=
37686 lines
1.3 MiB
Plaintext
37686 lines
1.3 MiB
Plaintext
<table border="1" class="dataframe">
|
|
<thead>
|
|
<tr style="text-align: right;">
|
|
<th>sha256</th>
|
|
<th>checkpoint</th>
|
|
<th>type</th>
|
|
<th>username</th>
|
|
<th>hostname</th>
|
|
<th>netdomain</th>
|
|
<th>filename_x</th>
|
|
<th>ppolicy</th>
|
|
<th>policyname</th>
|
|
<th>policyver</th>
|
|
<th>commandline</th>
|
|
<th>publisher_x</th>
|
|
<th>pprocess</th>
|
|
<th>gprocess</th>
|
|
<th>datetime_x</th>
|
|
<th>md5_x</th>
|
|
<th>sha128_x</th>
|
|
<th>sha384_x</th>
|
|
<th>sha512_x</th>
|
|
<th>ip</th>
|
|
<th>localip</th>
|
|
<th>num_devices</th>
|
|
<th>result</th>
|
|
<th>filename_y</th>
|
|
<th>filepath</th>
|
|
<th>description</th>
|
|
<th>filesize</th>
|
|
<th>md5_y</th>
|
|
<th>productname</th>
|
|
<th>productversion</th>
|
|
<th>publisher_y</th>
|
|
<th>createtime</th>
|
|
<th>modtime</th>
|
|
<th>sha128_y</th>
|
|
<th>sha384_y</th>
|
|
<th>sha512_y</th>
|
|
<th>datetime_y</th>
|
|
<th>applications</th>
|
|
<th>baselines</th>
|
|
<th>reputation_lastseen</th>
|
|
<th>reputation_scannercount</th>
|
|
<th>reputation_scannermatch</th>
|
|
<th>reputation_status</th>
|
|
<th>reputation_threatlevel</th>
|
|
<th>reputation_threatname</th>
|
|
<th>reputation_timestamp</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>bd7a8d07a6a3d0b10b943a17dedd5f3a23eea53b0d0babe6d6ed452c24f5710d</td>
|
|
<td>[68a178f000fcf6f09fa43ed4, 68a17c6313d38093271e4d7d, 68a17d32b8e0917a96ab5183, 68a2ca7bf1b5d070157fa50a, 68a2cde79ef546c806451f9b, 68a2cebeea2bec6dd453ddc6, 68a41c1ee32af9c7fb4f586d, 68a4205b652c2f8e7aac8983, 68a4212d6d0e46c2f152938d, 68a56dbbc331ff607b884d4b, 68a5711ca55e4f736b7b2bfa, 68a571f415ffa42bc82736b5]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[I-PANHS, i-NPANHS, U-PanHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:30:01Z, 2025-08-17T06:51:01Z, 2025-08-18T06:30:01Z, 2025-08-18T06:51:00Z, 2025-08-18T06:51:02Z, 2025-08-19T06:30:02Z, 2025-08-19T06:51:02Z, 2025-08-19T06:51:00Z, 2025-08-20T06:30:01Z, 2025-08-20T06:51:00Z, 2025-08-20T06:51:02Z]</td>
|
|
<td>[67922bcfb6b909fcf4c6066aae296c06]</td>
|
|
<td>[5cecc6335811f9bf1365738b97bd0a717a78be24]</td>
|
|
<td>[f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2]</td>
|
|
<td>[c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014]</td>
|
|
<td>[172.17.252.76, 172.17.253.167, 172.25.18.242]</td>
|
|
<td>[172.17.252.76, 172.17.253.167, 172.25.18.242]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>userlist.bat</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>238</td>
|
|
<td>67922bcfb6b909fcf4c6066aae296c06</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-17 14:35:55 +0000 UTC</td>
|
|
<td>2010-08-18 13:45:20 +0000 UTC</td>
|
|
<td>5cecc6335811f9bf1365738b97bd0a717a78be24</td>
|
|
<td>f2a9536c19a3576dae75de0bf830d603e025a464adc2af86ccae49bd8024f40cb1e16b5eb0510bcbd52d2a101eb8cac2</td>
|
|
<td>c356cd0f41a5aa0674668ab009e266c6a2ae81f54daebe2adabb4a3673c29437d05ee6fabdbddbeff5255ecbb604a3b0f44b486aa02e80d2b93f862681f94014</td>
|
|
<td>2025-08-09 04:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d1d29bfdf0938484bad3df1024847c2b6cc6310c3e1f55236e1f54593094f054</td>
|
|
<td>[68a1ac1ec193963d0c0ace4e, 68a29ad1e6b70fa9edec4351, 68a2b972d6f29d8003151b81, 68a2fff19b21a43c06982f02]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCusterqs1, i-nQS, i-nMrristnnqs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\QS1\QAU\Info\SystemInfo.bat, D:\QS1\QAU\Info\SystemInfo.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe]</td>
|
|
<td>[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z]</td>
|
|
<td>[6e5cd2985085a14f0365ac9f09224978]</td>
|
|
<td>[b8c1668ef28fa7f83d9ead6d14705e95bc335e5b]</td>
|
|
<td>[eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83]</td>
|
|
<td>[dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>SystemInfo.bat</td>
|
|
<td>C:\QS1\QAU\Info\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td>6e5cd2985085a14f0365ac9f09224978</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-10-22 11:10:42 +0000 UTC</td>
|
|
<td>2019-10-22 11:10:42 +0000 UTC</td>
|
|
<td>b8c1668ef28fa7f83d9ead6d14705e95bc335e5b</td>
|
|
<td>eb0c7d12e08b8a25dcf7e3c5866fc7c2bed19ed04126474e8da4b31db8f33284c752a2f1791be94330396bff8c797f83</td>
|
|
<td>dda0fc71bf9002ec8c313556d4705de54067f90efaa88d3181343ee67057f2285dff75218ff7f36f7a1ad44ff1c998a9a0698e7e8658299c8adc87afce1be989</td>
|
|
<td>2025-07-16 14:19:51 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1aac11b17b781bae4155142b446ee8c2a50ee6b74d487c177c219a582fc7b1fe</td>
|
|
<td>[68a61ba94647e99a42f1f95e, 68a61c2b9f20edac12c008b0, 68a61c2b9f20edac12c008b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[dp-ruby01, DP-RUBY02, DP-RUBY03]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\CCM\ScriptStore\5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2309.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\CCM\CcmExec.exe]</td>
|
|
<td>[2025-08-20T19:01:55Z, 2025-08-20T19:04:06Z, 2025-08-20T19:04:07Z]</td>
|
|
<td>[d7d030bd33393f5a761bd2d6eb2e6f51]</td>
|
|
<td>[58918d62b1b53da8534b7b47f29ad298d71b7e4e]</td>
|
|
<td>[b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d]</td>
|
|
<td>[72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847]</td>
|
|
<td>[172.17.120.11, 172.17.120.10, 172.17.120.20]</td>
|
|
<td>[172.17.120.11, 172.17.120.10, 172.17.120.20]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>5FA59660-748C-42F4-98F7-BA333CBE728C_1AAC11B17B781BAE4155142B446EE8C2A50EE6B74D487C177C219A582FC7B1FE.ps1</td>
|
|
<td>C:\Windows\CCM\ScriptStore\</td>
|
|
<td></td>
|
|
<td>134</td>
|
|
<td>d7d030bd33393f5a761bd2d6eb2e6f51</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-20 16:34:58 +0000 UTC</td>
|
|
<td>2025-05-20 16:34:58 +0000 UTC</td>
|
|
<td>58918d62b1b53da8534b7b47f29ad298d71b7e4e</td>
|
|
<td>b2cf9af8d75064e8e661944506fd7bc72a357da2fdf7a09bb3c1cd5c7257d7f2f298101c42addbd772e2169cba47729d</td>
|
|
<td>72a56936d6fa8077b1db11aed80687dfe631a8bb231d18184195ac24e3c9b8ebab2bf02c35638f53f351eda6e342c87ff094b69e1b469e3146cd36041b95c847</td>
|
|
<td>2025-08-20 19:02:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb39dc9b0ead7b6e038a358e3ca9faae5a39570bfaf3834bf8c75aa2912698a5</td>
|
|
<td>[68a1646609d3c08e7ea8cecc, 68a16470d97d50d8da4abf7a, 68a18f14b89992b111df5d02]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLeicaSAM03, i-nleicasam02, nt-UHCleica]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Aperio\DatabaseCheck\Check-GT450-Database-Integrity.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:11:00Z, 2025-08-17T08:11:00Z]</td>
|
|
<td>[1a72b94c58d7e7f137a18e1a0c18914a]</td>
|
|
<td>[4ba6ef15a0cd389d15ad080de945a334373c9fc6]</td>
|
|
<td>[7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c]</td>
|
|
<td>[76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee]</td>
|
|
<td>[172.17.253.15, 172.17.253.103, 172.25.17.137]</td>
|
|
<td>[172.17.253.15, 172.17.253.103, 172.25.17.137]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>Check-GT450-Database-Integrity.ps1</td>
|
|
<td>C:\Program Files (x86)\Aperio\DatabaseCheck\</td>
|
|
<td></td>
|
|
<td>1399</td>
|
|
<td>1a72b94c58d7e7f137a18e1a0c18914a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-05 16:07:43 +0000 UTC</td>
|
|
<td>2024-07-29 14:50:04 +0000 UTC</td>
|
|
<td>4ba6ef15a0cd389d15ad080de945a334373c9fc6</td>
|
|
<td>7eb2a051d080adbf7501a248285b94ff273b7902418d21106ff5b0dfc5d288555ce4530adc3d1357bf03dec27e92e74c</td>
|
|
<td>76dc4c3e619e0cde49dc1ab61d3580de695ccbb2a50e7bb53bdee94a20f4b76207480350cbed5f2381e52220d41ae6a2b00b86a3f772f2655309c186c47609ee</td>
|
|
<td>2025-08-10 05:11:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>18f94c227e2d517cfb94721f65e950efbfeb23990fcf7dcbc48bbbf8ba8e3e68</td>
|
|
<td>[68a1ac1ec193963d0c0ace4f, 68a29ad1e6b70fa9edec4352, 68a2b972d6f29d8003151b82, 68a2fff19b21a43c06982f03]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCusterqs1, i-nQS, i-nMrristnnqs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\QS1\QAU\Info\SerialNumber.bat, D:\QS1\QAU\Info\SerialNumber.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\QS1\QAU\QAU.exe, D:\QS1\QAU\QAU.exe, C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[E:\QS1\QAU\SrvCtrl.exe, D:\QS1\QAU\SrvCtrl.exe, E:\QS1\QAU\QAU.exe]</td>
|
|
<td>[2025-08-17T10:10:39Z, 2025-08-18T03:11:22Z, 2025-08-18T05:18:23Z, 2025-08-18T10:19:07Z]</td>
|
|
<td>[1dd0238e6d527954d3190764187d6a05]</td>
|
|
<td>[c542ac2cea1b430cf3ae7b91936b57b20a72a2a7]</td>
|
|
<td>[062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589]</td>
|
|
<td>[9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>[172.17.21.68, 172.17.252.137, 172.17.21.65]</td>
|
|
<td>3</td>
|
|
<td>Success</td>
|
|
<td>SerialNumber.bat</td>
|
|
<td>C:\QS1\QAU\Info\</td>
|
|
<td></td>
|
|
<td>64</td>
|
|
<td>1dd0238e6d527954d3190764187d6a05</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-18 12:10:54 +0000 UTC</td>
|
|
<td>2019-12-18 12:10:54 +0000 UTC</td>
|
|
<td>c542ac2cea1b430cf3ae7b91936b57b20a72a2a7</td>
|
|
<td>062ccb1a22a77110e8c104165a70b733150b6f81632e60c8c0aaabb4922e49d1afb14fe2e75e3472575f6bb88c4bc589</td>
|
|
<td>9ca45d3a4766c2983be9ffdcd278f578b58bea2c6afd72d8cf9c2715b818ef32fa76ebb01e822b2c265c6500a93c0d34939517bd33376a784a99a11b93da1e4c</td>
|
|
<td>2025-07-16 14:19:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fa3402afae16af05fbba53d005803e74825eb1a222d135ed8b0f2009514bf45d</td>
|
|
<td>[68a62c57d96ab29dcabe19ab, 68a62d5b4fa1f463a5481cd3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[80cbeb9ab7ad2d7f01f2a53273bf59a6]</td>
|
|
<td>[9db1f88469a23adaabce2f09c7b0acc618bb174f]</td>
|
|
<td>[0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9]</td>
|
|
<td>[19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>80cbeb9ab7ad2d7f01f2a53273bf59a6</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>9db1f88469a23adaabce2f09c7b0acc618bb174f</td>
|
|
<td>0dced06d1f9d560d083b7a5a4fdde3ea0161598c50ac7008e4107a2104adb87d0dcb2f6b9759e78ce206960957bc28c9</td>
|
|
<td>19dfd12e835b2719a594d2a1b9bad83de2b13841f9e58ba37c724adf36259043311c534c033051a1cf2beda25dfab7e34591ecea08777922d743ff60bd64c5b1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3a49f661552f457a58a05aa08a8a2260163b0117aa88f690744d9864dad2c12</td>
|
|
<td>[68a62c2f20141caa2973b2a4, 68a62c4fe0cb7d1d0b6ef995, 68a62cb1297e2a61afff0f75, 68a62dbdd3f22bde37b5f4f1, 68a62dbdd3f22bde37b5f4fb, 68a62ea8e82920a204bd4bea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Matrixcare.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Matrixcare.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:12:35Z, 2025-08-20T20:14:36Z, 2025-08-20T20:14:45Z, 2025-08-20T20:17:33Z, 2025-08-20T20:13:11Z]</td>
|
|
<td>[63f2acff027a49b92b1c853563fa84da]</td>
|
|
<td>[08845800b27ef97fe203342f1c40e9df2d78950b]</td>
|
|
<td>[31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e]</td>
|
|
<td>[7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Matrixcare.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Matrixcare</td>
|
|
<td>13312</td>
|
|
<td>63f2acff027a49b92b1c853563fa84da</td>
|
|
<td>FormFast.Matrixcare</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:20:00 +0000 UTC</td>
|
|
<td>2023-06-20 18:20:00 +0000 UTC</td>
|
|
<td>08845800b27ef97fe203342f1c40e9df2d78950b</td>
|
|
<td>31f286f3cd31351b2a7e79e95af87bfae3fde9807e66cd87ea477c1a73fab26e69bb60d88420c79a9df79d0595addd4e</td>
|
|
<td>7ea4d2d8259938140c160fd2308c7fb67108362b6a26fa68ed7f4bfaab38b101b891796ebfcfb3a75be65ebebda13bcb6aeb8817012c38d58eb50cb541ab018c</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0e00d85eb881678c720ba0a991f1e2e4d74681c5e7d1a432632434966f8a0cb</td>
|
|
<td>[68a62c61512061b0a03001e5, 68a62d65c4509fd4abd51f61]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[40ffc6345b95c232205c8536d42a1bd7]</td>
|
|
<td>[1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a]</td>
|
|
<td>[59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e]</td>
|
|
<td>[11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>40ffc6345b95c232205c8536d42a1bd7</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>1bb0fb8aece7bbb9dc10ad0e775acaf033956a6a</td>
|
|
<td>59409de789ffa503d9f510d8dd9ed394142a84b84fcc5f1997a3a98da2a69b116783ef120796d619bda3c3afe8dd5c9e</td>
|
|
<td>11fc1b3a91ae520c943f0c39529f03c3a1081a80bea970870fafea8879d4c385739c4324fda700b9ec5d6767f2536355ba077796395329b5bbbc53481515919b</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>010ddff1577bb17ad0560dc7f8db16f6acdbef67f14e95ee97a642af58604a10</td>
|
|
<td>[68a62c61512061b0a03001e9, 68a62d65c4509fd4abd51f65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[9309717e9d2577ab9a3c5c958927143f]</td>
|
|
<td>[e49ddf7c7605fa186a8c8d501c9b31dd52bb359d]</td>
|
|
<td>[0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf]</td>
|
|
<td>[cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>9309717e9d2577ab9a3c5c958927143f</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>e49ddf7c7605fa186a8c8d501c9b31dd52bb359d</td>
|
|
<td>0a91730a2211c53cf863f3a46ba995080a4e988347642907aa11b2285f526ebe527dc332ef9fb8759b6ddc5cf097b4cf</td>
|
|
<td>cd2343b80ec8846f02f9a76cc9537cb043f4dd04b943b3bdb5113933734849ba478988dc1e0ef0f915b866c8610157399d321a8468af9045db60fea473950602</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d83af03fc9dccddc0e5ea6783f1579c486253abeb05bae6e46bf127a5f8457</td>
|
|
<td>[68a62c2f20141caa2973b29a, 68a62cb1297e2a61afff0f6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[2dc49e26bee18b516bdd45649a5ae8a1]</td>
|
|
<td>[42eea7c6a302295e9f6e8076b39b52804f214d4c]</td>
|
|
<td>[4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1]</td>
|
|
<td>[2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>2dc49e26bee18b516bdd45649a5ae8a1</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>42eea7c6a302295e9f6e8076b39b52804f214d4c</td>
|
|
<td>4dbbc2a1e8c3bae37aabbe4dc173f653bd1ee103a9d17a9f5e2efe5e174cb5d89f89d366bf14dc5aa768313050da68e1</td>
|
|
<td>2b475b8dd4e288c43aa9f6f4de5ef6978a69f8152f8bf30dec4cbd9b2d909a13c696104513ca11fbac38493d8c50a54273d358c77d1a53b0ad415cf48c00f92d</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>04df00b66b4fa24bdc2db48590ac7606033c016198f74519a57486f26bfbed4c</td>
|
|
<td>[68a62c390de66b6bd84ed64e, 68a62cbbbad0c3891c05202f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[23b2ae6780127e22e426af5b5389a6eb]</td>
|
|
<td>[162a79b2993bee4878e2d1758b296e6a96e2a063]</td>
|
|
<td>[33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88]</td>
|
|
<td>[90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>23b2ae6780127e22e426af5b5389a6eb</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>162a79b2993bee4878e2d1758b296e6a96e2a063</td>
|
|
<td>33525a86d6b260d7596f14e1dc12341bd6ee6c9a3c726ab345f2c057f0353a79f2282d6f65c83c01c2a1352c817c8e88</td>
|
|
<td>90f08b713e0ce098541f6d9ad395bbd30e119354ddc02e3b8f661ef11dc0434988ed98e405c69bd224fe1e3f050469161de6c2d09960332380ce323217cf6ae2</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06248e206086e314f33123d3bdef9c88f986a21a8ecd43de4c41a8ec71d2a137</td>
|
|
<td>[68a62c390de66b6bd84ed651, 68a62cbbbad0c3891c052032]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[dadb08e43df4a89ea6e4afee8da42293]</td>
|
|
<td>[f561d513ca0284513c3310150988f26126b08be7]</td>
|
|
<td>[6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1]</td>
|
|
<td>[4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>dadb08e43df4a89ea6e4afee8da42293</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>f561d513ca0284513c3310150988f26126b08be7</td>
|
|
<td>6fdb445e59c30801a01acbb835d41fdf3adb7db3181af08027c6432da489bff6f319d42fa9249db937ed9e0f991ee4f1</td>
|
|
<td>4486aa5a790a95d7e3ed88017dd416d88ed1ada0d4924181606b0fd6f451001b1807aba7c58ebb95efc6e260adb124292fbdfcb804e860412896a604bcb519cb</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d81403211a57d215a6b4be8cc38f7e459dd7335c477f4ea9cd1ead0119b54df6</td>
|
|
<td>[68a62c2f20141caa2973b29b, 68a62cb1297e2a61afff0f6b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[5c0bb4c741bcf8fcd6af3c01281eb540]</td>
|
|
<td>[bfa43d44497992ad190244c7a450d53a2b240865]</td>
|
|
<td>[68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2]</td>
|
|
<td>[638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>5c0bb4c741bcf8fcd6af3c01281eb540</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>bfa43d44497992ad190244c7a450d53a2b240865</td>
|
|
<td>68890d1d8a970b95db2c545b5410d76be2496cc4fa438a1c2411926f95a4a97f41be3f7e1899efea75b08a875ded85d2</td>
|
|
<td>638caee0d9307204fc600ab52c01d7753911955ce8c366cae34f215fe6e2c47e61c03f96c71c8e40fa83b31388dc30ba479b38c5074d57cf6305fd2efb027131</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e004a9327c38e81644b9ec7c19a2129908a6c5d68edafb175962c2d78404dc1c</td>
|
|
<td>[68a62c4d7785949c881367c5, 68a62d5b4fa1f463a5481ccf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[af34b8b1165332b262d93e879c27365e]</td>
|
|
<td>[901ce0ab1be72beb1bf8308f6bee7803a793f162]</td>
|
|
<td>[5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2]</td>
|
|
<td>[b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>af34b8b1165332b262d93e879c27365e</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>901ce0ab1be72beb1bf8308f6bee7803a793f162</td>
|
|
<td>5c0b3a2938fa5c70ec6cc0bd38142b03e552998426824a9a9a26d03a7fad175fc7332892c43435e0b575c2640d6b78c2</td>
|
|
<td>b741e9470fd3d94ffeba3054962f796495340b73e4c338fc1212f4a83741dffee0fa19cd5926e03b8ec2c52a8fd7ba33ec28aabc2d20a60b9f95ddda51b2ac09</td>
|
|
<td>2025-07-11 22:48:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9f13dd98551054ff7b68b640d3af1a44941bcccb0f50d08f7434d874bd78915</td>
|
|
<td>[68a62c390de66b6bd84ed646, 68a62cb1297e2a61afff0f86]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:39Z]</td>
|
|
<td>[1b9ee76338d61494a62f3d2481b92c95]</td>
|
|
<td>[916303fec9d999bbad4fe203eb37a859fc08a83a]</td>
|
|
<td>[6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501]</td>
|
|
<td>[716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>1b9ee76338d61494a62f3d2481b92c95</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>916303fec9d999bbad4fe203eb37a859fc08a83a</td>
|
|
<td>6c731743cee9b87f0964241fc09e0c1f1b1499fac51eeb5a3197a3290433d75838626c8003afe0c4064e98febe707501</td>
|
|
<td>716655ac8b863ed4d88f4d3437657d9ca4059cd800c9f6f8387228728a493efaf14a00541346d05a49edc206bf151e934f336700109ae9a5d611798106bc3e7f</td>
|
|
<td>2025-05-06 18:28:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6b54e55d6c23433ecc098e1ce9f6f8d4c24ada9f4f3d6c316f54540694b4eb8</td>
|
|
<td>[68a62c57d96ab29dcabe19ad, 68a62d65c4509fd4abd51f5c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[39d6e5c350190a6ac95b0bec4525ceb3]</td>
|
|
<td>[76fb72ff68e166b6ff1d319e13b2578aabc3fe52]</td>
|
|
<td>[7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010]</td>
|
|
<td>[9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>39d6e5c350190a6ac95b0bec4525ceb3</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>76fb72ff68e166b6ff1d319e13b2578aabc3fe52</td>
|
|
<td>7909cb30c9e851b4e1cee6a3b5226d5c3c8ecc2d48353734b8951c30361544f398a9ce31e677ac34be65be0a4d652010</td>
|
|
<td>9c34e941e0f193dca62bcf1ee14cbc3ff03ca38df005b88b26b42d21285d3b5976db8ac38402840949e8995bbc828f4f45d63ee1ce122402e6cd0e4a843482cc</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce5c130e19f4771691161ab4b4329a24eab18e9df3229183c020204516c6e0a1</td>
|
|
<td>[68a62c2f20141caa2973b298, 68a62c4fe0cb7d1d0b6ef991, 68a62cb1297e2a61afff0f67, 68a62dbdd3f22bde37b5f4ed, 68a62dbdd3f22bde37b5f4f6, 68a62ea8e82920a204bd4be5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.HL7.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.HL7.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:27Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[3f08973ce2b2dc32f33a5b4163bab9c1]</td>
|
|
<td>[b91d3a9974b84b00ac9ca8f0114db15a553ea00a]</td>
|
|
<td>[32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed]</td>
|
|
<td>[4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.HL7.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.HL7</td>
|
|
<td>120832</td>
|
|
<td>3f08973ce2b2dc32f33a5b4163bab9c1</td>
|
|
<td>FormFast.Common.HL7</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>b91d3a9974b84b00ac9ca8f0114db15a553ea00a</td>
|
|
<td>32cb72804aadb99942fce62fae365a7a7a9bc90e3f8b0000ff3c706e513faa73bd6875767b62b479ed8bdc1a25eeb3ed</td>
|
|
<td>4889abecefe332e89ebf64e25da6ac291eb361d4d25af87eaf77c48d7a00dca7c311075d697726c9f7a48a5796402bf5b92165dc9ee5b1740f9616c6acb213b3</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c91f5897176c15efd03ff7ed6746b9479ffc0e88ebabd6bb95c9dd4884a0ff1a</td>
|
|
<td>[68a62c4d7785949c881367c6, 68a62d5b4fa1f463a5481cd0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:59Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[d5554406e72e2f7ede8c94c492229b65]</td>
|
|
<td>[acf40e10c3844e9facc9689b8fcd1e68356c319f]</td>
|
|
<td>[05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb]</td>
|
|
<td>[1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>d5554406e72e2f7ede8c94c492229b65</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>acf40e10c3844e9facc9689b8fcd1e68356c319f</td>
|
|
<td>05df7145e0359919bf788e8dd3372502fa3f92411ef594f433a9e8c074ddb528d18f6f067cdea73c9d6283ee39dfc2cb</td>
|
|
<td>1d8d57d1d1308a603c3af8e13009dcf6d6894de6fe5bac612e5da28eb2a1f07484fda19d8aa5dc35d316012704f678f78061d25d0eb19a0139735310c608a0e4</td>
|
|
<td>2025-07-11 22:49:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da4d63e8b4184b115ac4613449ba37cbbf5c7008bc5e72a02f0e30409d164bfb</td>
|
|
<td>[68a170048fde46e0c9f34fea, 68a17149e8e8e52d3dfcb9e4, 68a2c188e888059cd5cdb356, 68a2c3c48cc751a9359e6e31, 68a4131f300a88183c09330d, 68a41545c70c05af9b9a4906, 68a564afc34030bc5e574490, 68a5660d299bfb77304b4e2d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-APP, GRMC-ECW-IF]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\tomcat8\bin\tomcat_stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T06:00:01Z, 2025-08-20T06:00:01Z]</td>
|
|
<td>[48a2fd9d7bcaeb0a981e418befc23462]</td>
|
|
<td>[d86428726f1783a0e94f371bfef026a7ae6ce283]</td>
|
|
<td>[20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec]</td>
|
|
<td>[2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>[192.168.3.239, 192.168.3.242]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>tomcat_stop.bat</td>
|
|
<td>D:\eClinicalWorks\tomcat8\bin\</td>
|
|
<td></td>
|
|
<td>16</td>
|
|
<td>48a2fd9d7bcaeb0a981e418befc23462</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 18:02:01 +0000 UTC</td>
|
|
<td>2021-07-04 18:02:01 +0000 UTC</td>
|
|
<td>d86428726f1783a0e94f371bfef026a7ae6ce283</td>
|
|
<td>20867ecc8c13fe4681e5accb335fb8b99956965389c9b213ddddc8f07dff0aaa1e369d6add04dd23b76637f8052e96ec</td>
|
|
<td>2419414669c5ed43a2b0c090a7d250c58f1fc421aadd32147cd742b1eb94187ce539474506e12dc9255d1450f8f347cda50af46747ee1dbbb7d8da4d5c939539</td>
|
|
<td>2025-08-09 06:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c073d514ca716ea106959b1452f4a594d5cea50e1c9637a93ecfe5ca0458e384</td>
|
|
<td>[68a62c61512061b0a03001e4, 68a62d65c4509fd4abd51f60]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[07794196e59ac753b490cc99593544fc]</td>
|
|
<td>[bc4d2672634d3510fd3e45de23fcef6382d85f72]</td>
|
|
<td>[4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2]</td>
|
|
<td>[9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>07794196e59ac753b490cc99593544fc</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>bc4d2672634d3510fd3e45de23fcef6382d85f72</td>
|
|
<td>4401508fd71820cb1cb1f0f7bc35add050d66aa4f03c50e7c392309bac6a87fb2a6d84d6df78f508aefcf6810d94d8d2</td>
|
|
<td>9e0e3c42333ec47aa55c4c7c5536d8a8eff37b04b71436af82e7d713b999084b85692dbf169cc5dc9fd24991b6debf2702ba67f8936a7c11965c2f37ec7ec889</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bbf4e828f15edae7e0009db13f67000492433690ad2245c3837b991feb89979b</td>
|
|
<td>[68a289dc0e6a21d30c5fa31e, 68a29c0c6ac1db84aa535408, 68a29c1bd1ae18ffaf5ca38c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\ns_vars.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:00Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z]</td>
|
|
<td>[8c8134e0f58626802c6448a24065cd29]</td>
|
|
<td>[5568e8662a3001bdea1e8e7f7ab93cd0a49ece48]</td>
|
|
<td>[0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db]</td>
|
|
<td>[ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>ns_vars.bat</td>
|
|
<td>C:\Kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>621</td>
|
|
<td>8c8134e0f58626802c6448a24065cd29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-08 15:15:46 +0000 UTC</td>
|
|
<td>2022-02-08 15:16:06 +0000 UTC</td>
|
|
<td>5568e8662a3001bdea1e8e7f7ab93cd0a49ece48</td>
|
|
<td>0d6346d72e441c0ce9901d983449bafabe677cf7702950f1a5bef2cc482aa0d09aae6b595ae3ead34839aed88fb256db</td>
|
|
<td>ac5e91fe8275c517dbaf2fe3661f1f9fc35ea47c9e3eae1d8e0fadbad335245d00b2044b968dc6898c2721c24031eaa4699f039f73cd9d8215aeb35d90a66ede</td>
|
|
<td>2025-08-09 02:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc6276343bf45f469e33be988e0016326417e07d89f1d0ef20f90f18bb171119</td>
|
|
<td>[68a62c390de66b6bd84ed636, 68a62cb1297e2a61afff0f78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[8106ee1d0eca9bb361f0420e501667ac]</td>
|
|
<td>[a6030b69ab1c721f47a9d05125a374521a644475]</td>
|
|
<td>[2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0]</td>
|
|
<td>[baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>8106ee1d0eca9bb361f0420e501667ac</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>a6030b69ab1c721f47a9d05125a374521a644475</td>
|
|
<td>2a2f7c5a98b9d5e0a6cb2b69cd9973fd90d9d4ec10c1f8706f9adcc51f785121f698cb00dc89539abda9c6377b9f98b0</td>
|
|
<td>baf160d8c846332f2690f86be61059c14523c12feceedbe0a98c915dd4a21186f74b112b1cfb62ae09af470cc1bbb83c3493b38109c98f4ffbf6e82b4883a1ee</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddf671505404788521fda5c973af69107bc087d852d71c4b7c32aa3e196dfe48</td>
|
|
<td>[68a62c390de66b6bd84ed64d, 68a62cbbbad0c3891c05202e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[7c34e63ebc70dc9dc37dfca6d43e98cf]</td>
|
|
<td>[ae7c13b1bba6b8ea57c53b0163dca8140cd2110a]</td>
|
|
<td>[d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb]</td>
|
|
<td>[27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>7c34e63ebc70dc9dc37dfca6d43e98cf</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>ae7c13b1bba6b8ea57c53b0163dca8140cd2110a</td>
|
|
<td>d8b31e4dccaf279d37a34fe7b3612c9354dae4eb7697ef350555dd12570b49610a09f7d6637ab784c72e785a0ece1dbb</td>
|
|
<td>27f2a745c4ca3e74f5c6b6e5444e2a894952099d1841ce1b5fd51b3402ace3632ae663db58ee2dfb54975fd32b63fab360f07432385f14aed9017db246153f54</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eca61854f8025db6e42a44a39206869612d62eb8f71f3e479fd019118a700859</td>
|
|
<td>[68a62c2f20141caa2973b296, 68a62cb1297e2a61afff0f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:26Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[5a10414070f606d7d4713d640f2d06f2]</td>
|
|
<td>[a7d305197c8b3c311aa1b36e67c3332e132f267d]</td>
|
|
<td>[f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b]</td>
|
|
<td>[b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>5a10414070f606d7d4713d640f2d06f2</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>a7d305197c8b3c311aa1b36e67c3332e132f267d</td>
|
|
<td>f9ee3a3d783f4a50ae914795e6ec485f8103884df42aac69f19bb7f6904604deaa068372deebfd53b6fbd19b99ffb08b</td>
|
|
<td>b4f1074f9188ca116b387afeddf922312c8017ae45b3db3717accd4c904cb9ed8cc660cd9ec4283b0bfbe616304e772cb86a9c77c570ff614b753e938b4d5458</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ace6da9bf8d445dc8ee37e2c53ba887f4240eac639c26f1f636181978105dce7</td>
|
|
<td>[68a2933c9ec71f04ddbda157, 68a293873b7ed38a0e67d317]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\jboss\bin\jboss-cli.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-18T02:40:09Z, 2025-08-18T02:40:10Z]</td>
|
|
<td>[1f936af4f88c0e516f5e9bdc04702262]</td>
|
|
<td>[4e085411a943887521afa6b3478c4765c53ee977]</td>
|
|
<td>[75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4]</td>
|
|
<td>[a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>jboss-cli.bat</td>
|
|
<td>E:\kronos\jboss\bin\</td>
|
|
<td></td>
|
|
<td>2879</td>
|
|
<td>1f936af4f88c0e516f5e9bdc04702262</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-12-16 21:22:13 +0000 UTC</td>
|
|
<td>2017-12-17 03:33:40 +0000 UTC</td>
|
|
<td>4e085411a943887521afa6b3478c4765c53ee977</td>
|
|
<td>75cbf99e20a76da87ba7ef1a2f21323d168a2955114f3984f703b5835a379e68ff52f41d1c82d343042c46cf7b1eacd4</td>
|
|
<td>a4e961db37a5b92b40f1172f1d6dccd3103725ccd28cf8d9e94d1b34487705e49d5a1d998feee9dea3021797705e2b23ee1982a22bf40dbaf2f4cbb0a61e22c4</td>
|
|
<td>2025-07-22 23:34:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b09d4426042b1b0b92920640077a0cb0437448dbd4e2ad6362a5db8c19a48396</td>
|
|
<td>[68a62c390de66b6bd84ed63f, 68a62cb1297e2a61afff0f81]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:38Z]</td>
|
|
<td>[0a479cfa691848f8093f23dee318a0f8]</td>
|
|
<td>[2452e732580e910c62edc42cb7e7f5664b7af275]</td>
|
|
<td>[304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54]</td>
|
|
<td>[1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>0a479cfa691848f8093f23dee318a0f8</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2452e732580e910c62edc42cb7e7f5664b7af275</td>
|
|
<td>304dfea41a042e85965f83e570ab0a4f790604246975daea77cc54e03834ce095ee21f73b135564601c4f70d6d627f54</td>
|
|
<td>1288b757f9cc94787425e31bd547adb2204b285d5f3441527b7e8b5447cf92b05d23387e437a88383ae35ac0f06a541e9dfbc36a33ee6dcb3598ce879be6f94d</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>af94476044666c91a75deaaad5adf85364fab6e767c1ea41617a86554b4cc15a</td>
|
|
<td>[68a62c254d354bf933e4d34f, 68a62ca798fdd4aa74a31738]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:17Z, 2025-08-20T20:14:24Z]</td>
|
|
<td>[c50b3e7c14d2f045bab6117722fee54a]</td>
|
|
<td>[efc6caa5b6bbfe187aee2f22d76872cc63922546]</td>
|
|
<td>[539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286]</td>
|
|
<td>[b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>c50b3e7c14d2f045bab6117722fee54a</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>efc6caa5b6bbfe187aee2f22d76872cc63922546</td>
|
|
<td>539563e8e6f45e7ac62c20fccf995531e0d899923b91151d379e0725b08f5b8835dc90cdc0bd33e9d54219f3e197d286</td>
|
|
<td>b36f7361a832b351049526a4c3d87a1c4a10ccd814997956a35c950eb941b431c7ae95d7280c4fa112bd6d5981ae7c6c48a36236ba4142dbf6dd41eba1cf0e0e</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b40599107c267ccb76709238ef7f34abe28628eeeb22e17c12786b0c7d3477c0</td>
|
|
<td>[68a62c57d96ab29dcabe19af, 68a62d65c4509fd4abd51f5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[6a642a74192c2a589bdae7882625b4a3]</td>
|
|
<td>[0fd309336186c6eca3035fc53fe67640e0ff7dc2]</td>
|
|
<td>[0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712]</td>
|
|
<td>[894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>6a642a74192c2a589bdae7882625b4a3</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>0fd309336186c6eca3035fc53fe67640e0ff7dc2</td>
|
|
<td>0d550dbf3b817cb688d9a8a8da91c467184330bf565e076a90b0118618d5d6991157379ee0b371038a866c6fd9d7c712</td>
|
|
<td>894ff451675140ff3a45af63dad948574c8740c9fda5427aee232982847c522c4be79fde53895f613508f5585cfa47eb4f05a5bceee12b2b954338fa53bce750</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a469e94319ca4a5068eba7c584bb648cef964b39247eafbf36274c2739b53bf8</td>
|
|
<td>[68a62c57d96ab29dcabe19aa, 68a62d5b4fa1f463a5481cd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Dashboard.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[40c09d5c6e3c3ee86e34db4babde939a]</td>
|
|
<td>[4fdf90e25d0025f59348b401f06b743be653f3cb]</td>
|
|
<td>[c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b]</td>
|
|
<td>[0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Dashboard.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Dashboard</td>
|
|
<td>34304</td>
|
|
<td>40c09d5c6e3c3ee86e34db4babde939a</td>
|
|
<td>FormFast.Common.Dashboard</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:38 +0000 UTC</td>
|
|
<td>4fdf90e25d0025f59348b401f06b743be653f3cb</td>
|
|
<td>c8a25f46417b81cb62ec36b31049b67d32ad5bc14d163c2ef0381c2352920931e94c9ac3a1de6c0c6b080af23e0bbe1b</td>
|
|
<td>0e8bbaf7874e98a23b67f70e2d201c6347ba3e4c86254d703226b00ef41444a18dbbb0b4e6ef67a3658fdc08e8d013a4c0593908bd4f96939ac7354146645a64</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad1da4f93aab239ace410b322f5ed5cfe1f5879da4d19e7ca297e24305382450</td>
|
|
<td>[68a62c390de66b6bd84ed644, 68a62cbbbad0c3891c052027]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z]</td>
|
|
<td>[c1b3cbbd457177190f1876cae07fcbbe]</td>
|
|
<td>[96715a446043a6f266410e8131710ac45574e701]</td>
|
|
<td>[23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf]</td>
|
|
<td>[11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>c1b3cbbd457177190f1876cae07fcbbe</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>96715a446043a6f266410e8131710ac45574e701</td>
|
|
<td>23a633eea534f02cd537f9d3bb6692f4d77f03715af4d70d54c42a6c85ce416bd66d58dff86b162a3467ab58174fb7bf</td>
|
|
<td>11c286d400fbc8e7bf0f1531b1ad443092d28d7caf048a5716b3b126e1737b0bca66258de0bfc2c65063e60a558035890c322039f4b2ec9495ca11787883c2fe</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a9c2e0aac424785820d2e99836bdc15a30fd6116221f24a538988654f8e50f2a</td>
|
|
<td>[68a62c2f20141caa2973b29f, 68a62cb1297e2a61afff0f70]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[3a5259b82d4d5545ff8ce39e8340ee51]</td>
|
|
<td>[ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7]</td>
|
|
<td>[f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771]</td>
|
|
<td>[fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>3a5259b82d4d5545ff8ce39e8340ee51</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:52 +0000 UTC</td>
|
|
<td>ebd6ebd7bb7c4204223b679c2e25e60dbddc77a7</td>
|
|
<td>f77b0b66707f3beb92ca42811fca76e288c5c7e081475aaca85ed09fb6e2d01040dcb7659433cd4122f903491cd61771</td>
|
|
<td>fed0032f4c9f7bcca7ed91fc86bf70fd61d27c7468d9f2741034e9ab123e7f2027bd7a850d7542079999d87d40f5382eaceceba160a947c515c680ad8335c33e</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a7e24a20b68c9fcce3cd15293e17c137fc6b4dd216ed7a769aee2ba388b36662</td>
|
|
<td>[68a62c2f20141caa2973b29d, 68a62c4fe0cb7d1d0b6ef994, 68a62cb1297e2a61afff0f6d, 68a62dbdd3f22bde37b5f4f0, 68a62dbdd3f22bde37b5f4f9, 68a62ea8e82920a204bd4be8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.XmlSerializers.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[a8d6363363dc6e25c38bae4ed0a8bdf0]</td>
|
|
<td>[468c211b8cea0c4282358993a6f84072ca3d46d4]</td>
|
|
<td>[4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a]</td>
|
|
<td>[ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.SharePoint.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>20992</td>
|
|
<td>a8d6363363dc6e25c38bae4ed0a8bdf0</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>468c211b8cea0c4282358993a6f84072ca3d46d4</td>
|
|
<td>4a0fa1155672e3732de3ea9d556e9fc26eb3d615e8b0d7d83aa43e42292652460ff5ec6c63cf2aea30b744affdd1798a</td>
|
|
<td>ac1211f0b928b96e19f81e77fc94086de481d27b1dd6879d965ae201f93a8cf853c395caab9d1bffe2fe0576d8bc8786f959268463c226eee9b19fa200fcd3ae</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b8eeb58ae7a747a0afb91393f6aa4da945d3909322a45d047001eac42ccfe0b</td>
|
|
<td>[68a62c390de66b6bd84ed643, 68a62cbbbad0c3891c052026]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.ECM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:32Z, 2025-08-20T20:14:42Z]</td>
|
|
<td>[3263475c89ab7ec1df01983fb99cc8ad]</td>
|
|
<td>[5348eb8c358aa68c767096de74065ae4e64221ab]</td>
|
|
<td>[a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2]</td>
|
|
<td>[4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>499712</td>
|
|
<td>3263475c89ab7ec1df01983fb99cc8ad</td>
|
|
<td>FormFast.ECM</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>5348eb8c358aa68c767096de74065ae4e64221ab</td>
|
|
<td>a697c889e63a745b9d79ec51ac27bd0556d37845e0a482e6ac72075cb0b1d48445acd6191014363cbb44f341835b6bd2</td>
|
|
<td>4376ae4b6f797f928e50b89b2e29ceeca17c8f1efee7a82c753d9120ce3bea86c2a8fafa4f0648c8e34b9897deae56368f0022884ecc0d66c046e141e0ba1fc0</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8da0a73d9bfc04ac9994386d8e5abaeb6e79fadf60f8a1be36557bc03c2a3dbd</td>
|
|
<td>[68a62c390de66b6bd84ed647, 68a62cbbbad0c3891c052028]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Oracle.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z]</td>
|
|
<td>[1e7d19b84f70194728281751f39aab86]</td>
|
|
<td>[815de6c698bc8f7a4a54fe69256d4cbb98b39295]</td>
|
|
<td>[0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16]</td>
|
|
<td>[bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Oracle.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>7680</td>
|
|
<td>1e7d19b84f70194728281751f39aab86</td>
|
|
<td>FormFast.Common.Oracle</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>815de6c698bc8f7a4a54fe69256d4cbb98b39295</td>
|
|
<td>0aef3d7b4adbc30cdcf0040268856c12144f4fb5ad85f973b3b25847206bf82762b4d8688af2843f6bd90356a7fc4a16</td>
|
|
<td>bee5093778e98bc29dff40f480aaa2c3d66fd07e1f07f66f105da012c7fb949d33ce2ad03b5bcff275091ddb8bc38f4e5ef138e1167c7bf4381ed123fb8a68e3</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f17acea63db67d665c4b9619cfd2176782e029c7bf9fd81ddf8743066878009</td>
|
|
<td>[68a62c61512061b0a03001e8, 68a62d65c4509fd4abd51f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.WPFImaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[2af245a0a0a6739073b1c35f9c086273]</td>
|
|
<td>[f27e97961d0910317696386cff2cd3af5756f953]</td>
|
|
<td>[c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5]</td>
|
|
<td>[24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.WPFImaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>23040</td>
|
|
<td>2af245a0a0a6739073b1c35f9c086273</td>
|
|
<td>FormFast.Utility.WPFImaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>f27e97961d0910317696386cff2cd3af5756f953</td>
|
|
<td>c98cb9918fa53658fd13ce4b43d5d6a2b75bf1fff6590387201edf13b36056c5c21300a0fb3062f13af1059df0226ff5</td>
|
|
<td>24741d2e0813d9c7ae5e627dbdb9bd1035b22eaf8279b6f1ec5233bde3f46ba0069caa94852052b3cd74fad3c12838da8ea97676bc3ec4d5a0f4d46878d225e1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9024b6f1218d19b2a6595dc3b8dc69cacd733a0c47f2a1007e7b02ca98351e8b</td>
|
|
<td>[68a62c254d354bf933e4d351, 68a62ca798fdd4aa74a3173a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:18Z, 2025-08-20T20:14:25Z]</td>
|
|
<td>[234e5d848debfd7b2b962ddc610b9d62]</td>
|
|
<td>[8bce91910db4e551f1aa9dc7e83d61440b721a6b]</td>
|
|
<td>[14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96]</td>
|
|
<td>[d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>234e5d848debfd7b2b962ddc610b9d62</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>8bce91910db4e551f1aa9dc7e83d61440b721a6b</td>
|
|
<td>14f7f3765a7f90afa18f8079e18b8b609c20b5f034dc6475b62b4495d97b67d84e68224a899140ae4febd8cb757a0e96</td>
|
|
<td>d4eaec5bd3a3bcf92f6b8351f8740ec3f4ea608b5432a73c4c8bec200bb190e70c328ed9ef611d0399844463634841dd1f00700730d12bcce6b04acf8a664766</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a1238aeac72ed3f322173557f5170fad5f79de5799f743c96a1e8b87fde11473</td>
|
|
<td>[68a62c2f20141caa2973b2a1, 68a62cb1297e2a61afff0f72]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[3135e62c687f74b43f94c66b49445cb7]</td>
|
|
<td>[e38bf716c7802960ad937b1551580b2f1f788ea6]</td>
|
|
<td>[eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24]</td>
|
|
<td>[204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>3135e62c687f74b43f94c66b49445cb7</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>e38bf716c7802960ad937b1551580b2f1f788ea6</td>
|
|
<td>eb5e5dad67499735a4608348dc0a50270027e95473026adc3a89db15b16a5bdf372f9d63164c4a4a5f0934ad68270d24</td>
|
|
<td>204412e5437642c3ff6cee2b4c466e2145a7578e83cd99c0bbe75cf59570dfe80fac7fa1fa2c9f27e5c9e2ee2f28229c128acea5c51cfd78b404a6dba2ac0f83</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4259a8145dbe0502a700f2a97d2e5a52f0056025d172e71add9d97fb0c2d443</td>
|
|
<td>[68a62c390de66b6bd84ed655, 68a62cbbbad0c3891c052036]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:38Z, 2025-08-20T20:14:47Z]</td>
|
|
<td>[5a89d1ae29d44aafd5e0a06cb65f5568]</td>
|
|
<td>[139d9e403eb754b10b9952f92710977087d60141]</td>
|
|
<td>[be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a]</td>
|
|
<td>[d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>5a89d1ae29d44aafd5e0a06cb65f5568</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>139d9e403eb754b10b9952f92710977087d60141</td>
|
|
