td>02887edb4e2a570dca14f9262e9c5574ca92cf067895889e6e38691990a61fd3</td>
|
|
<td>[68a48674c4cb2500be692634]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.IOT\SEWSI.Utilities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Stryker Corporation]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:15Z]</td>
|
|
<td>[7eaac1bd4e2e852dee8286407c142ade]</td>
|
|
<td>[a2cd6b02e50e058fd187534faf01d9a321be6ed1]</td>
|
|
<td>[b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8]</td>
|
|
<td>[d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SEWSI.Utilities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.IOT\</td>
|
|
<td>SEWSI.Utilities</td>
|
|
<td>28912</td>
|
|
<td>7eaac1bd4e2e852dee8286407c142ade</td>
|
|
<td>Connected Hospital</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Stryker Corporation</td>
|
|
<td>2023-03-16 10:22:36 +0000 UTC</td>
|
|
<td>2024-02-15 18:02:05 +0000 UTC</td>
|
|
<td>a2cd6b02e50e058fd187534faf01d9a321be6ed1</td>
|
|
<td>b7c5bec50a468451d86abb09a4833b6962c0773be098c80a5e06a24a8e306e44153039c8ce873eed3b5847d6646b67c8</td>
|
|
<td>d99a7751e7188f8441f50bf3231b20d658e628928b02382ce0dec1d43db8f792e11c5501f2f28c0e9caae90d28e7547cecd5a4b0e8d19944273043cd50d8cfdf</td>
|
|
<td>2025-07-15 14:07:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
</tbody>
|
|
</table> |