<td>be20b83d9c2f2cda7ba3a2e99dfaec36c7df7019a7bc60b82820d9492c5c4d01d4d6f4d9455d57b6dfd472ccca431d0a</td>
|
|
<td>d025b05786a8939b812bff91b0eb5ca63fa0fa02f2b51fb625fdbe57a8930dd3ee3b8bf874f804af006e4508d45518c9295018a3cd4a472c2148457cfe830ea3</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e6bd78b294419e4fdf53637463eddfa92e91aebcb08308aab0d1825c8abb76b</td>
|
|
<td>[68a62dbdd3f22bde37b5f4fa, 68a62ea8e82920a204bd4be9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-NFP1, u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:17:32Z, 2025-08-20T20:13:10Z]</td>
|
|
<td>[54d640613f50c4c6d4dfac35bcd2e3dc]</td>
|
|
<td>[57a19917f194791d4039d9254d6f0cbda27b7b16]</td>
|
|
<td>[dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1]</td>
|
|
<td>[0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a]</td>
|
|
<td>[172.17.253.162, 172.25.17.195]</td>
|
|
<td>[172.17.253.162, 172.25.17.195]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\Program Files (x86)\FormFast\PrintManagerClient\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>54d640613f50c4c6d4dfac35bcd2e3dc</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24000</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 17:20:02 +0000 UTC</td>
|
|
<td>2023-06-20 17:20:02 +0000 UTC</td>
|
|
<td>57a19917f194791d4039d9254d6f0cbda27b7b16</td>
|
|
<td>dc6f6d52d84c8770a297e6ab2813c40337e604a29e240308b25a348153f1fc16815920df84bbee9bb9e8c9e5777dc2d1</td>
|
|
<td>0be917de99a95218521aae66be630bc09798fdc5e1b179ec7f5c211fab735812454426d4346178dba4b85aee4981d36f353be0cc714945f7a1b60b804ca21b6a</td>
|
|
<td>2025-05-01 17:27:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>098d2b84069e297d67d62296d293f624529fcbfb81d2f483841cffaaf856ee85</td>
|
|
<td>[68a17e784c66390ad0dbbcc0, 68a17f4292a8fa5a3dd2d46f, 68a2cffe3648098ea02a6aec, 68a2d0c6e967c9fedcd45bc3, 68a4226ce3b71f72263710e5, 68a42295ccb2668fe949e62f, 68a5734d56974fb8ac6f8dea, 68a574064a957a7c650fc381]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a, u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\bin\OPCCleanup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:57:01Z, 2025-08-17T06:57:00Z, 2025-08-18T06:57:01Z, 2025-08-18T06:57:00Z, 2025-08-19T06:57:00Z, 2025-08-19T06:57:01Z, 2025-08-20T06:57:00Z]</td>
|
|
<td>[70a3df06b9af27c0169a5f2e57fe0910]</td>
|
|
<td>[3fb2825a5131ce29da291a67d1bdda2e095d4bf5]</td>
|
|
<td>[345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a]</td>
|
|
<td>[27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf]</td>
|
|
<td>[172.17.196.43, 172.25.196.36]</td>
|
|
<td>[172.17.196.43, 172.25.196.36]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>OPCCleanup.bat</td>
|
|
<td>C:\icm\bin\</td>
|
|
<td></td>
|
|
<td>309</td>
|
|
<td>70a3df06b9af27c0169a5f2e57fe0910</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-19 12:48:26 +0000 UTC</td>
|
|
<td>2021-08-18 16:13:21 +0000 UTC</td>
|
|
<td>3fb2825a5131ce29da291a67d1bdda2e095d4bf5</td>
|
|
<td>345c71a1ade2125c9cd99c79552a15d742b7ad1e2de2d17ec5f7d0e35f04c9b97a4558c36682475c23912d766d9da84a</td>
|
|
<td>27c9e58b2010218a0ca2d6d3cd46fb0428d1004e1268df241f565e080aab3d33dbc86c2a66a2f688c0f101a6a2cf1d6aa81abfd5dcb5d17c9318f203777253bf</td>
|
|
<td>2025-08-09 06:57:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7558691333b70391fb91d26b9260507de1e56c472fcc9e2c404ce60cda87ebc5</td>
|
|
<td>[68a62c390de66b6bd84ed648, 68a62cbbbad0c3891c052029]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:33Z, 2025-08-20T20:14:43Z]</td>
|
|
<td>[b0f7ae9b56111a45892fb5d4876413a7]</td>
|
|
<td>[499944bef9b82dfef97ae702d7d6618b9f2ffe97]</td>
|
|
<td>[ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6]</td>
|
|
<td>[995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>b0f7ae9b56111a45892fb5d4876413a7</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>499944bef9b82dfef97ae702d7d6618b9f2ffe97</td>
|
|
<td>ab17ee6e74428e13805b9941cc3160d28d9aedfc4c9e10e6f8cef4cf204473f2c81a0e60e3f9a0d52fe55810a7c142e6</td>
|
|
<td>995e9970ebd66cf4df8b9bda56d25e9678b97023667f4f4bfce45f4dc2e26a90bdb3cde5fd00bc2fa421c891f52cbe08b1ac26b2a136917a199183324805720e</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>77fe0f26dccc5c24f74c01715f8ee961dcbf89d097ba3e6d98a8affeea40f8c6</td>
|
|
<td>[68a62c2f20141caa2973b2a3, 68a62cb1297e2a61afff0f74]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[c8d59a3d0d900b0a8897e19beb7aa313]</td>
|
|
<td>[6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a]</td>
|
|
<td>[be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119]</td>
|
|
<td>[d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>c8d59a3d0d900b0a8897e19beb7aa313</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>6f89aadf79b60fb8f7f7f8714d2a13aa2a7d278a</td>
|
|
<td>be142366a4660b68794aa87434c79847f653f42fa669afcb19e3f0bcec30a63d495eb89d2c121e50559c3f878d470119</td>
|
|
<td>d6cce74c2d2491912940d1beabd616499f406b158d5299e0c8587133072197c7b79407c64dc3431e29c314c3f8195c1a442e1e77b00050e0a1581cf7b0c283b5</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7905b1830cbf4890381a3415372e109eeb1ece7c02936a220ac1f166e74b0ed8</td>
|
|
<td>[68a2933c9ec71f04ddbda158, 68a293873b7ed38a0e67d318]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\jboss\bin\standalone.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Kronos\wfc\bin\jbossService.exe]</td>
|
|
<td>[2025-08-18T02:41:45Z, 2025-08-18T02:41:33Z]</td>
|
|
<td>[48b73b080adb3ce41b4947d5775eb4bc]</td>
|
|
<td>[e1ffc19ea0e7993d37c3119a49c1c0c068624284]</td>
|
|
<td>[155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401]</td>
|
|
<td>[7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>standalone.bat</td>
|
|
<td>E:\Kronos\jboss\bin\</td>
|
|
<td></td>
|
|
<td>9260</td>
|
|
<td>48b73b080adb3ce41b4947d5775eb4bc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-12-12 23:23:31 +0000 UTC</td>
|
|
<td>2017-12-17 03:33:40 +0000 UTC</td>
|
|
<td>e1ffc19ea0e7993d37c3119a49c1c0c068624284</td>
|
|
<td>155d464f3450e7e927a7542cc2d4af1975e50e6dde5e6198e7656829318a0a2c94ca437f7bd08c5b7520d9609c254401</td>
|
|
<td>7539719e3d9aa8086ff6a2b698da5bbcdd3dea2ef917a98e48804afe1de791ccda96075061d21789ef9d5884dff245feb276453c244ee65591eb907bfbb6e53a</td>
|
|
<td>2025-07-22 23:35:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7495b8a6f9abb329896bc4b33c9995705069703ff2930e80f09e449a87c57517</td>
|
|
<td>[68a62c2f20141caa2973b299, 68a62c4fe0cb7d1d0b6ef992, 68a62cb1297e2a61afff0f69, 68a62dbdd3f22bde37b5f4ee, 68a62dbdd3f22bde37b5f4f7, 68a62ea8e82920a204bd4be6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.Models.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Models.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:33Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[57df9c39430df2249924c520a3bd5795]</td>
|
|
<td>[0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec]</td>
|
|
<td>[5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367]</td>
|
|
<td>[39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Models.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.Models</td>
|
|
<td>15360</td>
|
|
<td>57df9c39430df2249924c520a3bd5795</td>
|
|
<td>FormFast.Common.Models</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>0d09f3b7c977cee4a81d52d585a9c49b2bc3c8ec</td>
|
|
<td>5eff19e99b9f2fe17f3a91b32c175e49712328550ad0b635931f77396b1ef15bb409520ef745b0514dd2a4cf6d9f2367</td>
|
|
<td>39ec0e9479b652073593be27e31805c6a394a9976a2555a9f011aa2ca6944aeefdcf648e84f9002d607565fb1d9ba53190906909ee203aa13a2d5e2ebc9c2f62</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>68e27e7a76de394402eb3d25ba0772f4b0192293f4d969fedfb793697583a122</td>
|
|
<td>[68a62c390de66b6bd84ed650, 68a62cbbbad0c3891c052031]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.ImageProcessor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[40e9672f5104713cd10b2d229a4711f4]</td>
|
|
<td>[102515d3b0a510b9a18bb4752d73022ec2b0b398]</td>
|
|
<td>[7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95]</td>
|
|
<td>[7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.ImageProcessor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility.ImageProcessor</td>
|
|
<td>11776</td>
|
|
<td>40e9672f5104713cd10b2d229a4711f4</td>
|
|
<td>FormFast.Utility.ImageProcessor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>102515d3b0a510b9a18bb4752d73022ec2b0b398</td>
|
|
<td>7735a280c4a284074545883e72dadcc334d84f6050347da18d4ba6ec0954c95c718442957a3503a2791db52799424e95</td>
|
|
<td>7aa971e04d5a82d2daf4956e905e880808fae57011dbc29aebef87dcbaad9f21d6a5ab943d70b86bde5f0a855d09091d82271a2f9619b57d232384eb6499e12e</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a709cd50fa7d3826662bfd0b27b1b9f80f3a2a57092655c17e33238cc13e764</td>
|
|
<td>[68a178f000fcf6f09fa43ed5, 68a17d32b8e0917a96ab5184, 68a2ca7bf1b5d070157fa50b, 68a2cebeea2bec6dd453ddc7, 68a41c1ee32af9c7fb4f586e, 68a4205b652c2f8e7aac8984, 68a56dbbc331ff607b884d4c, 68a571f415ffa42bc82736b6]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[I-PANHS, U-PanHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:30:02Z, 2025-08-17T06:51:02Z, 2025-08-18T06:30:02Z, 2025-08-18T06:51:03Z, 2025-08-19T06:30:03Z, 2025-08-19T06:51:02Z, 2025-08-20T06:30:03Z, 2025-08-20T06:51:02Z]</td>
|
|
<td>[93fa6789028ba05bc8aacc943b54eddd]</td>
|
|
<td>[f17fa2522392628272a587caf103c1fd0c7732f8]</td>
|
|
<td>[e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea]</td>
|
|
<td>[609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c]</td>
|
|
<td>[172.17.252.76, 172.25.18.242]</td>
|
|
<td>[172.17.252.76, 172.25.18.242]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1831</td>
|
|
<td>93fa6789028ba05bc8aacc943b54eddd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-11-06 12:14:18 +0000 UTC</td>
|
|
<td>2020-04-17 12:37:22 +0000 UTC</td>
|
|
<td>f17fa2522392628272a587caf103c1fd0c7732f8</td>
|
|
<td>e20faa9c8905b71bd3815b77b26d8641d059dc4df8a428a674c6fa359b68bcc05fcdaa16ca97914547a1da4009ad9cea</td>
|
|
<td>609508f4403b5b803d8a6d38b4bafeb053c4107fe8246ff622a2aa9a32e70adc1c99e9e5fbcd407a41a70e19e6b586e7efefa61f75bbe05efdf1106e3fe07d8c</td>
|
|
<td>2025-08-09 06:30:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6b6ad431214d0c4ef21f0b10cd6acde62b800a16dc3ed22310b742d149523e71</td>
|
|
<td>[68a62c390de66b6bd84ed64a, 68a62cbbbad0c3891c05202b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common_Rest.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[c604a070e63e2e6585164307edf7dbf2]</td>
|
|
<td>[45233bb7eb48124f6c3606b6a13925954b985b33]</td>
|
|
<td>[2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1]</td>
|
|
<td>[b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common_Rest.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common_Rest</td>
|
|
<td>86016</td>
|
|
<td>c604a070e63e2e6585164307edf7dbf2</td>
|
|
<td>FormFast.Common_Rest</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:46 +0000 UTC</td>
|
|
<td>45233bb7eb48124f6c3606b6a13925954b985b33</td>
|
|
<td>2b4e1feddd5aea2a15515c13c1a9f377ab63dbeed40e6f214b05fc9511b25f2c33ee8c4b8f4661f2f2f7b3b3488e7de1</td>
|
|
<td>b3aa76b3631b3fdd35aece90415669fed63816db0d158ff46dd6bd9b638ff46178f472cad9d64d0edb7ec33c81db5d5c8a351e9a88cb1add6c6a7f28a1917b60</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>618e4a759878701f6e2fa437073f84a4928b28e2f5ad2cdd177d582b9a4d7809</td>
|
|
<td>[68a62c390de66b6bd84ed649, 68a62cbbbad0c3891c05202a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.WebControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[cd453ae2d81abb01c3672138e3c684b9]</td>
|
|
<td>[fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7]</td>
|
|
<td>[7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8]</td>
|
|
<td>[3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebControls.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>819712</td>
|
|
<td>cd453ae2d81abb01c3672138e3c684b9</td>
|
|
<td>FormFast.Common.WebControls</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>fd22567c7cf622c6ba6a8189a20e9f4f4cb0c9e7</td>
|
|
<td>7bec860001f0802877d3e3959e9de05dc70586271db4c2db997eda86fb4a000433b449718e28bbf88730a24bfde334a8</td>
|
|
<td>3ab74e711fdb78b66b302ffd45e847121d9f6dfc25570c7ebb983cefba8ef3c8889241c59a99798033efd163a4157de79a787c558284ecd8990697153cde888d</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8aa6f2c4876469b14c284845015127a526963e464fc909961c4d57eb565a978b</td>
|
|
<td>[68a62c2f20141caa2973b2a5, 68a62cb1297e2a61afff0f76]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Services.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[27e1dbc8bc6cca4fc36c2012705294a2]</td>
|
|
<td>[6514a2bbf32e5e805a3355ad21d367a98bdb6a49]</td>
|
|
<td>[88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac]</td>
|
|
<td>[9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Services.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Services</td>
|
|
<td>47104</td>
|
|
<td>27e1dbc8bc6cca4fc36c2012705294a2</td>
|
|
<td>FormFast.Services</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:58 +0000 UTC</td>
|
|
<td>6514a2bbf32e5e805a3355ad21d367a98bdb6a49</td>
|
|
<td>88b056fb70e1cd24470baa51a2151c406157900b84079b8019dbcd22d5d332471c24b5963c212d852c2c6b115d4153ac</td>
|
|
<td>9ab06e8c4d59837f86560deb695cd9471b6e74c8d000371f07abe4b7ab1cf767768866c92dd3cb410cf8cf5a0932c646bdc0fb6f1295975624bf1058ad609ae4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85cedd9e1d502085b0bfef0698aef44d947faa8e389593cd33626a696d6f748c</td>
|
|
<td>[68a62c390de66b6bd84ed652, 68a62cbbbad0c3891c052033]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:36Z, 2025-08-20T20:14:46Z]</td>
|
|
<td>[42fa62608696fa72558ae86415e6f201]</td>
|
|
<td>[30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9]</td>
|
|
<td>[21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29]</td>
|
|
<td>[d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>42fa62608696fa72558ae86415e6f201</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>30008fdfb59a6cfd03681ee31e63cbc5d0e4c3f9</td>
|
|
<td>21b064fcfae6e07d0df78a56ca43756d0b43932038bc1652f41751e723e97de68eeca90ebe4daad03bd8bf21db39bd29</td>
|
|
<td>d23891d0b6c3d5fa8f68cfafb8218276e0225560c8f6290bfa55cb0d94bba4d4341ad03d3a2b98a66bbd14730fc15d8960ba4b4ec88ad8e3989db22a280e07a4</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87379fa2a359ec5d48330bd8b11792b871c516654cb9531bf55cf9d7f986d24d</td>
|
|
<td>[68a62c390de66b6bd84ed64c, 68a62cbbbad0c3891c05202d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.WebFormImprint.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[7d73e6851a1c8517ee4350a6202f6543]</td>
|
|
<td>[25be8b71b22fcc8f23dabda16a5ef5a483554aed]</td>
|
|
<td>[7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3]</td>
|
|
<td>[8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>18944</td>
|
|
<td>7d73e6851a1c8517ee4350a6202f6543</td>
|
|
<td>FormFast.FastPrint.WebFormImprint.Core</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>25be8b71b22fcc8f23dabda16a5ef5a483554aed</td>
|
|
<td>7cedb8f82e1a9205699f90403b0573a51cc2c57b0c62e3f116de7e9764f67eac7c52898ca34fa7d6f08e893fd9fb6de3</td>
|
|
<td>8d9ee27c7d561810a90626561b0312fe11f0922a291707acb31e17154f86f6bac08ed78a240bc4c92f4d64c76a7b7ab31fac3cdfb37d010a4c5051b394232bb7</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6054d028e63b2ba38b02379beaebdd1bbf8ee123f706a9c36caeb6a2de43b333</td>
|
|
<td>[68a62c390de66b6bd84ed64b, 68a62cbbbad0c3891c05202c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:34Z, 2025-08-20T20:14:44Z]</td>
|
|
<td>[8b3adcbf2a0f7a606fce9c03b8c9732a]</td>
|
|
<td>[b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8]</td>
|
|
<td>[f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff]</td>
|
|
<td>[1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>8b3adcbf2a0f7a606fce9c03b8c9732a</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24231</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:44 +0000 UTC</td>
|
|
<td>b63d4ba2bc745fce3e74ba1424c0c2b013ea3ed8</td>
|
|
<td>f23fd1af3f321b51c4e653023c0828e26d8d9f8b040a592f24ec0dd40bc46b45b3f89a6d76b88c6c894e5ab85d4db2ff</td>
|
|
<td>1387aa543e1f71749eaf7478ec904261e81434ee82abda1cc04b0e4f3bb949fd63ce6b2f84b9664e6e8e03b2cf8b972512d9d28c2e945b619675eab3b0b933c8</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5ff0922ec426c97cdafae576ce456d5db7ca1113c50c94aba499afeff0a52daa</td>
|
|
<td>[68a162ca5b8354c34e8aa922, 68a172395f4b12ae90c10d00, 68a2b4553b82e453c561f8da, 68a2c2ce81a308ec5f3f61a6, 68a40605126890019f479267, 68a41470bba721704ee37de4, 68a557a64e41d80738b8079c, 68a5660d5c30e7a0a3efd4cf]</td>
|
|
<td>[2]</td>
|
|
<td>[ldapuser]</td>
|
|
<td>[I-PANWVUHS, U-PanWVUHS]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\NoIE.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-17T06:00:01Z, 2025-08-18T05:00:01Z, 2025-08-18T06:00:01Z, 2025-08-19T05:00:02Z, 2025-08-19T06:00:02Z, 2025-08-20T05:00:01Z, 2025-08-20T06:00:02Z]</td>
|
|
<td>[1777d70e7e9b66f797bc70bad2f58a4e]</td>
|
|
<td>[29e5acaff6e761a8bb35434d5be41b4655ffd81c]</td>
|
|
<td>[96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a]</td>
|
|
<td>[f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255]</td>
|
|
<td>[172.17.252.77, 172.25.18.244]</td>
|
|
<td>[172.17.252.77, 172.25.18.244]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>NoIE.bat</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>186</td>
|
|
<td>1777d70e7e9b66f797bc70bad2f58a4e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-18 01:52:16 +0000 UTC</td>
|
|
<td>2015-10-08 19:24:30 +0000 UTC</td>
|
|
<td>29e5acaff6e761a8bb35434d5be41b4655ffd81c</td>
|
|
<td>96aeb3a77d16cf09f8975d6f22d14b2f4101284242cf5ba45fe94f5bbfe0f3bb08a034325f367e99f1959acbc916f93a</td>
|
|
<td>f99d94200b935d772fe0b9982a5c9b3116ec3669078c6d5dd741e689269c37ac47ec9d4a5f545f11e1a7e98af537833bd53d589e806a5ac1751bcee1ed26b255</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f68908d42bc24d1f7a4917064be3dfed6ec4b072ab253e556a448d413428e66</td>
|
|
<td>[68a62c2f20141caa2973b29c, 68a62c4fe0cb7d1d0b6ef993, 68a62cb1297e2a61afff0f6c, 68a62dbdd3f22bde37b5f4ef, 68a62dbdd3f22bde37b5f4f8, 68a62ea8e82920a204bd4be7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Common.SharePoint.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.SharePoint.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:12:34Z, 2025-08-20T20:14:34Z, 2025-08-20T20:14:43Z, 2025-08-20T20:17:31Z, 2025-08-20T20:13:09Z]</td>
|
|
<td>[c3e5479f47487756de025353487272a1]</td>
|
|
<td>[acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e]</td>
|
|
<td>[7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a]</td>
|
|
<td>[8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.SharePoint.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.SharePoint</td>
|
|
<td>16384</td>
|
|
<td>c3e5479f47487756de025353487272a1</td>
|
|
<td>FormFast.Common.SharePoint</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>2023-06-20 18:19:58 +0000 UTC</td>
|
|
<td>acd24bf2b6f7f90789f0fca9c5a9ac365bc4b26e</td>
|
|
<td>7eed030bfc37fc78c8fac71a86dc0cdc48bff7e665e19a12a760f04ea709f217b748eca8cceb26a4429f73db3875015a</td>
|
|
<td>8b2bb4626b8cfdb79e2e5a59d13b597ea8b98811d2222eac7a416143626e997e69218c2c86ba28b4e32232322b2cda549624292464bc8a5ce918bb0a24790322</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e28827fcc1512a275ce68b1fb018b2ce93612d87ec4abe10ff1fec81f926c3f</td>
|
|
<td>[68a289dc0e6a21d30c5fa320, 68a29c0c6ac1db84aa535407, 68a29c1bd1ae18ffaf5ca38b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2, i-nkronoswork]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfire.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:01Z, 2025-08-18T03:20:35Z, 2025-08-18T03:20:47Z]</td>
|
|
<td>[ab64c8787040b08d683005966e018ee4]</td>
|
|
<td>[f9da413179bee525e399f586c1afe270a2de061b]</td>
|
|
<td>[6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd]</td>
|
|
<td>[8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>[172.25.16.7, 172.17.253.221]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>openfire.bat</td>
|
|
<td>C:\Kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>1163</td>
|
|
<td>ab64c8787040b08d683005966e018ee4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-08 15:15:46 +0000 UTC</td>
|
|
<td>2021-12-20 08:03:28 +0000 UTC</td>
|
|
<td>f9da413179bee525e399f586c1afe270a2de061b</td>
|
|
<td>6808c7e557445df5a834e8c1c84aaf2745f7b5835475dfab0ca92816058c9834620643be70f960ded467386b462b8cdd</td>
|
|
<td>8edd637bc86ba1927408e98af1666e2e05c5c799473b0ea84732af68328716b66b4f21bc5c3af2310241892cf4ed13b3038d9bf7f8b0881403b8b0c018e6f1d9</td>
|
|
<td>2025-08-09 02:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>490a7505dee3e81999a414fcce3d198b21bbd62ff60d35dfdf1d6618552fb20e</td>
|
|
<td>[68a62c61512061b0a03001e6, 68a62d65c4509fd4abd51f62]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.FFWFI.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[d1da2ba18a45195587ac85e4c452ca09]</td>
|
|
<td>[15b8ff50b85e3c93821ace49b827d283d81b0d51]</td>
|
|
<td>[bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77]</td>
|
|
<td>[3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td></td>
|
|
<td>289792</td>
|
|
<td>d1da2ba18a45195587ac85e4c452ca09</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>15b8ff50b85e3c93821ace49b827d283d81b0d51</td>
|
|
<td>bec20b10714ea4d6372d7eb44ad732c5e70f8fe6ecfe6d2737f4fa0660850d11d3a3f41a7d5cc619757d1e7e13841d77</td>
|
|
<td>3d3f473726f0eb03fd3320d59094686676def40e53cc7c549cd8376f684054b8a9d40d18b8456a7df1bc2e51605f7c99667746d8d2bdc98b72e767cd4cd36390</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>458ea525c7c23be64712ffb0c5e92f2f76912d0b22c9a3ce8abcbc4b798154c6</td>
|
|
<td>[68a62c2f20141caa2973b2a2, 68a62cb1297e2a61afff0f73]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FFWFI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[4585c873644131690c95ff47f4e97a26]</td>
|
|
<td>[2f6fc084641cf96435b0521abab90b4be05e9954]</td>
|
|
<td>[52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f]</td>
|
|
<td>[9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FFWFI.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>218112</td>
|
|
<td>4585c873644131690c95ff47f4e97a26</td>
|
|
<td>FormFast.FFWFI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:56 +0000 UTC</td>
|
|
<td>2f6fc084641cf96435b0521abab90b4be05e9954</td>
|
|
<td>52d2e9db1c071f992a4fc20c2a4b62fdecf94a9b8842c4ef537470fdef121ef185928cae09cee781be1c09abe726f20f</td>
|
|
<td>9b8f5bc29151005966eb678e94ff73a1c294b61e2ef7c9f33b1780069e7b667331a37904d75d55069c0318e4a333c4617a4fe120ffa64bb442bd6805a85606a4</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5aa21712477223afaa29abd43e991240704025ec113d55483a1b6b9332a4bc29</td>
|
|
<td>[68a62c2f20141caa2973b29e, 68a62cb1297e2a61afff0f6f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.WebApis.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:28Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[f3e2b470701f45a53147e0a6d0da5b28]</td>
|
|
<td>[097e220f5d49b3be195408c35eaff96c131ea7db]</td>
|
|
<td>[33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8]</td>
|
|
<td>[a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.WebApis.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Common.WebApis</td>
|
|
<td>101376</td>
|
|
<td>f3e2b470701f45a53147e0a6d0da5b28</td>
|
|
<td>FormFast.Common.WebApis</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:14 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:14 +0000 UTC</td>
|
|
<td>097e220f5d49b3be195408c35eaff96c131ea7db</td>
|
|
<td>33c5ebdca6a2109a7cd23a3e35079432100c95d7b1d6a8c84fc63c48677eb54382142c718707c4ebe99c8df0cfb31bf8</td>
|
|
<td>a373ddca692a202c95bb44ca9a00767a4dc1992c31a31cd50194f3b68fc0a03f078f601ce173f28e2a4ebd927c4983a9d9a7327067a8dcb278623dbe28be613b</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>476a8c77b72ac987cf971d96f3cd4d06a1097b69c15b00dd8558bd0eb0d291b8</td>
|
|
<td>[68a62c57d96ab29dcabe19a9, 68a62d5b4fa1f463a5481cd1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FFAdminPanel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:07Z, 2025-08-20T20:17:29Z]</td>
|
|
<td>[7e3986d0b83be86c9bd73da60ac9c757]</td>
|
|
<td>[a9d2fb1648bf369ac3c49b19cfe88229428bf05a]</td>
|
|
<td>[02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45]</td>
|
|
<td>[600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FFAdminPanel.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>ffAdminPanel</td>
|
|
<td>642048</td>
|
|
<td>7e3986d0b83be86c9bd73da60ac9c757</td>
|
|
<td>ffAdminPanel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:16 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:16 +0000 UTC</td>
|
|
<td>a9d2fb1648bf369ac3c49b19cfe88229428bf05a</td>
|
|
<td>02e4e1390cfd601f74518d90b315cd4ec15047614436b0ede7bed2047febe5d1cd235f3ee854736ad324d9ee386a6c45</td>
|
|
<td>600e67aa5da1758bb530ba6ef88ba7aae109267ae8203d3e464c86de7e403dcd3cd3f63a4dcf890423bcb42fd4f83493e0ded805f5befd6bcdb8532a4ee279b2</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47c150187166b4399b815710fdd231c7060bfb92b005876b25f730e7facfbe53</td>
|
|
<td>[68a62c2f20141caa2973b294, 68a62cb1297e2a61afff0f68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:23Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[5d8c166bc8f04a2e850cf9de89166d2c]</td>
|
|
<td>[11da266542a9b64f4e75f6edda8287f6efbf56f9]</td>
|
|
<td>[03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7]</td>
|
|
<td>[f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Common</td>
|
|
<td>449024</td>
|
|
<td>5d8c166bc8f04a2e850cf9de89166d2c</td>
|
|
<td>FormFast.Common</td>
|
|
<td>4.3.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>11da266542a9b64f4e75f6edda8287f6efbf56f9</td>
|
|
<td>03e4fbe6ff28f57642db04176ec2053665612c0e9027587e55b22d91f8aef0e6fd75717f1df66d0f161a95c5e20749f7</td>
|
|
<td>f8b5da3d101d355d9ddbe53b582b5eebc006d27b7f19688df739bd544cab301cda492d6b8717b243ff8b16eecf73b2f1181368413f69845df6faced8de1a4cbd</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>451e993a076564310629300dceda6e38d0749f6cf590a9e49882d033deca879b</td>
|
|
<td>[68a62c2f20141caa2973b2a0, 68a62cb1297e2a61afff0f71]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.FastPrint.PrintEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:29Z, 2025-08-20T20:14:35Z]</td>
|
|
<td>[83d1c497cddbb8bd7c89d0f58850d8cb]</td>
|
|
<td>[ab2968ee9868bbc6603b705c27963003a68b942e]</td>
|
|
<td>[414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b]</td>
|
|
<td>[e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.FastPrint.PrintEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.FastPrint.PrintEngine</td>
|
|
<td>252416</td>
|
|
<td>83d1c497cddbb8bd7c89d0f58850d8cb</td>
|
|
<td>FastPrint</td>
|
|
<td>5.0.8571.24236</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>ab2968ee9868bbc6603b705c27963003a68b942e</td>
|
|
<td>414e43e35d5db57113a9d0613a180ab74a5dda7cada9714b88988ba12288f58118331a3fa3cc30584ad3fd0bae6e995b</td>
|
|
<td>e944b0ff45da34e173591d026a2101454de4acd5c1996d1c38ba915d7c7bf107b1c262cacb18d741bfb2b031bcef78fba34bd3de64e0dffc11bb4f6bba602b63</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43fb47284a0923c6f526905acaf6ed471ce98dc12e90ead9b1f6caaafd07a6c9</td>
|
|
<td>[68a1630bf6e8920a96bd8fb7, 68a164cdde38c806f081815d, 68a2b48ff48ce007dac7acfe, 68a2b651d3e43b5dd374f130, 68a40646d9f12aef1f9954e1, 68a4082197086979fc9ed946, 68a557f1b2b6b5c32c84a884, 68a559cc6ef9d803fa606146]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-VAWHDSB, I-VAWHDSA]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\aw\bin\purgedist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[3cbc298ab5d529bf52f94797407148d9]</td>
|
|
<td>[2d26db4453bb3314c5785876f9b54fd8c21f74cb]</td>
|
|
<td>[ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774]</td>
|
|
<td>[ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>purgedist.bat</td>
|
|
<td>C:\icm\pcce\aw\bin\</td>
|
|
<td></td>
|
|
<td>408</td>
|
|
<td>3cbc298ab5d529bf52f94797407148d9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2d26db4453bb3314c5785876f9b54fd8c21f74cb</td>
|
|
<td>ca9e91de2d2ae1a21f6d2eb89128911793ac3ff3045d253b35983e62f3a3e8223e2c4cf9a574d68a30001d643d021774</td>
|
|
<td>ffe38bdb6179e0c068e8da4c7e98456a12aea815312553c2a292c5958fea75448711227ebfedbcff65612993afe49c84debdae07f9a16325946e06256a263f71</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>435e925a046549dc8d69886dc9a6e2cb57abf5910eb50d36d783fd3dd804196e</td>
|
|
<td>[68a62c390de66b6bd84ed654, 68a62cbbbad0c3891c052035]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:37Z, 2025-08-20T20:14:47Z]</td>
|
|
<td>[85f88b003ea039bdaf0d0a20b7ec8baa]</td>
|
|
<td>[09a37d44fc1c5879d9fa372a1c8f83720273e0da]</td>
|
|
<td>[3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49]</td>
|
|
<td>[70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>85f88b003ea039bdaf0d0a20b7ec8baa</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:40 +0000 UTC</td>
|
|
<td>09a37d44fc1c5879d9fa372a1c8f83720273e0da</td>
|
|
<td>3b9d9d0873bd2835e54a07caad7d641050c8c46d89c6547168134b86683f5c55e494a5492a3818c4dde1b80f109dbd49</td>
|
|
<td>70342fc02bedcd8bc03b912912f5ee6e2ee73a2ad9ed2209d7119e6849b59e552dfa0a6853478853825e93d316791e868a77c388c9ac3b7265f771cf57f65b5e</td>
|
|
<td>2025-05-06 18:30:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4398f7df96dfec614731513fdb359fd1a7d2716a23b6375bcdc770db8d4dda79</td>
|
|
<td>[68a62c390de66b6bd84ed637, 68a62cb1297e2a61afff0f79]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\Imaging.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:37Z]</td>
|
|
<td>[46c2b221fd3e580477fb246dd2281781]</td>
|
|
<td>[1b657b8af04151127213b220c217ebcec01ebf45]</td>
|
|
<td>[28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b]</td>
|
|
<td>[cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Imaging.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>Imaging</td>
|
|
<td>22528</td>
|
|
<td>46c2b221fd3e580477fb246dd2281781</td>
|
|
<td>Imaging</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>1b657b8af04151127213b220c217ebcec01ebf45</td>
|
|
<td>28fe96b6bddaed3f360e80f9893f1d73c1eb216daf7420c868a0d7e2a72ed17ac2ef1942626853bd7f0c31e0e23c642b</td>
|
|
<td>cf6feacb8070377602c1a6d376c5a1df5d106763c01d27be854db5b8c2d107d3c76c0aa0c74203434dc4f792c275a1964b73fb45702b8d16d369effcd9751609</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4608826d15c9b0013ef43372373ac5c1c3d4a93c7b39658115e0f6568bfcf9ad</td>
|
|
<td>[68a62c2f20141caa2973b297, 68a62cb1297e2a61afff0f66]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:27Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[b1a9f00e7f16af894f7d762f31f04103]</td>
|
|
<td>[aea24bcf206640f8e3fe8d855ee4a105dea5a326]</td>
|
|
<td>[6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474]</td>
|
|
<td>[f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>b1a9f00e7f16af894f7d762f31f04103</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:54 +0000 UTC</td>
|
|
<td>aea24bcf206640f8e3fe8d855ee4a105dea5a326</td>
|
|
<td>6ebc94c989b24ef6d6bc13186b864abbf2c5ca9cb18446bea2d21b75e0455c5c7d009511e3050525230a5bf4c1bfb474</td>
|
|
<td>f4d0845b82b8c085a43bf01d3e8a94c44ad1404b197a36481185000a425e36ca884f2eb6e277a7ac6d13b9f9dacf2c7034486de28182b2fb92e25644082e824a</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48c00f0cf8e81b7136ae6aad795978d4d6bbe8959aa93c8c88002439b65c35e0</td>
|
|
<td>[68a62c2f20141caa2973b295, 68a62cb1297e2a61afff0f6e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Common_WebService.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:24Z, 2025-08-20T20:14:34Z]</td>
|
|
<td>[6cc80ab6d1e337607c99b7836f897b7a]</td>
|
|
<td>[b7769363d5ece7b0a8d827223972357eabf93698]</td>
|
|
<td>[ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19]</td>
|
|
<td>[cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Common_WebService.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Common_WebService</td>
|
|
<td>116224</td>
|
|
<td>6cc80ab6d1e337607c99b7836f897b7a</td>
|
|
<td>Common_WebService</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:20 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:20 +0000 UTC</td>
|
|
<td>b7769363d5ece7b0a8d827223972357eabf93698</td>
|
|
<td>ee3ec2ee4713ca035775967b10c6f836b99dce770c4cbe3fc3715e97fad3e4cabb7039cc5fb06271706385fe36545d19</td>
|
|
<td>cad7b93d135867bf2debb2819ef55bdde235debcb70d0fde2e52111b080cd2c198d6e757346b5c7fbed91693438fdbc00c0d070a571a9a491366ecf6dcf0e0f0</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c18a9fccb3204a7c75bfcb401aefbe3887d079ae5e77d862c1a71f1c7ccddad</td>
|
|
<td>[68a1630bf6e8920a96bd8fb8, 68a164cdde38c806f081815e, 68a2b48ff48ce007dac7acfd, 68a2b651d3e43b5dd374f131, 68a40646d9f12aef1f9954e2, 68a4082197086979fc9ed945, 68a557f1b2b6b5c32c84a885, 68a559cc6ef9d803fa606147]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-VAWHDSB, I-VAWHDSA]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\aw\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:01Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:01Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[93f3e8fb47c860b1e51e77c4c8a113cd]</td>
|
|
<td>[e01d84238ee1050f10c3199ecd00cc8918c6cc3b]</td>
|
|
<td>[ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3]</td>
|
|
<td>[ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>[172.25.196.40, 172.17.196.47]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\aw\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>93f3e8fb47c860b1e51e77c4c8a113cd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:52 +0000 UTC</td>
|
|
<td>e01d84238ee1050f10c3199ecd00cc8918c6cc3b</td>
|
|
<td>ed00046da4da65d5a5d0a84aa322d92b00670cdf35b067c05727faed3242f2f14f38903ca723b54f77ffc3f879a5a7a3</td>
|
|
<td>ddd186030337ea3a20cafa323dd528953e3ba0c27bba74de4163bc85fbef730d8402651be9e14b18f364e2bdc5b3a719b2ba126cbf9eaf8ac9bec18751baa3c5</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1694645d5e73d2175861326fa89194dc2a82c7e21d1dcd894800714772c170a8</td>
|
|
<td>[68a62c254d354bf933e4d350, 68a62c4fe0cb7d1d0b6ef990, 68a62c4fe0cb7d1d0b6ef999, 68a62ca798fdd4aa74a31739, 68a62dbdd3f22bde37b5f4ec, 68a62dbdd3f22bde37b5f4f5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\ceTe.DynamicPDF.40.dll, C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\ceTe.DynamicPDF.40.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:17Z, 2025-08-20T20:12:23Z, 2025-08-20T20:12:59Z, 2025-08-20T20:14:25Z, 2025-08-20T20:14:33Z, 2025-08-20T20:17:21Z]</td>
|
|
<td>[998fde807ceac8f3bbd4916ff954fb8c]</td>
|
|
<td>[53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520]</td>
|
|
<td>[18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7]</td>
|
|
<td>[68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>ceTe.DynamicPDF.40.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>DynamicPDF for .NET (Framework 4.0)</td>
|
|
<td>4350464</td>
|
|
<td>998fde807ceac8f3bbd4916ff954fb8c</td>
|
|
<td>DynamicPDF for .NET</td>
|
|
<td>6.0.3.40</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-24 16:40:28 +0000 UTC</td>
|
|
<td>2023-05-24 16:40:28 +0000 UTC</td>
|
|
<td>53c9384cad0fa24bf27d1e09a3a1ffc2e7b3b520</td>
|
|
<td>18f94c3dbd152538439f38a3379b9faf4e99f481ced0bb50d4004cbae2c30101246266ce329c237fe502d8a08f22dbb7</td>
|
|
<td>68bccda4e258c63c7625e1a157de648d3d49a6de3100842243c56fec52289eee37b0ea5a3263d081dc9654732ef46de3d5e32de2cc723ffda867258680178364</td>
|
|
<td>2025-05-06 18:27:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ea93e5d1e2693678dc2163c15548f9ba23b053efe5e52fffad3f4ee0c7c20c0</td>
|
|
<td>[68a62c61512061b0a03001ec, 68a62d65c4509fd4abd51f68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\WorkflowEngine.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[656f58217faf83ea2207b1aabc3b938c]</td>
|
|
<td>[810871eb710d1cf89c23775cd24d6b72587118a7]</td>
|
|
<td>[c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54]</td>
|
|
<td>[bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>WorkflowEngine.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>450560</td>
|
|
<td>656f58217faf83ea2207b1aabc3b938c</td>
|
|
<td>WorkflowEngine</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>810871eb710d1cf89c23775cd24d6b72587118a7</td>
|
|
<td>c240bfbcd458fc55991104e47caeda725eed08ea126c72ccbf789ea3951f7ee29c24341c9e0f7f20d056f86d6a519e54</td>
|
|
<td>bcc963bae79e0462fd95dd40004efdefa58651762201dd57f3abcd36b6b6dfaf9fe4bd4ce161350751e5143f9fc9a7ed9407ea9f25dc1283c640c2cc7c3af1ce</td>
|
|
<td>2025-07-11 22:49:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2d9e507ea0396ee9d5c53adb9c9779afdd27a7640b28727be4db46148af51998</td>
|
|
<td>[68a62c61512061b0a03001eb, 68a62d65c4509fd4abd51f67]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\PDFEditor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:12Z, 2025-08-20T20:17:34Z]</td>
|
|
<td>[52e620fb3543935b9751f35b299fdc9a]</td>
|
|
<td>[03375654731e846fb0937dd67f3ae03d553f8a01]</td>
|
|
<td>[832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323]</td>
|
|
<td>[63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>PDFEditor.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>PDFEditor</td>
|
|
<td>109568</td>
|
|
<td>52e620fb3543935b9751f35b299fdc9a</td>
|
|
<td>PDFEditor</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>03375654731e846fb0937dd67f3ae03d553f8a01</td>
|
|
<td>832f875732f557ac92ebfa08d6eeab6474c45763be8f12056bc95a1a99f8a91ec5444a4caa9f33b373eb03ef17d65323</td>
|
|
<td>63cf2356955bf9dc363af501d3bd0b899d53e348533ca17b30ae21dd7499eb5d99dfcc090cbd5ac51317940df0614980bfe8ca75a0af4803395ed256db2833d7</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>268f47905bc543b8f4470c34eed1c7e5dabf07bb05c82b60fa57a92eb0b2c613</td>
|
|
<td>[68a62c57d96ab29dcabe19b0, 68a62d65c4509fd4abd51f5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Fastflow.Migration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:10Z, 2025-08-20T20:17:32Z]</td>
|
|
<td>[bcbe340f0385ed5826017df20efa6eb4]</td>
|
|
<td>[59625c822c0d5e524694a47fbf1286a3f41b0ec2]</td>
|
|
<td>[5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7]</td>
|
|
<td>[9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Fastflow.Migration.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Migration</td>
|
|
<td>135168</td>
|
|
<td>bcbe340f0385ed5826017df20efa6eb4</td>
|
|
<td>FormFast.Common.Migration</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:44 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:44 +0000 UTC</td>
|
|
<td>59625c822c0d5e524694a47fbf1286a3f41b0ec2</td>
|
|
<td>5776bc67effaabb723337a29186cd3d22f4d8231ac21b149f88e580ef5d6487e0eb2c5067d9273fa9d2be3146abe70f7</td>
|
|
<td>9bf1740da11c08a51d2f26eb45f8563d68ff5aa01601131bbd5452e1c615ce9a3a27d76fbf105fbf1b48ea68b0f36f1dd7fd529215b184403c5025f30abbb6eb</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2f1ab6bfc8904fb057a0b212fc8180d8b2d9eddef225312b93bc83d0dd5838d0</td>
|
|
<td>[68a62c61512061b0a03001e7, 68a62d65c4509fd4abd51f63]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:11Z, 2025-08-20T20:17:33Z]</td>
|
|
<td>[cd91d4125d2d7ea93bd38165e12a535f]</td>
|
|
<td>[dd21e13ba0794addd890f89f5640cac6376722e6]</td>
|
|
<td>[7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326]</td>
|
|
<td>[739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>cd91d4125d2d7ea93bd38165e12a535f</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:36 +0000 UTC</td>
|
|
<td>dd21e13ba0794addd890f89f5640cac6376722e6</td>
|
|
<td>7edc90dc3621366989ce2f4737e7f03aa00bbc28dc4d11d7dc2f869b0e367440a4d871094a4dafebe8bb3ca72afa0326</td>
|
|
<td>739cf45b2f25156b2672c71b43cf6ff97e64fb6d84042ed0687dff517f50ee7535178c1d87231277f063fb2fc57238a5527a2c2df1e5697ecf072de69a1b87e1</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>14ca60e7625341579b1a31b4434c90b105cc67d697b6437ff26d9763228e9eea</td>
|
|
<td>[68a62c2f20141caa2973b293, 68a62cb1297e2a61afff0f65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\Base.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:22Z, 2025-08-20T20:14:33Z]</td>
|
|
<td>[677d91239489ea7691c5d9bda03dc3ec]</td>
|
|
<td>[83fbd4375983c2ccc048304d475521e933e55a7e]</td>
|
|
<td>[654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b]</td>
|
|
<td>[c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>Base.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>Base</td>
|
|
<td>200192</td>
|
|
<td>677d91239489ea7691c5d9bda03dc3ec</td>
|
|
<td>Base</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:42 +0000 UTC</td>
|
|
<td>83fbd4375983c2ccc048304d475521e933e55a7e</td>
|
|
<td>654552f1d4152571aadf26834b67e7d5a9acd4540d52cb11a365bb78cdf4707af9489280a89e3da85e61eb11c6ebf44b</td>
|
|
<td>c005ab62080d402f3fa2282335eb317b52612ddcba6741f7236996a11d0ae4f8f3702ac7c66fdae3f1c15bf26201a0807888f0f8bebaafbad29c266454930131</td>
|
|
<td>2025-05-06 18:29:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ff9f06adf36fa5057cc3505bfcc119aaecb03fc327377c26a75042f54f61bc5b</td>
|
|
<td>[68a62c57d96ab29dcabe19ac, 68a62d65c4509fd4abd51f5b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.ECM.XmlSerializers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:08Z, 2025-08-20T20:17:30Z]</td>
|
|
<td>[83cdf6c2e5d109f7345c49628f408fb6]</td>
|
|
<td>[f7921a39ae4d43b99f5aee80257c703702cd2657]</td>
|
|
<td>[d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022]</td>
|
|
<td>[734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.ECM.XmlSerializers.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td></td>
|
|
<td>631296</td>
|
|
<td>83cdf6c2e5d109f7345c49628f408fb6</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:40 +0000 UTC</td>
|
|
<td>f7921a39ae4d43b99f5aee80257c703702cd2657</td>
|
|
<td>d87a43458a6f1b3e7aa4aac899944a9f065fe3d4a7a2d62a6bc7ec6c6687bb19d0b4d09c993c583ed6b9fe7e30f44022</td>
|
|
<td>734f1261efff8feddf2c090a6eb29327e8213ac1c8699d00fa73ffab8e196bd06d937e355cac962447ffd07ff0831e4ec18c9d058a82492ce0337418e35d9395</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>015453e136abf50cbbbf808b57b7c5a00f91d91129c922c4857a95afa5a23664</td>
|
|
<td>[68a62c390de66b6bd84ed635, 68a62cb1297e2a61afff0f77]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:30Z, 2025-08-20T20:14:36Z]</td>
|
|
<td>[6b971ede90737ede2770db65b7fab0db]</td>
|
|
<td>[b754cd469ae436842b3d24bc04b4e2775b971cd6]</td>
|
|
<td>[ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e]</td>
|
|
<td>[5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebApi\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>6b971ede90737ede2770db65b7fab0db</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:50 +0000 UTC</td>
|
|
<td>b754cd469ae436842b3d24bc04b4e2775b971cd6</td>
|
|
<td>ab7e67306aebe6a3523a033ad6fbb0de4b9dbf41bc9cd6fce3ebf36120d370109c6d7ec01ce572ce0eb0e9e4345f533e</td>
|
|
<td>5c3dda34d400252903b2c408c172aba747cc2d5730605167fed80b57e3d52bc1aac743afa93580c38a93f2ec6565865d5016bde349657b6c403e45f525d05090</td>
|
|
<td>2025-05-06 18:28:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00e3c6e87750065c6bf4ac8e05b77166dbd90c677c933984055f0db56dbf13c9</td>
|
|
<td>[68a62c57d96ab29dcabe19ae, 68a62d65c4509fd4abd51f5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\FormFast.Common.Sfdc.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:13:09Z, 2025-08-20T20:17:31Z]</td>
|
|
<td>[b49cce3d89159feea34f0a8c83dec7f9]</td>
|
|
<td>[4f11eb48337e1c91f298f0288db6ef5c6fc43b54]</td>
|
|
<td>[86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705]</td>
|
|
<td>[c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Common.Sfdc.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFAdminPanel\bin\</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>44544</td>
|
|
<td>b49cce3d89159feea34f0a8c83dec7f9</td>
|
|
<td>FormFast.Common.Sfdc</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:42 +0000 UTC</td>
|
|
<td>4f11eb48337e1c91f298f0288db6ef5c6fc43b54</td>
|
|
<td>86f4ee7789167ae957198841ac2797333e7df2874cfc023a620a20d2133bb7eb07f9231c4636d96177b21e56c3653705</td>
|
|
<td>c0e7568ea5f1bd5104fb5546a687b5daae3dd41bc436dc7ca470caa8507a765b499a75cffa07130f18564913c8b2dfc0d32de6db6456e7ccf640cbc1a363bae3</td>
|
|
<td>2025-07-11 22:49:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb86afd3c6fcdad7c494651481b906b004846066c0d130d10cfd1738d4b54f9e</td>
|
|
<td>[68a62c390de66b6bd84ed64f, 68a62cbbbad0c3891c052030]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2, i-NFP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\FormFast.Utility.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T20:12:35Z, 2025-08-20T20:14:45Z]</td>
|
|
<td>[5b6aebd86fb1e8c33afe527100c348e3]</td>
|
|
<td>[696abaa1ec222d4ddf57c0b1472bff9fdcb38985]</td>
|
|
<td>[9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04]</td>
|
|
<td>[b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>[172.25.17.195, 172.17.253.162]</td>
|
|
<td>2</td>
|
|
<td>Success</td>
|
|
<td>FormFast.Utility.dll</td>
|
|
<td>C:\inetpub\wwwroot\WebFormImprint\FFWebService\bin\</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>140800</td>
|
|
<td>5b6aebd86fb1e8c33afe527100c348e3</td>
|
|
<td>FormFast.Utility</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:27:38 +0000 UTC</td>
|
|
<td>2023-06-20 18:27:38 +0000 UTC</td>
|
|
<td>696abaa1ec222d4ddf57c0b1472bff9fdcb38985</td>
|
|
<td>9adef279a2f19103a116f5e8a3f9d7da393e1c78bec64b5eee25504c9f8cb8d1583bbba6d6088796a2b6d38c45579d04</td>
|
|
<td>b208d1934f1fef643fac5b9da9730c294c7ec4051a1c0047c24449c3b2aca47cac8823b7da505bb677eac2e9035c8b6498cd8e2a26add0a5f9a254ea8b13dd82</td>
|
|
<td>2025-05-06 18:29:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fbc7fdf61a20576e09a33947853cc2024cd0249137e7db6b4674632ccacde896</td>
|
|
<td>[68a3146b5f0c41860c8c850d, 68a3146b5f0c41860c8c8560]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\html\__pycache__\entities.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[41e82f02e4f6d79a79511257656da6c4]</td>
|
|
<td>[7643352f9bd86afb0c0981f14b6ec2e360f9805f]</td>
|
|
<td>[bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b]</td>
|
|
<td>[f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>entities.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\html\__pycache__\</td>
|
|
<td></td>
|
|
<td>97677</td>
|
|
<td>41e82f02e4f6d79a79511257656da6c4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>7643352f9bd86afb0c0981f14b6ec2e360f9805f</td>
|
|
<td>bfb4b877086cd66ba8462557fe26ca1cffd6420ba657376718c6ebb2005909ea559ed0e7c180dcce8ea18c60bfcf827b</td>
|
|
<td>f1ddbc80775fcee7efabfaaa1339afd588f43eef2b6b34fd9a7a817b505f79854e65e3b6d43edd8bb046f7253c96aa19ff7e1438b09ba3bc21c8c5e443051e72</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ffe3124098b0563b1e14d197acb10ddebf2e80a6fb27e7946acbd9b171bb62b2</td>
|
|
<td>[68a4b0fb13fac5171eeef0d6]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Helper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[0dddb86c5714681c7ed39d2bd59b1753]</td>
|
|
<td>[994abcb6dbb3dee2ba51f2e0b530dbdf640c0857]</td>
|
|
<td>[fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24]</td>
|
|
<td>[6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.Helper.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.Helper</td>
|
|
<td>76800</td>
|
|
<td>0dddb86c5714681c7ed39d2bd59b1753</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:01 +0000 UTC</td>
|
|
<td>994abcb6dbb3dee2ba51f2e0b530dbdf640c0857</td>
|
|
<td>fe82c20d86f388b20f8b067d2b8fec0af83a2c6c6e3a16cfaafbd8d55975d4927ea171f8b6e00339b8659d4ce8265e24</td>
|
|
<td>6bbffb25d33cecedb2a50ef990da928007f51e80bd03b1bae2c2222a16558bf7c0ec8a23158b6d35239ef7b76279bd57da9d32310779c2eb78e173a8cc8eda64</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>004dc4972b75bfbd1376f38f1f4b423d21a2a79e908a721697d1a1db3d7055f7</td>
|
|
<td>[68a240c4e6cd2ce37129562d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hf4ikxag.z2f.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:51:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hf4ikxag.z2f.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:51:08 +0000 UTC</td>
|
|
<td>2025-08-17 20:51:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:51:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0339b3dae7a5b6041c5bbb3def63e10b124a467d5e1f2bf3af0ab8fa500073ce</td>
|
|
<td>[68a5c8eceb9e7b7716dce208]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Talis\Atlas\temp\DownloadFiles.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:58Z]</td>
|
|
<td>[a3a891260bd6c4b8107fc2851f015d10]</td>
|
|
<td>[8ff719c4242076946baef37ae6acef7fdc21f05b]</td>
|
|
<td>[0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe]</td>
|
|
<td>[9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DownloadFiles.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>1905</td>
|
|
<td>a3a891260bd6c4b8107fc2851f015d10</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>8ff719c4242076946baef37ae6acef7fdc21f05b</td>
|
|
<td>0311565c269264b5e2cf222c1760f8f2afda50d0bf2ade73014bc0af0145fcdf9915579c1de85953d9de899336fff8fe</td>
|
|
<td>9b557a24030f5bfd311d9cd654e31143484989ce5a2a73ae68047e7267a5c01ee2800cb67083099daecd496265ab5baf1cb0dab10a2c9bbf761f75297f53a52d</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f484f3a80aa0ae9108b1876a147263a9fb5e87ec1065deadc3cb93ff70492723</td>
|
|
<td>[68a36b076a7f8fce5714f797]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\CTerm.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["d:\intersystems\hsfoundation\bin\cterm.exe" /console=cn_ap:HSFOUNDATION2017[]:]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\Ccontrol.exe]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[2025-08-18T18:03:45Z]</td>
|
|
<td>[d1b5aeda78111abc1b7b6a79a00626e3]</td>
|
|
<td>[91005476734d54bd9b933eb07d058f9cd4d57132]</td>
|
|
<td>[bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17]</td>
|
|
<td>[f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CTerm.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Terminal</td>
|
|
<td>286208</td>
|
|
<td>d1b5aeda78111abc1b7b6a79a00626e3</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:11:30 +0000 UTC</td>
|
|
<td>2019-07-16 21:11:30 +0000 UTC</td>
|
|
<td>91005476734d54bd9b933eb07d058f9cd4d57132</td>
|
|
<td>bdb2bce357523ea8509689092eaa6ba8ca35760844b5c481c2296a7b8be8d7587830f3598dd71bb0da7e89850c79bf17</td>
|
|
<td>f8eaea74f6431cdb1c3ffc5b7c87f4c28a64c1a60c1c30a0cdc49703dad93124a339510fec78925341d40f9c3abf305a78347e5f0210b11d0ba531a43e89c8cc</td>
|
|
<td>2025-08-18 18:03:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>05483be54fb184ec487226ec2f966cb470c73998877ae425b560dffb5fca531d</td>
|
|
<td>[68a35c84047df79ddfd2415c]</td>
|
|
<td>[2]</td>
|
|
<td>[ghermanc]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\tmpEXO_evkptwwz.wjs.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T17:01:20Z]</td>
|
|
<td>[42fefd8b7428fc4f9aa0c97458e55c4f]</td>
|
|
<td>[59be0f0decf9173c38d32fd5716316788fc77ad5]</td>
|
|
<td>[94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e]</td>
|
|
<td>[0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_evkptwwz.wjs.psm1</td>
|
|
<td>C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_evkptwwz.wjs\</td>
|
|
<td></td>
|
|
<td>2308296</td>
|
|
<td>42fefd8b7428fc4f9aa0c97458e55c4f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 17:01:20 +0000 UTC</td>
|
|
<td>2025-08-18 17:01:20 +0000 UTC</td>
|
|
<td>59be0f0decf9173c38d32fd5716316788fc77ad5</td>
|
|
<td>94ca25d1d9a8dba8a17694846cb94297f6388b0bd7bb01e34e49d696ac7cf090fce7e039d3e5f0c57593da72abf4ad0e</td>
|
|
<td>0d47e9ad597a2238f836007845402ac33c17d9c9bbfcfe0792ec649fc90fcbdfdef0705a334b947796b7a6771f5c7d12ba354594d9f5449a03e04ef2eeb4919c</td>
|
|
<td>2025-08-18 17:01:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>05d621eeca2e4255114d141aa7d6c5ccf117856e38d20d40678858873ba58e24</td>
|
|
<td>[68a50205736560052fcd1831]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_wlmxcr2s.rhk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wlmxcr2s.rhk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:00:14 +0000 UTC</td>
|
|
<td>2025-08-19 23:00:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0623b5670b57e995db06e8dba8e8ec36c7879f0d12dfd3f1c21f0aec1da7ef49</td>
|
|
<td>[68a226e5ea27d2f962eac02e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\tmpEXO_pugsznk4.2dj.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T19:00:49Z]</td>
|
|
<td>[037fb6f1dc934749df5f6ce3c6c612c4]</td>
|
|
<td>[f803186e516651994aa74b575f9814d93d526eea]</td>
|
|
<td>[3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59]</td>
|
|
<td>[cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_pugsznk4.2dj.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_pugsznk4.2dj\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>037fb6f1dc934749df5f6ce3c6c612c4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:00:48 +0000 UTC</td>
|
|
<td>2025-08-17 19:00:48 +0000 UTC</td>
|
|
<td>f803186e516651994aa74b575f9814d93d526eea</td>
|
|
<td>3510f2020539ccf73f4e68e947c9fa93a5e5db66f9ce0d60a7d63712f0417c611d84488a7bda8e3ff7805a901dbeda59</td>
|
|
<td>cbb67d09bf0ca40bb939a0b4406c9dd9e75a5456022dc8b2d1beade7e3c25d96c326d2b8e4e4b221a5d0d17a87b3a62202131fea112f81d6a5cdc7fe20fd9e75</td>
|
|
<td>2025-08-17 19:00:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0629fc635898b51e5d2316c8f7d34ea75b613ae34e1034bb1179374ac9de65a6</td>
|
|
<td>[68a471ad04130eaeee8f8d04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:44:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_fd8e0fda94e740fd98e39c3f7fe7f7aa.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:44:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>064def080c56265fe8621ad7b5f4e9a60f08b51475e7dccae02c6b86685a47b5</td>
|
|
<td>[68a19b31c2e510c554e3fb34]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jgzkpk0j.mzq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:04:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jgzkpk0j.mzq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:04:45 +0000 UTC</td>
|
|
<td>2025-08-17 09:04:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:04:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00cfdd2c637c38676581b9cf2cdb647024cb185f4ef32d3f89b1d9f0b8d26848</td>
|
|
<td>[68a4d180b5900ae066920597]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0120c65751377d7c151d92059b5b01184b00e9a6579a8c1099d5fb7c54fd1276</td>
|
|
<td>[68a3146b5f0c41860c8c8547]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\bisect.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[f29725aff50c74333893a8c32d856e5e]</td>
|
|
<td>[506feae5c909e2b9651a60062b9ce938a685f18f]</td>
|
|
<td>[80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee]</td>
|
|
<td>[823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bisect.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>3505</td>
|
|
<td>f29725aff50c74333893a8c32d856e5e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>506feae5c909e2b9651a60062b9ce938a685f18f</td>
|
|
<td>80c40daa47a6e5138290b8bb378f975f9c0eadeab43d615d0f602f9125d7c293cd9e4a5545c97d121150c2f5f5a6aaee</td>
|
|
<td>823ae062d5c3a5a07cb5bd11e783148126f01a86797f3e0cc82962dbe63ee54ab011f3ca401cd42433dccee7e5420c29a0c256e6bb509984998602605a405352</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>013824dd98d654ae6fa35cbb46d29d79ca49f6f084fef8b95f4abff4fe4ce2f7</td>
|
|
<td>[68a36b2f814a7aa0d93290c9]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\CStudio.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CSTUDIO.EXE" /servername="HSFOUNDATION2017"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:04:27Z]</td>
|
|
<td>[b41afb09655750e9caf2bd657d3e3d8c]</td>
|
|
<td>[2b26fa2dc7200223a73563e63392f3caf4cb9440]</td>
|
|
<td>[034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a]</td>
|
|
<td>[27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CStudio.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Studio</td>
|
|
<td>3734016</td>
|
|
<td>b41afb09655750e9caf2bd657d3e3d8c</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:09:56 +0000 UTC</td>
|
|
<td>2019-07-16 21:09:56 +0000 UTC</td>
|
|
<td>2b26fa2dc7200223a73563e63392f3caf4cb9440</td>
|
|
<td>034637d534402789ef53d0b8fd6de8f8b86bc55826258237a749ea4d4b73857b0070f857e6827d43182f71973254405a</td>
|
|
<td>27758a9691ba64e62609cebb7e308755c60e526b330f02157976bbe0eabc847e23af048239ea0d6d258397c75d41a1a9b0d8f3d3b22b4361667973df580e40b5</td>
|
|
<td>2025-08-18 18:04:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d0d3de3348731c003a4021605d4d86a38d8d915555494bde85645d748ffc4f</td>
|
|
<td>[68a15a1322e6ea61a3496d50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1opx1ngt.s4i.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:26:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1opx1ngt.s4i.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:26:52 +0000 UTC</td>
|
|
<td>2025-08-17 04:26:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:26:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19662d119168e78bacd4b3a8bd2078e969aae42289688dc5f70271ba774c9b2e</td>
|
|
<td>[68a32fce1e3a6c23a9ae63ca]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:51:06Z]</td>
|
|
<td>[431533e50a4a795e0182a41c54b870a6]</td>
|
|
<td>[363cf7b11b02371fbdbd3d036cf77f4f477ef7d9]</td>
|
|
<td>[10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f]</td>
|
|
<td>[7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2226</td>
|
|
<td>431533e50a4a795e0182a41c54b870a6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 13:51:02 +0000 UTC</td>
|
|
<td>363cf7b11b02371fbdbd3d036cf77f4f477ef7d9</td>
|
|
<td>10310344f5491384b68b5b2ed2efcacdf35f0f6ea2240893c9ce4e7071eecbf601f5de358d17a8a8748034b804cda82f</td>
|
|
<td>7e11d3d80bd9280d404cdf40fa597192c1a3f4591e2089e138a06ce2cf1cf9f632ae8b343fcdb8538d5facd24774dba6d3e66753a279c3e4a689c585f4c2d5dc</td>
|
|
<td>2025-08-18 13:51:10 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>197fea9fc376fde139a59fa4689a84ebc896b2afd1802d222c6dc86f6810c078</td>
|
|
<td>[68a16f7de3fc40447cda5394]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1cwr4aqw.s5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:58:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1cwr4aqw.s5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:58:09 +0000 UTC</td>
|
|
<td>2025-08-17 05:58:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:58:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19bbcc16c175702ae348e14d03804631d4f852e8d03c5001e4255c2e583fb086</td>
|
|
<td>[68a50936a0536b4a4308bb01]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\DatascopeB_5_0_2_9.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:30:55Z]</td>
|
|
<td>[91d6ed9ec25335c8993911305fa93660]</td>
|
|
<td>[9e017857441e23e5cc32d68e6f941671dac75216]</td>
|
|
<td>[111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3]</td>
|
|
<td>[36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DatascopeB_5_0_2_9.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>828928</td>
|
|
<td>91d6ed9ec25335c8993911305fa93660</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:30:20 +0000 UTC</td>
|
|
<td>2025-08-19 23:30:21 +0000 UTC</td>
|
|
<td>9e017857441e23e5cc32d68e6f941671dac75216</td>
|
|
<td>111b21eda66e21ef67bc83969d68b5169b47b48bbfefd0167e19676170ee4502e3d8d7892ecdd4880be1042607ca88a3</td>
|
|
<td>36a9b9f4b4f562aaae194cdd3f8e0c9f8f8e320c495c32db147153041ed60a06c56c16cf2ba3beb3e2c2c34fd385dd02966c832a5a3f7f89e24353eabcf77139</td>
|
|
<td>2025-08-19 23:31:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>19f6ab70ded4feceef4245317e13cc2723dba13451347a16410ff088aa94ed9e</td>
|
|
<td>[68a4ac67cfad262556985011, 68a4dda823653165b0c6ea28]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\Microsoft.PowerShell.Oms.Assessments.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2278.870, v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T16:51:09Z, 2025-08-19T20:20:41Z]</td>
|
|
<td>[73567d31f6f5a57f178f72390032e4a7]</td>
|
|
<td>[da44ee8ec0db86402e5d6c017827ba77fa19bf72]</td>
|
|
<td>[86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483]</td>
|
|
<td>[ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments.dll</td>
|
|
<td>C:\ODA\Binaries\bin\Microsoft.Powershell.Oms.Assessments\Microsoft.Powershell.Oms.Assessments\</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments</td>
|
|
<td>111616</td>
|
|
<td>73567d31f6f5a57f178f72390032e4a7</td>
|
|
<td>Microsoft.PowerShell.Oms.Assessments</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-07 15:47:40 +0000 UTC</td>
|
|
<td>2024-10-07 15:46:58 +0000 UTC</td>
|
|
<td>da44ee8ec0db86402e5d6c017827ba77fa19bf72</td>
|
|
<td>86ec02e5247cc6fc8bc593313d1cd79a00b10e3c2da59cf4a38d5268e26f91c1bc5bd885826d1cc4b5f65ce08e621483</td>
|
|
<td>ea7a7f63d21b371ce6b463fbfc72c397c41a29c9ee059924c59beb6f6232aa7ff60b46150dab5c9492f4e0d96aff3d0a217e39b377f01493dd35035f0e5e5cac</td>
|
|
<td>2025-07-15 16:51:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1aa0f52be8015d5624a34baa8ff09a5e51a84ee1d541fefb6e42312cd8266209</td>
|
|
<td>[68a1a82b7de272dd853193b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_768146f715644334a001f4d6f657b99a.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_768146f715644334a001f4d6f657b99a.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>141dbcf08788c469ba3d747db24400108920ec7fb03ce8e7847a0d537bec5c38</td>
|
|
<td>[68a50589eadcd7cce3f5d686]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-1BA45DA5-154D-4207-8ED3-5352625CA0B3\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-19T23:11:52Z]</td>
|
|
<td>[97a7cc2a8414b3679444b968b6b029b0]</td>
|
|
<td>[64783c7c1b6a38235cd866c2446599867f6ee497]</td>
|
|
<td>[98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225]</td>
|
|
<td>[301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>97a7cc2a8414b3679444b968b6b029b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:11:52 +0000 UTC</td>
|
|
<td>2025-08-19 23:11:52 +0000 UTC</td>
|
|
<td>64783c7c1b6a38235cd866c2446599867f6ee497</td>
|
|
<td>98acb397dcd70bcb3c5c13c623618b5f073bfb2c8045157557b004140f7e78a4855c99c61e4d4d2f0b258cb5119a4225</td>
|
|
<td>301abc459f3499684f1777016889b5ee28c651d77a7948faa375391a1245ec855c867e01985c367950ed0801088e7e25e39cc94bbab48521a866685264a4bc8a</td>
|
|
<td>2025-08-19 23:15:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>145b126185eb42beb5366b5d471b48d5698210a0e64a1cc0c1e8144071e98569</td>
|
|
<td>[68a55cde636cfc7814189cce]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_efld4jwd.fx5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:27:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_efld4jwd.fx5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:27:53 +0000 UTC</td>
|
|
<td>2025-08-20 05:27:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:27:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fcae2074a7a5deea742cb25c4efb09ae63fa3367e2f17c2d0e5487fa26500914</td>
|
|
<td>[68a31c78c8293406e9c76873]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gxd1sdoj.agw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:28:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gxd1sdoj.agw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:28:37 +0000 UTC</td>
|
|
<td>2025-08-18 12:28:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:28:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fd451e5b061a4b3db0872c23ae17414ac8815eee11cce644fe1d63abc8c122b0</td>
|
|
<td>[68a3146b5f0c41860c8c84fb, 68a3146b5f0c41860c8c8558]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\server.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[eeb247742b582d6575eb73a83ad57a68]</td>
|
|
<td>[683d7c49128654f5cb1609e957808e12e1b16dcf]</td>
|
|
<td>[a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf]</td>
|
|
<td>[f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>server.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>55819</td>
|
|
<td>eeb247742b582d6575eb73a83ad57a68</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 22:08:48 +0000 UTC</td>
|
|
<td>2024-11-22 22:08:48 +0000 UTC</td>
|
|
<td>683d7c49128654f5cb1609e957808e12e1b16dcf</td>
|
|
<td>a04e86a2fae9c331533f8065c25389e0db949b747d9b45427002d7d3048598cf8273fa7fb4b5b7eae516f56b2837f2bf</td>
|
|
<td>f4881ff6341ccd8ffcb31a6bd8b88fd76fef961a66eeefc37dfeb20e11abc0352c2cf8d8e3f68c52b410a80c19cad11f799448a03973ad7b1e95bdb9f1c0eba2</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fda37cbb903f43d9b3649e44db493160207ccaaa1f24542ffa035682ac8a8e07</td>
|
|
<td>[68a4ccc785b914a60d739e4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fda97f6ec8bc3a28270dd0d5800b6e1309e711a0fef9ec6984819c59092fd1f2</td>
|
|
<td>[68a17b3ec86486ccb41646c3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-v3MAppTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tzzqoamc.4zw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:48:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tzzqoamc.4zw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:48:25 +0000 UTC</td>
|
|
<td>2025-08-17 06:48:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:48:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fdb926e2256cde49c147fd8d3d59d73598ba9d09c498c6d52cfbe6285cc6048e</td>
|
|
<td>[68a3146b5f0c41860c8c8511, 68a3146b5f0c41860c8c8564]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\errors.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[49174a480c734fd1a4b7c0b4f048d18b]</td>
|
|
<td>[f134bd12839067b16c719dcddd7feb54e228645f]</td>
|
|
<td>[26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e]</td>
|
|
<td>[c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>errors.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>7588</td>
|
|
<td>49174a480c734fd1a4b7c0b4f048d18b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>f134bd12839067b16c719dcddd7feb54e228645f</td>
|
|
<td>26a0ac83db82d120630d78494dd9cde7312bc664ab9756847ed249e45cc29627a372a5356642e2463da90eda8b5f858e</td>
|
|
<td>c4cc6ba328d45ee5bea5bbefd50ca2b84c53a376c8dcad66fe2eb5d760f5e8c90894ecf40d6b2b9270deb23acbf2274132820f2d6b47849f75f304d447015a4e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c4f4a46ffb6c9b0b7b73281cc81801cd838a1d4b95e5bd01ed90e38527489ca</td>
|
|
<td>[68a3146b5f0c41860c8c8546, 68a3146b5f0c41860c8c8574]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\traceback.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[55adb6e2f9b392dd9d272956ce4405f8]</td>
|
|
<td>[245bf99c09cd2c80e54d4d6c044a46088e0712f1]</td>
|
|
<td>[1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e]</td>
|
|
<td>[6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>traceback.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>70311</td>
|
|
<td>55adb6e2f9b392dd9d272956ce4405f8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>245bf99c09cd2c80e54d4d6c044a46088e0712f1</td>
|
|
<td>1308a42400ec7c872edec12bc0255022017d94334e9a6de1bcea17f5d91a6dcadbef29f3c3bee5952a5f6ecb49b71c3e</td>
|
|
<td>6b8e25f5e63bf85dfc5e357db940c13d3d3a852a83f3c184e8546187ee64291cc8b9fe446e59f88827863cf665d33d9ae2835b9eef02c52469729c3f81bc5dd1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c91077087037870eb7a63ed7d989ad265f5c3c8f356ccd3e724aefacdae6905</td>
|
|
<td>[68a4a67eb5e8554bc2e83559]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:43Z]</td>
|
|
<td>[b12cf42ff23c2057b9f1443b8014f97a]</td>
|
|
<td>[174c49890a68701f720d6ac4f822aff1798dc9d2]</td>
|
|
<td>[5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822]</td>
|
|
<td>[9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2060</td>
|
|
<td>b12cf42ff23c2057b9f1443b8014f97a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:43 +0000 UTC</td>
|
|
<td>174c49890a68701f720d6ac4f822aff1798dc9d2</td>
|
|
<td>5bd9a400ac29dda9e7ebce00faae4abaf2d48f44cb5269649fca43b30ef4a3c0dedea75001075a7854ffb0efc3628822</td>
|
|
<td>9b4dd4be15324c827bce193688347c2565209fb7dd3dd687a8ddba8377b1b7e0f7996fc71c3698fef4c444c235b11bdd4c8eed9e4ebdf6b3cd48456a3181c65d</td>
|
|
<td>2025-08-19 16:29:50 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c99e83e5bb1e752b6a081d36ecb4a804a4bf6a51f76c096ef4a30ebc8b44345</td>
|
|
<td>[68a34d6610b57c5bffc57daf]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_8529cff9-a2b5-45f6-9651-01cb8bf76138_Untitled7.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1cd31123183f98fa54f76a0aefddad0b56efda5633c421baad6c049271c47811</td>
|
|
<td>[68a4ccc785b914a60d739e49, 68a4ce1fc826337212f53be9, 68a4d07753a851daf11e6933, 68a4d07753a851daf11e6946, 68a4d07753a851daf11e694d, 68a4d2d1ff2b441b8442812b, 68a4d2d1ff2b441b8442813e, 68a4d2d1ff2b441b84428145]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\WinError.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[98c935ab759b31b868ce685c550a2d27]</td>
|
|
<td>[010b6e43cb224a92837e476bab31e4f8983cf513]</td>
|
|
<td>[6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79]</td>
|
|
<td>[6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WinError.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\WinError\</td>
|
|
<td></td>
|
|
<td>73728</td>
|
|
<td>98c935ab759b31b868ce685c550a2d27</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:13:00 +0000 UTC</td>
|
|
<td>010b6e43cb224a92837e476bab31e4f8983cf513</td>
|
|
<td>6d91bc6f40e77345e1caca9e281de788802aa92571a49a1d66cfc777baee8cbff74a0083e324c07f548667bc66826b79</td>
|
|
<td>6af3a4f2539e7df6985b07e730d00af30fc0b0db083884faeca82ef3f278dc7714968fa8c27dcbf946a96b4a5120a65f46f0c408712e3784a6a3c2d5c6c16199</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1d36cdd250632c13e621811c31c46889a5b8e5703cefdf3cc1d70d8fd33ade51</td>
|
|
<td>[68a2429a92c7d722f343012e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4u5rhbcj.vq2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:59:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4u5rhbcj.vq2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:59:00 +0000 UTC</td>
|
|
<td>2025-08-17 20:59:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:59:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1db1a44f9537b17f981cac0e51c92988e6f6e64f555249b2e267276ac42c6643</td>
|
|
<td>[68a4c47e2db3c760ec3d2a2c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5b304b09fa8941c399c57da1067eb872.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:37:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5b304b09fa8941c399c57da1067eb872.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 18:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>179832435871d03884d0c7276e49a11f82974cdb823c3738f69ab8092647fcac</td>
|
|
<td>[68a17d46e874e98975d27502]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjl5psll.in3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:57:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hjl5psll.in3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:57:01 +0000 UTC</td>
|
|
<td>2025-08-17 06:57:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:57:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>17b63ace273280d515dc03790cc9616ab0e642ac676752b7a8428f489ab2c6d6</td>
|
|
<td>[68a22f92c12f0e944e5d68ee]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gdwb5ppl.3to.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:37:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gdwb5ppl.3to.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:37:41 +0000 UTC</td>
|
|
<td>2025-08-17 19:37:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:37:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>17e48334a38dbd836fe464e5c186505984d2cce8d90c271067a21ce18c41d6f2</td>
|
|
<td>[68a3f034978467a3921f39ab]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T03:31:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_a7fa373f45aa458ea22d9e737bfef8d2.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 03:32:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2063d0c99b559ee70851bb6ef469403083548a7de9815d5d75c9091079f51e7a</td>
|
|
<td>[68a5239e621d09b2b1ed5e47]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfigurationSchema.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[4d713ca1bcb6151d41a165fa97487752]</td>
|
|
<td>[d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1]</td>
|
|
<td>[b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2]</td>
|
|
<td>[ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringConfigurationSchema.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>187392</td>
|
|
<td>4d713ca1bcb6151d41a165fa97487752</td>
|
|
<td></td>
|
|
<td>1.0.8565.40745</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>d2f1fe6b44e1cb09e3f1c5d796c50de22bffe4e1</td>
|
|
<td>b30d37457255e5c3131802be12c07c214055ac3529b35be2a34da26496eb7f10dd4d6ac72ca3ab0a39302e57bd8234c2</td>
|
|
<td>ec5641260d770f447dd2b2f8c30baa8fb353d4c316431e56319f8befe5eb1dd9106bcb2a334b4b9182d28cfa90b13868ef48ec595cb7584f3a3d76278846f4cb</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>208fe14221f4de86e1d3367e7e3af0431b468c606a965f94078806268cd1fcd9</td>
|
|
<td>[68a5c8eceb9e7b7716dce1f8, 68a5ca39b5df6e9c598d9a0a, 68a5ca39b5df6e9c598d9a17, 68a5ccf2ddfdba423e48862d, 68a5ccf2ddfdba423e48863b, 68a5ccf2ddfdba423e488649, 68a5ccf2ddfdba423e488656, 68a5ccf2ddfdba423e488663, 68a5ccf2ddfdba423e488670, 68a5ccf2ddfdba423e48867d, 68a5ccf2ddfdba423e48868a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\VstsTaskSdk.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:51Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:57Z, 2025-08-20T13:22:22Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:31Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:43Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[a2b60434350ac0955961357829a8a1c5]</td>
|
|
<td>[8e37dd79783b74df97a476dff753c6e1753affb2]</td>
|
|
<td>[5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0]</td>
|
|
<td>[bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>VstsTaskSdk.psm1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\ps_modules\VstsTaskSdk\</td>
|
|
<td></td>
|
|
<td>6727</td>
|
|
<td>a2b60434350ac0955961357829a8a1c5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:41 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>8e37dd79783b74df97a476dff753c6e1753affb2</td>
|
|
<td>5564f189598c4d38960e85412d1565777add0f88ae7b2f69e6461449d8f99f730026dba49084a17edb362a7534d665f0</td>
|
|
<td>bc1c3763dae65a86e12933a32c265b08dd83a03a870e06e4a4842c1a43f0d8863fc385605113f827a5df207950e12f022537f034cdd440a9d74d98ff6a0798d1</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>209d605e45aba340d5ddd93ce438fd4f8178d56ecb4911f3c4cd04badca4f0cd</td>
|
|
<td>[68a1bfd674ff3871c4d1c5c9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nosccapp2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jba2l2dq.vnn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:41:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jba2l2dq.vnn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:41:04 +0000 UTC</td>
|
|
<td>2025-08-17 11:41:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:41:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>20aedfcc2009362bc8633f6532da1ed127c65bfe62a162c12bec185791071da2</td>
|
|
<td>[68a3146b5f0c41860c8c84f3, 68a3146b5f0c41860c8c8524]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\operator.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[4d902c5d88140a642fe4ef1a19911781]</td>
|
|
<td>[faf9cceba79990efbfcc000ae2d94a21dba89a1f]</td>
|
|
<td>[a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140]</td>
|
|
<td>[54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>operator.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17367</td>
|
|
<td>4d902c5d88140a642fe4ef1a19911781</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>faf9cceba79990efbfcc000ae2d94a21dba89a1f</td>
|
|
<td>a050561c523be1c96f553c4a085d39bbcce7f6103ffeb96eb53894eb021e052c0bfbbddc4d694327a734b751c6a32140</td>
|
|
<td>54df610a2f60032ee99c44946c9794db756d8ef5c5c2e9eeb5981380eb71810f7e4f34bf0c57fef2f5dbb9a2d74683789a2e8aea2a463c6e6c4d39f1fb67a6f3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>20b9ac86095a725783035db578d94d79959e492461d50fd0f8ab6274eab39534</td>
|
|
<td>[68a47bc2880fc3ea1ff87615]</td>
|
|
<td>[2]</td>
|
|
<td>[AdminJKM]</td>
|
|
<td>[PDQ-INFRA]</td>
|
|
<td>[WHI]</td>
|
|
<td>[\\wheelinghospital.com\sysvol\wheelinghospital.com\Policies\{4E0157AA-F18B-43AF-8DC2-A4FC7E414E88}\User\Scripts\Logoff\ClinicalInformatics_Servers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\gpscript.exe]</td>
|
|
<td>[2025-08-19T13:27:24Z]</td>
|
|
<td>[eae3ad65cf0b5377f069a0667ba10043]</td>
|
|
<td>[a37860bb1e075fa074434b286d2e0b5e7414368f]</td>
|
|
<td>[d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee]</td>
|
|
<td>[aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104]</td>
|
|
<td>[172.24.26.60]</td>
|
|
<td>[172.24.26.60]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ClinicalInformatics_Servers.ps1</td>
|
|
<td>\\wheelinghospital.com\SysVol\wheelinghospital.com\Policies\{44822848-47D6-4FB7-BB91-7BBCA7B70574}\User\Scripts\Logon\</td>
|
|
<td></td>
|
|
<td>2091</td>
|
|
<td>eae3ad65cf0b5377f069a0667ba10043</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2015-05-12 19:09:52 +0000 UTC</td>
|
|
<td>2017-09-06 21:55:22 +0000 UTC</td>
|
|
<td>a37860bb1e075fa074434b286d2e0b5e7414368f</td>
|
|
<td>d684fe81ba44521252844a3ee9d54830412ae0d9a041c20e3f16488830abbcdc0b6711a7e3d1cea2bf21b6329a2658ee</td>
|
|
<td>aba39ccbc021c91e3cdd027d01c4d7d0882eb52cb554a77b24ddbd8179b6ea16bb2ad7a6dcb3730e0a0324cac349218c9308f99f917a0886ce8db9c6d0e11104</td>
|
|
<td>2025-08-02 13:43:30 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103509', 'name': 'Legacy', 'version': ''}, {'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>212af7c4b44a918b3060ef55417f27f14b15bf0f7a19cd52de911c36d5ef9ea2</td>
|
|
<td>[68a4ccc785b914a60d739e4d, 68a4d07753a851daf11e6935, 68a4d2d1ff2b441b8442812d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisitectl.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z]</td>
|
|
<td>[514ed83234038d4fdb35855046c46bea]</td>
|
|
<td>[6ddf7c13900920915184c88693c24703856086d0]</td>
|
|
<td>[415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091]</td>
|
|
<td>[67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hcisitectl.bat</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>133</td>
|
|
<td>514ed83234038d4fdb35855046c46bea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>6ddf7c13900920915184c88693c24703856086d0</td>
|
|
<td>415062641289ba0dcd1d98f22f97a3a1855040de815c0d98c00347248395c2443582d909a1952d64e8617a3c94749091</td>
|
|
<td>67d024c724bcce4359b7b6f58200d4019da00fb83dc9ad6bc6bd097554f0bf710a5b4c08f620332d4afd22ef4b58b852836ddffe3a781d0c2bd14015e28babff</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1ac7ceb23e48ad66e86d0e748a2eb1125d5131a459d24779854d2bd381a9a2dc</td>
|
|
<td>[68a4855388937a93ff144377]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Web.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[e420fcc66faf3bb597920bc95092bc82]</td>
|
|
<td>[225c1cb6bde189a744287718d5838279c6495f70]</td>
|
|
<td>[8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b]</td>
|
|
<td>[f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core</td>
|
|
<td>18432</td>
|
|
<td>e420fcc66faf3bb597920bc95092bc82</td>
|
|
<td>Stryker.iBedServer.Authentication.Web.Core</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>225c1cb6bde189a744287718d5838279c6495f70</td>
|
|
<td>8ed12fec4debacfad3983bfbf95b5fc78e7ab7b4adc6e1715b2dbbcfc0ce0df66adc25ee207e1d7740a1bba62479cd3b</td>
|
|
<td>f40ffb4474d6ecc4d94876e74c7132a9dd65852b682a913f668bb193f7079c09645ec739f7e2ed4c2bb47ec63b260659ee04c19fff996213d214536f0369bf58</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1b096ab7c58272c64f17e7a582777c8e9ea3d42f42e14b605ec148acf45d3fd1</td>
|
|
<td>[68a1abc4f0472d34305de372]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_rupfwq53.gwm.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rupfwq53.gwm.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:24 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1b1e6e65d2b28da1a31023fe1c0a4071c001db0ab55947e0d2d50a4aa335e321</td>
|
|
<td>[68a5c7657732fa5006a7acf0]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\QAUInst.exe -package:"D:\QS1\QAU\Updates\QAUInst.exe" -no_selfdeleter -IS_temp -media_path:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\" -tempdisk1folder:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\" -IS_OriginalLauncher:"C:\Users\SVC_SL~1\AppData\Local\Temp\{0AA85598-1726-4FDF-993D-342B59581765}\Disk1\QAUInst.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\QAUInst.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:02:23Z]</td>
|
|
<td>[c1478d20d872971cf6b4615e79ecfa72]</td>
|
|
<td>[31faaac28aa42532c4121fa4ea689db8248db888]</td>
|
|
<td>[747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215]</td>
|
|
<td>[58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QAUInst.exe</td>
|
|
<td>C:\Windows\Temp\{7ECE6BBA-38D7-4AA8-BD90-D64A990063CA}\</td>
|
|
<td>InstallScript Setup Launcher Unicode</td>
|
|
<td>914944</td>
|
|
<td>c1478d20d872971cf6b4615e79ecfa72</td>
|
|
<td>QS/1 Automatic Updates</td>
|
|
<td>1.0.0.297</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-22 21:33:33 +0000 UTC</td>
|
|
<td>2025-05-22 21:33:33 +0000 UTC</td>
|
|
<td>31faaac28aa42532c4121fa4ea689db8248db888</td>
|
|
<td>747d822265eda391634020a666e82f2b311f384f09d6e1da55c8bd3f33aec1a62ceed8bf142cb0687a9b63887957f215</td>
|
|
<td>58c7d2f1624c48bd8c5b277168de205eac2adbe0b6dcb6cd417711c7da375f08b53e22447dc779057cff4964512aa6732b86e89ddb1cf97d715be8af518c3502</td>
|
|
<td>2025-05-22 21:33:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1c0d104a8743951cc262698fd2ad920b4fcfed18090a9f1a67144ee21b7b0049</td>
|
|
<td>[68a1b11e62bedacdcc003190]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_10ru0x02.3yt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:38:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_10ru0x02.3yt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:38:12 +0000 UTC</td>
|
|
<td>2025-08-17 10:38:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:38:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>233cda908dbe688d1964cdba2ae0c67c0336dd94f040e969e824e4716fafa610</td>
|
|
<td>[68a4cf1f4971da3ff4f65d7b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>233fd2e9b361be99ce56a380a8ef954b2f0f14e7571e470860b9a862e4a4b4ed</td>
|
|
<td>[68a180c1aa5e4fe2dc53b3d5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dqv4gtvi.vua.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:11:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dqv4gtvi.vua.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:11:54 +0000 UTC</td>
|
|
<td>2025-08-17 07:11:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>23d2a28820aa7269c8e12b57fe64354de0b4e14f7ea29bf7a7f4dab6efbab0fc</td>
|
|
<td>[68a5d0f7f298663174d8aef1]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_bmeb2ak5.xwg.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2291.881]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:43:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bmeb2ak5.xwg.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:43:16 +0000 UTC</td>
|
|
<td>2025-08-20 13:43:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:43:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2476c367fffa78e58eb0abf44459362577b5ff6503f33a81f07f5748120d3e4c</td>
|
|
<td>[68a3b07b89708f7e107efecf]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_pympxbs0.15a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_pympxbs0.15a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 23:00:04 +0000 UTC</td>
|
|
<td>2025-08-18 23:00:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>24caf033e838c16b0cd2adbc677d4d30b06124b25b7a2d2c11781fbd86da2f84</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21b]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\RoboCopyStuff.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[d7083504aa22f3989277128edc021706]</td>
|
|
<td>[1a6bc93829561a0da597a0e7118345b217271476]</td>
|
|
<td>[617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838]</td>
|
|
<td>[ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RoboCopyStuff.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>638</td>
|
|
<td>d7083504aa22f3989277128edc021706</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-06 12:04:04 +0000 UTC</td>
|
|
<td>2025-06-06 20:43:59 +0000 UTC</td>
|
|
<td>1a6bc93829561a0da597a0e7118345b217271476</td>
|
|
<td>617891d7da0e1ba346fe0f25ff436c0ea209f6a524af76941328b6076d26b642c4504e83e135ae1c036971ccc376f838</td>
|
|
<td>ba4b51c6ef474560d062aa43192bb2eb0bbb368324ee9d31b5b4547b364b73cf6ee32790b8b035c61a45484660c3811f0caa044f66b530fd93021807ea5bab14</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2522bec3a9e8b209bd9a270dfd1bdc12122b5d6f0eabca8d1d0446d744fc6dfe</td>
|
|
<td>[68a232eef903f5e7e0112d84]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a3ih1mon.uvf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:52:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a3ih1mon.uvf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:52:02 +0000 UTC</td>
|
|
<td>2025-08-17 19:52:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:52:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1df39083a555ad2e4301b24f8970c3cf88fad01b9393cb5f8e7e5aee5332cac7</td>
|
|
<td>[68a2408816f43bddda2dc0c4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hlln0dgm.sse.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:50:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hlln0dgm.sse.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:50:09 +0000 UTC</td>
|
|
<td>2025-08-17 20:50:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:50:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e3ae688305501b61ca04a7b50d76d4e55e84350f6966c695ae0c0c8c2076bfb</td>
|
|
<td>[68a523949cec397f02de9f61]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\IPAddressControlLib.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z]</td>
|
|
<td>[d7cb593f2a75e63808f0520ecec6d003]</td>
|
|
<td>[ecf814407df1abfecc4a93e83579a1463c33aca6]</td>
|
|
<td>[cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936]</td>
|
|
<td>[54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IPAddressControlLib.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>28672</td>
|
|
<td>d7cb593f2a75e63808f0520ecec6d003</td>
|
|
<td></td>
|
|
<td>1.0.8565.40691</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>ecf814407df1abfecc4a93e83579a1463c33aca6</td>
|
|
<td>cf00f273e524a67be17cd658be71948e42ece4602de26cda4edbf490c032deb81b976e50808e491373815423fcc43936</td>
|
|
<td>54d49209eefc112a195b785bedbe4a90217e88d1f9f24cc940e72422d2a9bdc95795ff989f2bb4d3b442b5c3d26b468c32936320982703f18cbe681aae4e2ff7</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e3bc76525ba81e4e7118d671058905654cac19e6edd50213ec252b56526db0c</td>
|
|
<td>[68a3146b5f0c41860c8c84f4, 68a3146b5f0c41860c8c8530]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\reprlib.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[b3f6d0b4b7085fd925967d507f8aaebf]</td>
|
|
<td>[1baa1965e6507527b405a8e8c18b4d61a8f4c6cb]</td>
|
|
<td>[dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3]</td>
|
|
<td>[32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>reprlib.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>10117</td>
|
|
<td>b3f6d0b4b7085fd925967d507f8aaebf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>1baa1965e6507527b405a8e8c18b4d61a8f4c6cb</td>
|
|
<td>dd504b12df1aeecbfab710fa0c7089b21be20eaf2a0ddb0c5f2dd53fa54ec6b4db69c0165e98498ba35a75f72354e6b3</td>
|
|
<td>32dc0ee46e794ff2411c654e3a0c80bc2af57b4a51e9d61f3742067b6b5f42a5eae91b3af9cb950e096297888bdc94f2b4481cc7782d4f172b2013d8d78e47af</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1e7677f18861b48d241ad124822203b017bd2503bc70ea46bdd133be3c0acad3</td>
|
|
<td>[68a523a99ba7c92b34976f9d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Validators.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[ff4b8004d67dd2a1c2ba1c7e778a0049]</td>
|
|
<td>[81a1ce5f39a72ab8469e75017bf3fa7077f3487b]</td>
|
|
<td>[137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550]</td>
|
|
<td>[ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Validators.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Validators</td>
|
|
<td>13312</td>
|
|
<td>ff4b8004d67dd2a1c2ba1c7e778a0049</td>
|
|
<td>Validators</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>81a1ce5f39a72ab8469e75017bf3fa7077f3487b</td>
|
|
<td>137785f37fadc3cef39433365f64ea2be7998508b43744c84261f653b8d8f5d9451c4841beafd1df857a3d6d8080e550</td>
|
|
<td>ae5514011290d1ccdb844b268d635e50002ab31d20986b8286f9a3a1de2509e1855b20a8e7fca34026c755fcee25517c1dc50cf51926926127a49635caf650e3</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>1f477058702261b995bc18234ff867b47234569c3cd8255454037b74cddd65bc</td>
|
|
<td>[68a5239e621d09b2b1ed5e5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SQLiteHelper.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[05c2fabec68ff1d6f465b6934a1a3647]</td>
|
|
<td>[802732afb976e598f0121b892ad0826871e83ab9]</td>
|
|
<td>[204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2]</td>
|
|
<td>[7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SQLiteHelper.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>AeroScout.MobileView.Common</td>
|
|
<td>10240</td>
|
|
<td>05c2fabec68ff1d6f465b6934a1a3647</td>
|
|
<td>AeroScout.MobileView.Common</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:22 +0000 UTC</td>
|
|
<td>802732afb976e598f0121b892ad0826871e83ab9</td>
|
|
<td>204299060284ff673afe39b863f730a1abf4fae925bf7a9983d96e9e319afec5a8ebcfb17db0784b9d4d201fd021b2d2</td>
|
|
<td>7ce877e0e8084a354d197034e2eaf5947bdbaf68a4d17e68f3bd0a72af3931efff491415e505e3583affe1e23b21072ce4d25f3bb0755295df82f262285617d0</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>27bbf833fcaa2960b9ee59bb02f1e331d2bc2cb9f4cca1eda8cbfeafaf4bdcf4</td>
|
|
<td>[68a1628b267ecd2812a04628, 68a18e5a6551d5c53747f65e, 68a1b6ecbe5c72e648d21629, 68a1e120531e0ca3ba96eb26, 68a20b4fadd40ccee42bde95, 68a2357ef2f54b1728fb0813, 68a2614c3f2e6a5dec3baf18, 68a289e116193e2cd8f24c47, 68a2b41273bf4601c4cc56cd, 68a2de4297bbbb1ebcb6cf61, 68a308710a7b8d912880836c, 68a332ae0313772628837632, 68a35cf18216a1feae2f70c7, 68a3871e9ff2ca2a71809fbd, 68a3b1528c40e2da223cb62b, 68a3db8314b8acff2e9fadaa, 68a405b59388481b8e731cf0, 68a4315b5318f9f79113cba5, 68a45a1544f0d7805650e8bc, 68a4844542b9ebb43736804b, 68a4ae7c8e355abf3b39a7be, 68a4da1b8141e25bf2adffb8, 68a502e63da3e5c1b0f463bb, 68a52e7cfb04c6faf57cc88b, 68a55747ebdf87cb5fee9ae2, 68a582da54a9620183e92742, 68a5aba7b336d276a8e9eab7, 68a5d5e21910cfe0f0de35b8, 68a6016bf4dd6ac2cce6e47e, 68a62a5363df737e3bb9fb3e]</td>
|
|
<td>[2]</td>
|
|
<td>[iatricservice]</td>
|
|
<td>[i-nSam6Test]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[F:\RecycleSSRS\RecycleSSRSWarmup.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2255.853, v2260.859, v2268.865, v2272.867, v2273.867, v2280.871, v2283.876, v2284.877, v2293.885, v2307.897, v2310.898]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:02Z, 2025-08-17T08:00:02Z, 2025-08-17T11:00:02Z, 2025-08-17T14:00:02Z, 2025-08-17T17:00:02Z, 2025-08-17T20:00:02Z, 2025-08-17T23:00:02Z, 2025-08-18T02:00:02Z, 2025-08-18T05:00:01Z, 2025-08-18T08:00:02Z, 2025-08-18T11:00:01Z, 2025-08-18T14:00:02Z, 2025-08-18T17:00:03Z, 2025-08-18T20:00:02Z, 2025-08-18T23:00:02Z, 2025-08-19T02:00:02Z, 2025-08-19T05:00:01Z, 2025-08-19T08:00:02Z, 2025-08-19T11:00:02Z, 2025-08-19T14:00:01Z, 2025-08-19T17:00:03Z, 2025-08-19T20:00:02Z, 2025-08-19T23:00:02Z, 2025-08-20T02:00:01Z, 2025-08-20T05:00:01Z, 2025-08-20T08:00:01Z, 2025-08-20T11:00:01Z, 2025-08-20T14:00:02Z, 2025-08-20T17:00:01Z, 2025-08-20T20:00:09Z]</td>
|
|
<td>[0ec934ef2b8857c6529b162149d8151a]</td>
|
|
<td>[622113c956a7814f286597edbc589c8657d55fb4]</td>
|
|
<td>[531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0]</td>
|
|
<td>[e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f]</td>
|
|
<td>[172.17.252.138]</td>
|
|
<td>[172.17.252.138]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RecycleSSRSWarmup.ps1</td>
|
|
<td>F:\RecycleSSRS\</td>
|
|
<td></td>
|
|
<td>998</td>
|
|
<td>0ec934ef2b8857c6529b162149d8151a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-01-10 19:31:26 +0000 UTC</td>
|
|
<td>2024-03-18 16:06:03 +0000 UTC</td>
|
|
<td>622113c956a7814f286597edbc589c8657d55fb4</td>
|
|
<td>531f832765f688ad217629899824a324df56659d7095a820747aabffae82a825b579295f970d3291647bce73c30a39b0</td>
|
|
<td>e7453fd75ccf67245d462ee4fe80cfacedeb4a0387ddcdee2f59e819b358ff9f314b5c41de28369aa46beebc103cdcbfb991151f67f2a83749c195d54a294a6f</td>
|
|
<td>2025-08-08 17:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>27e9c1cf191627924c1b5ff9bc0c8f7927779ecacffed7f85d3968f819a72749</td>
|
|
<td>[68a1e0a88404c6cec2db4a20]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_er4hfvz1.km1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:01:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_er4hfvz1.km1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:01:01 +0000 UTC</td>
|
|
<td>2025-08-17 14:01:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:01:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>282bb98037b6bcd2ce92e9f3f49f31157d927aa087b03b0e43910c9726b1fd9d</td>
|
|
<td>[68a34d6610b57c5bffc57dab]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_42ab574c-0a79-41e2-b468-ebf54cfafb2d_Untitled1.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>28a6ddc7b83ff25e1c70b0fed71b0ca7654225cc971081844355bc58edf112e5</td>
|
|
<td>[68a31af24db7fedadb153881]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:03Z]</td>
|
|
<td>[6bace707dc12b04a2ca321a88f309f57]</td>
|
|
<td>[58584ffc334e08a10bada624c0466596e38b099c]</td>
|
|
<td>[e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a]</td>
|
|
<td>[5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2198</td>
|
|
<td>6bace707dc12b04a2ca321a88f309f57</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-07-30 13:01:59 +0000 UTC</td>
|
|
<td>58584ffc334e08a10bada624c0466596e38b099c</td>
|
|
<td>e683c912cf8e82c1f3166893a97426f1d2819e89e714a2928f54f13fc25e28c744292c6f92346141aae97a54653c765a</td>
|
|
<td>5b6710aecb5ab55d055641a60f01c0d6f2ab164e2a244c0df774670543535b8cb209b3f671e7448768bc74ab752467255ad5a2987184fd13dbb63b7a6718e379</td>
|
|
<td>2025-08-18 12:22:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22201473661fe80882437e0c7debc4ba2c4140860390d21f164b62bcbbf2a7d6</td>
|
|
<td>[68a5239e621d09b2b1ed5e69]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:41Z]</td>
|
|
<td>[ced1c8a2bd6fba76fdf05a5900e970e5]</td>
|
|
<td>[3f4cc42f538b7584f4ac7582833a836db6136fc8]</td>
|
|
<td>[e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a]</td>
|
|
<td>[d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerApplicationData</td>
|
|
<td>32256</td>
|
|
<td>ced1c8a2bd6fba76fdf05a5900e970e5</td>
|
|
<td>SystemManagerApplicationData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:30 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:30 +0000 UTC</td>
|
|
<td>3f4cc42f538b7584f4ac7582833a836db6136fc8</td>
|
|
<td>e7b88710bbe5f94990f50c9f71768678767057656ac0ea509d7d0c9dbc3188575cd95ab4e5c8609abb6379a36d80ff5a</td>
|
|
<td>d4d53e909f0bb2cc0b555514f74082bf40e3fb281716aab7f9aa9613020806cb576c36ffe3763971d7615eebaface611fdfac272c388fe8db743549af2750d7a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22b0f3100973b824e8bb0d1c171a742b29fc8876f6d05cfd2683b3480820c4e2</td>
|
|
<td>[68a5c8eceb9e7b7716dce205, 68a5ccf2ddfdba423e48863a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\5560f244-d35c-4531-951d-c286d0f86bc1.ps1, C:\_work_devops_mdi\_temp\79b011f7-d177-464f-ade0-ed0f83404238.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:53Z, 2025-08-20T13:22:24Z]</td>
|
|
<td>[9e7c41c8a61927e846853cc41c52d2ad]</td>
|
|
<td>[5cc1d41b8d768427ff9a860f4703f860288ad947]</td>
|
|
<td>[ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0]</td>
|
|
<td>[d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>5560f244-d35c-4531-951d-c286d0f86bc1.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>556</td>
|
|
<td>9e7c41c8a61927e846853cc41c52d2ad</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:53 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:53 +0000 UTC</td>
|
|
<td>5cc1d41b8d768427ff9a860f4703f860288ad947</td>
|
|
<td>ab1ccc2866d2be271f20aa212bb4f284e0fbd8bf79a3450a4d3d371f56a6a5225f5122e22cfbdfd0521457158d3a52e0</td>
|
|
<td>d68ae8f5c9ba8bf97aa98b6f5a04c74541ad2f12cefaa73a740757b28505099bbe3c57356e01e69528d8647b33c5465b08ac6d3db43790770062aaf591e36ec8</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22be3449469641a3b6c5d4f7483dbea6cee9923a6d231814fdcf85d3b0eb8c9c</td>
|
|
<td>[68a3401733e8ca6597dd2da4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Garrett]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w25oryih.dxh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:00:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w25oryih.dxh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:00:33 +0000 UTC</td>
|
|
<td>2025-08-18 15:00:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:00:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>22d76128e43dcda3bf06d4f9d0b0c37120688fba142a594fb6c2855cf92c634d</td>
|
|
<td>[68a162e82a638d4aa3f3a7dd, 68a2b471d463128b1e9bad1b, 68a4061e04f40cbca7b61c8c, 68a557c15db6cbee6e2f08cb]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_sunnuc]</td>
|
|
<td>[NT-SUNCHECK]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\SNC\Script\imagevwr_clean.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-18T05:00:01Z, 2025-08-19T05:00:01Z, 2025-08-20T05:00:01Z]</td>
|
|
<td>[e91533b86712d32131a81409f3b031df]</td>
|
|
<td>[beceab015ae24e529a6f8fd1139e8c9a0fd3ed02]</td>
|
|
<td>[bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00]</td>
|
|
<td>[3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>[172.17.36.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>imagevwr_clean.bat</td>
|
|
<td>D:\SNC\Script\</td>
|
|
<td></td>
|
|
<td>115</td>
|
|
<td>e91533b86712d32131a81409f3b031df</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-03-21 15:11:15 +0000 UTC</td>
|
|
<td>2022-03-21 15:11:46 +0000 UTC</td>
|
|
<td>beceab015ae24e529a6f8fd1139e8c9a0fd3ed02</td>
|
|
<td>bcb865822e3944d195f92d8632e32f2dad2b0c32babd63fc829a043856ac8f56c2c3991a76a5a7563a3f6181b1562d00</td>
|
|
<td>3f00431f30515d4795d2b5ebbd6a2049d3050285037c19e695741bf09b7204fc279424e7fd0cd25a0c15f1bbad9c1a7327226852cbcf9bcab44063c9de02008d</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2308d71301f35c862f39d38bfbefdb09372ea138f938c58875f8f6a84635ecf3</td>
|
|
<td>[68a243bcea61ab2e604201ef]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1mkxt511.2qd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:03:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1mkxt511.2qd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:03:48 +0000 UTC</td>
|
|
<td>2025-08-17 21:03:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:03:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a630e3a0f83a914e2e497a7a90ba1d8cdf2a4eba126318cc394192700fce5d1</td>
|
|
<td>[68a1ca94eae0fd62a51f5224]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_urevov14.ccs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:26:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_urevov14.ccs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:26:47 +0000 UTC</td>
|
|
<td>2025-08-17 12:26:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:27:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a71f00384903af1b59a3e2e6eec836f8e710ecb30d4ace38eefd70df1259a04</td>
|
|
<td>[68a156b7b8a9d1158beec7c0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_i3bblstt.0ux.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:12:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_i3bblstt.0ux.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:12:24 +0000 UTC</td>
|
|
<td>2025-08-17 04:12:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:12:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a9a5636e4828e6f3bfe77608737599ea956c596c3cbfe3da67e1f219e767035</td>
|
|
<td>[68a523a99ba7c92b34976f97]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViewModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[29caf1a5cf79c811d9204a9c7b60261e]</td>
|
|
<td>[9922a071d594279b368fdda2c79df68cf19efaf4]</td>
|
|
<td>[a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465]</td>
|
|
<td>[91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerViewModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerViewModel</td>
|
|
<td>1076224</td>
|
|
<td>29caf1a5cf79c811d9204a9c7b60261e</td>
|
|
<td>SystemManagerViewModel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:32 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:32 +0000 UTC</td>
|
|
<td>9922a071d594279b368fdda2c79df68cf19efaf4</td>
|
|
<td>a5e7a5b3a25607f46e0bc42e0b0615b5cfd9d9749654187609510af5a3dcb426d9ce9bbfc2f0817c6f09d1f8c8040465</td>
|
|
<td>91c46052f06fe3ad34f7ba7094f18ca24880ff81bf06d28048be64d8e3dbe796dca5374988d796ccc49a68e58383b88cb48e234505d03d176f371f4749899f44</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2a9fef8db4e3a019e32d440cc704ed0b8a15a439567000c15c6f6570c9096783</td>
|
|
<td>[68a5239e621d09b2b1ed5e52]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackSchema_icd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[6a9ba4094531a25a391fa577c7c6c08b]</td>
|
|
<td>[b0879b11bc79c994c3083b9a2e5c646465c0b075]</td>
|
|
<td>[6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308]</td>
|
|
<td>[af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackSchema_icd.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>74240</td>
|
|
<td>6a9ba4094531a25a391fa577c7c6c08b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40719</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>b0879b11bc79c994c3083b9a2e5c646465c0b075</td>
|
|
<td>6f61f1cbc4c7bb2249a8c2b636f24cd3a9a089102098588eb2a9ac85133961628e97556f4de9b24013ca55f0f74a5308</td>
|
|
<td>af3b6ca52f54f52d98fb2fe62f9e1ee79b4a9663fb82f352dc6faf405ef9d002512c2d05127417fbf2fd95a712fcc3f65df7f110f40b278036790200c75d1db3</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ad327190254cfabf1ce372b9eb3080fde80527f9afb95609744c84b069f01af</td>
|
|
<td>[68a48674c4cb2500be692641]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.BedClient.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[53bb6bf6e10f31058b313d251d35a3ee]</td>
|
|
<td>[bd121b21353174db9fbf449b13da23abf6841825]</td>
|
|
<td>[00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73]</td>
|
|
<td>[c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient</td>
|
|
<td>12800</td>
|
|
<td>53bb6bf6e10f31058b313d251d35a3ee</td>
|
|
<td>Stryker.iBedServer.Clinical.BedClient</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>bd121b21353174db9fbf449b13da23abf6841825</td>
|
|
<td>00e7f80c14530e8a112e93cecd4b72b41e0d8332c4868f75e3fac8fd53fa31ef20c8c72d5ea1429f42e8f8834dfa0b73</td>
|
|
<td>c5a5484a030e1581a9ed31e5181582ba60d5ae00651d120a9db5e3e76db2cf2d3dbc5927c33bfead6d026006dfb676045e84616a052fd630c7e75caef7dc9631</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2ad4cc623a5619920ce1d4ce674a6cb47b5706f757e0dbccd2c89616e626900c</td>
|
|
<td>[68a3165f22b7418ee6d4590f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cm32l4nf.gxu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:02:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cm32l4nf.gxu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:02:31 +0000 UTC</td>
|
|
<td>2025-08-18 12:02:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:02:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b13145185c874dede90e8f4656daa3b60d93459e476545dbad90746d750c458</td>
|
|
<td>[68a4698d5445b9aa205794eb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_0e99f74a14614d68b1464e32cd41867d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:09:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_0e99f74a14614d68b1464e32cd41867d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:09:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2b531f26102d0687325387dac16e037621852063de02203aa4674e01d589374a</td>
|
|
<td>[68a19be542f4bad561883042]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dr1aymbt.j23.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:07:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dr1aymbt.j23.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:07:42 +0000 UTC</td>
|
|
<td>2025-08-17 09:07:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:07:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2539cd16bb06022c2a25860732b37be246b51dc74e2b6b991d06594d04b705b0</td>
|
|
<td>[68a3146b5f0c41860c8c84f8, 68a3146b5f0c41860c8c8539]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\collections\__pycache__\abc.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[cc29eb47fb461ae6f3b5406ff37c01ae]</td>
|
|
<td>[36b89b966daf9b3254160799ea992b61d85e7c15]</td>
|
|
<td>[f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177]</td>
|
|
<td>[a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>abc.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\collections\__pycache__\</td>
|
|
<td></td>
|
|
<td>253</td>
|
|
<td>cc29eb47fb461ae6f3b5406ff37c01ae</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>36b89b966daf9b3254160799ea992b61d85e7c15</td>
|
|
<td>f1b5f551b135aabc82e762ba2938b8013392288f34e23d4e20ef35893db5d6a296fb8217b23de04517fb146b82e4c177</td>
|
|
<td>a6c90b60b6a398c91eae18c7668c7d4eced065e2696677998ebf7eda45b78a458bc92d0c41e794a517056966b30b67f7eb8360902580a3ec82044d4e09a9fa6f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>254f47a4a8697b42051ab2cd2b081a76c48204bd8a57ac9527ac623733119c7d</td>
|
|
<td>[68a1e71b93264a29fd1ee60a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSwisslog]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xw0tqpga.deh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:28:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xw0tqpga.deh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:28:31 +0000 UTC</td>
|
|
<td>2025-08-17 14:28:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:28:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>25a1d161a927d2f4137696882e75cbfba197acf96590c7062a3fb31383548698</td>
|
|
<td>[68a1830c2dc56a47504409e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3gsdtrcc.e1e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:21:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3gsdtrcc.e1e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:21:44 +0000 UTC</td>
|
|
<td>2025-08-17 07:21:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:21:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>270aff5383a4742b7159a21eeb3bc8c3620478cb561e6db80510f187e3ab50d6</td>
|
|
<td>[68a246eb395eca2c3f17fa04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zfqr5yrd.w2r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:17:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zfqr5yrd.w2r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:17:27 +0000 UTC</td>
|
|
<td>2025-08-17 21:17:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:17:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>270d051fc9cbb8cb66497b8dea30b5008c9ae9ffb0e15f79c4e7cb490f8abdca</td>
|
|
<td>[68a25f08a862a9b86d2b3e0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_mi1gobfg.pks.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mi1gobfg.pks.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:00:13 +0000 UTC</td>
|
|
<td>2025-08-17 23:00:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2c73f99ad12864d0c9b8f810de30c8ac9d3b89b9129169865c5c3837c7a6856c</td>
|
|
<td>[68a18f0549fba6e1a58ed5a8, 68a2e08b03d8e95044c937d3, 68a432305af3ecc3cb0504f6, 68a585326688127c061e72f3]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_Iatric]</td>
|
|
<td>[i-nSamDB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\Program Files (x86)\CoreFTP\SunquestRH.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:10:00Z, 2025-08-18T08:10:00Z, 2025-08-19T08:10:00Z, 2025-08-20T08:10:00Z]</td>
|
|
<td>[a930976021610a665899490be2be6e36]</td>
|
|
<td>[007eda380db0425df9a36638bfdf85e77c259ae1]</td>
|
|
<td>[3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532]</td>
|
|
<td>[68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SunquestRH.bat</td>
|
|
<td>D:\Program Files (x86)\CoreFTP\</td>
|
|
<td></td>
|
|
<td>511</td>
|
|
<td>a930976021610a665899490be2be6e36</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-11-01 13:02:24 +0000 UTC</td>
|
|
<td>2023-11-01 13:05:15 +0000 UTC</td>
|
|
<td>007eda380db0425df9a36638bfdf85e77c259ae1</td>
|
|
<td>3ef1db45e0544b20a535683bd89a5c74881f9e7560308bfabc0639a6c17215e804bafbb764f6f507b07c83086c720532</td>
|
|
<td>68f95ced67dcb66598d2f3ec76d702ad366e1541f48dc55c7d3758f68d55209825c6d77e4d5338f5455f768e3df95b217ae58e08ab3c8ec6b08d0048f3e3c0be</td>
|
|
<td>2025-08-09 08:10:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e04fd3951fbb534d097ed620d224eb5876826669ab7d633fda596e061b7a985</td>
|
|
<td>[68a52f3a711130a12eb554ea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3mWebTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mm4pscpp.fzz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:13:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mm4pscpp.fzz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:13:10 +0000 UTC</td>
|
|
<td>2025-08-20 02:13:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:13:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2e24f5990f0ba6248fa08bf4d4782db2aad9974e518c0e1e233efa92494be937</td>
|
|
<td>[68a50f31981abdebabc95a70]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ek2lcwm3.ikq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T23:56:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ek2lcwm3.ikq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:56:21 +0000 UTC</td>
|
|
<td>2025-08-19 23:56:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:56:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2942b263d56edddcb66177748a35f7be115f1afd60e80fa55f0ee09629494d15</td>
|
|
<td>[68a3146b5f0c41860c8c850a, 68a3146b5f0c41860c8c855d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ipaddress.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[2c3b87b89037f45d258d52a25767f1b0]</td>
|
|
<td>[550d2ad97228d271783e4378c7541b6800f11e9c]</td>
|
|
<td>[76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85]</td>
|
|
<td>[5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ipaddress.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>91036</td>
|
|
<td>2c3b87b89037f45d258d52a25767f1b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>550d2ad97228d271783e4378c7541b6800f11e9c</td>
|
|
<td>76e7f7339886ee3d3c45611ddb116489d0825c07cc67e32ee18e09a66d0c3cb71d00d281b99bacdf2920f75609468b85</td>
|
|
<td>5c3d3728e5055113918a04d20831c2fae0b3af10f1bb94470a91f8f09026b75a78eea62db3c5883bb8f654184c2c6a651c6a96c62e532ff49e87b1fc245a3f1d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>297d493d5e5cb60eb0efb9655c35018b6deb10e9cafe24a8e83065ea6531237b</td>
|
|
<td>[68a345f4e4355f704785fb54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nsdprodconn1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_l5fz4t12.5ye.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.856]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:25:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_l5fz4t12.5ye.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:25:35 +0000 UTC</td>
|
|
<td>2025-08-18 15:25:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:25:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>29877ebec7f64ecd376dea7bc916b4547ac036f84ab40e78edde56b014708a34</td>
|
|
<td>[68a241001a4f473f56688bb2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t4ptnebx.hz2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:52:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_t4ptnebx.hz2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:52:03 +0000 UTC</td>
|
|
<td>2025-08-17 20:52:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:52:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30dbaca4c387bc212e326f653c535f315e111997840af61c4cceaafc2c2b7b6e</td>
|
|
<td>[68a18d08c761638e1c82e3dc, 68a2dfdc19028bf24d272e37, 68a4315aac209890fd02860e, 68a581c7ea8ad1c4ecc342b9]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\__SCRIPT REF Files\REFEpicHHEnvPLY_ACE3_Refresh.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z]</td>
|
|
<td>[fe11a07acc95a9d0efd502c6c79f11ea]</td>
|
|
<td>[d2d2aa489d4f51c3d533906b9f1adcde16ae28b0]</td>
|
|
<td>[d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b]</td>
|
|
<td>[74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>REFEpicHHEnvPLY_ACE3_Refresh.bat</td>
|
|
<td>C:\HomeHealth\__SCRIPT REF Files\</td>
|
|
<td></td>
|
|
<td>588</td>
|
|
<td>fe11a07acc95a9d0efd502c6c79f11ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:45:25 +0000 UTC</td>
|
|
<td>d2d2aa489d4f51c3d533906b9f1adcde16ae28b0</td>
|
|
<td>d9d0c0f17e5868347d585832366f94810c78d28915fc55227bfc44023f780a763d08ca085f6e1557c4cfe4b1c05f497b</td>
|
|
<td>74f6a318fdaf53e7277916da32240a0a09de9930f8e874debe094a09b68233ca2d4326dca6bdfe6f2eca78bfae3857aae504fba7548b96e89cf1b66b757c8cfe</td>
|
|
<td>2025-08-09 08:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30f6420e30c14493561c208144082198b6ef8921d5584e99ce925a2859ccbf4c</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20b]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindPasswordLastSet.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[305adcf21d1608c85d2bad7b2ee17f27]</td>
|
|
<td>[e3ef3170c8936e8e00b1e0bd20050c116cba3dc3]</td>
|
|
<td>[4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200]</td>
|
|
<td>[6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindPasswordLastSet.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3800</td>
|
|
<td>305adcf21d1608c85d2bad7b2ee17f27</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:20 +0000 UTC</td>
|
|
<td>2025-06-05 20:58:32 +0000 UTC</td>
|
|
<td>e3ef3170c8936e8e00b1e0bd20050c116cba3dc3</td>
|
|
<td>4fceca5badb31c4e07fe398c66abcfe5619a4fc65d2cac89fc10bd4c6b5ddfa1210752cfff1dc7fa75e1499d1c9e6200</td>
|
|
<td>6769760d16b1bff60c96eeab719ce18eb141c54e0b4071e62401515837566a92ce3b844559ab9714fb9e30b574816da40c5e3d00ab7650ed70b02e24fbf0b713</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3129528d911f66c7bb4157add40fd6f5e831069ce89676d412d7a3f781baf5d4</td>
|
|
<td>[68a194b6a53d5390bd32653e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wbyd23ye.0vk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:37:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wbyd23ye.0vk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:37:02 +0000 UTC</td>
|
|
<td>2025-08-17 08:37:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:37:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31617bc6d788d17e9d6b4e157c61ff4f5aa99ff6dd12390aaec350e1dad59cfd</td>
|
|
<td>[68a1abd81464ade8cebc30df]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jpj1pwcu.2im.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jpj1pwcu.2im.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:40 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3183ca151646505652e1fc5a9b93bc995d5e96e9edb292db6b3b408675579dcb</td>
|
|
<td>[68a4ccc785b914a60d739e52, 68a4ce1fc826337212f53bef, 68a4d07753a851daf11e693a, 68a4d07753a851daf11e6950, 68a4d2d1ff2b441b84428132, 68a4d2d1ff2b441b84428148]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\Process.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[d2f5da45fcdf1a8df76585382af60f4d]</td>
|
|
<td>[8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e]</td>
|
|
<td>[3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad]</td>
|
|
<td>[813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Process.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Process\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>d2f5da45fcdf1a8df76585382af60f4d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:50 +0000 UTC</td>
|
|
<td>8a6d1280bbf56c8dbb2443609ff9b81d9c6d940e</td>
|
|
<td>3cee7187ff00cfa62799925deb2e8b2455becb8edf58069c0708c4ad2b95195d2d3aa62f38e8192c9303b07dba39b4ad</td>
|
|
<td>813eb72ad7a7107eed7c2a968b641599b93c4b0b6b772535b007bc37e574eb757d37ad7aaa97030f0d0867523f8fdbb6b611926a703598ca8ec810d7defa69c0</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>318d814bff375eefc6e29af2e0c2de1b068f1446506cc5f35016243e3a35300f</td>
|
|
<td>[68a1ab83995f21981882f87f, 68a2fd0889defb6e59ac74ce, 68a44ea8ec4473d55579feaa, 68a5a03ec841a3410bc8c339]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\EpicHHEnvSUP_SmartUpdate.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T10:06:06Z, 2025-08-18T10:06:06Z, 2025-08-19T10:06:06Z, 2025-08-20T10:06:06Z]</td>
|
|
<td>[8594a55773a5d5e9c9180136966b5739]</td>
|
|
<td>[596dbf0a2adc99c52a2c70c81b17d94db0c605e0]</td>
|
|
<td>[35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc]</td>
|
|
<td>[7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvSUP_SmartUpdate.bat</td>
|
|
<td>C:\HomeHealth\</td>
|
|
<td></td>
|
|
<td>94</td>
|
|
<td>8594a55773a5d5e9c9180136966b5739</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:46:58 +0000 UTC</td>
|
|
<td>596dbf0a2adc99c52a2c70c81b17d94db0c605e0</td>
|
|
<td>35b9fbacdf477524baab4bb7a4436b9b48120a1886cef9f5fa6c81e12aad8b25eb1ccec212a17f482402d8f39738bbcc</td>
|
|
<td>7d94a025f3eb39329cf634ba02053fc7e013d8fde2af9a2740c6116c84f70b3b9afaf876998308ecf4d684b3d80f365b8b6f5eefe2d55c1634b4b2fc3f1b95a8</td>
|
|
<td>2025-08-09 10:06:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3196423864811fbe22bf53f80cc68526cf48ea70190a212e4cc48db649034591</td>
|
|
<td>[68a50ddd41a24e74bb2aa5d2]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\NellcorPuritanBennettB_5_0_3_6.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:50:47Z]</td>
|
|
<td>[a95a1bbcab7cae689156d805a65bdd9e]</td>
|
|
<td>[b55cf6fa2977d2fc1917b131c20390b3c1f26613]</td>
|
|
<td>[66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f]</td>
|
|
<td>[ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NellcorPuritanBennettB_5_0_3_6.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>832000</td>
|
|
<td>a95a1bbcab7cae689156d805a65bdd9e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:50:41 +0000 UTC</td>
|
|
<td>2025-08-19 23:50:42 +0000 UTC</td>
|
|
<td>b55cf6fa2977d2fc1917b131c20390b3c1f26613</td>
|
|
<td>66457d76ec72abb6f37800fa3b2db7d40904fca17a08b9f8cbf006abcecba70883cbfd718e1d24182befcbdf0488192f</td>
|
|
<td>ba18fd5738ebfdad69619cb12fd306bc7fee6a9bb0b40f14bfbb36f56d44b7837582923f23b8ae00fda95c5280c20ec29daab893f89e4a9eedb788aada74c220</td>
|
|
<td>2025-08-19 23:50:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31ace35747ecced749c928084db3f90c66e95bd9602971bb5ceef131a953689f</td>
|
|
<td>[68a389627bcaf39ed5409b94]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Onedriveownership.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2269.866]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T20:13:13Z]</td>
|
|
<td>[9aae1bdf85a8905cf2d96a5f8ef25933]</td>
|
|
<td>[3065aa4cbf9f3a2341c95212ea1891817294a142]</td>
|
|
<td>[c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e]</td>
|
|
<td>[9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Onedriveownership.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>910</td>
|
|
<td>9aae1bdf85a8905cf2d96a5f8ef25933</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-08 20:39:11 +0000 UTC</td>
|
|
<td>2025-04-08 20:39:11 +0000 UTC</td>
|
|
<td>3065aa4cbf9f3a2341c95212ea1891817294a142</td>
|
|
<td>c0ef32afe007548a8c6a696b997eeb8123d87df8a0bee3de24a325ab8c5f776b38154d44df90845283be00d03cc0df8e</td>
|
|
<td>9de6ab7161e60c961dca792e9ea9335b344e8a190720903492cfacc89a9001e0fea33de2dbbd1297035d9b7652e257795e543d5cb546edd1cd80de1c3c849b16</td>
|
|
<td>2025-08-18 20:13:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>31b5da4436dcda99daa9b4d389df222f22f4709159f9165c955fe24fd5323762</td>
|
|
<td>[68a3146b5f0c41860c8c8556, 68a3146b5f0c41860c8c857a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ast.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d5f2228dec6e8dc3cbdc9862ec1605cd]</td>
|
|
<td>[79342d19808ee815e433f96728b0e4d3ff1e5c29]</td>
|
|
<td>[86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06]</td>
|
|
<td>[868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ast.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>102841</td>
|
|
<td>d5f2228dec6e8dc3cbdc9862ec1605cd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>79342d19808ee815e433f96728b0e4d3ff1e5c29</td>
|
|
<td>86a15aa2ea29648397bbc298e8e4d034922b4d8de5bca34318d6d3466ba8ba8d1e6f09b5a5d355e59ec07715203bae06</td>
|
|
<td>868aef0387dede56b096c2b6ebc36908ab14c6d47c702f5f2faa9176e927229027456a4a0afb600bdfdc8118de8d7239ea4fd915107b8aaa142456eee97eccc0</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>321acf2e7ad2071fa443468fce5535f6614be43029bd05b5c38e86e0ef393a11</td>
|
|
<td>[68a4b0fb13fac5171eeef0d8]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.DTO.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[71da969b9025ad135aef8a5a5df701be]</td>
|
|
<td>[e0a0af76470e1bfe566cf15d4590c4401e6bac98]</td>
|
|
<td>[cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408]</td>
|
|
<td>[c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Pegasus.DTO.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td></td>
|
|
<td>740352</td>
|
|
<td>71da969b9025ad135aef8a5a5df701be</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:00 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:49 +0000 UTC</td>
|
|
<td>e0a0af76470e1bfe566cf15d4590c4401e6bac98</td>
|
|
<td>cf0a922cad16348dabb7482211ec431e766b8e123694a068ced29761916838b506eb26a76b336782465b4678d836f408</td>
|
|
<td>c338bdfb4c66998ac57cdc1e1335762e2701756e0cb319dc2d67cd3195abf84d2ba877d11f02c60e9103e684ce7ba20a506e7a3b387a41022da6f1492129a5c5</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2bee0e09b0add0c35eda78f7379069960dac061c4e215792c32e6afe3414f579</td>
|
|
<td>[68a5d382bd3935126ed513eb]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVA12]</td>
|
|
<td>[I-CA-PSM]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVA12\Desktop\GatewayWindowsDefenderATPOnboardingPackage\WindowsDefenderATPLocalOnboardingScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:54:00Z]</td>
|
|
<td>[f50eda75d10c6f119c6cd40966efea67]</td>
|
|
<td>[0c73d106cbfa403bf59db7d87ff1ea8314baac1d]</td>
|
|
<td>[6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33]</td>
|
|
<td>[282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WindowsDefenderATPLocalOnboardingScript.cmd</td>
|
|
<td>C:\Users\CA_Jnt_SVA9\Desktop\GatewayWindowsDefenderATPOnboardingPackage\</td>
|
|
<td></td>
|
|
<td>17354</td>
|
|
<td>f50eda75d10c6f119c6cd40966efea67</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-17 00:26:56 +0000 UTC</td>
|
|
<td>2025-03-24 19:48:16 +0000 UTC</td>
|
|
<td>0c73d106cbfa403bf59db7d87ff1ea8314baac1d</td>
|
|
<td>6107bc12310854c4f1983e9a0b5865af720e3040998b40d8608ad337d683603759ced45cc3046fa8a901e70775779e33</td>
|
|
<td>282ad7f747aef6cd6a9cfc938a8c5098afe581cdefdcc85fc6fbc5ac7d4f3c0b2f22258505909639f5cc65ed414d5193cf2569cb0d450926c3ec21166c2e73e0</td>
|
|
<td>2025-03-24 19:52:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>32ddd6f42f62b47cab7ac4493310b7cf3203726c13615f7f57e289fc623fedd0</td>
|
|
<td>[68a48674c4cb2500be69263f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Data.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[2ab8001eba88698a847e929579af07ac]</td>
|
|
<td>[d5b67246ce5168b6e967a0b52138ff0cae92f784]</td>
|
|
<td>[f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7]</td>
|
|
<td>[9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Data.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Data</td>
|
|
<td>5632</td>
|
|
<td>2ab8001eba88698a847e929579af07ac</td>
|
|
<td>Stryker.iBedServer.Clinical.Data</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>d5b67246ce5168b6e967a0b52138ff0cae92f784</td>
|
|
<td>f409e19a44e31c455f2c5ea14f658f14d1afb0447e1fd89331fa788c2cdd59eb7a9035d02cf9cbafc28d30613a6134c7</td>
|
|
<td>9d41dc508afac2bc5c1e0b087a4bfcdfe96b3344b569e19112182eb62efcb2b427141e22a9ea0710fae164872477f2249e06b270d0f9d79958c1ac74d36d4479</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>346ccc90937cdf654b3d5f9ac9c7809c033d6eddb18e9bd2e22f6b423dd54df3</td>
|
|
<td>[68a19cd53b5aad0f9d7b2018]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_do1v2xwp.v3q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:11:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_do1v2xwp.v3q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:11:40 +0000 UTC</td>
|
|
<td>2025-08-17 09:11:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:11:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>34ed77bd9b38d618a2ce47893a58840cb425e0a575f531fa6a9e86af4af738c2</td>
|
|
<td>[68a4864ff17c458cfe4c9f0b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedV_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>["C:\Stryker\Stryker Vision\WhiteboardApi\Stryker.Vision.WhiteboardApi.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-19T14:02:35Z]</td>
|
|
<td>[e8b2a9bad33ebe53ffc666fc129e0697]</td>
|
|
<td>[c85a5eabbb0ae0cd9d748394f38b8b58a77723b8]</td>
|
|
<td>[415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b]</td>
|
|
<td>[9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.Vision.WhiteboardApi.exe</td>
|
|
<td>C:\Stryker\Stryker Vision\WhiteboardApi\</td>
|
|
<td>Stryker.Vision.WhiteboardApi</td>
|
|
<td>140800</td>
|
|
<td>e8b2a9bad33ebe53ffc666fc129e0697</td>
|
|
<td>Stryker.Vision.WhiteboardApi</td>
|
|
<td>1.1.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-22 11:41:12 +0000 UTC</td>
|
|
<td>2024-10-22 11:41:12 +0000 UTC</td>
|
|
<td>c85a5eabbb0ae0cd9d748394f38b8b58a77723b8</td>
|
|
<td>415a0fa428811543bad210844eaedec804a4a67fad5724d0942a8e007c35a703afe29609da8e502b59770c28cb59f83b</td>
|
|
<td>9b06bb88ca565639249949d0caa62902d29d40632de813b5135fed13d84ad0fd27524fe8089a4fefe686041bb6d394434fe366521c79967a096bc3feb4d54c33</td>
|
|
<td>2025-05-20 14:56:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>35318a9ab7f60d956cd28206294996eff20bd8bf818a962b29b6c9f61407e40f</td>
|
|
<td>[68a1abb04b15d6efe3e372b4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1nabrctk.jfe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:15:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1nabrctk.jfe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:15:03 +0000 UTC</td>
|
|
<td>2025-08-17 10:15:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:15:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3554782b0252734754cb8fc6c12b1f6561ae7b70d0158ce40cfe36f9f7bcba5c</td>
|
|
<td>[68a31df4554d4b0dc35a15ad]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:34:58Z]</td>
|
|
<td>[c85702cbbe5bef4fbdffdd797532d073]</td>
|
|
<td>[8dcf05881e2b6cb1764d87d63a94201380891187]</td>
|
|
<td>[5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a]</td>
|
|
<td>[d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>c85702cbbe5bef4fbdffdd797532d073</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:34:57 +0000 UTC</td>
|
|
<td>8dcf05881e2b6cb1764d87d63a94201380891187</td>
|
|
<td>5aaad89a23e33c54a40f3ca430919cb88e105a31c68ab4e7f9d9bb43a36c7931475890734595dd0f0bcc9b06c661755a</td>
|
|
<td>d978c6a828e8cd94843df73050504736ad0e8879aecbd0cd55ca45652e93c4a0e2ec9685834364bdddca7c9b502dab139a5d54bf626c54d29e8efb979c5aaa3a</td>
|
|
<td>2025-08-18 12:35:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>301cf50872c1e5c8b34b970892ba731a492642a1afee8c89cc1de5411b3a099a</td>
|
|
<td>[68a62a95414ce37e5511e739]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\IPDataListenerService\IPDataListenerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T20:05:34Z]</td>
|
|
<td>[4b09a5c54dd9c4160a0153c47e6b6b5d]</td>
|
|
<td>[f2a30745b256ff1540a76e75cf58aad763febdc8]</td>
|
|
<td>[e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956]</td>
|
|
<td>[ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IPDataListenerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\IPDataListenerService\</td>
|
|
<td>FormFast.FastPrint.IPDataListener</td>
|
|
<td>25088</td>
|
|
<td>4b09a5c54dd9c4160a0153c47e6b6b5d</td>
|
|
<td>FormFast.FastPrint.IPDataListener</td>
|
|
<td>23.6.0.20130</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:20:04 +0000 UTC</td>
|
|
<td>2023-06-20 18:20:04 +0000 UTC</td>
|
|
<td>f2a30745b256ff1540a76e75cf58aad763febdc8</td>
|
|
<td>e3be66cca14fefb315c02294cfb971a231d9e59e33168d757c880bc898eec0eee8c2a91052b64e9d517d1ee144bfc956</td>
|
|
<td>ec7ec12f4b277c4ac677d3ee6811ff8fd808651600a292017012537cbac841af55751f038d6a5ce2cba1db6560cce8ee803123067fd5820d790024bb3a30ed45</td>
|
|
<td>2025-08-20 20:05:41 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>30637f470d50f8e4e55ca6bf69130a74b83e9b51f757d487a2c076ed7397eaa9</td>
|
|
<td>[68a1781303efa29c2490c53e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_por1serl.ypl.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:34:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_por1serl.ypl.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:34:54 +0000 UTC</td>
|
|
<td>2025-08-17 06:34:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:34:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10d3b4be55b51cd7d75db7a6179ea005060ad250fc67f908a2515511e97f6283</td>
|
|
<td>[68a18f8e881670216ff01e17]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n4vkfj3n.1xw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:15:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_n4vkfj3n.1xw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:15:02 +0000 UTC</td>
|
|
<td>2025-08-17 08:15:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:15:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>378451dd833761309947110ca8079fa3b6c1ad60a87feb1c235c423640d82be7</td>
|
|
<td>[68a23709d838072c28f2c580]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uuh0mg2w.eid.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:09:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_uuh0mg2w.eid.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:09:32 +0000 UTC</td>
|
|
<td>2025-08-17 20:09:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:09:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37b56e0bca875191ee27659359aecd65ee5e5833e6bc19b044442533ce78bff2</td>
|
|
<td>[68a48674c4cb2500be692645]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Entities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:54Z]</td>
|
|
<td>[115d4be1403b934451bb9297167cb005]</td>
|
|
<td>[4252f6cecd12bc6bc9da84e1180aabd9f0dfe591]</td>
|
|
<td>[fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8]</td>
|
|
<td>[729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities</td>
|
|
<td>23040</td>
|
|
<td>115d4be1403b934451bb9297167cb005</td>
|
|
<td>Stryker.iBedServer.Clinical.Entities</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:28 +0000 UTC</td>
|
|
<td>4252f6cecd12bc6bc9da84e1180aabd9f0dfe591</td>
|
|
<td>fafc08124e900760a95035662e9570f70580bb52131f2be51dca5d5ec29cb3114d180c7545964d69ebcc57094f5843e8</td>
|
|
<td>729717d34639f0a428f7402617e10174bc074b254e1584fabb3e748504fefa504510bd3ef3a21d61505d2c116c35d2ae2bef6a30a716132a096ef2d43f912895</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>37f8f5baccac320025e4005fff81ee9450f58762f2482b2d8124aa926fd8e0d2</td>
|
|
<td>[68a51fae0e8ba9c7b816e25c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_msc5vhgd.1kv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:06:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_msc5vhgd.1kv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:06:44 +0000 UTC</td>
|
|
<td>2025-08-20 01:06:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:06:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>382316c0afc6d7d32fee0b4c79c925a641feceaa99a2d6eb0ad98837cfca0098</td>
|
|
<td>[68a16162e584c22c75f72ecb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MIntGTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vowrvir1.zyf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:58:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vowrvir1.zyf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:58:03 +0000 UTC</td>
|
|
<td>2025-08-17 04:58:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:58:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>322b2b5c4044e2657eb4e703d336eac4e2cf0f8ba8fa111c62d0474eb76db2a9</td>
|
|
<td>[68a4ccc785b914a60d739e44, 68a4ce1fc826337212f53be4, 68a4d07753a851daf11e692e, 68a4d07753a851daf11e6941, 68a4d2d1ff2b441b84428126, 68a4d2d1ff2b441b84428139]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setroot.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[d3087075a6dd224443a1f6aac8e03744]</td>
|
|
<td>[78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5]</td>
|
|
<td>[e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579]</td>
|
|
<td>[fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot.cmd</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\</td>
|
|
<td></td>
|
|
<td>937</td>
|
|
<td>d3087075a6dd224443a1f6aac8e03744</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:06 +0000 UTC</td>
|
|
<td>2016-12-02 07:18:54 +0000 UTC</td>
|
|
<td>78e22340ffd93ac2ff6c33d02c9da5e0d372bdd5</td>
|
|
<td>e038b7a945a32cc733083e26bc059ed2861fcbafe3709ec636543e92f17ce2f0c6495e4cf844c03ed5840b64c4bff579</td>
|
|
<td>fa5b120abc376183b8362aa0c7a4d0fdcdca299b545922d43b7da19b9965a734938af7e05732a3d18bdf671bb45f83e03ab7af3ded85feb6d813ef6618b6d68f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>326b621474786c3a956a35665f74162d6368f683f36a3279c8ba87ff4db0c088</td>
|
|
<td>[68a26ec274eb3d0bf454e3f7, 68a26ec274eb3d0bf454e3f8, 68a3dc7b3a4d559703d13f32, 68a3dc7b3a4d559703d13f33, 68a54a317a345dcf1b41bfa9, 68a54a317a345dcf1b41bfaa, 68a54a317a345dcf1b41bfab]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\Microsoft.PowerShell_profile.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-17T23:59:47Z, 2025-08-17T23:59:50Z, 2025-08-19T02:00:28Z, 2025-08-19T02:00:30Z, 2025-08-20T04:00:28Z, 2025-08-20T04:00:30Z, 2025-08-20T04:00:31Z]</td>
|
|
<td>[5fbdd10ee7659f1aee5335bd7e198fb9]</td>
|
|
<td>[c20c64d0f39da127033b6d188e35ec7ff4223707]</td>
|
|
<td>[09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd]</td>
|
|
<td>[56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShell_profile.ps1</td>
|
|
<td>C:\Windows\System32\WindowsPowerShell\v1.0\</td>
|
|
<td></td>
|
|
<td>86</td>
|
|
<td>5fbdd10ee7659f1aee5335bd7e198fb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-07-30 20:39:44 +0000 UTC</td>
|
|
<td>2018-07-30 20:39:44 +0000 UTC</td>
|
|
<td>c20c64d0f39da127033b6d188e35ec7ff4223707</td>
|
|
<td>09dbb534013ece1b37777a117e8279bc489332ee9233ff2611fbc7548f6260a3f51d810a9ae267e691f031a9b35712fd</td>
|
|
<td>56f24f822659a5a55e564ae41bf08b62b5a804f6cd78ce9cf686a49f1f50bdd2c82ad990d8872c19f70e0143ada9b6d49fe24c168c982f30ca6f9eea000267eb</td>
|
|
<td>2025-08-09 08:03:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>35831e10050275f4a36fb93aa4db13d2edf34749154ef4636a29477d9f30c565</td>
|
|
<td>[68a4ccc785b914a60d739e43, 68a4ce1fc826337212f53be3, 68a4d07753a851daf11e692d, 68a4d07753a851daf11e6940, 68a4d2d1ff2b441b84428125, 68a4d2d1ff2b441b84428138]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\Qdx_work\custom_scripts\CloverleafInterfaceRecycle.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[829df969d661e3a13c15827ed7d696a3]</td>
|
|
<td>[b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b]</td>
|
|
<td>[d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91]</td>
|
|
<td>[95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CloverleafInterfaceRecycle.cmd</td>
|
|
<td>D:\Qdx_work\custom_scripts\</td>
|
|
<td></td>
|
|
<td>1212</td>
|
|
<td>829df969d661e3a13c15827ed7d696a3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-03-23 18:22:50 +0000 UTC</td>
|
|
<td>2020-03-23 18:22:50 +0000 UTC</td>
|
|
<td>b25f5c6fb0c83b2a27486eaff6ad2dd4750b8b9b</td>
|
|
<td>d66ecd4c1b77f5725be030a570a2ad019559acb04404ad6126a4cb4189e22b24a07286207f63799d5b01f3950799bf91</td>
|
|
<td>95f650aaab21ad90f2a7af8fbf3d9f2fc70712eb17616a3f22a9bd21ea938061af2931354ae5d98c814663bd1f76266f5665b4ca387b657942d9b756e55eaa4b</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>36490d3c9471838f3c20f0d365fb262e57a7b0a20eee7edd0b4e4cff4df5a381</td>
|
|
<td>[68a1e0bc5a612562ec7682af]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_diuxbi12.wl4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:01:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_diuxbi12.wl4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:01:20 +0000 UTC</td>
|
|
<td>2025-08-17 14:01:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:01:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3691c63ee84b2628e0c021418d0dee979b50ce550178db3efc5e19fe5bad5b4c</td>
|
|
<td>[68a472cff502bbc3c30ebf3e, 68a474e54bf464a98201b8d0, 68a474e54bf464a98201b8d2]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\SuperPutty\log4net.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\SuperPutty\SuperPutty.exe]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:49:17Z, 2025-08-19T12:50:51Z, 2025-08-19T12:53:45Z]</td>
|
|
<td>[f69c36bbf1220bdd2a114f4abc6b0fc1]</td>
|
|
<td>[d0bb80306ce3dc12cc0c893e28fef27d721c1b7e]</td>
|
|
<td>[9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f]</td>
|
|
<td>[6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>log4net.dll</td>
|
|
<td>C:\Software\SuperPuTTY-1.4.0.9\SuperPuTTY-1.4.0.9\</td>
|
|
<td>Apache log4net for .NET Framework 2.0</td>
|
|
<td>311296</td>
|
|
<td>f69c36bbf1220bdd2a114f4abc6b0fc1</td>
|
|
<td>log4net</td>
|
|
<td>1.2</td>
|
|
<td>Not Signed</td>
|
|
<td>2018-10-23 18:59:50 +0000 UTC</td>
|
|
<td>2024-04-16 15:29:39 +0000 UTC</td>
|
|
<td>d0bb80306ce3dc12cc0c893e28fef27d721c1b7e</td>
|
|
<td>9670861d2b9ab07ae7bba832e5ec3a50c565703b38782551960d9c766907052f3341b983e92625ca1b399d5694e9027f</td>
|
|
<td>6bbe294dccdd68e8b7539a25df3183bc4bad9238e7bb2438e3883ea133437728ac90d9567953e6f6991113e4c0fe3f7cda1dbbffe0c37181dacbc8dcbf718633</td>
|
|
<td>2025-03-28 16:06:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>154aa488e0abd508880818e2049df9c1c2cbaca6669dfa5bd5a69dd6e007c0e8</td>
|
|
<td>[68a4ccd13efa8341e1766c87, 68a4d07753a851daf11e694a, 68a4d2d1ff2b441b84428140]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcienginerun.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[e0dddf23a7f7275657349542c5a78a26]</td>
|
|
<td>[c31d3a860abf2ff1f28233268f1267acb4399351]</td>
|
|
<td>[9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd]</td>
|
|
<td>[a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>hcienginerun.bat</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>135</td>
|
|
<td>e0dddf23a7f7275657349542c5a78a26</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>c31d3a860abf2ff1f28233268f1267acb4399351</td>
|
|
<td>9a6dbcbe40592ca08d29299e86bee833ca2ad2d423f7327200cfc2bed82cc6cee900974f1bdf58491820860f7eecb5bd</td>
|
|
<td>a54c10995c080beaf1636bcfe8b17796cf79e970d8f9bf4c47c16b8164ff0fa32d80073584b9c358248373e29b08ff465e99accd0fde040b68d402a56638abfd</td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>15e55b7cc63532d4cab6dbff900c648ae8606b33cea00b22ed88f71bbfeb192e</td>
|
|
<td>[68a5cd8dca130478244c7a07]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-talisint]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>["C:\TalisClinical\Applications\HL7TCPIPInbound\MDI01_Service\HL7TCPIPInbound.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T13:24:13Z]</td>
|
|
<td>[d3e1b261bff7f95d7bc1d8188b9f99bf]</td>
|
|
<td>[91e0d15152db9868e6fd7f89305b43da341048ee]</td>
|
|
<td>[6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652]</td>
|
|
<td>[f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2]</td>
|
|
<td>[172.17.252.192]</td>
|
|
<td>[172.17.252.192]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HL7TCPIPInbound.exe</td>
|
|
<td>C:\TalisClinical\Applications\HL7TCPIPInbound\ADT01_Service\</td>
|
|
<td>Talis Clinical ACG HL7 TCP/IP Inbound Service</td>
|
|
<td>46592</td>
|
|
<td>d3e1b261bff7f95d7bc1d8188b9f99bf</td>
|
|
<td>HL7TCPIPInbound</td>
|
|
<td>2.0.0.1</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-12-20 19:58:05 +0000 UTC</td>
|
|
<td>2018-02-19 21:25:50 +0000 UTC</td>
|
|
<td>91e0d15152db9868e6fd7f89305b43da341048ee</td>
|
|
<td>6f78d3117c00a6648764f0835e18c1fb6f0caff7ad51243457dbaadd2f995c788590825b05dca050469066ef8ae16652</td>
|
|
<td>f775c84d6afb8c15c5acc173995f58dd0139b2f0dbbb92dc3d483a2ec862f23b3c56fab09e76427b785bf163299531bf733f581000ec7c262c242335bdb4aff2</td>
|
|
<td>2025-04-28 02:12:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>160cfc3154da71d4c8ed0e7c4dd19174f32559494376e201ed965cefd9dc435d</td>
|
|
<td>[68a4ccc785b914a60d739e50, 68a4ce1fc826337212f53bed, 68a4d07753a851daf11e6938, 68a4d07753a851daf11e694e, 68a4d2d1ff2b441b84428130, 68a4d2d1ff2b441b84428146]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\Socket.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[ee721e727ce3d694cd3c11559b0b0401]</td>
|
|
<td>[ec40590cc3d3c54522340b50199a2eaff31c991a]</td>
|
|
<td>[576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799]</td>
|
|
<td>[6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Socket.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Socket\</td>
|
|
<td></td>
|
|
<td>26624</td>
|
|
<td>ee721e727ce3d694cd3c11559b0b0401</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:44 +0000 UTC</td>
|
|
<td>ec40590cc3d3c54522340b50199a2eaff31c991a</td>
|
|
<td>576ed97e719d7663fe45bf7d10feaa9c7710ce9b40fac2264538dec50977bee96c359930cd5a53cbbc4cf10cc8335799</td>
|
|
<td>6101f954be983bd43336f1c8aab0ec03dab7624eef830eec82b0b5f034437d4343ba63f4fa4178c3d7b6e065f4d5c343c342d81cf5b05b1734abb7a1426b097f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>170d4b7c2de7fb1c9deb285fdeff1310fcb485e918c7d9aa2a2ae1ec916ff314</td>
|
|
<td>[68a3146b5f0c41860c8c84f5, 68a3146b5f0c41860c8c854e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\heapq.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[3b625d3d2635c2e9ea41265880245e3b]</td>
|
|
<td>[6ee317e222aef1f732a799eca5285b2f3fe532b6]</td>
|
|
<td>[7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8]</td>
|
|
<td>[d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>heapq.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17762</td>
|
|
<td>3b625d3d2635c2e9ea41265880245e3b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>6ee317e222aef1f732a799eca5285b2f3fe532b6</td>
|
|
<td>7c6d98c565d01c59472a19cbbd29de071ab8fc03c0d5db24f822bf063a5141875f3eac94fe19d99b5e04d56588db94f8</td>
|
|
<td>d3449797ac7cf9db5654e93b5d63877f08a88426600771d020d8118d4a2a85235a53bf2e4651e2f60fe539568c1e913ebfcf6288dca0b5a570de3ee98ceeed59</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>100ba8a777f29c39bd511d182240d5779f2ec78d48b344c0b32c4af550ab6242</td>
|
|
<td>[68a3b085a65533c1207e5252]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_trmfp0jd.et3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_trmfp0jd.et3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 23:00:14 +0000 UTC</td>
|
|
<td>2025-08-18 23:00:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10b8dc8870d330bca8e2f7ab2a3f366dc0e951964fdaa02fb79a0de8526201b3</td>
|
|
<td>[68a3146b5f0c41860c8c84fd, 68a3146b5f0c41860c8c8548]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\weakref.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[672f5710a5c0e63a57e702f409ba87b5]</td>
|
|
<td>[2c39e50335cb8cfb27988e48cf545ab17dbd2599]</td>
|
|
<td>[97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342]</td>
|
|
<td>[40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>weakref.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>31805</td>
|
|
<td>672f5710a5c0e63a57e702f409ba87b5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2c39e50335cb8cfb27988e48cf545ab17dbd2599</td>
|
|
<td>97e005f3ccaa6881f0220b263222318904a2c3be2c4688ec06ac40ffaa03e780c11759789c41edc3b2534781d4c11342</td>
|
|
<td>40185caf12083cb50689e3919eb1ec48acaf129f3e52399b7410f6c46b4113cb4014146a72dc33bbf56fe33f86b40f84bb2454da9965800a089ac7247d220a3a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4050bae7cd6a7c189962cc5b8c79f8c21cb51a602b7059580ed2639dfc3e4b6c</td>
|
|
<td>[68a25f08a862a9b86d2b3e0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\cm4vi1nn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cm4vi1nn.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38658fc457cb062f25a6d2cc2d3f4f09c2b6124808493dcc3d4cd0c1f83693fe</td>
|
|
<td>[68a5bdfb54e99efcaf1f8dba]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\tmpEXO_zeon5nwa.typ.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:14Z]</td>
|
|
<td>[9d8a18d3a880992b126f3dd17953b974]</td>
|
|
<td>[6bb542e32d192bbae6733b08f789135c8ec45195]</td>
|
|
<td>[074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800]</td>
|
|
<td>[c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_zeon5nwa.typ.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_zeon5nwa.typ\</td>
|
|
<td></td>
|
|
<td>2317071</td>
|
|
<td>9d8a18d3a880992b126f3dd17953b974</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:22:13 +0000 UTC</td>
|
|
<td>2025-08-20 12:22:13 +0000 UTC</td>
|
|
<td>6bb542e32d192bbae6733b08f789135c8ec45195</td>
|
|
<td>074551427eaab1a8a3164f02e25b2ecc8c03d76c32f4dcc3eb20e9665314acd580e36cea3863ad1091fb62cc9d8d6800</td>
|
|
<td>c7ecd4ccb2b940c7787a3f65205ebdd4dfa5f862ac593bda7931f271a9f50cf068993c48815dbc43ac1c6215a7dcac5a6b6011483d7d4491755caf9725695672</td>
|
|
<td>2025-08-20 12:22:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>386fb9fefc2fb12d818524ec24b17da4af6f60f65ab46d19559debde3b35d34a</td>
|
|
<td>[68a3187c68080fcb17789d1a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikmcgc3u.bvf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:11:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikmcgc3u.bvf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:11:38 +0000 UTC</td>
|
|
<td>2025-08-18 12:11:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:11:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>387c409da5f22f77cc7fbb0573725479735b7be82d5222adf27f95c32d216f83</td>
|
|
<td>[68a33f79adaf7aae4bae834a]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_NVR2]</td>
|
|
<td>[I-NNVRMANAGE]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\__PSScriptPolicyTest_bcrnu3px.2x4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T14:57:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.210]</td>
|
|
<td>[172.17.250.210]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bcrnu3px.2x4.ps1</td>
|
|
<td>C:\Users\CA_Jnt_NVR2\AppData\Local\Temp\3\</td>
|
|
<td></td>
|
|
<td>82</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:57:56 +0000 UTC</td>
|
|
<td>2025-08-18 14:57:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:58:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38e07a6cfe8521a9bb62ef936912ec9893b76764259e17981c2a5ac93141cfb4</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20c]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindADObjectFromSID.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[70ba383b483595c149fabc6fd71ebb84]</td>
|
|
<td>[e7399b87d114d31ba0b5f7ac26958144347857f5]</td>
|
|
<td>[94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c]</td>
|
|
<td>[4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindADObjectFromSID.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>277</td>
|
|
<td>70ba383b483595c149fabc6fd71ebb84</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:20 +0000 UTC</td>
|
|
<td>2024-09-27 21:01:33 +0000 UTC</td>
|
|
<td>e7399b87d114d31ba0b5f7ac26958144347857f5</td>
|
|
<td>94cfda6987dc90bb452532885b014a807da0ad5310557420074dab4e170587ec7c3cb1d7bc70fed1de6b7b22bb8d193c</td>
|
|
<td>4d61e6a5e089fdbe57ff0e460e14b9bd743775eed722ae06abd2187631b1b3027e5178381a69a40965bd1ac3866dd829c1aa3fa4c6d9996ea7a9844f0e153b3f</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>38f61b0d050e3e36ff68ea1ed7a8dbeedbcb041e12ac3143dd62b76583f337f0</td>
|
|
<td>[68a22d269d187f48e0f4adf9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tsuxgn5g.ban.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:27:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tsuxgn5g.ban.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:27:28 +0000 UTC</td>
|
|
<td>2025-08-17 19:27:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:27:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>390559b10f0df7e9467937b8aab35074299a2e8f481be7229a5152e3ffe7ed71</td>
|
|
<td>[68a1abecbfda59a8cbb3b139]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_vd4axank.0so.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:16:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vd4axank.0so.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:16:01 +0000 UTC</td>
|
|
<td>2025-08-17 10:16:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:16:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39a4a59bc23add47d95ef4a9da5ed8297c27af52f2849a0c391ab0bec771bfb9</td>
|
|
<td>[68a523a99ba7c92b34976f99]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ToolbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[aa7a6652a4a923356890ebff6458a56b]</td>
|
|
<td>[6d5e975aa1d77df18c0af44663d1624e8bd1b7e3]</td>
|
|
<td>[215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32]</td>
|
|
<td>[05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ToolbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>18432</td>
|
|
<td>aa7a6652a4a923356890ebff6458a56b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>6d5e975aa1d77df18c0af44663d1624e8bd1b7e3</td>
|
|
<td>215628a0dd5007bde96f2caca1d9a993c04feffb52536b84dc20c397f17fbe615d6b7f624f0565a2679c28776e70ed32</td>
|
|
<td>05cad4395c96ea336573fb96d99268f94b10464b2b8a1d370be44721a4dd9be786d5be2578a0f63d382196f74ac25c7b38425fc579bc4ffb10f59ba4f861a9cc</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>39babfe5a257c3f70a0122f469eb5d455f108d92ef6ed29c2671d11c8af07ca3</td>
|
|
<td>[68a4631d55f0b006fedad272]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\tmpEXO_ymugosv2.gkz.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:16Z]</td>
|
|
<td>[25f6f28a796e9a16e24dbc1f4b571fcd]</td>
|
|
<td>[432556ecdc36601d6a9fac7cf788ef1d3e80e6d4]</td>
|
|
<td>[59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738]</td>
|
|
<td>[6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_ymugosv2.gkz.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_ymugosv2.gkz\</td>
|
|
<td></td>
|
|
<td>2317071</td>
|
|
<td>25f6f28a796e9a16e24dbc1f4b571fcd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:42:15 +0000 UTC</td>
|
|
<td>2025-08-19 11:42:15 +0000 UTC</td>
|
|
<td>432556ecdc36601d6a9fac7cf788ef1d3e80e6d4</td>
|
|
<td>59bbd5c1feb3c48a387bb7c886b0a6cb4f629c838da0fbf4f9a1c089ad7057c924d4c1ef8556bf21b20cd2818f4a8738</td>
|
|
<td>6df9db18e242e99e62a3d76416c6850c4d9be7f96301ae75caa147f0534ddbea2591bd9b2d655d681e0003f010816167d718b2939324dafd7daad365a7a892bc</td>
|
|
<td>2025-08-19 11:42:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3a724546eaf82269dbb7d3bdfb06e468c774707620a80d0b604ae73ee51b77c5</td>
|
|
<td>[68a1e030cd200d10d4db6ee9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tzowfqkz.l4d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:59:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tzowfqkz.l4d.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:59:07 +0000 UTC</td>
|
|
<td>2025-08-17 13:59:07 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:59:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3afb843f0e4918d554f9be37562cb7b547975a9abd11f4fc7cd4dce50291a15a</td>
|
|
<td>[68a339e2be5adbffe584e4b9]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\__PSScriptPolicyTest_fbdcuvfi.npc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T14:34:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fbdcuvfi.npc.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\10\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:34:00 +0000 UTC</td>
|
|
<td>2025-08-18 14:34:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:34:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>357fd5748acb778b1de6237309eb65fe0290be08d5e32fc02134e884c12a1306</td>
|
|
<td>[68a4855388937a93ff144375]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Core.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[3ba54cdf80da731b9f6ebe6c649cf015]</td>
|
|
<td>[8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6]</td>
|
|
<td>[9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8]</td>
|
|
<td>[ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Core.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Core</td>
|
|
<td>12800</td>
|
|
<td>3ba54cdf80da731b9f6ebe6c649cf015</td>
|
|
<td>Stryker.iBedServer.Authentication.Core</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>8b0da410ed8f7353eabb7b4ca63fc2f0527c9dd6</td>
|
|
<td>9532b5f719f4bdb5d3ed6fd9708fc483b48b05a880e055199be79c160bf3f42b4214771ec4d87d29bab00071ff122aa8</td>
|
|
<td>ea092d128f03b4e3667dcd0b5580331f3ca8516c63d98e37bae82d9a9d9f368483834041748af856c2e114597b1868048c1b24fa87d5998f936457ead1f3a691</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43b1b8f830df33fef0fc4f5c10069ac655b83937012cf73ad55bad235238bc97</td>
|
|
<td>[68a47171d049740da00e3073]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:43:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_af8b3b2f8d784cf3befbf8fbeb2a2664.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:43:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3b79fa3b8774cf773d2be2b43838690be854b013fb8c2d9bd2f37f785e4ae026</td>
|
|
<td>[68a522d623123fde9545058b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x0ssyhuf.33a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:20:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_x0ssyhuf.33a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:20:16 +0000 UTC</td>
|
|
<td>2025-08-20 01:20:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:20:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ba0dde62898ed08dc4f55cbed827a684b970fc9f43d69de9560c7bf9dc14cd4</td>
|
|
<td>[68a5c71fb45a26b65db7a290]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\_ISUser.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\QS1\QAU\Updates\02010125001WsgInst.EXE]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:01:11Z]</td>
|
|
<td>[3ef6f1c756c57e30a9fd0e227865981f]</td>
|
|
<td>[d61460d652ba2e0997e708d97b6aba533084732c]</td>
|
|
<td>[a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783]</td>
|
|
<td>[5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_ISUser.dll</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{0DF58661-8997-41A9-B9E4-38F6CC61AF4E}\{A46FE11A-2F5C-49AC-80D3-DE7A1BEB5089}\</td>
|
|
<td></td>
|
|
<td>94208</td>
|
|
<td>3ef6f1c756c57e30a9fd0e227865981f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:10 +0000 UTC</td>
|
|
<td>2023-03-22 15:26:00 +0000 UTC</td>
|
|
<td>d61460d652ba2e0997e708d97b6aba533084732c</td>
|
|
<td>a6ef50fcf9e50deb6f1bce750899a8ebeb611c6c61158038f97de3008e8ab4613e267b4ea5f2da39571586a8d0885783</td>
|
|
<td>5dd1c9cc5a8c36e831a254e9a53d826a3be7738ded57a48096903a14e9db0ff4a9a0eabb7516c01dfa791f601c669465ed4c8eae562bfa00f82f081d0f22c9a4</td>
|
|
<td>2025-08-20 13:01:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ba6c727c92b41483a366d4b2fd01ef6e3a8ceb7be816e024f8a0d5faf856473</td>
|
|
<td>[68a34b98a6132bf659cce5a9, 68a34df0b71eea1289980a0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>["C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T15:47:09Z, 2025-08-18T15:58:03Z]</td>
|
|
<td>[804fa0b65d9ba3c4d4cec6e4d310d70d]</td>
|
|
<td>[f23e8bbf5af98bc0c2c2df7790dea8b5db238598]</td>
|
|
<td>[f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89]</td>
|
|
<td>[c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AIUniWksNET.exe</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Access It!</td>
|
|
<td>22830592</td>
|
|
<td>804fa0b65d9ba3c4d4cec6e4d310d70d</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:38 +0000 UTC</td>
|
|
<td>f23e8bbf5af98bc0c2c2df7790dea8b5db238598</td>
|
|
<td>f913d78e9d49655c72f8968073cd7e300f94ccdcea17144b9fbf7f59404a692c12c2eada2a33cef916091f2c15904b89</td>
|
|
<td>c01dc3999b2b2ea8bb983555bcf7243b8e98ae19260f81ab8989adc4dec2f227ac1f2e8e74806b430dddcab79e65e853cc4723199fedd796c108f9a7423a320e</td>
|
|
<td>2025-06-09 21:58:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c821227f2dc92e0c1de7a26082facf9b0e85a2b2e3b225fab87dc6edb34453e</td>
|
|
<td>[68a3b07b89708f7e107efed0]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\qtdzz51j.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>qtdzz51j.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c873753c906fb01e21cf7bcf337e6fa474ed3ef1e9ccc508c198a7aa4f2842d</td>
|
|
<td>[68a4710327010168d4b669b8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_x3h3gz1y.44q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:41:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_x3h3gz1y.44q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:41:36 +0000 UTC</td>
|
|
<td>2025-08-19 12:41:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:41:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3c8e1ab5ca374a7ba51b0820a46058e1d7e0c62ee95328846b7303f270189c16</td>
|
|
<td>[68a3146b5f0c41860c8c84fa, 68a3146b5f0c41860c8c8557]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[3a6789c5b85c6996587dd3ec235bf1d9]</td>
|
|
<td>[df72469849f10e2db9f7ff195431d0810d0b8e64]</td>
|
|
<td>[a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15]</td>
|
|
<td>[81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>9627</td>
|
|
<td>3a6789c5b85c6996587dd3ec235bf1d9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>df72469849f10e2db9f7ff195431d0810d0b8e64</td>
|
|
<td>a407744c20572429674f7e3f1fbe6ce5f483b5d758bdd5613eb35e6e96a2ecfdaebde8325dd0a50d75e82ef170bd6c15</td>
|
|
<td>81940289b20e4db3792679704045441cfad6b5296d19dde73c52eb673b69d33e817c74983a219193b4244395d537d6d9b8cee440ac20d2c237bf29e56b2b99bb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3cd049c2f8c5bdb6c368fb84bca681b13665b252ba5028e71ad65d5879480dff</td>
|
|
<td>[68a16556adb18f56bab6ec7c, 68a2b4a8c289c4a5fdc2edaf, 68a4085529d877e962e90ae6, 68a557e71e5d7a1efef2595b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG1B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[efcc66337aaed727c34450475323c64d]</td>
|
|
<td>[9e1f8b6df794cb9dced363dc53ce3f6a6cc46052]</td>
|
|
<td>[607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834]</td>
|
|
<td>[07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG1B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>efcc66337aaed727c34450475323c64d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:30 +0000 UTC</td>
|
|
<td>2023-06-01 14:34:59 +0000 UTC</td>
|
|
<td>9e1f8b6df794cb9dced363dc53ce3f6a6cc46052</td>
|
|
<td>607c29f55ac963ebbc1ede1279e777c49640a96a749489e5a883357159ab7292ef9eaebd715726c9d4f3e8382240b834</td>
|
|
<td>07ba24ac8177a147feecbdf97b65a68312c5d7163f74fad5146927b6130849d34b6db2af4461656082eb11d2bbc2f598fc412f1e2efc4997e3eb8337252ac5c9</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3eb85a6d8d93e0d3ee61087dfb0427718c11cba113e404d84a4e203359470984</td>
|
|
<td>[68a4d176f9567d58ffcb80f3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3ed751253cac2e36e658b51aadd1c769514ba9f17d8ad49a9d80100e2741564a</td>
|
|
<td>[68a4ccd13efa8341e1766c86]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3f1b19d863fe5465ce545c4b8d093cff1a7d4196615f002f775e75020c5dafd9</td>
|
|
<td>[68a5d4b82ee390c0e8baf302]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_501hqqj5.bkq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:59:18Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_501hqqj5.bkq.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:59:18 +0000 UTC</td>
|
|
<td>2025-08-20 13:59:18 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:59:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3f307e3d89f6577b8a0da2aa01b182740d6e157ee29c09338dc0f206c4a73ed0</td>
|
|
<td>[68a34b98a6132bf659cce5b7, 68a34df0b71eea1289980a1c]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataEntities.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[23f4c4bf3f3744246e5d5a9e7a94a624]</td>
|
|
<td>[d5847e3644ee656be1d90f885a09ecadd39c7073]</td>
|
|
<td>[d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d]</td>
|
|
<td>[56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.DataEntities.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Data Entities</td>
|
|
<td>3763712</td>
|
|
<td>23f4c4bf3f3744246e5d5a9e7a94a624</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:48 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:48 +0000 UTC</td>
|
|
<td>d5847e3644ee656be1d90f885a09ecadd39c7073</td>
|
|
<td>d5e7fba8689d926764cebe9895c2d5e365db7eb73a51b21605e0e1f054681d9cff38ab90ffb8cb8d4d7d39fd3d44344d</td>
|
|
<td>56be013e142ddefc9d9683bf8468b65ce8ac7afb51a122d1c9629a85d21675eaba6e3e1b160ab2746716247bfd9260b818b333778956933f30fe3e7b62338d18</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3fd6123c84aa2ee51ad22f9dd1a1c58f111163f5dd88b2bb6bed125d924bb8f0</td>
|
|
<td>[68a2c431b2390923232c295a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b1tu0kxe.c1z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:11:49Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b1tu0kxe.c1z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:11:49 +0000 UTC</td>
|
|
<td>2025-08-18 06:11:49 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:12:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>44e564c6b36b57fa94cdcddbc11e741ffddf976ec407ac94c772bea6666f5b34</td>
|
|
<td>[68a3146b5f0c41860c8c8504, 68a3146b5f0c41860c8c852a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_parser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[51480655d8c23400bade8fc5c8ab7092]</td>
|
|
<td>[0b0c8a12ff3634c2e31a68e7afb12b0d246588ea]</td>
|
|
<td>[76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb]</td>
|
|
<td>[8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_parser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>43572</td>
|
|
<td>51480655d8c23400bade8fc5c8ab7092</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>0b0c8a12ff3634c2e31a68e7afb12b0d246588ea</td>
|
|
<td>76e8e593918ddd1eb4d97f64b2ca225faa8d482f78295e6588c32469672ce61e4863f5e2d61e6c29df16a005bf4a6dcb</td>
|
|
<td>8cce2f76bde08af302a10f873a81552218a8ef1148080e33684658a19d5b4998e84a9d4ac37fa519ba5af4e0ed2158b68f3b4c04f4d3c8f6adb22565f2cd1cc1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>44f9ad23efffcc78362a47f3e2ba1f9b47cc174f01ef1284f605cc30cda15cea</td>
|
|
<td>[68a511cf5bc894dc77f9eaa6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_f6a35165c321489a9856b32c2808949d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:07:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_f6a35165c321489a9856b32c2808949d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:07:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4501ed01ec29f06c2d1989aa6ef3f08a3b7d285924f453c84565cc43aba296ce</td>
|
|
<td>[68a5148159ddbe2cd55af622]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_740b673dcc864dc7858bc48f64edbaf4.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_740b673dcc864dc7858bc48f64edbaf4.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>453486eb8a7efac6fb88de6df7d8ab54f042c3c7344c842f641fa006a0cfaac4</td>
|
|
<td>[68a189d9de5d48d3c147792c, 68a2dadb3dc591405ef57c41, 68a42cd899e203b32835f07d, 68a57e117df58485104aee22]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[ivOSCCCRS]</td>
|
|
<td>[IVOSCCCRS]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:40:49Z, 2025-08-18T07:40:47Z, 2025-08-19T07:40:47Z, 2025-08-20T07:40:47Z]</td>
|
|
<td>[a29fb1288a2dd2d0c972e30105a63175]</td>
|
|
<td>[15d2a944519f3b805ee4b99667fde4b9668a147d]</td>
|
|
<td>[45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5]</td>
|
|
<td>[41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a]</td>
|
|
<td>[172.17.21.71]</td>
|
|
<td>[172.17.21.71]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2973</td>
|
|
<td>a29fb1288a2dd2d0c972e30105a63175</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:35:14 +0000 UTC</td>
|
|
<td>2022-03-01 18:17:44 +0000 UTC</td>
|
|
<td>15d2a944519f3b805ee4b99667fde4b9668a147d</td>
|
|
<td>45cb0dd7fd490f77d97632b10e7723a9090ce3a55ff115f1a6ade301d9273bf6956c18232b631ea910ed5ba5a3cf09f5</td>
|
|
<td>41f5e4b83ec946e5d3a9001181d459c2b73362d20c60ce3a889bf4b21ba9080c2bc20b08287dadf74692ef17796c2086aeb8987a53cedce192a534ea1ec5453a</td>
|
|
<td>2025-08-09 07:40:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>408d1d3e00f66c7c097415bd83df1faf13c1b569544f912c5338b77d9670d9c5</td>
|
|
<td>[68a223f72bb592d298740955]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hhahwsla.xvw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:48:17Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hhahwsla.xvw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:48:17 +0000 UTC</td>
|
|
<td>2025-08-17 18:48:17 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:48:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>409361e2925b82cbf6cfda29f317520ff097d1d57da407655d436ed30c234c83</td>
|
|
<td>[68a1c38b973b3b5b863775cc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_r1zh4xco.ihx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:56:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_r1zh4xco.ihx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:56:52 +0000 UTC</td>
|
|
<td>2025-08-17 11:56:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:56:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>40ea93c6fd6397e89e2299bd791d3b19282ef70a83631dc8cc8e0bb167a7a71d</td>
|
|
<td>[68a34b98a6132bf659cce5c3, 68a34df0b71eea1289980a28]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceContract.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:21Z, 2025-08-18T15:58:10Z]</td>
|
|
<td>[8ceb6248045a8320552178fc2f0da3ba]</td>
|
|
<td>[9a061be943e235b4c9992167d13dcda524afc3d4]</td>
|
|
<td>[4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740]</td>
|
|
<td>[73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.ServiceContract.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Access Control Service Contract</td>
|
|
<td>141312</td>
|
|
<td>8ceb6248045a8320552178fc2f0da3ba</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:18 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:18 +0000 UTC</td>
|
|
<td>9a061be943e235b4c9992167d13dcda524afc3d4</td>
|
|
<td>4b0ff23f6c340c6c3f75e3c9a99733915dc2192749fbbee31827387f69736528e3af0557cbf169f51a3a3815ee152740</td>
|
|
<td>73d413ea739fdefb69fee294ceab1f7700d10a8aa01625e2881468ce65fdfb391c7e5a3726d6afafa2d3e38e82ac226ecc63d685683d54b8ff2876b8f090fe8c</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>422ff53244750a3f619a88e8a3a82ef6119bb87ad85214fba800b335ae7bb687</td>
|
|
<td>[68a55c701c90616dc58121dd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2afljjje.gan.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:26:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2afljjje.gan.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:26:06 +0000 UTC</td>
|
|
<td>2025-08-20 05:26:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:26:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>42dbe93c2eb99e3258531295ef0a821bf6e90b6c91b1216c874f45cbc064b24d</td>
|
|
<td>[68a3146b5f0c41860c8c853b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\shutil.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[a07e5e1d630d60e8a5bf81782809e650]</td>
|
|
<td>[a139b5b35604435be902c8cce6e3431a01122151]</td>
|
|
<td>[a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0]</td>
|
|
<td>[db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>shutil.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>67520</td>
|
|
<td>a07e5e1d630d60e8a5bf81782809e650</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>a139b5b35604435be902c8cce6e3431a01122151</td>
|
|
<td>a2a8bc283922e45d020337a260ab8fb408ad90c7bd34a49326d9f43eabee48e0816c6115c61f94526bc028b74b8171b0</td>
|
|
<td>db9c2ce18da0d42b8bf349ac59fced83953117c71a4b8dc4aa2328a73cb772b0b2752bd46953ea820f9c8aac97c6cf25126b983e0463742904c9dd806485c78a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46baf1723a7b0a56fca54012a44a4fd0ab65fb89d928dce80e00920d3da9a01a</td>
|
|
<td>[68a48b263469bcd052351305]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhl1gdaz.dy1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T14:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lhl1gdaz.dy1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 14:33:06 +0000 UTC</td>
|
|
<td>2025-08-19 14:33:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 14:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>46d408f5c75a3494b1a5c7f8247be80a57da4b1f537a3e235d060f24f56351bf</td>
|
|
<td>[68a34b98a6132bf659cce5c1, 68a34df0b71eea1289980a26]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.ServiceConnector.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:18Z, 2025-08-18T15:58:08Z]</td>
|
|
<td>[ed3277338add7a694a7fc9d05affc2f7]</td>
|
|
<td>[ff0307d1794a13aa530762c41c8bb569a520d46a]</td>
|
|
<td>[2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916]</td>
|
|
<td>[2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.ServiceConnector.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td>Access Control Service Connector</td>
|
|
<td>242176</td>
|
|
<td>ed3277338add7a694a7fc9d05affc2f7</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:57 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:57 +0000 UTC</td>
|
|
<td>ff0307d1794a13aa530762c41c8bb569a520d46a</td>
|
|
<td>2f3fdffad30d6f8539a3e2b8b850647d95e32b5d8f3bb7c2ea54245af6e7d3f4ccdafc577f74dd5c15c69b9a4db03916</td>
|
|
<td>2d4faab867655f12721a8684c1213b45a1c3c8bbd4e8d2f2eb7fdea06c3f1ba7f12084ce57688d5c2cf846bc396a456418e89853e645fc1e2ef7b3935b64060b</td>
|
|
<td>2025-06-09 21:59:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47d7f70f6e4544111d873b85d126334d5376cda93f44463620545a5afb127224</td>
|
|
<td>[68a3146b5f0c41860c8c8542, 68a3146b5f0c41860c8c8573]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\socketserver.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[a8399241bb8bb7845b245b8b45caa424]</td>
|
|
<td>[5919c36160ce0593f1446305e684e923f91ace99]</td>
|
|
<td>[d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b]</td>
|
|
<td>[566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>socketserver.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>34517</td>
|
|
<td>a8399241bb8bb7845b245b8b45caa424</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>5919c36160ce0593f1446305e684e923f91ace99</td>
|
|
<td>d58e29f522353320aeec12779fab91a70f1e755f67a922f7da8092780f868684ad14a2b710e9ba1420e90c8885397b8b</td>
|
|
<td>566ba5864a60b705dbbf240c0ec8e46f5d35500cfd0e94b8f0dddd6d5eba8768e75766c127d45b39d1092b86ce77cd5e8c3c5c638a2e93ab4f79c4479925726a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>43df47ba68eed66ab11246db13bc7b31ce6a7345d897026e6c20a7fa3ebb7038</td>
|
|
<td>[68a3146b5f0c41860c8c8535, 68a3146b5f0c41860c8c8571]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\ssl.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d3f760e4ce4ce87a49a770a3b4d8ea4e]</td>
|
|
<td>[bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be]</td>
|
|
<td>[34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df]</td>
|
|
<td>[75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ssl.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>65200</td>
|
|
<td>d3f760e4ce4ce87a49a770a3b4d8ea4e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>bf9b9d1f3b7624a5da6b0b8f5220dae5a78f47be</td>
|
|
<td>34d44ac6395348269da759bffc3b39b4886b924bb9bbf7e609f7f893d8548f7b07eec874336ff2cd02034ec6650779df</td>
|
|
<td>75f7bcf5fdf642ce61dcb4daa1a7edb29ecfaf12d3b493b0c3f141a08984dfa29fea34c06652a3faeca8df1820390e6c83f863451234f1f9ff7eb8630b0028b7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>440079dc739fd6291ff06a190feaf77af3f297e5e47dd010391427408ed28738</td>
|
|
<td>[68a3146b5f0c41860c8c84fc, 68a3146b5f0c41860c8c854a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\copy.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[33fe159d65601e2b1e1c4a751edcfa0e]</td>
|
|
<td>[daf07ab39da555cfee521467dc63f4eae2918da0]</td>
|
|
<td>[f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428]</td>
|
|
<td>[081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>copy.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>10634</td>
|
|
<td>33fe159d65601e2b1e1c4a751edcfa0e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>daf07ab39da555cfee521467dc63f4eae2918da0</td>
|
|
<td>f547840ca196fc6f8a4b0b08e055bef3c3839b82220abe98767a7511523712063795e154e3f0696c287ac755c78aa428</td>
|
|
<td>081f14f2d91feaafeeff07165e20f5f69b23fb7096062ec2deb3fb9e34022e6de7cfb3fdde2f247d854c0d6d75bd02c17f30f2bffede7ac4fd8eee5b425d6d4e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>443be458dfdb7480c2d2a40f454a2b7e5f9ec12ad259b14dcd47472009439658</td>
|
|
<td>[68a3b568d0e193c254e786f8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_30f65d1bc44749cebb0bca5da1468193.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T23:21:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_30f65d1bc44749cebb0bca5da1468193.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:21:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>443c185fe4063ccd7cfde69c8edfeb13cbfa38ea8f5b0376091d4aa34374a6b1</td>
|
|
<td>[68a4ea6392c32cf0fcea4869]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nWHL-CTX-02]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gw13nbaw.an1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T21:19:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gw13nbaw.an1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:19:26 +0000 UTC</td>
|
|
<td>2025-08-19 21:19:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 21:19:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4469255053c3419cb7051ccc31010918a1a9dac527fe2c10bcf33d95bfbc699e</td>
|
|
<td>[68a3146b5f0c41860c8c8501, 68a3146b5f0c41860c8c855a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\utils.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[1c9f352ef2dc6107635c941c2692875a]</td>
|
|
<td>[7dac4531071eeb0f6c989789b241fd935231bb43]</td>
|
|
<td>[0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78]</td>
|
|
<td>[dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utils.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>16103</td>
|
|
<td>1c9f352ef2dc6107635c941c2692875a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>7dac4531071eeb0f6c989789b241fd935231bb43</td>
|
|
<td>0478916214a98947d6d4749ce546c95aa3477dd9bc0037cc7a3deee9811ffec2338f55c620aefe5268efd2d6cf31fa78</td>
|
|
<td>dfbf5b22c1e7ecab95abdf1361206a0f3d10ec83d3f6ae890b0af79d242feaab73a6867aa4008c52dbb0a2b934d904c4cf7f063d4d0d86cf4043ceee4f655050</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>448a0031998f7af8ce396b15c8432b788f34b1b698f89edace1448bcbd3de7d8</td>
|
|
<td>[68a1651841c74f595c525e6b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_i1vxbppv.2g2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:13:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_i1vxbppv.2g2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:13:52 +0000 UTC</td>
|
|
<td>2025-08-17 05:13:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:14:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48a182856395bc38e81ae27cbfa36e1949f5cc7eafe208356e9381e8c18a4f45</td>
|
|
<td>[68a50d0bba435d26b71e5005]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rerrl1la.l5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T23:47:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rerrl1la.l5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:47:13 +0000 UTC</td>
|
|
<td>2025-08-19 23:47:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:47:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>48dd119b22d9e9f12a4086afc7afa9d4cc5e9ab43294342fa54531f763c0dddc</td>
|
|
<td>[68a17f8b3d3e59587db04d3d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fb0tna5.obn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:06:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3fb0tna5.obn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:06:44 +0000 UTC</td>
|
|
<td>2025-08-17 07:06:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:06:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>490e4c588921a4516985398ef928a4796d02dcbab6984d7bbd8a56fecb665d42</td>
|
|
<td>[68a347664fc9cc000172429d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_klxrtpvo.jas.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T15:31:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_klxrtpvo.jas.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:31:42 +0000 UTC</td>
|
|
<td>2025-08-18 15:31:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:31:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>491b8bd4fad8b9cc62cec4a250351477c886070eaf3a3abc35cf10aa0719772e</td>
|
|
<td>[68a245a63bd5d44dfa80605b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikauudym.nih.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:08:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikauudym.nih.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:08:25 +0000 UTC</td>
|
|
<td>2025-08-17 21:08:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:12:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4937e31e371e07aafc2b6401c5f039faf292b0b3dcac6d8a7b7bad10e1561040</td>
|
|
<td>[68a4732a87eb8c73e6aa5a6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a51riren.tsa.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:50:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a51riren.tsa.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:50:44 +0000 UTC</td>
|
|
<td>2025-08-19 12:50:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:50:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4981674c47464828ef5ce68676567b7e58693b1c04b582996b90f732345f4e39</td>
|
|
<td>[68a28bda3bdcd0703f76f643, 68a3dfd9dd64bcf44b32b6dd, 68a533cd7c33c0fb7b88c885]</td>
|
|
<td>[2]</td>
|
|
<td>[xpressions]</td>
|
|
<td>[vm-vmail]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\xpressions\UnixTime.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cscript.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-18T02:09:45Z, 2025-08-19T02:17:38Z, 2025-08-20T02:28:10Z]</td>
|
|
<td>[d6a0f55ebc26152cad33d2fe7190e8e6]</td>
|
|
<td>[bda6893fc902aad8ca74e2e942eae107c172a458]</td>
|
|
<td>[8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719]</td>
|
|
<td>[05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>[172.17.252.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnixTime.vbs</td>
|
|
<td>C:\Users\xpressions\</td>
|
|
<td></td>
|
|
<td>58</td>
|
|
<td>d6a0f55ebc26152cad33d2fe7190e8e6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-16 02:25:49 +0000 UTC</td>
|
|
<td>2025-08-16 02:25:49 +0000 UTC</td>
|
|
<td>bda6893fc902aad8ca74e2e942eae107c172a458</td>
|
|
<td>8ee479d1ae95edb3eb4889f1c79b82ef2484be03a9689284e8ce3727d1ff51e86db87732e42cdbda152b3fde4ba77719</td>
|
|
<td>05f99500dbd9739271ee30fd86c92f911b1669bf1ddcbcde911f5593e1670a4338bb6b2146ee2decbe8bb98036e60e97dc104c07b66852b11d5ce5498257521d</td>
|
|
<td>2025-08-16 02:25:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4a4bca6394ecb7c89998665738f714eae195f2af789f5199519bcea198d35b9b</td>
|
|
<td>[68a4855388937a93ff144376]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Business.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[c23e03a9447ffd1ae2634f27db7037d8]</td>
|
|
<td>[8b33abb44d4f0eecd09b614fe804d39ffe899723]</td>
|
|
<td>[2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b]</td>
|
|
<td>[49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Business.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Business</td>
|
|
<td>11264</td>
|
|
<td>c23e03a9447ffd1ae2634f27db7037d8</td>
|
|
<td>Stryker.iBedServer.Authentication.Business</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:22 +0000 UTC</td>
|
|
<td>8b33abb44d4f0eecd09b614fe804d39ffe899723</td>
|
|
<td>2d40774ee6b0f73171ec1b9a0afebef2d6f3e86c9549726cb167ece3804843addc91a3ff1e1fc8a2cfb8f8ab405f209b</td>
|
|
<td>49ab5047e0467e67ca58baa62766f3e13e035626114d87d41f10a8ec13321efaea49947ae74ccd9c65dfb00818b14d2a3abec5bd48a006c48ed2819a9654ef42</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4562218ded432a9a34e515a5fb320438734199dfc95ee019d1a527271e89202c</td>
|
|
<td>[68a55d602bb4c4aef6ea39bd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Jackson]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1s3kxuc.1b0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:30:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s1s3kxuc.1b0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:30:00 +0000 UTC</td>
|
|
<td>2025-08-20 05:30:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:30:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4584f98f1d747e4aea53cea83804037bbdfb1b342fd04183804e2616fe24274e</td>
|
|
<td>[68a5239e621d09b2b1ed5e5a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[0c2246ee9abc192383fb19860c142559]</td>
|
|
<td>[743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94]</td>
|
|
<td>[5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6]</td>
|
|
<td>[b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>6656</td>
|
|
<td>0c2246ee9abc192383fb19860c142559</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>743ad1ad92e4938a6b50d4fa64b7bbb8fd6daf94</td>
|
|
<td>5c7ce816055d0dd0e02469eee25faaac3c4624642bace349bf429cb1968a957793740a5b6ec08d7e82bd897a798908b6</td>
|
|
<td>b960c178f4e2f5c98fe0bf3162e99eed27338720c2e71683e93d6fd2a9b65729004d04077dc6eb47a72f404b4469dc3e867ab5a158d87a55ace5ff3495457cf2</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>45adf7f6c69c60c4dc4bae33e1b2af87209b219c55f17426027f900f4e4a9cdd</td>
|
|
<td>[68a3146b5f0c41860c8c8508, 68a3146b5f0c41860c8c855b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\urllib\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7ac8f76f913878aafc40578f712b8cdb]</td>
|
|
<td>[2dd3dd047d90b42752ad03421277a6445bc35f04]</td>
|
|
<td>[21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0]</td>
|
|
<td>[fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\urllib\__pycache__\</td>
|
|
<td></td>
|
|
<td>143</td>
|
|
<td>7ac8f76f913878aafc40578f712b8cdb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2dd3dd047d90b42752ad03421277a6445bc35f04</td>
|
|
<td>21fe20d951838e3b2a9175aba9731ba62c5a6b6f7d0c8b4db1a1770e5783df86e6b46fdc7adbfc3836ec58c1235889a0</td>
|
|
<td>fcba1bd4bd21a06c4248ec899752b01dd60f0a9e92de364e40d007724dae5e4f7fac5dc784b8180315b612688defbc42ead0fc1a0bff114fa3da4260d9794979</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b26c40495a3de4c3fa37e30e815a7908ed30d11328fcfe48fef638974fb8053</td>
|
|
<td>[68a3584898af4cd66a2f37c4]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:43:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_756343b6-6f64-4682-a2a5-91de18445d17_Robocopy.ps1</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 16:43:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b38348ebaf6360d8bf0ce8dead8fe5f6f79a2833a41152004876136b2b16d27</td>
|
|
<td>[68a5601c347a6435334e42e9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-EXTHSW-NP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zst5e0yo.1ev.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:41:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zst5e0yo.1ev.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:41:39 +0000 UTC</td>
|
|
<td>2025-08-20 05:41:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:41:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b7d94f99c341f6b208ec7b9c84579162f1279c148b2433bf5a016ed3c652bf5</td>
|
|
<td>[68a253db1b160b4afaf47a6f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_132cbouk.vde.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:12:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_132cbouk.vde.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:12:37 +0000 UTC</td>
|
|
<td>2025-08-17 22:12:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:12:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4b879975722f606898213bb8e96ba9186e845132251b03c60488f253608cc541</td>
|
|
<td>[68a4b0fb13fac5171eeef0d9]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.Profile.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:09Z]</td>
|
|
<td>[2dc079d8aa2d792a07ec17ff40d80cdf]</td>
|
|
<td>[bed9acdfa41b77b37f4a56dd3c28617d47333087]</td>
|
|
<td>[35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f]</td>
|
|
<td>[a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.Profile.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.Profile</td>
|
|
<td>10752</td>
|
|
<td>2dc079d8aa2d792a07ec17ff40d80cdf</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:01 +0000 UTC</td>
|
|
<td>bed9acdfa41b77b37f4a56dd3c28617d47333087</td>
|
|
<td>35ce852564616ca11586dfce37541d50b20351d16d81da7cd3c59195dc28c5921b501f14e68640c1cfb29a796200d39f</td>
|
|
<td>a57fe87839ceead9f723650056239e2e59b0c7776b3e56297da2d63bb1ad40ac9518cf807c9ba38e070faa363341bec68801553d594d926af516f96d0ceb3ceb</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4bc305aa68c31d34a4ad18874c34792451dd19c8a60493021c251866469bd26f</td>
|
|
<td>[68a5239e621d09b2b1ed5e59]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellEng.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[239e31ca812fad5e2f5203f7b8f5ab80]</td>
|
|
<td>[d50aeb2d4fd31525703893f7311ea78fa7f8d2af]</td>
|
|
<td>[3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e]</td>
|
|
<td>[0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellEng.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>87552</td>
|
|
<td>239e31ca812fad5e2f5203f7b8f5ab80</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>d50aeb2d4fd31525703893f7311ea78fa7f8d2af</td>
|
|
<td>3b4d171117f653034403a0d460205826e7d5390859de96821cf7fbbcd34e6f512e15e278eccda5d0e98512cac3f1f13e</td>
|
|
<td>0d6101e92e3cf943c8d0e933d5ff63fa8253296f287285d38a2b1df33290059208a15b78e7173b387d28fb3bbf7d3eb6c550ec7fadeb85799a7f707163363b44</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4be293b05c924a01de67686fe37b1a3961e423289f3f56b8f100e16b38f29fad</td>
|
|
<td>[68a310c9ea022246fae9eedd]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Set-Get-Aduser.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[892ec401133ec2f633b3c3b4a87e6e35]</td>
|
|
<td>[090b95a5979287aa7e50cd2d968d60c7b8f67eb6]</td>
|
|
<td>[ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1]</td>
|
|
<td>[1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Set-Get-Aduser.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>11880</td>
|
|
<td>892ec401133ec2f633b3c3b4a87e6e35</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:22 +0000 UTC</td>
|
|
<td>2025-08-15 20:51:43 +0000 UTC</td>
|
|
<td>090b95a5979287aa7e50cd2d968d60c7b8f67eb6</td>
|
|
<td>ac3ee9ebffe9645ac8a56d5f582e832c49df18db4b1f1498145410ff8810de2b2f4fc851c0625eabef6dcb0a8dde17a1</td>
|
|
<td>1849ee5791b804384a5fc60d03b599fce150336a8c9d6a8ffe4cb3db2abfa0974d8538121e6dda54d87330f6e08248681fe16f75d53cc0bafadd02a595a6daec</td>
|
|
<td>2025-08-18 11:38:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4beef0a40f3e16f017b5ae7603974118c0724286142c2e0762b3d61af4e8ddca</td>
|
|
<td>[68a17a76fbb9bccd45249578]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_u0tfw4sf.bjl.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_u0tfw4sf.bjl.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:58 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:45:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47defea512c04bef937dc343eb7d484d41d313d5fff6b06df628bc0c3ae43c7e</td>
|
|
<td>[68a544017e5aedf6dd6fa528]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ikf4hxcy.y0e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T03:41:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ikf4hxcy.y0e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 03:41:43 +0000 UTC</td>
|
|
<td>2025-08-20 03:41:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 03:41:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>47e046a893fbffe1108f63752b752d62771a255d6f67bdbdb1071eb843b0b0b2</td>
|
|
<td>[68a5646930f6badf50727f64]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_wjvwcszi.j0w.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-20T06:00:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wjvwcszi.j0w.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-20 06:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 06:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>489f1bbaa35649da04ffcd7ee66ad611b107b06afb4cfd919d36a186a3059188</td>
|
|
<td>[68a22f92c12f0e944e5d68ef]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_f3m5l1ce.ht1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:37:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_f3m5l1ce.ht1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:37:48 +0000 UTC</td>
|
|
<td>2025-08-17 19:37:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:37:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4cbc7fefb55e1e392d9da7cece48d8f6cef3a7d170ce265dbf944c554c9d4766</td>
|
|
<td>[68a5c7518a82efb8e85802e9]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_RedSailTech]</td>
|
|
<td>[i-nQS1mgtn]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\QDirect.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[D:\QS1\QAU\Updates\02000201001QDirectInst.exe]</td>
|
|
<td>[2025-08-20T13:02:04Z]</td>
|
|
<td>[4d89cf5c855230c85d0439c354f32173]</td>
|
|
<td>[c89bcd6fc648b7997e8edbba17794ad8f0011ab1]</td>
|
|
<td>[7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6]</td>
|
|
<td>[c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>[172.17.20.104]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>QDirect.msi</td>
|
|
<td>C:\Users\SVC_SL_RedSailTech\AppData\Local\Temp\{A7A0FDB2-8538-4BD0-A2E4-148CF48665EE}\</td>
|
|
<td></td>
|
|
<td>1529344</td>
|
|
<td>4d89cf5c855230c85d0439c354f32173</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>c89bcd6fc648b7997e8edbba17794ad8f0011ab1</td>
|
|
<td>7fe50452d123c56d8101773c897740b2df7bea61fb39797fd4cd21d15cab066d67b09eadbf082ac9eec37f95cea5f9d6</td>
|
|
<td>c64780a3c426af8a0d1ed0f1d5585aafb141babdc3f55cb03b1c6ef0ed83a388513d76b0e5b110e417cc6180b11d4295c05300a82577b6093c811d3de5f01f0e</td>
|
|
<td>2025-08-20 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ce80737e5e1fdd0b599eecf559f84406387d644ed5bbe4479a6a6c5f9a04e18</td>
|
|
<td>[68a240e2a1b8ffa7235b0746]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_lrof04w0.wuh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:51:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lrof04w0.wuh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:51:38 +0000 UTC</td>
|
|
<td>2025-08-17 20:51:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:51:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4cf01886aee1fd82aef2cbb0b7ec1caf4a4f69efa8e128f9dd9e540a261cb8bc</td>
|
|
<td>[68a4cbc3a139fdab1dc0f326]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_n11iz22n.3le.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:08:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_n11iz22n.3le.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:08:42 +0000 UTC</td>
|
|
<td>2025-08-19 19:08:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:08:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4e2cea78b34123526cff3e94c9cd8c533e10df41799247146d9a9583c74d20c3</td>
|
|
<td>[68a514b3a5eadadbdc4ca182]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_77050390c5844e31a367846b79e99309.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:55Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_77050390c5844e31a367846b79e99309.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:20:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ed5fa8236f9cfb27c05d1405db5ddd8c9c8e9c008f8315f1728753361749256</td>
|
|
<td>[68a4893274c73cd555336ec5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gfqx553s.ed0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2274.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T14:24:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gfqx553s.ed0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 14:24:41 +0000 UTC</td>
|
|
<td>2025-08-19 14:24:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 14:24:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ee3b6db9e68711663695d7c7c9fbef7ff2d8f524523e78c11e8ba51082ac2d2</td>
|
|
<td>[68a16cdf801a1582a9ec932b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hBMCCure]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ycrk34bx.lm0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:47:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ycrk34bx.lm0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:47:03 +0000 UTC</td>
|
|
<td>2025-08-17 05:47:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:47:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ee74b8165e39d490e8c0becd7eaf99a725211af6a972ae8652268e41c9b91e6</td>
|
|
<td>[68a178be850d7bbc2e6ff246]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cn0wtlxx.tc3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:37:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cn0wtlxx.tc3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:37:39 +0000 UTC</td>
|
|
<td>2025-08-17 06:37:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4fa0b4ddeed831597e0a0301e37344443cea83904d99b4e24b13286070c399e3</td>
|
|
<td>[68a3146b5f0c41860c8c851c, 68a3146b5f0c41860c8c856b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\charset.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[ba03f33735350044c3fc13f73c1d9e98]</td>
|
|
<td>[7229c271c838fece9643486a3126e4537be0b291]</td>
|
|
<td>[a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0]</td>
|
|
<td>[dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>charset.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>14907</td>
|
|
<td>ba03f33735350044c3fc13f73c1d9e98</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>7229c271c838fece9643486a3126e4537be0b291</td>
|
|
<td>a0bdef3df06279d6e545b398fd302ee462866bee1b39d4cb1a47788ed866a4f80ae3a82bdf9676b00967b199aa463fd0</td>
|
|
<td>dbc9aa6f077de0823d2365398e14e2611f98729113ced33c15db5ee257bf25c06cbcb2babc54f583c4eb7f418ae7041f73c2d632d8686bcd455e158f9ec920fb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4fe777ba7af0edac6e91e842302d7de7c476d0608ee4719c62cba23884121376</td>
|
|
<td>[68a326a0535549e009a51dcf]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_gqc0q3rf.x2b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:11:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gqc0q3rf.x2b.ps1</td>
|
|
<td>C:\Users\be10045\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:11:57 +0000 UTC</td>
|
|
<td>2025-08-18 13:11:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:12:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5123ab35482a1dcca7c83332b37568cc696aee9f9e8bbcad2a654014d7364d75</td>
|
|
<td>[68a15a274601a96260694483]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0ucap4f1.ghu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:27:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0ucap4f1.ghu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:27:10 +0000 UTC</td>
|
|
<td>2025-08-17 04:27:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:27:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5142d86c71c334bad9b37b907cf90abedbeadd7c1fbb7d60e606a68d22ee5bda</td>
|
|
<td>[68a17a3a664e386e865decd2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eykp4qxi.sdo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eykp4qxi.sdo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:05 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:44:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51de8bfc6a2a76476999a622438c5986131049e7095fc14dd4734df5db71c0be</td>
|
|
<td>[68a31b2e462d6e1d77adb9b0]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:59Z]</td>
|
|
<td>[aff7146174f1a92841e0ba8ecf07708c]</td>
|
|
<td>[a6725b789d65d1a13bee0697a4813d334aabb024]</td>
|
|
<td>[73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5]</td>
|
|
<td>[9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>aff7146174f1a92841e0ba8ecf07708c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:58 +0000 UTC</td>
|
|
<td>a6725b789d65d1a13bee0697a4813d334aabb024</td>
|
|
<td>73eb2e902332d2476fe8dc3056271d88334adf454266fe24408c05ff99f48d9fef9c30e2580142a9dab469a02665cfd5</td>
|
|
<td>9665dde1b5e9ca1487300049f426608350520ec8a5ca232d55d49d9c9df16787be06585bd3785ac3dd05295b15d11ac4a6ceac071498d9c481bba2b0189810ef</td>
|
|
<td>2025-08-18 12:23:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>51f865b57ed83f9f9a7098c0a8a52bf04a707bfc57fb627199a2c3f4872ed2a3</td>
|
|
<td>[68a59cc78e54cccae2680af6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_2f02889eb87340149837d95c1c42807d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-20T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_2f02889eb87340149837d95c1c42807d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 10:00:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5216ed10b9145fcc817400bb870a1097078168392f930c7b86d810268c80c642</td>
|
|
<td>[68a3146b5f0c41860c8c8541]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\lzma.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[048ad5d2b543b3a83d0ec6e1f3d9fa4b]</td>
|
|
<td>[bd383b952354b3c24afc76cae8c79ff6ddecf4d3]</td>
|
|
<td>[6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75]</td>
|
|
<td>[f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>lzma.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15726</td>
|
|
<td>048ad5d2b543b3a83d0ec6e1f3d9fa4b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>bd383b952354b3c24afc76cae8c79ff6ddecf4d3</td>
|
|
<td>6d30db7a07a166d60376e7df086a2be05e933554979176988288fa0c0b5d644ad1fcadf28de43874ad05e5607857ad75</td>
|
|
<td>f24b523f80a9bc3cfca80000a513d4b9db3ab5c1702d6d103311e34e8d06fa78e0a2d1e8a78042665b022e823eb3044071ac7c4ecbcde2dac677ae5ee71ddf3f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5227d0069ee05e485e62e216897870d9d5e9e1ba9ef645d7736411fdbf648045</td>
|
|
<td>[68a470efd203a904885c685b]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\InstallerActions.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:41:13Z]</td>
|
|
<td>[a3916319c269dd817403b77d46195618]</td>
|
|
<td>[36029cc7e756d590e7c89d05ad9ef5365152cf15]</td>
|
|
<td>[785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9]</td>
|
|
<td>[df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallerActions.dll</td>
|
|
<td>E:\Program Files\Dell EMC\Storage Manager\msaservice\bin\</td>
|
|
<td>InstallerActions</td>
|
|
<td>79360</td>
|
|
<td>a3916319c269dd817403b77d46195618</td>
|
|
<td>InstallerActions</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 05:20:44 +0000 UTC</td>
|
|
<td>2021-12-22 05:20:44 +0000 UTC</td>
|
|
<td>36029cc7e756d590e7c89d05ad9ef5365152cf15</td>
|
|
<td>785b4004b0e5fe0f260c7b26f25e110d90850df201ddc5fa36612cf3ad3d4a124b8b4dbc59fe6154488f7f5e908487b9</td>
|
|
<td>df3fb7300c360fca09977e7f47b35ce435f58530a0927ee286b3ed9111581eb9c7c583c83ea2d13e9b3555792a6818efd2af0146fc914915b7152290a974eb27</td>
|
|
<td>2025-05-02 01:14:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>52cb9bab4938352f585b879a1fbdd975c84c563bf9852ba99171f4a75c31cb29</td>
|
|
<td>[68a3146b5f0c41860c8c8522, 68a3146b5f0c41860c8c856d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\quopri.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[b1e988eb0ac59301e3a28829017cff3a]</td>
|
|
<td>[5b2ece43d31e183cfcc3fdb11681eda045ff797e]</td>
|
|
<td>[7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a]</td>
|
|
<td>[c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>quopri.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>9568</td>
|
|
<td>b1e988eb0ac59301e3a28829017cff3a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>5b2ece43d31e183cfcc3fdb11681eda045ff797e</td>
|
|
<td>7fef3f159e2d46c986e6560b29ca3a5129b15aa00404b98ba726d76ea3ce86414c6345fae2de971078cf9a9a1755cf6a</td>
|
|
<td>c05ea8487ebc5301135b754279af93e71b85ac779c9ebcf99e29991cfccfb530bc1b5f6559c3df6678202410dffe3185332fca5fab10271e400fa21fd1beae33</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>52e40b2ea19d7d3459d718528d448f408f7597e4f53ab6475e81a78f4f07d7a5</td>
|
|
<td>[68a311cdc2d0d6e3eb77f209]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Check-O365-Licenses-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[b71ecdb3e3640257f8fba06e498dd845]</td>
|
|
<td>[a9ee5167e3a5da2f78e3c0c617d8920302d65991]</td>
|
|
<td>[a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400]</td>
|
|
<td>[50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Check-O365-Licenses-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>12437</td>
|
|
<td>b71ecdb3e3640257f8fba06e498dd845</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-06-11 18:05:12 +0000 UTC</td>
|
|
<td>2025-06-11 18:45:00 +0000 UTC</td>
|
|
<td>a9ee5167e3a5da2f78e3c0c617d8920302d65991</td>
|
|
<td>a4783aaca4376bd08c9324e857dba67972e008e9299125d5ad954e1a14b46cdbb275786ece77fe8c4f74effd416c9400</td>
|
|
<td>50f97bb844b62c6ca26cf797fc1b491a23f7f23bf9640fcc2fb8dd1f515828dbb42d8d2835d7a3a9d590ce43c9e2102f0b4ed84a3ab7ad94d12c905969dd81f8</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c301be468518755aa67998c549dd4eea2ba0895fb55a26e1a8a885964c1299e</td>
|
|
<td>[68a1c9ccf996ce857d01e734]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ail1oddw.4b4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:23:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ail1oddw.4b4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:23:32 +0000 UTC</td>
|
|
<td>2025-08-17 12:23:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:23:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4c855b375b56b1a5ace47ab9d2cc02f369a72c87fad3bc8e47d6286187d96319</td>
|
|
<td>[68a4cc4fe7cc38673861dc6d]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\v1w0tmgy.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:11:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>v1w0tmgy.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\v1w0tmgy\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:11:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>4ca6416cc9a1d517cee067878b1f93990aad6f2363b3ce6efea6de07086d1798</td>
|
|
<td>[68a311cdc2d0d6e3eb77f219]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindUsersByEmployee ID.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[1c10957d91c1c61393c79b698897c1e9]</td>
|
|
<td>[c188186442dcc7eb7f2cad3d4f49eaa481502366]</td>
|
|
<td>[11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596]</td>
|
|
<td>[b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindUsersByEmployee ID.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>4886</td>
|
|
<td>1c10957d91c1c61393c79b698897c1e9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-24 16:17:59 +0000 UTC</td>
|
|
<td>2023-03-24 17:06:27 +0000 UTC</td>
|
|
<td>c188186442dcc7eb7f2cad3d4f49eaa481502366</td>
|
|
<td>11cc48b10b60d6f911cab63ba9175b51855e94437c62a60cbb3d20e1ea1fc868d3d364ffe09953413a95c5ce77c40596</td>
|
|
<td>b0fafa9ce3222554f7f4b1e71a26df71fa21054e9d625dc48d1f045ec4e11b789e2c2eff14428f7e0f43dfdeb0b84767da2edabf7e0178599e7971abf173d304</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>53d05f355b9570288a1107872f00b3159ebaf4a39cb844a07eb17855ad4285f1</td>
|
|
<td>[68a3536f4c961e0e97663798]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-MYLA-01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\shutdown_pointer.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\gpscript.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T16:23:04Z]</td>
|
|
<td>[5d8e141e0db6caceb5cd8b4ca1970ab0]</td>
|
|
<td>[8b7779bbead93a6cb490c37182ae0af405e88595]</td>
|
|
<td>[92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9]</td>
|
|
<td>[47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9]</td>
|
|
<td>[10.101.100.201]</td>
|
|
<td>[10.101.100.201]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>shutdown_pointer.cmd</td>
|
|
<td>C:\Windows\System32\GroupPolicy\Machine\Scripts\Shutdown\</td>
|
|
<td></td>
|
|
<td>60</td>
|
|
<td>5d8e141e0db6caceb5cd8b4ca1970ab0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-10-29 12:58:12 +0000 UTC</td>
|
|
<td>2019-10-28 19:17:11 +0000 UTC</td>
|
|
<td>8b7779bbead93a6cb490c37182ae0af405e88595</td>
|
|
<td>92cc12c4bed96ff0a4cc81b948abc0e3fd8d302eb788b88b51d3283d8603890a23319dfb7d7127255765bb304a396ef9</td>
|
|
<td>47b20de841a0b8635494fde474a84821edd2fec2522d2fc1e248760fe2dd08d97e5c242db29748b503d5bb446cdb1cecbf21a606c215d6c4ecf149c50ac365d9</td>
|
|
<td>2025-08-18 16:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>53fb85b73c86e90e48c14c8f5163b1459465f0b15fb03e3eb2e62f05dbd2f1ec</td>
|
|
<td>[68a17d282a5df80b055ee0ee]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrbm4rto.beq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:56:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xrbm4rto.beq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:56:37 +0000 UTC</td>
|
|
<td>2025-08-17 06:56:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:56:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55096d9d5b8d2540a0fe037e6704e0234d11b5a1f0a574cfdd576a6b0352dc57</td>
|
|
<td>[68a532147b5869d075ea1a64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aijcft55.e2m.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:25:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aijcft55.e2m.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:25:14 +0000 UTC</td>
|
|
<td>2025-08-20 02:25:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:25:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>550a66f3624ef25c40cbff924e56b0b269b0ac5d28da318e3e433cefd79761db</td>
|
|
<td>[68a1e1f3d67e8d114640fa37]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jfvzuzyk.al2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:06:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jfvzuzyk.al2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:06:38 +0000 UTC</td>
|
|
<td>2025-08-17 14:06:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:06:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5590daef95c358df33daea533ac2d818d6da44abc4e20cf97985c177d9807934</td>
|
|
<td>[68a3146b5f0c41860c8c850e, 68a3146b5f0c41860c8c8561]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\http\__pycache__\client.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[548e8b8a392268a48e6aeb8779be88db]</td>
|
|
<td>[648361765ba0a4093c5dcfb5aa2c8d556e224203]</td>
|
|
<td>[e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef]</td>
|
|
<td>[ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>client.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\http\__pycache__\</td>
|
|
<td></td>
|
|
<td>58011</td>
|
|
<td>548e8b8a392268a48e6aeb8779be88db</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>648361765ba0a4093c5dcfb5aa2c8d556e224203</td>
|
|
<td>e5c40ef70d4e7276e9777426905720c4cd7cf2adbeef9015b16691a4e8b69c2b7172dc71cf5e43deb970057b9dedf7ef</td>
|
|
<td>ab0131b761e021ca83fbfef5230eca43eadcd7cbc0a6b54c447e86848bc647e5c184e69e023a9d7e80631fe9d66a1858da30e96417f72b6d189eb47ca5a50204</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5592943ead1aff645f47491b2d6ffc8ef4321ac3057298636b873231e9892588</td>
|
|
<td>[68a5c7e76397242bf73fa413]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_Talis1]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_Jnt_Talis1\Desktop\MDI_Install_DeployAgent_NEW.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:04:30Z]</td>
|
|
<td>[4528d629d40aac35051da0522f52607b]</td>
|
|
<td>[4cd808677a3e168b90608c51a9306e76db5213b4]</td>
|
|
<td>[31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135]</td>
|
|
<td>[d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MDI_Install_DeployAgent_NEW.ps1</td>
|
|
<td>C:\Users\ca_Jnt_Talis1\Desktop\</td>
|
|
<td></td>
|
|
<td>6587</td>
|
|
<td>4528d629d40aac35051da0522f52607b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:53 +0000 UTC</td>
|
|
<td>2025-08-20 13:03:03 +0000 UTC</td>
|
|
<td>4cd808677a3e168b90608c51a9306e76db5213b4</td>
|
|
<td>31151e091cef8c2f7705e33ef87b41d2de9527d233fb7934851323f70a7bed5d66c56e4e0d447683bd84425a11357135</td>
|
|
<td>d077fc40c9b9a6a59268ad873cd972fe0b6f8b10a6d4d089ba14cbf6e2ffc74c7bc9cb468b28477b7046c959ab456ee171bf75b054e6e909b21f5d0f2181ac54</td>
|
|
<td>2025-08-20 13:04:39 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55bf09ca2ad1c7643f8b49514febf0c748f5027daaaddbbff35c433a2dcc1fb5</td>
|
|
<td>[68a3146b5f0c41860c8c850f, 68a3146b5f0c41860c8c8562]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\parser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[2927d376429456be4172708564560b31]</td>
|
|
<td>[fed7f1ad061029797867412a130d3c2873860dc7]</td>
|
|
<td>[b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5]</td>
|
|
<td>[d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>parser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>6522</td>
|
|
<td>2927d376429456be4172708564560b31</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>fed7f1ad061029797867412a130d3c2873860dc7</td>
|
|
<td>b07c862bd3b0dbed82088bfa1e9839dc803997385ab482dffe1f254d8e86cf3820cf931d6b18c5c4d593d120a7fd65f5</td>
|
|
<td>d0e922b72d40fb808c77474d1b17a3a7e6331581b6fcef49081271eef152cdcac3bbf9941aab500ad16d93149f28e410e776a2f074a56e1a43cb9175bfe3eb77</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>55cd58c247e720424b4ca5499424a0a70bffbb96ce9c7063e4807f4c41a3569b</td>
|
|
<td>[68a166949dc690ff0657c725]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0xiwecyf.da0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:20:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0xiwecyf.da0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:20:13 +0000 UTC</td>
|
|
<td>2025-08-17 05:20:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:20:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5633d05634543f25d6da937e89a8c8fa057b9213148d90451127ffc4301bb0db</td>
|
|
<td>[68a1620c21c43447a35c861c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\tmpEXO_fs3h0x0e.vmj.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:48Z]</td>
|
|
<td>[c33129b61d70032a71a5b5dfb9053472]</td>
|
|
<td>[789b7d25c519e94a20cdd9521a608e5d129a4a01]</td>
|
|
<td>[9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9]</td>
|
|
<td>[86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_fs3h0x0e.vmj.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fs3h0x0e.vmj\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>c33129b61d70032a71a5b5dfb9053472</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:47 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:47 +0000 UTC</td>
|
|
<td>789b7d25c519e94a20cdd9521a608e5d129a4a01</td>
|
|
<td>9fc0a070a31644508f0e8b6cdd419bedc3a22ca4e1825b17d03d75d36b8586ed3bd9d63573a8c548b0bd86c59b7453f9</td>
|
|
<td>86d91bbef8846d147e57306eb9313fe3846d5565fd55b748973b2a99a40ea1b36675adc8bd4d81a64063c9a856751f1fe9b264c88c3d2b283e0f6007ac7440fa</td>
|
|
<td>2025-08-17 05:01:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5666833c44ff8d0b36e7f71e54af218b78a5ba053c7503d40bc32ec06670f74c</td>
|
|
<td>[68a1620c21c43447a35c861d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\tmp_owxdn3xb.e3x.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:54Z]</td>
|
|
<td>[d4c8d2aa51d9c4ce7f5ac425a43d50fc]</td>
|
|
<td>[533de221c9395696648b3311a61d6fef1fd6cdc6]</td>
|
|
<td>[4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd]</td>
|
|
<td>[e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_owxdn3xb.e3x.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_owxdn3xb.e3x\</td>
|
|
<td></td>
|
|
<td>4669570</td>
|
|
<td>d4c8d2aa51d9c4ce7f5ac425a43d50fc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:54 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:54 +0000 UTC</td>
|
|
<td>533de221c9395696648b3311a61d6fef1fd6cdc6</td>
|
|
<td>4e9dcff7faf90d10106d13ffdfd6427a6f97b8269af5f856f17e0a00ab71f32e07947d2a7c5e5c388c89deb63713d1cd</td>
|
|
<td>e91704fbe4fdedee129a3cfda65e4901556d90a2b1a9e5282698adceca7142b1b769b5d876d849fe3cda262550452af8b61947783a5fdc3d73ea0e5cd1099d14</td>
|
|
<td>2025-08-17 05:01:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>50391527cb36dfceeab0bb805595d1547ffd82ddea9edac51e6aba51ac9414aa</td>
|
|
<td>[68a4ccc785b914a60d739e4f, 68a4ce1fc826337212f53bec, 68a4d07753a851daf11e6937, 68a4d07753a851daf11e694c, 68a4d2d1ff2b441b8442812f, 68a4d2d1ff2b441b84428144]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\Win32.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[2bc97f533732bd5d15bf8138c411a9fe]</td>
|
|
<td>[54c6081b4a286a6d67cca3435d3c10d9cf6156c3]</td>
|
|
<td>[d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba]</td>
|
|
<td>[1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Win32.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Win32\</td>
|
|
<td></td>
|
|
<td>40448</td>
|
|
<td>2bc97f533732bd5d15bf8138c411a9fe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:50 +0000 UTC</td>
|
|
<td>54c6081b4a286a6d67cca3435d3c10d9cf6156c3</td>
|
|
<td>d2e4045d037193e9f38837208c0a44a7e1452b92dbeda62bf045b8da862ae63166463723cdc4b383a7dbad93239898ba</td>
|
|
<td>1b395c7cae90d4b7db91b1eff9a15bbbcf6e4957253aa0513870d6e04d427877c1a99f9de556550153bed09f3db486da7b0ee05c26ae549d468b86f629787e19</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5105aafd20d9944f9076e24f001c0da20c64943ae969583811bcee3f504ac44c</td>
|
|
<td>[68a18cc514e7a0de47067714, 68a2de4c24b13c178e1e1496, 68a42ff2cfdf5d300631abd0, 68a5818b1ea96109fbbc885a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-EBO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\eBO\eBO_stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:01Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z]</td>
|
|
<td>[deb1a8bcca660fac053336c625030dfd]</td>
|
|
<td>[11893c3ae1af058fb5c6c5d724fe1df21338f9fc]</td>
|
|
<td>[8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa]</td>
|
|
<td>[c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>eBO_stop.bat</td>
|
|
<td>D:\eClinicalWorks\eBO\</td>
|
|
<td></td>
|
|
<td>12</td>
|
|
<td>deb1a8bcca660fac053336c625030dfd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 20:05:12 +0000 UTC</td>
|
|
<td>2021-07-04 20:05:12 +0000 UTC</td>
|
|
<td>11893c3ae1af058fb5c6c5d724fe1df21338f9fc</td>
|
|
<td>8a3b66984c7502003f6c341aeab5839beb27d313ad2aa83c187531e49b4c02ab44c28344f86560d44ddffcc37256dcaa</td>
|
|
<td>c9ad8da3b43e8debc4c84b5b0ee1cc4cf7cca3614c77fcf6a4cdcdf488da651d152607780ab13e60c2c995791a4a71c605274a3af4475798022e076ac6f3dab2</td>
|
|
<td>2025-08-09 08:00:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56ed5281697b1b3f0d4a02c56da40a350c650de6070953109d23c821ebf6c438</td>
|
|
<td>[68a3146b5f0c41860c8c8518, 68a3146b5f0c41860c8c8536]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\struct.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[f2392beeb6895c05392b617d9556162e]</td>
|
|
<td>[ceabc4d9e357b4e80d13f612480cad73d04827ff]</td>
|
|
<td>[8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e]</td>
|
|
<td>[6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>struct.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>333</td>
|
|
<td>f2392beeb6895c05392b617d9556162e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>ceabc4d9e357b4e80d13f612480cad73d04827ff</td>
|
|
<td>8ec4a2ad380bee3abbb9db998b11ab874ba2e0c28fa4d8afd57274d2e20b2084347dfc74b41acea22271367fc73d6f5e</td>
|
|
<td>6f947a9a5c4689f0ea2b66a18aa33dc076b83d7e73613230ca209a3c74d04e2e124e9e1b18d934cf8ff91cab418d89e0e76b490b59424138fcfcdc3975b72060</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>572e12789d1b3b49b172c9d284d902986647e527ae6c11904cc99079b42625ef</td>
|
|
<td>[68a3209bdb4bb30ce9fad5ac]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\tmpEXO_xktvp1ff.kqf.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:13Z]</td>
|
|
<td>[9dbf39fe1a5381187ab341506970b134]</td>
|
|
<td>[f9a6304e4715a8409551f6752844ea809a561092]</td>
|
|
<td>[710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485]</td>
|
|
<td>[2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_xktvp1ff.kqf.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmpEXO_xktvp1ff.kqf\</td>
|
|
<td></td>
|
|
<td>2316948</td>
|
|
<td>9dbf39fe1a5381187ab341506970b134</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:46:12 +0000 UTC</td>
|
|
<td>2025-08-18 12:46:12 +0000 UTC</td>
|
|
<td>f9a6304e4715a8409551f6752844ea809a561092</td>
|
|
<td>710c32b457b9318def24c89d67d464447d23d3098e91f6b819e0d6207b6c27c836263c0893addd90f372c69f1d77d485</td>
|
|
<td>2dd5044b7649579f3d543b172073cc80f749dc21ba291ea0cd8c6fcda8232116368bcec78f35a33e8246d5358000568cfbe864ec1d307c5a7a753ed516c2492c</td>
|
|
<td>2025-08-18 12:46:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57bfa899aa02376e3b3450f27683fc6ff601584d9d7d432312bfab377d96b35a</td>
|
|
<td>[68a4eb5df910568724168d54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nWHL-CTX-02]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ypcgscah.ojh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T21:23:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>[172.25.14.129]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ypcgscah.ojh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 21:23:38 +0000 UTC</td>
|
|
<td>2025-08-19 21:23:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 21:23:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57c2ad231fad6089a113121215df9ce0552f0464144b761d79dd3e31e49d6f48</td>
|
|
<td>[68a311cdc2d0d6e3eb77f204]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\connect-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[2ed5355ca6098c511f5669abf5d613b6]</td>
|
|
<td>[1a3d8c611c6e70e3207d5ca6f373a20cdd227b78]</td>
|
|
<td>[37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c]</td>
|
|
<td>[d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>connect-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>6375</td>
|
|
<td>2ed5355ca6098c511f5669abf5d613b6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:51:50 +0000 UTC</td>
|
|
<td>2025-04-02 12:02:50 +0000 UTC</td>
|
|
<td>1a3d8c611c6e70e3207d5ca6f373a20cdd227b78</td>
|
|
<td>37692d52c962272838ebe845ccf20ecbd3f9428b96ff43561d5a4dd81856450d2ba3cc0cc33a431ff7d4354f6c3f766c</td>
|
|
<td>d8ceff555638328a6818ec119284f9e8766894b138ffe8f29bebcfce1a1686c9a8e87db881ae27585c9a99744f6678b39888c64701d25ce9797e4c3e80929a95</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57e4a7e4278f770db47071e08177a71056083a364ed18942e0f25de22027bb7d</td>
|
|
<td>[68a5c7518a82efb8e85802e8]</td>
|
|
<td>[2]</td>
|
|
<td>[sk10219sa]</td>
|
|
<td>[n-sktartarus]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\sk10219sa\AppData\Local\Temp\2\__PSScriptPolicyTest_hfonphxl.ba1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\PowerShell\7\pwsh.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:01:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>[172.17.20.94]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hfonphxl.ba1.ps1</td>
|
|
<td>C:\Users\sk10219sa\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td>2025-08-20 13:01:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>57f97af9aa938c09929719581541c0188b5e159ac9597204439c9d8ac677e8db</td>
|
|
<td>[68a176d3006fc2fefdc26def]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lhlp02h0.wqr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:29:30Z]</td>
|
|
<td>[b13c3cadee294c4214cad7c499716e64]</td>
|
|
<td>[85d4df31ced5762f398b8d8621816c19fa4a46b6]</td>
|
|
<td>[8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574]</td>
|
|
<td>[ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lhlp02h0.wqr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>b13c3cadee294c4214cad7c499716e64</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:29:30 +0000 UTC</td>
|
|
<td>2025-08-17 06:29:30 +0000 UTC</td>
|
|
<td>85d4df31ced5762f398b8d8621816c19fa4a46b6</td>
|
|
<td>8bacc6279fc35dd062ae5e049176372676b9c5dfee0d74cc64f803e9b3265c6f28b00158d2d3f37f67dd600b5a911574</td>
|
|
<td>ddafbdf1c155b8f9b987fdceef00615d9db92588d3d683a6eeb4e0fb6a3e6398f78167b528066a86d0b8e15ce5c53fab3709041d149c11a685a48f2980ff8c92</td>
|
|
<td>2025-08-17 06:29:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5839f7b693b43b0b85a9ed4ecb774b241a579d00377c6a1b14a8f6f67db70475</td>
|
|
<td>[68a3146b5f0c41860c8c84f2, 68a3146b5f0c41860c8c852f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\keyword.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[cf1385559e7ba1972e692e1e48af85b8]</td>
|
|
<td>[2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba]</td>
|
|
<td>[1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae]</td>
|
|
<td>[8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>keyword.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>1049</td>
|
|
<td>cf1385559e7ba1972e692e1e48af85b8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2ee8c0c964cf67b5fc2f96fcdee0ca9ec5db0dba</td>
|
|
<td>1a82cd281d742682ebce6553355ff45dd08e30921a6efb487570afd25f37bcdeb9c6953aca6fc1aaeeae92ee0e4d95ae</td>
|
|
<td>8aa6eee86a49eb515a07d8e1202b57345ee36aef0a5118f15104d282b53c30478a09a35ccb24d8c2697d4f4d70ca8ae71220b04f563dec149738ad3652d5eeec</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>586b77ca0fa977e7ca8acb449cb4a746425bd5d8b832f8d85afd67d16af47d21</td>
|
|
<td>[68a523949cec397f02de9f53]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[03f29f88600b91e2c0850ef5ba848be7]</td>
|
|
<td>[cacf863b314180019dcea5669f5a11593096d569]</td>
|
|
<td>[b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476]</td>
|
|
<td>[c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>39424</td>
|
|
<td>03f29f88600b91e2c0850ef5ba848be7</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>cacf863b314180019dcea5669f5a11593096d569</td>
|
|
<td>b9a4bb083d736d2fd269a845042304af046cf1997dc85cdecd1c1e4bd9ec522af971243adb3128caa13374ac40fe0476</td>
|
|
<td>c0c95ed4f4c816821ef2502785fe32e269b055d31db876a3cf2a1cf46e1c979e31f73cb1b9e6d30a37da376b50814990d5168d39f0ade91f3b724490a29f25dd</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>589581756bd4704aab790e73d2b0e243ca68e8501bbb066b3da56904ab3d0090</td>
|
|
<td>[68a472d954bfa55540708aa4]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\SuperPutty\SuperPuttyLauncherUpdater.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T12:49:27Z]</td>
|
|
<td>[f448f27c617c2b801a51a55fdae3fedf]</td>
|
|
<td>[6138d8b99e5f09905ace2e145b7c494c29f85cc1]</td>
|
|
<td>[77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76]</td>
|
|
<td>[d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SuperPuttyLauncherUpdater.ps1</td>
|
|
<td>C:\SuperPutty\</td>
|
|
<td></td>
|
|
<td>417</td>
|
|
<td>f448f27c617c2b801a51a55fdae3fedf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:27:27 +0000 UTC</td>
|
|
<td>2022-12-15 19:54:21 +0000 UTC</td>
|
|
<td>6138d8b99e5f09905ace2e145b7c494c29f85cc1</td>
|
|
<td>77cc6bc809df89eaf6c756dd14e1f29df636513c88fb7c3e3f1b5d2768deddc5e885a95dfbf5faf95da62687a6a40f76</td>
|
|
<td>d65261c4c3616ebb1b915f446af574404a3106bf7914abb50d69b23fbede2ba2a28e0a19cb15530c105ca6dfa0ed1a329521fbb1207848ed2c9b106df5895f85</td>
|
|
<td>2025-08-19 12:49:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>58a84e74187774df56fb3d1a63888b1ca4b677a6106dcef639d6c147d5fc4123</td>
|
|
<td>[68a4a57a7ce66434aa8e4a9d]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Export UPNfromADGroup.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.869]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:25:27Z]</td>
|
|
<td>[b39139c6d58f98b8c3bb0727a23239b0]</td>
|
|
<td>[e4496e1ce928ef22c55c8d7ec42f207ca624febf]</td>
|
|
<td>[f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245]</td>
|
|
<td>[2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Export UPNfromADGroup.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>169</td>
|
|
<td>b39139c6d58f98b8c3bb0727a23239b0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-01 14:45:37 +0000 UTC</td>
|
|
<td>2024-08-01 14:45:37 +0000 UTC</td>
|
|
<td>e4496e1ce928ef22c55c8d7ec42f207ca624febf</td>
|
|
<td>f662fd5b7dbbd52711bba742356f1a7c0d81df53ace5f07ed2d51bcd64517e3ddd33eea6d90d9af27a80d19bb96fc245</td>
|
|
<td>2bd8cd9ead2b32e54465e4c8a032fa15718a9c54adfcf8b70bfcbe78208cecdd4409027a581364a8d1310eff90ce00fe64f527a8dcc2b01ea3a4bcf74fde6f07</td>
|
|
<td>2025-08-19 16:25:30 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>58bd329a2f3e91c545a51d2496f9660013865b6e43a08bf00c716aad755c140d</td>
|
|
<td>[68a1642f671392a6ca40e556, 68a2b3ef86404a813dc06ef6, 68a4059c5671ca7f23589560, 68a558aca07fa49408288e49]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[VM-ASCNEO]</td>
|
|
<td>[C:\Users\postgres\AppData\Local\Temp\pgaE191.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga17CB.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga46D0.tmp\1_1.bat, C:\Users\postgres\AppData\Local\Temp\pga7EEE.tmp\1_1.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\pgAgent\bin\pgagent.exe]</td>
|
|
<td>[2025-08-17T05:00:05Z, 2025-08-18T05:00:05Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:03Z]</td>
|
|
<td>[3b96b328a2af3ad82dc1a2afa0d21ab9]</td>
|
|
<td>[069383cc28c4fa363d2b34d2bc4475e618cf40ba]</td>
|
|
<td>[68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b]</td>
|
|
<td>[a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>1_1.bat</td>
|
|
<td>C:\Users\postgres\AppData\Local\Temp\pgaF3EB.tmp\</td>
|
|
<td></td>
|
|
<td>48</td>
|
|
<td>3b96b328a2af3ad82dc1a2afa0d21ab9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-09 05:00:01 +0000 UTC</td>
|
|
<td>2025-08-09 05:00:01 +0000 UTC</td>
|
|
<td>069383cc28c4fa363d2b34d2bc4475e618cf40ba</td>
|
|
<td>68af069ade9dd54d6e867d77c825abeb26985dc893a7ea81ae07de1a81a1c7c3e243e43ebac61d55b848cc2d4558f98b</td>
|
|
<td>a23d95b06ac2513ef3c57c5fbc9468de578bcfdc5ad7da6e5e35d66f6c0a8bcab710ec23657b24071464d2cc68f41b1885a4f408b6ee47b48722646eb676ad63</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>532f364361b515f31c6fd2fcfd4bc56bce053839b3cd82583d1e1065c42952ce</td>
|
|
<td>[68a474562c8d6a03c3aa568b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_etihzaoc.pjw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T12:55:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_etihzaoc.pjw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:55:46 +0000 UTC</td>
|
|
<td>2025-08-19 12:55:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:55:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>539dae55d02bd0e7939fe5ca3ca52297b8925b555acabc714583dc7c80a94b0a</td>
|
|
<td>[68a3146b5f0c41860c8c84f0, 68a3146b5f0c41860c8c8528]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\types.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[c61242d8c34df5630927662930df1721]</td>
|
|
<td>[c178f5b9a7f198f2422663096de0f578bf4bee02]</td>
|
|
<td>[e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68]</td>
|
|
<td>[f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>types.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15551</td>
|
|
<td>c61242d8c34df5630927662930df1721</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c178f5b9a7f198f2422663096de0f578bf4bee02</td>
|
|
<td>e9a55a4761d641a7ce66a11d9c44146f17dd89bbf23628346fa9e7c738345b3f7e6f1e3183c545806bb7a807b3b72a68</td>
|
|
<td>f563066fdc5f681d01587c11e9c154a22e0f97972c5b2805b383f78cb88192a66afebcea3abc1157906ba8754c4b65464066bcb3a41cca70be5826239e6720c7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0d4d362ed5b662a4975f8e67030e069e9e60d82137f6970653fbf89e1cf30ea6</td>
|
|
<td>[68a156aa2d859ec7c26395e4, 68a15db20a227e1e294e1d6c, 68a1642f671392a6ca40e558, 68a1a40655e9b687a677b976, 68a2cb621ea3fd6932f5b13a, 68a416054e2b3b19a2fbbd64, 68a42b1df903729d40303a39, 68a5528ca68312b2437669bf, 68a567a3b30563f7a27fa9b4]</td>
|
|
<td>[2]</td>
|
|
<td>[ASCSvc]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[E:\WAVXMLBulkMapper\email.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T04:09:46Z, 2025-08-17T04:39:46Z, 2025-08-17T05:09:46Z, 2025-08-17T09:39:46Z, 2025-08-18T06:39:46Z, 2025-08-19T06:09:46Z, 2025-08-19T07:39:46Z, 2025-08-20T04:39:46Z, 2025-08-20T06:09:46Z]</td>
|
|
<td>[48709ee3e41ad538c3d93892b04c4b5b]</td>
|
|
<td>[61e2058c06bf9e3f8246aca4fcc61b5d15f7029e]</td>
|
|
<td>[335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f]</td>
|
|
<td>[f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>email.bat</td>
|
|
<td>E:\WAVXMLBulkMapper\</td>
|
|
<td></td>
|
|
<td>676</td>
|
|
<td>48709ee3e41ad538c3d93892b04c4b5b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-04-23 14:39:50 +0000 UTC</td>
|
|
<td>2020-07-09 11:40:59 +0000 UTC</td>
|
|
<td>61e2058c06bf9e3f8246aca4fcc61b5d15f7029e</td>
|
|
<td>335a431a87006d8b5c2bd133948910b06eddb4e5a97a33f81b22514d0b51c36a201f227672c284a4a6a076293cf9482f</td>
|
|
<td>f083555e388a082fcf5730698c05027076d2ced4ab6bc2a7aeadf95c693e23c0d98660fcbe91e2be699c3971af078ee6a495b28074a7d8cdb6cd44ab46e10a4c</td>
|
|
<td>2025-08-09 05:09:59 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0dc510c703e27423555cb0865302c504c258d0e84be9c30820e99edf20ff3401</td>
|
|
<td>[68a1c1205b1ee295fb12a3fd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_el5mtldf.3sb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:46:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_el5mtldf.3sb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:46:35 +0000 UTC</td>
|
|
<td>2025-08-17 11:46:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:46:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0e4fe0097d8234b17fbeae1326f4b4b2447540534ba3ee94a3aa1a5fdc13f22b</td>
|
|
<td>[68a2467384622a54886c0e75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kqy4i4tr.qqz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:15:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kqy4i4tr.qqz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:15:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5978ee4cce13c15c2093be18ee2e64a99dc4c05ba4d07165da3e15b7b4f1eb8b</td>
|
|
<td>[68a35866879570e8d652377c]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[i-hvmigration3]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\title MS license.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2260.859]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T16:44:13Z]</td>
|
|
<td>[b55e3844f3b472627497819e0ebcf127]</td>
|
|
<td>[ac0628a583d75844c56aee0e6aac159ad0e8a73e]</td>
|
|
<td>[1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303]</td>
|
|
<td>[b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>[172.17.23.32]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>title MS license.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>749</td>
|
|
<td>b55e3844f3b472627497819e0ebcf127</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 16:43:21 +0000 UTC</td>
|
|
<td>2025-08-18 16:43:21 +0000 UTC</td>
|
|
<td>ac0628a583d75844c56aee0e6aac159ad0e8a73e</td>
|
|
<td>1f354ee8782bff9947251392b7bcf7abd42973b556bb7a71c4e1160846b1040f266cd43932064ee55601f82ba5f60303</td>
|
|
<td>b7e74222e21a21b63119c7caadca7b8ded86997246bd4481a45474fcb482458b3afcfae8cb98b9a5a8367e401b9ee8615e85bcf4d617438e27a2bdd896ac0c5d</td>
|
|
<td>2025-08-18 16:44:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59aae000bb01010f781af45b77817f924e75d97a1abf8d67454238536b84aca7</td>
|
|
<td>[68a311cdc2d0d6e3eb77f212]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Find AD group like.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[5f27bfc20834874273ef6c0b60856d71]</td>
|
|
<td>[54dcc7f884056915280b76cfd26dd39e9bdf56cd]</td>
|
|
<td>[a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa]</td>
|
|
<td>[0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Find AD group like.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3343</td>
|
|
<td>5f27bfc20834874273ef6c0b60856d71</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-06-22 13:27:40 +0000 UTC</td>
|
|
<td>2025-08-07 16:54:52 +0000 UTC</td>
|
|
<td>54dcc7f884056915280b76cfd26dd39e9bdf56cd</td>
|
|
<td>a5f379017c6bcd065ab936a2135b16534cb9cfc68d34a3535b841a85b368397cce7be2254f4db365f9c99d8d6b5d18aa</td>
|
|
<td>0248de189d3223ec5616621697e52279fcdd2a24c4b61e0670a970204e2f1168434c1a38cf725bf8da8fd48891ffcd43a4dfd0a8eb0f6d268fc070a4bb42871f</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5a305cf3c8c6fee6d48f5fc09ba2f530d9e959b9bb1a6e485bbfb077021495a9</td>
|
|
<td>[68a4b0fb13fac5171eeef0da]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Pegasus.Contracts.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:10Z]</td>
|
|
<td>[ad5552d4c204409a6b6e24fbabee1bad]</td>
|
|
<td>[d72232bb811610c471658c6d946bdf1c214f024e]</td>
|
|
<td>[fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597]</td>
|
|
<td>[eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Pegasus.Contracts.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Pegasus.Contratcs</td>
|
|
<td>37888</td>
|
|
<td>ad5552d4c204409a6b6e24fbabee1bad</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:12 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:47 +0000 UTC</td>
|
|
<td>d72232bb811610c471658c6d946bdf1c214f024e</td>
|
|
<td>fb325ebe67633b9e9078162e00a05b75eaae381dd7924608da02a899fa0a01b193277d82d2abfe2bb4c3f2987f1b1597</td>
|
|
<td>eaa86ef4993c527ea49f55f6062e30838fa0424d5c4eed4cdeb5bc7af7e40cbc24263b62381b228131c853b8538b2730b90c92e7c29cb3f19e685e57a67ee946</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5b5749e19ca32ad429018e253c40621d84544eced490d75bf3ee7f84343e0c28</td>
|
|
<td>[68a2263198ac9267ed12be6d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2uejqjh1.2yt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:57:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2uejqjh1.2yt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:57:44 +0000 UTC</td>
|
|
<td>2025-08-17 18:57:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:57:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5b8e3aeec520fb97107e50abdf1f33dba021e6385ace51b9aacbe3161e418125</td>
|
|
<td>[68a523949cec397f02de9f4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\caching.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[4d40957c49945c3871b53bda5e7c22d3]</td>
|
|
<td>[7b5821614de77201a478240c8c468031e458623d]</td>
|
|
<td>[b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1]</td>
|
|
<td>[a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>caching.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>caching</td>
|
|
<td>19456</td>
|
|
<td>4d40957c49945c3871b53bda5e7c22d3</td>
|
|
<td>caching</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>7b5821614de77201a478240c8c468031e458623d</td>
|
|
<td>b878e576f227c68b93c2fbe7aaf0135af82a3d222fd0309879eb0e4f242619fafb6389030cdcb3832874ec25929012b1</td>
|
|
<td>a70d67e6b4129a6fd3743eeda8b31d5473e72a43bab747c8a0c5c834853cd6fc1b0058894edd759aee678713de450e2b3892c7fd15748676476c1d0a9cd544c9</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5bf9e5548e81c3ee09ecb53ead92a28a1d2094b11f3de1a72e78bb835d6e755a</td>
|
|
<td>[68a5239e621d09b2b1ed5e48]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[f2ac8256579118dfa592ae6c06393f67]</td>
|
|
<td>[f293eeba2fbafe1e52e80a39365616ca358484d6]</td>
|
|
<td>[d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9]</td>
|
|
<td>[75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>27136</td>
|
|
<td>f2ac8256579118dfa592ae6c06393f67</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>f293eeba2fbafe1e52e80a39365616ca358484d6</td>
|
|
<td>d31441e19e6e0814b7ca1c2ddfc229c446025ee18794269dc07033f9d19b3c3671d4bb20a2930477e814d3e9e3bcc0a9</td>
|
|
<td>75c8b280778dfb6d857687e6f059f91cd40e61f95a14161cd34af3c763679cd1daa510d5156b08476156511b135e41a05448db0827b7730c54cefba74c23c4e7</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c4d2817d99c1de0b6f825cb3a0030bcfe697672c3b920dd4a85939c97a460bc</td>
|
|
<td>[68a1a3e8ae65e4e5452ad826]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_igsbqipt.nzy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:41:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_igsbqipt.nzy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:41:56 +0000 UTC</td>
|
|
<td>2025-08-17 09:41:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56d1a755466328027aaea1d9a6e449868f1b7dc45b532b9627a3626f67ca91d9</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21c]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\MailBoxFolderPermissionsO365-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[44133f691b3ffa11118c549f31a652a9]</td>
|
|
<td>[646cbcf0e29f58d55a2ea858476b30fbe73db5e3]</td>
|
|
<td>[8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94]</td>
|
|
<td>[0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MailBoxFolderPermissionsO365-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>66064</td>
|
|
<td>44133f691b3ffa11118c549f31a652a9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-18 16:43:45 +0000 UTC</td>
|
|
<td>2025-07-18 20:48:14 +0000 UTC</td>
|
|
<td>646cbcf0e29f58d55a2ea858476b30fbe73db5e3</td>
|
|
<td>8804c4ffe3fefa9d13530360e00defb4cded40cd801752ae3126a03a209d298bf28daadf4339e5182e82ffe383a18b94</td>
|
|
<td>0b4f9286b341e78d99a8d7314a0808ddcae735da1741bf4bc9265ec6cdc3260fe0c15ad16f520d7bf31632f726613d7276fa1fcee371a6c0d7f6f567d58ab330</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>56e5500ac59d874c2f28b3141c3e7b0dea5a5db01f7b86c167d905b29499aa67</td>
|
|
<td>[68a25efe3635347d5469494d]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_ybuwjehe.dy2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ybuwjehe.dy2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:00:03 +0000 UTC</td>
|
|
<td>2025-08-17 23:00:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59043ff80f6a43b4041d20cac0cea712e7426eb429ff93ceb25bb906bf0421d7</td>
|
|
<td>[68a25c5f2155d94949889b12]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d354we2i.k1a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:48:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_d354we2i.k1a.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:48:59 +0000 UTC</td>
|
|
<td>2025-08-17 22:48:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:49:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>59494928170e51ca4e76b4519106dcbe83fa1abd8afea4829f610d24d5d74318</td>
|
|
<td>[68a5239e621d09b2b1ed5e5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[caf160ccadc9a873ce2932cbd7153a2f]</td>
|
|
<td>[c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e]</td>
|
|
<td>[ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb]</td>
|
|
<td>[3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.CommLayerBase.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.CommLayerBase</td>
|
|
<td>22016</td>
|
|
<td>caf160ccadc9a873ce2932cbd7153a2f</td>
|
|
<td>Stanley.Infra.CommLayerBase</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>c34ef0864fc9e2b8062a437cc5b8f17b6b69ca8e</td>
|
|
<td>ec35eb88c5fc8d3c15ae4a48b8dd827d02768e49542046247a78b143fc8371ff2a307501f78773b105324a0c1e552bdb</td>
|
|
<td>3f33bedda62f21c2e993194ca6c660d73f90364db9662b8c9a6ae85783f3414cc59e15eff4ac86ee9ce432ea82389eb96bcc094d263d232dcab1fc21d75573f2</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>10f86ca48d4a4bbb975aa700c731c3fbe72dd351a60c5f9c660cc27b3165175a</td>
|
|
<td>[68a202fd73f6d2c0d39cd925]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-Datsun]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w1kmz4zz.e0v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T16:27:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w1kmz4zz.e0v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 16:27:38 +0000 UTC</td>
|
|
<td>2025-08-17 16:27:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 16:27:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>127668c98e4a256a396efc19add7a3d570fc1f0a411a4012199f7c630851145c</td>
|
|
<td>[68a31a7af7c31bbfe169b9b0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bcpjzu5b.dhj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:20:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bcpjzu5b.dhj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:20:04 +0000 UTC</td>
|
|
<td>2025-08-18 12:20:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:20:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>12a5ca9322fea13fcb43d129b87ba2be1d566650185bf5def00b2e4602a17256</td>
|
|
<td>[68a19c6991a4554163504734, 68a2ecdfe7265ab6e4a25092, 68a43e759d6f6b2d5e445385, 68a5900679c659b659e73766]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nPharmguard]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Smiths Medical\IISLogMaintain.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T09:00:00Z, 2025-08-18T09:00:01Z, 2025-08-19T09:00:00Z, 2025-08-20T09:00:00Z]</td>
|
|
<td>[95fb67e179d4e07ec247bb9f783bc905]</td>
|
|
<td>[85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e]</td>
|
|
<td>[b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98]</td>
|
|
<td>[74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c]</td>
|
|
<td>[172.17.22.222]</td>
|
|
<td>[172.17.22.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>IISLogMaintain.bat</td>
|
|
<td>C:\Program Files\Smiths Medical\</td>
|
|
<td></td>
|
|
<td>147</td>
|
|
<td>95fb67e179d4e07ec247bb9f783bc905</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-08-07 16:11:14 +0000 UTC</td>
|
|
<td>2016-10-31 22:24:18 +0000 UTC</td>
|
|
<td>85da1e7c36a0aea90978c6d92dd2117bd9bf7c5e</td>
|
|
<td>b9009517a514fa7d8613e025715bb40ca5f31c544f1d8714a21db89a32ff2e8fad2577ebf5df2cd4be3a0b1de41d4c98</td>
|
|
<td>74d0434b465306ce00e928c169460e51627e7ffa345999ff2a7bd8536b601a60dd5ea03c8517c8a8e2f28b2fee3555888723bc4583ccdc4ae11672424356041c</td>
|
|
<td>2025-08-09 09:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>12d861e4fb434e98ce0c5f91301a6025b5a84a108ba9a4b8644e730419eae5af</td>
|
|
<td>[68a5239e621d09b2b1ed5e44]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MenuMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:31Z]</td>
|
|
<td>[0c0d3646da06ec03465d50305002b13e]</td>
|
|
<td>[478f57ff589dfbfe82f1d5326355a3a624d4f778]</td>
|
|
<td>[9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de]</td>
|
|
<td>[ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MenuMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>16384</td>
|
|
<td>0c0d3646da06ec03465d50305002b13e</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>478f57ff589dfbfe82f1d5326355a3a624d4f778</td>
|
|
<td>9b0344013b97b28cd565b75a9305e5b2e6dedba92b099854546fc5eb12fc463d43e8ea6ab42956b91ce17a84a0c519de</td>
|
|
<td>ca07f82aa5a221634e4b0b041d4541e9c037fc7205b66ae8d51047844fa84156132e2507fe3977ea74e3c5902de05edf3c3017422aca84a1fe8603d7f76abe90</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13667a217d2a70dc86e0f82fe2473bcbf2ad1d99fd00dc412ad72d8d06d076ff</td>
|
|
<td>[68a3146b5f0c41860c8c8510, 68a3146b5f0c41860c8c8563]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\feedparser.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[be27a5f36419634606677e6fa71aa08d]</td>
|
|
<td>[cbecf541ea0883be47c01dcaefc6dbea7d643dde]</td>
|
|
<td>[531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961]</td>
|
|
<td>[22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>feedparser.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>20575</td>
|
|
<td>be27a5f36419634606677e6fa71aa08d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>cbecf541ea0883be47c01dcaefc6dbea7d643dde</td>
|
|
<td>531bc5a9498b5853ebfb5d017d2df6ac649296d8ba9b0fd44587d7d3e9d5125acf4999cd62a6b8eb7c15c026a44e5961</td>
|
|
<td>22290bd5e0306dcd611cc324ea91eaeceee1bcd66fc7b95741ef1210d464f4def5317dadb17fefc39240876fd834c42487e8b22e0dbbf3bdda4ccb7454d20823</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>137e5a5cb2ade0a22a101541c06e699d054d556a9fdfb5f921e49aeb84c4c441</td>
|
|
<td>[68a3146b5f0c41860c8c84ff, 68a3146b5f0c41860c8c854b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\datetime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[54cb321c2eed002f565e6528ea807a30]</td>
|
|
<td>[568adbd741f0b5367410f189ae092931a364959d]</td>
|
|
<td>[50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82]</td>
|
|
<td>[9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>datetime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>419</td>
|
|
<td>54cb321c2eed002f565e6528ea807a30</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>568adbd741f0b5367410f189ae092931a364959d</td>
|
|
<td>50b257defb0ebf6b7b4bdea78a2c70cc23cf1816107ba7bf9e56a861ee3bc23cd5584015728d9d35206ad85843962f82</td>
|
|
<td>9c2193d0700ee3cca71af95696e45a0e874eda97960f79f5cc4c5b539a5aafc4a8caa369549f0dce9174a0ea8627e768db271324db8e5b2800853d3a85085f6e</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>137f566c237c53bf6a59b349eb49fd635f4c8542b19024a4706ed912ec4c84c5</td>
|
|
<td>[68a60636046f9961fe8098a7]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast4]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\__PSScriptPolicyTest_wl5srk2d.2vs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T17:30:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wl5srk2d.2vs.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast4\AppData\Local\Temp\8\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 17:30:29 +0000 UTC</td>
|
|
<td>2025-08-20 17:30:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 17:30:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>13d2884626fe8588a24e0cec74ab305a961c96afef3e60bbfbf506407767ea46</td>
|
|
<td>[68a269db7d044cbfa4a5a343]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-I-FAMELASTIC]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yyej1nxr.c5v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T23:46:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yyej1nxr.c5v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:46:24 +0000 UTC</td>
|
|
<td>2025-08-17 23:46:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:46:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0d1ee835c881e5f8a90127d71176b19a5f527136f4b33d877cebe729c11efe09</td>
|
|
<td>[68a5c8eceb9e7b7716dce204, 68a5ca39b5df6e9c598d9a16, 68a5ca39b5df6e9c598d9a23, 68a5ccf2ddfdba423e488639, 68a5ccf2ddfdba423e488647, 68a5ccf2ddfdba423e488655, 68a5ccf2ddfdba423e488662, 68a5ccf2ddfdba423e48866f, 68a5ccf2ddfdba423e48867c, 68a5ccf2ddfdba423e488689, 68a5ccf2ddfdba423e488696]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\helpers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:53Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:50Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[55a6027dd1e0a5e48063566b84073d33]</td>
|
|
<td>[b64ef951eba0b844f0a7155cca53f91eda45f185]</td>
|
|
<td>[614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88]</td>
|
|
<td>[d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>helpers.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\</td>
|
|
<td></td>
|
|
<td>8350</td>
|
|
<td>55a6027dd1e0a5e48063566b84073d33</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:38 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>b64ef951eba0b844f0a7155cca53f91eda45f185</td>
|
|
<td>614097ba5b5424c112fd357857cec922791c8edc49b27504e5365ea597f7fea1002412671bf287ebfbe8c20bba84aa88</td>
|
|
<td>d8d8f179885ae55323067c879092b3d7a21fdb56ede522d4438c76add5bd19c8728b201eb384ec5172b2cfebf6e54075c215ce3c7342dfc1777922784d1bea16</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6519fa21fd6c2089d9cd74a1c19e586b97cafa58b95e7f32cc8843106a52297f</td>
|
|
<td>[68a3146b5f0c41860c8c8554, 68a3146b5f0c41860c8c8579]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\token.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[7bfdfbbb892249eaf8c980f98d7c019e]</td>
|
|
<td>[192a5bf782608ebb77060023442b3dfaefec7dba]</td>
|
|
<td>[6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a]</td>
|
|
<td>[269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>token.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>3572</td>
|
|
<td>7bfdfbbb892249eaf8c980f98d7c019e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>192a5bf782608ebb77060023442b3dfaefec7dba</td>
|
|
<td>6de4abf45e455ca60978702c5e5e8335616313280103cad5ce22a1ef8ce7012e2d1eb492a187c73744ec134dc042b76a</td>
|
|
<td>269f6681e19fcc33547959128fa428a47d7a168d7e31594a8d17281febc2456e6941ffe2b3a627b0c83b06eb058374e0693a14a325bc4fe0297565ff55c73ef9</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6536f5e98cbead09f04f349e790d5138cd064acc602f927805d373d7a02cd4ec</td>
|
|
<td>[68a4b0fb13fac5171eeef0d4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>["C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T17:08:06Z]</td>
|
|
<td>[13d3058a8838596abc2f8a562eb926a0]</td>
|
|
<td>[55a6af07ae596cc5aca567ed04c8f723fe4efaaf]</td>
|
|
<td>[067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a]</td>
|
|
<td>[6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.exe</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI</td>
|
|
<td>46097920</td>
|
|
<td>13d3058a8838596abc2f8a562eb926a0</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:36 +0000 UTC</td>
|
|
<td>2025-05-22 18:18:00 +0000 UTC</td>
|
|
<td>55a6af07ae596cc5aca567ed04c8f723fe4efaaf</td>
|
|
<td>067fe77ecfa4ae82c1534faed6afe38b2fd7b8bc17bd03b1f674697c9f25082fd126356bedb75d2d1d634601f2d4754a</td>
|
|
<td>6de34d3e7a1bf9a0a5294243cbc1394ae52e1218a274f05f9ef22fab182519c94e704cc1932265280b8cdcbccdd3985d969a11ee36d3cbb76783c1057f92e520</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5c742d86087c450491cc0f16495345ebb8370e5ee270c9cb9a41ff4d6a025a7f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f208]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\MSGraph-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[3d8ddd6c9c73fc785f2dc328bb9f2ebe]</td>
|
|
<td>[b081f7516433c926509b9956d80b8bde72db7f74]</td>
|
|
<td>[59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc]</td>
|
|
<td>[4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MSGraph-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>4650</td>
|
|
<td>3d8ddd6c9c73fc785f2dc328bb9f2ebe</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-04 16:00:03 +0000 UTC</td>
|
|
<td>2025-08-08 16:03:32 +0000 UTC</td>
|
|
<td>b081f7516433c926509b9956d80b8bde72db7f74</td>
|
|
<td>59d2b679260d2162fdef71f7b05d63759d656ea9c9578199c7a313c39fee6793750f443344471bdd759217d28aa58bcc</td>
|
|
<td>4f82781f3d40c15adfd4689e09a376afeb6911583c9f689febba610c3f39c977650e35217e9145fa03e6a16cd776eca9261833012a93aa8b05f8cc5862d10089</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5cd6bec8ee21373838f1a1072495ae8e3b328563e40bd645686b228630adc1b2</td>
|
|
<td>[68a1938ae03173a283ad7807]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2honujtp.dwp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:32:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2honujtp.dwp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:32:01 +0000 UTC</td>
|
|
<td>2025-08-17 08:32:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:32:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5d01fc9d29c18726538eee8972df20e160e6a9e2beb0f05ecc50f823fdb330c7</td>
|
|
<td>[68a501fb7a753eb605659392]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\__PSScriptPolicyTest_2jpi5rl5.43j.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2jpi5rl5.43j.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:00:03 +0000 UTC</td>
|
|
<td>2025-08-19 23:00:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5e455451e13e287c4d2bfb59325a352b61cdce7953692d39ff3fde8f521ae157</td>
|
|
<td>[68a1c9fe26ef4c5d33d741b6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4ryswf2w.ra1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:24:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4ryswf2w.ra1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:24:23 +0000 UTC</td>
|
|
<td>2025-08-17 12:24:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:24:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5eb4e339d92213bf88a05a9ae0fbfa5c9be2cba35b15033f9750537527ebbbb7</td>
|
|
<td>[68a1dc8ef7acbde1f06aea97]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nqjmeb4k.jw4.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:43:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nqjmeb4k.jw4.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:43:33 +0000 UTC</td>
|
|
<td>2025-08-17 13:43:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:43:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f4e6697d29e9da65f102eb5281347669f297da17c779c3d98c498fec0d902ed</td>
|
|
<td>[68a3146b5f0c41860c8c8500, 68a3146b5f0c41860c8c8559]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[0961f322c725036a4b676715ca3df2ea]</td>
|
|
<td>[0503b6748380bbc9aabe03713ace8ac2e7225770]</td>
|
|
<td>[5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422]</td>
|
|
<td>[0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>1895</td>
|
|
<td>0961f322c725036a4b676715ca3df2ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>0503b6748380bbc9aabe03713ace8ac2e7225770</td>
|
|
<td>5221ac02185618383f5e0b48c57867d2da427421bc5ab90be8ccc35e55b1d8a24e9b01cc91a5b75de1cac9378a2bd422</td>
|
|
<td>0b8798598bc0884438357e467a71e5d2831b185eeceeafd4e3c741f0da9642dc5c7861879381d882eb28456ab2de1948a2b2f48c6c7d4e936457a99fe9132453</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>5f569870e905db236ba305ca0da4cfd820ef82f59ef451505ab6c93239f84eb0</td>
|
|
<td>[68a1a492a55ce8c2d93b813d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ae1fymez.nje.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:44:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ae1fymez.nje.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:44:46 +0000 UTC</td>
|
|
<td>2025-08-17 09:44:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:44:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>601e017b57a87b714d691bb19b0d53984f1d1a66f227ceb8bbc2e8a8d63617c7</td>
|
|
<td>[68a3274a2bbf81532b7d73f6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ksxmyi50.q5r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:14:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ksxmyi50.q5r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:14:47 +0000 UTC</td>
|
|
<td>2025-08-18 13:14:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:14:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6075b77d8dc01b2c8b4d17ba6e0d36189e63f6af58ebebbe688034a0f03649ba</td>
|
|
<td>[68a50205736560052fcd1832]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\vfluk3hv.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vfluk3hv.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>60e451f72cdbb8e0e9ea32540baf67cd8fd5d6cedbd7a85ac28ac61581589702</td>
|
|
<td>[68a235831d100d9bbeccc36f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iuw52xms.vda.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:03:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iuw52xms.vda.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:03:04 +0000 UTC</td>
|
|
<td>2025-08-17 20:03:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:03:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>60f0e85181d3b53d78e9e6ecebe0ab722314b06b9c192ee5f7cd901c436979d1</td>
|
|
<td>[68a3146b5f0c41860c8c8507, 68a3146b5f0c41860c8c852d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\functools.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[74324067d7541c3433020bf331282bae]</td>
|
|
<td>[36705cffb70e444b9521d2e7d5b3e1d6a65770f8]</td>
|
|
<td>[231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740]</td>
|
|
<td>[3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>functools.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>42627</td>
|
|
<td>74324067d7541c3433020bf331282bae</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>36705cffb70e444b9521d2e7d5b3e1d6a65770f8</td>
|
|
<td>231d555fe1b5cc5101b68013c80791f395d1d727a243be63cbbc9a2a26f390a8e44df13a8c1449aa6a8fc9f999782740</td>
|
|
<td>3ada6405bf0e27c523c0ce21cce0c59ba85b7d8ca4f2369808d48e3406f048313d19d64a7f1b1cb456f07c988ed5bb05190c8009eeffdeb30e6e1edf1b3f8406</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6745c612329bcbcf5d60ea434bbbed729fbfb3044b85ea1daf63168cd72a8378</td>
|
|
<td>[68a4ccc785b914a60d739e54, 68a4ce1fc826337212f53bf0, 68a4d07753a851daf11e693b, 68a4d07753a851daf11e6953, 68a4d2d1ff2b441b84428133, 68a4d2d1ff2b441b8442814a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\OLE.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[c25582d0ba9781b4cfaee35c30265a89]</td>
|
|
<td>[c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6]</td>
|
|
<td>[756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03]</td>
|
|
<td>[960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OLE.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\OLE\</td>
|
|
<td></td>
|
|
<td>95232</td>
|
|
<td>c25582d0ba9781b4cfaee35c30265a89</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:45 +0000 UTC</td>
|
|
<td>c9ee7a98df3fcd71393e3a7ecb1376d7a0b104a6</td>
|
|
<td>756d87392eef624308fd959b3b70b11157cacf0cb3c70312557f661099d67f4461423613155e15a141b448f26601ef03</td>
|
|
<td>960bbd571c0237900f1cf5b514fef20e1a98b7cb0be3351de8ec0a7b1599c2534b732e62a2a8b66e5729b695513b9cf5f8c045282dd97722cbae926067b1e63f</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>675413a3d571393b0c220c2b15036a8bef01c048df4c30302082951b74043963</td>
|
|
<td>[68a3146b5f0c41860c8c8516, 68a3146b5f0c41860c8c8569]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\base64mime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[2b2542f960659edfdc9c44ec8f938ecf]</td>
|
|
<td>[2450e46ca73940aa558b6dd4c2658db3c6e9d229]</td>
|
|
<td>[9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c]</td>
|
|
<td>[3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>base64mime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>3982</td>
|
|
<td>2b2542f960659edfdc9c44ec8f938ecf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2450e46ca73940aa558b6dd4c2658db3c6e9d229</td>
|
|
<td>9ee97dfbca332005a3d0eebeaa1c92e0e39bc1de1e8e99bebc6cc328efbf0e23677f1979b30d0427a8eaa43629cba49c</td>
|
|
<td>3fbd44835f6b6a1b7da8a03050ee4b76c3edbe1df07bfff09b1aee105636909a13ebbc0380a332fb72128b0ea6d50c25694fc2f689b6d8a464fc85c426ac1821</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>61343f806096e4fc91407dc38a85cf399bdcdd696d1d405476f1207533ded21a</td>
|
|
<td>[68a4ccc785b914a60d739e4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>62024863eaffd84b599b90a47e2a9a4751a30ff0a683ad8fe6ee34a88d5ec438</td>
|
|
<td>[68a180e9582a53738bf6196b, 68a2d270bd2fe14956418886, 68a42433cb394578e09d7013, 68a575b4037e225cd9e58524]</td>
|
|
<td>[2]</td>
|
|
<td>[IT.HelpDesk]</td>
|
|
<td>[PCH-BGSwap]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\WS_FTP_Scripts\Movessi_837.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:32Z, 2025-08-18T07:00:27Z, 2025-08-19T07:00:27Z, 2025-08-20T07:00:27Z]</td>
|
|
<td>[284c1cdb556927de4b3a316643ffc87d]</td>
|
|
<td>[e410568d05b9af3418141d325b55cb697d99ac21]</td>
|
|
<td>[65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85]</td>
|
|
<td>[723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Movessi_837.bat</td>
|
|
<td>C:\WS_FTP_Scripts\</td>
|
|
<td></td>
|
|
<td>134</td>
|
|
<td>284c1cdb556927de4b3a316643ffc87d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-02-03 21:55:11 +0000 UTC</td>
|
|
<td>2022-02-03 22:01:36 +0000 UTC</td>
|
|
<td>e410568d05b9af3418141d325b55cb697d99ac21</td>
|
|
<td>65898d95d6e6001cae3cf108d92dc49a2bcadb594052f412323a7ae766ee1d2bfa5887d6b1165e71de4a02d2b93a7f85</td>
|
|
<td>723658c180381fc147b8edbcd90497dfab01e361a0d46896b6fadfc3995b8e90e70bd2c7fcd85e4abef8273b8f0f96b59dfbbbbb4f3b71bfbd8a12527be1f49d</td>
|
|
<td>2025-08-09 07:04:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>631c20f213e711cef26bbb9333315083fc002c886a177fc7a58baf239246b0fb</td>
|
|
<td>[68a3146b5f0c41860c8c854f, 68a3146b5f0c41860c8c8575]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\linecache.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[27d8b6c682f952b431b6828ff2909e5c]</td>
|
|
<td>[603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a]</td>
|
|
<td>[d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c]</td>
|
|
<td>[b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>linecache.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7150</td>
|
|
<td>27d8b6c682f952b431b6828ff2909e5c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>603c78d3c91a2f36fcc7bd83725f1cfb33a7ac8a</td>
|
|
<td>d4e0641d72257633e416f10b06d00fd75d017ec1c6651e883fd3fe22c0865451ba91737ca119df4b202b528b800a7d4c</td>
|
|
<td>b5f1a1748447cd375d9f87a8cce276b2c72dcbce2d3d6b4a610daa68d90e48be8888191d97871a6e1a3bf7751a1ddc8017651bd18a5d6d0103ad3660a8ca4cdb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>635dda72c3c6e62d4ca2ad23babcab4ebc80d20f98bc19f81a80f2c519820e2d</td>
|
|
<td>[68a18e5a59acceacbe55b00f, 68a2ddd9e2924f584cca6bdc, 68a4315a5c922431d0b72ae7, 68a580dc948b28af3ee1a272]</td>
|
|
<td>[2]</td>
|
|
<td>[ca_tsk_idbadge]</td>
|
|
<td>[i-nVM-IDBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\New DBCleaner\DatabaseCleaner.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:02Z, 2025-08-19T08:00:01Z, 2025-08-20T08:00:01Z]</td>
|
|
<td>[34fef7d2fff558162f7cf87d74aa8e03]</td>
|
|
<td>[35cd5aa7a5316f7e59b9f0481592a65ba3c32548]</td>
|
|
<td>[11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6]</td>
|
|
<td>[8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55]</td>
|
|
<td>[172.17.251.92]</td>
|
|
<td>[172.17.251.92]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DatabaseCleaner.bat</td>
|
|
<td>C:\New DBCleaner\</td>
|
|
<td></td>
|
|
<td>4103</td>
|
|
<td>34fef7d2fff558162f7cf87d74aa8e03</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-12-13 19:59:10 +0000 UTC</td>
|
|
<td>2023-04-03 20:05:46 +0000 UTC</td>
|
|
<td>35cd5aa7a5316f7e59b9f0481592a65ba3c32548</td>
|
|
<td>11b17dbe900f630199cbc6b9a1c1f8c4a2357df956e58ec483be123678312035a42cd188eed49ae66c2ff6628bebdef6</td>
|
|
<td>8b8c3601d714fa476116e02c63b676dead7605cc286d169dde02a28ee38b56cc68991005cb80e1bea8ddcd17c5f0b60c5a71a8615e3f701a2a74132c3e5bbd55</td>
|
|
<td>2025-08-09 08:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64108cd7e8f9191dd24c6cd52bf90bb7c6d83435b247310d7b235f4e6e4462d0</td>
|
|
<td>[68a3146b5f0c41860c8c84e6, 68a3146b5f0c41860c8c8519]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[c2cdf437a74a8110e8c8e31d70476eac]</td>
|
|
<td>[6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d]</td>
|
|
<td>[b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5]</td>
|
|
<td>[61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>6025</td>
|
|
<td>c2cdf437a74a8110e8c8e31d70476eac</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>6d41aba1e73cf78b8ea85b11f3f71f61e1d1f81d</td>
|
|
<td>b20f6e0b2f1dc96d76ddb66837c7c48fcc9c2a1bc36f8750dc6c92c7c87729bdce251e24682beed9b37d0f621b2831f5</td>
|
|
<td>61bc1862f16f4410a2c1e27258e15255256b4c9553af1ccc83db7e97fe8c95d2121fdaead3de3ecc1520f98540b641a215880d5814beb96f92564c5da75adce7</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64777527feb80342cffb4fa4eb4c083aeef79259506dd17882b418e63a6cfe9a</td>
|
|
<td>[68a523949cec397f02de9f4d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CellsDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[3247209b37912925bc215dfdd852765d]</td>
|
|
<td>[f0f111857ad27804276dd06ebea2124265752b99]</td>
|
|
<td>[fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b]</td>
|
|
<td>[639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CellsDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>CellsDiagPlugIn</td>
|
|
<td>16896</td>
|
|
<td>3247209b37912925bc215dfdd852765d</td>
|
|
<td>CellsDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:00 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:00 +0000 UTC</td>
|
|
<td>f0f111857ad27804276dd06ebea2124265752b99</td>
|
|
<td>fd7356010bc86b3657fc50cb202f75330dd94d4becf818b929eebc6241a53a7f76a9f4a1aa84d1b0c36a9541d1f6235b</td>
|
|
<td>639f7ad626a0f8f69d956246ae84906982bf27356cc8047494ce9bd0d1a38709a72b518a48fb699844e198be43bcad23a2125d4351cf632f3ea6e5fde51baa79</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>64dba8b2abfb2c9a3cadbc9da524592ca7d348251d7992a2b293d424333ddb11</td>
|
|
<td>[68a4ccc785b914a60d739e46, 68a4ce1fc826337212f53be6, 68a4d07753a851daf11e6930, 68a4d07753a851daf11e6943, 68a4d07753a851daf11e6949, 68a4d2d1ff2b441b84428128, 68a4d2d1ff2b441b8442813b, 68a4d2d1ff2b441b84428142]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl522.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[ece6e23c61bd350b773b221dd7117a0b]</td>
|
|
<td>[b82dd61eca567e878559410ec92fe5c1f4942827]</td>
|
|
<td>[12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae]</td>
|
|
<td>[95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>perl522.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>1513472</td>
|
|
<td>ece6e23c61bd350b773b221dd7117a0b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:15 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>b82dd61eca567e878559410ec92fe5c1f4942827</td>
|
|
<td>12eda53b3000c44a558c1ba42e4863fa40a914a01a11541ccf3e09ea93de7b54ff9ee52f2e097d27d5f93e4b2081a7ae</td>
|
|
<td>95d2b7d3ae7805a850e79c0c3c0864095d02ebac2ff2379cd5dbf78f81e1f67d13c20dbb2d69016c4f0f3ef85466362176668bd26032e0b60ccc898c7c0e7669</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6aef072490cee258c32dff646f5e5318c5c7f222116119bcddba3d24ca99c288</td>
|
|
<td>[68a4ac67cfad262556985010]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Assessments\ADAssessment\run.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2278.870]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T16:51:08Z]</td>
|
|
<td>[c07996c3ee2580340e0ef67b322a7cab]</td>
|
|
<td>[0ecd81be989fcff13486833ffe5642dcb8f95d35]</td>
|
|
<td>[b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f]</td>
|
|
<td>[246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>run.cmd</td>
|
|
<td>C:\Assessments\ADAssessment\</td>
|
|
<td></td>
|
|
<td>237</td>
|
|
<td>c07996c3ee2580340e0ef67b322a7cab</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-08-08 15:51:08 +0000 UTC</td>
|
|
<td>2024-08-08 15:51:08 +0000 UTC</td>
|
|
<td>0ecd81be989fcff13486833ffe5642dcb8f95d35</td>
|
|
<td>b7c93269b8f965c546ef18ad9362b80fc1b671696f76a515a80f7f2951f7ecd96f21c6325c8f11200dff8d940aa1d11f</td>
|
|
<td>246dabc61417c2487c52f96d9cb4b72b27c1edb130e1dd79f4693590469632bf1ad97bf63fc6cb7f20dc56a36cefdf577421ad188adff495292c9aa7b1c69b93</td>
|
|
<td>2025-08-12 16:51:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6c08bc17521b4e491191131a59f6670cea4cfde1602c1e4d68b7d48ade7c0df1</td>
|
|
<td>[68a232f86a75868d4aaa6d01]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zxalxqpu.45h.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:52:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zxalxqpu.45h.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:52:21 +0000 UTC</td>
|
|
<td>2025-08-17 19:52:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:52:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>654db9b5673ac13103fd728375f4f07b150f1ad7581db231c4852464dde28d7e</td>
|
|
<td>[68a1c1a2a2fc50ac4b0f3d54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nosccapp2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_za4tfwmo.5uv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T11:48:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>[172.17.250.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_za4tfwmo.5uv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 11:48:48 +0000 UTC</td>
|
|
<td>2025-08-17 11:48:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 11:48:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65aae2d587ee1ea71d61262951090e49fe23de56242c8a9a51976e6be146f58f</td>
|
|
<td>[68a5239e621d09b2b1ed5e57]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Reporter.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[2f985088066c429f7ded59c429f9e3b1]</td>
|
|
<td>[568bfe5a3fbd545ef448b1853b52848299c8e64b]</td>
|
|
<td>[e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644]</td>
|
|
<td>[f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Reporter.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Reporter</td>
|
|
<td>12288</td>
|
|
<td>2f985088066c429f7ded59c429f9e3b1</td>
|
|
<td>Reporter</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:18 +0000 UTC</td>
|
|
<td>568bfe5a3fbd545ef448b1853b52848299c8e64b</td>
|
|
<td>e67ebc718f7c09e4b13914cd78d00db271e5a29e1aa68ddbff8c220538054b3e987901fe670696910de498a15a09b644</td>
|
|
<td>f22f855f28021734a61fc170aaa2ac7dcacbbd41a0b3aa10a957f47850810a8bf555cf9c489b5177004949b27f138d127f4b506d31e8347a58401e8e80396490</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>65e36fe2679c2a738bce1f11bc44f5ecaccc0b2aa794481e9a3da95fee273829</td>
|
|
<td>[68a193ce4e3c049885d2ea95, 68a2e554dc234255d3b8e587, 68a436fbf3463c41a9aea0b7, 68a588945ea9afa580b255da]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GRMC-ECW-EBO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\eClinicalWorks\eBO\eBO_start.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:30:01Z, 2025-08-18T08:30:01Z, 2025-08-19T08:30:01Z, 2025-08-20T08:30:01Z]</td>
|
|
<td>[c08203060d93393af38d1b3c2740552f]</td>
|
|
<td>[1b371466fbd5c6f1ea33373992b920991adbecc9]</td>
|
|
<td>[544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c]</td>
|
|
<td>[2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>[192.168.3.241]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>eBO_start.bat</td>
|
|
<td>D:\eClinicalWorks\eBO\</td>
|
|
<td></td>
|
|
<td>13</td>
|
|
<td>c08203060d93393af38d1b3c2740552f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-07-04 20:04:47 +0000 UTC</td>
|
|
<td>2021-07-04 20:04:47 +0000 UTC</td>
|
|
<td>1b371466fbd5c6f1ea33373992b920991adbecc9</td>
|
|
<td>544f6db630ba1796e0ab5fb17af4b54389143ea50881cd05aa8081bbcadf9438372dea778b54efaf6ae265ce918ac16c</td>
|
|
<td>2d175d957c70eaef5cbab75f46d8c5d8b9222610d98f52750c7cc73d3e1d5c83bd51d4bbfae0f199d71d2e54a182f8af910e65b551b0af38f8f552735667e14d</td>
|
|
<td>2025-08-09 08:30:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>664078f030aa3df98066673e611d90a158661c5b965a4e46de8de0953da177fb</td>
|
|
<td>[68a5c8eceb9e7b7716dce206, 68a5ccf2ddfdba423e488648]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1, C:\_work_devops_mdi\_temp\fceedb9f-ba6b-41c0-9ef2-a7e4bd4a6240.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:56Z, 2025-08-20T13:22:29Z]</td>
|
|
<td>[e1cedcd3667c280811e42f433dad71f9]</td>
|
|
<td>[748c14065c2144416d5ed03f50f5220e302fccc9]</td>
|
|
<td>[2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96]</td>
|
|
<td>[fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7f33cd49-39da-4aa2-90d6-cbcdcc241aa2.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>963</td>
|
|
<td>e1cedcd3667c280811e42f433dad71f9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:56 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:56 +0000 UTC</td>
|
|
<td>748c14065c2144416d5ed03f50f5220e302fccc9</td>
|
|
<td>2b073f2162028c9eaee4c6c3043bf60e75e460e5df8bf4bbd0713d2197a6c03d4cb89ce738d8f1cd2c1f8796239aff96</td>
|
|
<td>fbdccf6851ec01aa6cc6254a69e2059ea7390ead730cb760a2ae16fd45a4fff50107d9788c469da5d86edacf0d66ca73d9120bbf3bc00dad17000759de27eae3</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>665c0db974060c2dd20238cc5dfa62525214c41afdd9af5323ff71d73888c0ab</td>
|
|
<td>[68a231ae7d77b9bdafa93994]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0lu13bn4.pix.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:43:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0lu13bn4.pix.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:43:19 +0000 UTC</td>
|
|
<td>2025-08-17 19:43:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:46:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66871d215d9b658f655d342e7fb104a541e57792b012584470f33832195fd5f9</td>
|
|
<td>[68a572d0a4efe9f49e2cb5ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Cluster\CauScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T07:00:00Z]</td>
|
|
<td>[cfaaf3aa63b88b2338b432dd4cde45ad]</td>
|
|
<td>[face75e7dc3b0cdf63652698d51e93b325872c4b]</td>
|
|
<td>[5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a]</td>
|
|
<td>[ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CauScript.cmd</td>
|
|
<td>C:\Windows\Cluster\</td>
|
|
<td></td>
|
|
<td>798</td>
|
|
<td>cfaaf3aa63b88b2338b432dd4cde45ad</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-07-24 17:11:13 +0000 UTC</td>
|
|
<td>2025-03-27 13:16:50 +0000 UTC</td>
|
|
<td>face75e7dc3b0cdf63652698d51e93b325872c4b</td>
|
|
<td>5e5a40d8b179f4f93131d4f753ac1f6060bcf0f52dd6c870e060ab858cb78beb25da39ef3a937b1f1263be3f81214d7a</td>
|
|
<td>ad25dd2062eac57e4df60f6582adacacbf5519cb2e16425e6ad5572ccc61c712e98c3ae64acffad4a7bc50cf711d026c0d28dcf780983b0a707b03413d97c1c4</td>
|
|
<td>2025-08-13 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66a1912b4df1c32f92d326398253aaf513a587c9b820ebeadf0ba5e2b3bc0703</td>
|
|
<td>[68a1e4af1459697ae7b8a1fc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSwisslog]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5vmqoyzz.0lc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:18:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>[172.17.253.93]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_5vmqoyzz.0lc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:18:14 +0000 UTC</td>
|
|
<td>2025-08-17 14:18:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:18:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66a7c58a048946967c97c8069fcee758ef27df1332efdd25bc395f970aa047ce</td>
|
|
<td>[68a4a66a77aec68de12158a1]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:28Z]</td>
|
|
<td>[81770ef45b8d159737e044b339977f15]</td>
|
|
<td>[3a12a57b41dfe8c522205a10420cba0e3c5f3147]</td>
|
|
<td>[beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea]</td>
|
|
<td>[c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2052</td>
|
|
<td>81770ef45b8d159737e044b339977f15</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:27 +0000 UTC</td>
|
|
<td>3a12a57b41dfe8c522205a10420cba0e3c5f3147</td>
|
|
<td>beaf6bfa92007aecccc491e8fa8ca8bad474e785fbf7b858d8f90850dd1f7cb3e2ebb30b1129b88171309eacfaaa33ea</td>
|
|
<td>c2b7b4aa5bb2f56f9ca5b98f3f6c8ac0a4ead91ca2e2c083046bb9a0dfb50da778e872ec4091bd5dfe156659eacdb4ee9ae6207ada05120d11fb2b241701fbc6</td>
|
|
<td>2025-08-19 16:29:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>66ca0acbcb6ad02b31c5d704cc07f5927e3c38e9b9c7187e1cc9d6e3902e7ba0</td>
|
|
<td>[68a523a99ba7c92b34976f9b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[e320f4994ce53c449d5a9121c61d7e48]</td>
|
|
<td>[ef0c8fc252698f38fd60036b728d7f67bf7074d0]</td>
|
|
<td>[6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe]</td>
|
|
<td>[d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnderlyingData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>UnderlyingData</td>
|
|
<td>212992</td>
|
|
<td>e320f4994ce53c449d5a9121c61d7e48</td>
|
|
<td>UnderlyingData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:20 +0000 UTC</td>
|
|
<td>ef0c8fc252698f38fd60036b728d7f67bf7074d0</td>
|
|
<td>6fa8d782df1d91151efd62a7503bfc4a56730aaea5eedffde5bd718b231cd3f9bb1555748ef6bb3468a83e12213ba9fe</td>
|
|
<td>d0d3975d7686fe88b467fd5c02864eeba60a698bdcb1987ddfa681d06df0fa23ed5643f02cd584b7d1f191fd470c40400159a979a1f118aec64a13dd42947e83</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e9bf94501d732a882f9f6017f1e628d9eec703c87cda857b695201fad5feb4a</td>
|
|
<td>[68a5cc349d52e7a8b7af63d7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Talis\Atlas\temp\SetupDatabase.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:50Z]</td>
|
|
<td>[f45826be75a820fca461e3877f40f93a]</td>
|
|
<td>[a039f338905c85ada621455b1333be17f0bafe4a]</td>
|
|
<td>[7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f]</td>
|
|
<td>[330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SetupDatabase.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>1701</td>
|
|
<td>f45826be75a820fca461e3877f40f93a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:28 +0000 UTC</td>
|
|
<td>a039f338905c85ada621455b1333be17f0bafe4a</td>
|
|
<td>7abfebbc70ae0e92fd21a91acb6cd06812a064250c2fc0d20cfe55ff8ee2f750f4448d2c4558186781efd92a0c8eac4f</td>
|
|
<td>330c9fd95e9b70c54f2534bb776de4c2f8644fa069a3a1f5df68f8802d693b9150d05583bab834fa0dbe732099b714b7a34249da9a885765add5403dbc489062</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6f30e0e23ce47898752d2c51fe0bf30691c48bb35818bb4d8e75c6fe5db142dd</td>
|
|
<td>[68a3b9a777cc2b5ee11bb211]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-natus1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\NeuroWorks\DynamicFields\WS\npm\ws.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\NeuroWorks\XLSyncServer.exe]</td>
|
|
<td>[2025-08-18T23:30:44Z]</td>
|
|
<td>[9eaf7a8371a51fdabe1bc1120ded09ac]</td>
|
|
<td>[737379e4db0e374c08a427b0ceb496733fe40de6]</td>
|
|
<td>[53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a]</td>
|
|
<td>[68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be]</td>
|
|
<td>[172.17.147.114]</td>
|
|
<td>[172.17.147.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ws.cmd</td>
|
|
<td>C:\NeuroWorks\DynamicFields\WS\npm\</td>
|
|
<td></td>
|
|
<td>297</td>
|
|
<td>9eaf7a8371a51fdabe1bc1120ded09ac</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-04-06 21:04:16 +0000 UTC</td>
|
|
<td>2021-04-06 21:04:16 +0000 UTC</td>
|
|
<td>737379e4db0e374c08a427b0ceb496733fe40de6</td>
|
|
<td>53fa4672fb88a382ef1bda2f73cc0d42569f78a9d68fefa6b50f00a155b2c3fd08dabbab54154a6b79c9e8126be8c02a</td>
|
|
<td>68f8847f46252ea1f0888d1c1ff3e96ea7723f666b88002bf1a2ea089dd5ceb7dfbdaca784885ba1a142dda204c079dcf4ab855e3627da49e4a9f33118f735be</td>
|
|
<td>2025-08-13 05:01:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6fa36b743c48152e494d0ab2d1883621817ce58257ffbbc73994241e079bb356</td>
|
|
<td>[68a412e7ad89f01a7d4f2c8f]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_qswudxhc.vas.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-19T06:00:01Z]</td>
|
|
<td>[956c45ce00aedbd67f024fcd9158dab5]</td>
|
|
<td>[742e83c7348f268bad8519de65010e007851121d]</td>
|
|
<td>[1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3]</td>
|
|
<td>[d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qswudxhc.vas.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>956c45ce00aedbd67f024fcd9158dab5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-19 06:00:00 +0000 UTC</td>
|
|
<td>742e83c7348f268bad8519de65010e007851121d</td>
|
|
<td>1e55d4bca806201c7443472925c88c00ff55f4f3c073afd2a5a79ce6f04449042d91bb70aa623de3a3eb78002b7ac1f3</td>
|
|
<td>d0200363831572fd64daf871345b894ad392026bb626273f0090ae4068badf8b3b06c6bafb31fedef8079efddd86bc22f756e6ad12e67b8def7cf065389154f3</td>
|
|
<td>2025-08-19 06:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>702d6dfdfaf2bb946405b69f52fb90141a13c247618695af4eb7b4b3e1d4ffe0</td>
|
|
<td>[68a231c276615c5f335cfe2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_3fdl5e5o.cmj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:47:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3fdl5e5o.cmj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:47:10 +0000 UTC</td>
|
|
<td>2025-08-17 19:47:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:47:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>676696e9a002aa8048328f5a90f5701bb020206c47ed28490493c341fb4a9362</td>
|
|
<td>[68a5239e621d09b2b1ed5e58]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ServiceUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[75e9bc83737e8ac074c23a4855102d3e]</td>
|
|
<td>[efb997511f127d246a4abe1bcb83dd177283cef3]</td>
|
|
<td>[47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621]</td>
|
|
<td>[4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ServiceUtils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ServiceUtils</td>
|
|
<td>5632</td>
|
|
<td>75e9bc83737e8ac074c23a4855102d3e</td>
|
|
<td>ServiceUtils</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:16 +0000 UTC</td>
|
|
<td>efb997511f127d246a4abe1bcb83dd177283cef3</td>
|
|
<td>47553180ac3d55e4a8a68643927b15fa86d9f5bd38f9c267fe8af831462ed3be660434badd25e4275efd82eddb05c621</td>
|
|
<td>4adea972ca858ee52c7266bcb89274989b298519e399d21639683f1f628516f41db5583ce58be36ab4fe7680284787f92a95a03ed63774f8f7affbeac58f6420</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6863fe2234ffda46d9ca1fd9f15003f42b2191acdd10175e3f295523c0b35045</td>
|
|
<td>[68a15d35e038b834e144693e, 68a2ac48f8706bf2d8f3933a, 68a400602dba59b513ad7bed, 68a54f94d489f4294ecfa570]</td>
|
|
<td>[2]</td>
|
|
<td>[cbord_support]</td>
|
|
<td>[I-HOdyssey]</td>
|
|
<td>[I-HODYSSEY]</td>
|
|
<td>[D:\CBORD Odyssey\PCS\EndOfDay\EndOfDay.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[D:\CBORD Odyssey\Shared\pTaskService.exe]</td>
|
|
<td>[2025-08-17T04:30:21Z, 2025-08-18T04:30:00Z, 2025-08-19T04:30:28Z, 2025-08-20T04:30:25Z]</td>
|
|
<td>[e60dc73b04d6e2accd1eeed6e2178d78]</td>
|
|
<td>[44b03d03b40ede397aa93727bb5464cf60e9d3fc]</td>
|
|
<td>[13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca]</td>
|
|
<td>[3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51]</td>
|
|
<td>[172.17.20.134]</td>
|
|
<td>[172.17.20.134]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EndOfDay.bat</td>
|
|
<td>D:\CBORD Odyssey\PCS\EndOfDay\</td>
|
|
<td></td>
|
|
<td>1565</td>
|
|
<td>e60dc73b04d6e2accd1eeed6e2178d78</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-04-26 20:58:04 +0000 UTC</td>
|
|
<td>2019-04-26 20:58:04 +0000 UTC</td>
|
|
<td>44b03d03b40ede397aa93727bb5464cf60e9d3fc</td>
|
|
<td>13eb0d6c1798e88b9be76e0137674b35fb7f249874bad8ca0834ac5f96f1c55efd139864a62d27ee9c6a1a131131f8ca</td>
|
|
<td>3080e5806f8b90870c001f7c3ac83a197dbb002f3e0b6a7f36fd8f11d8a4ee72d45e9c41ba2efefcf7db84538af1756c8c8d55d0ae6c9c7d961c0788590a1a51</td>
|
|
<td>2025-08-09 04:30:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>686df88dac104103d9df30377e187bfef2774b327f2725bd46546ccfa8f1c47d</td>
|
|
<td>[68a4cc59fc641401b4957020]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\3vrnzq1i.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:11:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>3vrnzq1i.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\3vrnzq1i\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:11:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>691a1c5b70ebf0b85877f67faa0e3d8ffca23df66e5b70fbc597785a8cc68004</td>
|
|
<td>[68a37d0917e07e4b1ee5b6ea]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c0pz0nqf.kwc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2266.863]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:20:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_c0pz0nqf.kwc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:20:32 +0000 UTC</td>
|
|
<td>2025-08-18 19:20:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:20:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a246071bce4f1e018078a46114367a68ac47c87a95ccc8d8f67825af57fe2c4</td>
|
|
<td>[68a1d28de9af155194d2aec4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\tmpEXO_fw3fz0us.dhn.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T13:00:51Z]</td>
|
|
<td>[82e97abd23c8de7a9b490694482f33dc]</td>
|
|
<td>[20a7a80fc89ad6ca536270ef77e7995348376274]</td>
|
|
<td>[133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405]</td>
|
|
<td>[e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_fw3fz0us.dhn.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_fw3fz0us.dhn\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>82e97abd23c8de7a9b490694482f33dc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:00:49 +0000 UTC</td>
|
|
<td>2025-08-17 13:00:49 +0000 UTC</td>
|
|
<td>20a7a80fc89ad6ca536270ef77e7995348376274</td>
|
|
<td>133caa60cc54b9f66e9ac6d114b183c19d63190191c158827adb62d66e54baadcdad0edbd0076591a65f3c5b39fd5405</td>
|
|
<td>e5f9b6b7470e658920c499a4cef1b33006dfb01f90c5e989cbfd7c1420d120fcd873765da152c3d29d7bdb36a5a4db6d22483537d2cb8d63066bc01e83726087</td>
|
|
<td>2025-08-17 13:01:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6a84610ee0fcaa82f8fc0b8c6799775fae29224adcc09328521c70d36559bb38</td>
|
|
<td>[68a1a6f6ab9b82ca8e55699b, 68a2f7b2b08830f3e9b0f829, 68a4496619bdd82aa6777765, 68a59b0fee561f972b16e39b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-MICROS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\MICROS\Res\Pos\Scripts\Filemain.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\MICROS\Common\Bin\AutoSeqServ.exe]</td>
|
|
<td>[2025-08-17T09:45:02Z, 2025-08-18T09:45:01Z, 2025-08-19T09:45:02Z, 2025-08-20T09:45:04Z]</td>
|
|
<td>[d7c8f1b516611d9ca035742a0f006f04]</td>
|
|
<td>[ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe]</td>
|
|
<td>[8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc]</td>
|
|
<td>[78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a]</td>
|
|
<td>[172.17.20.133]</td>
|
|
<td>[172.17.20.133]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Filemain.bat</td>
|
|
<td>C:\MICROS\Res\Pos\Scripts\</td>
|
|
<td></td>
|
|
<td>11724</td>
|
|
<td>d7c8f1b516611d9ca035742a0f006f04</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-05-27 13:50:45 +0000 UTC</td>
|
|
<td>2015-01-16 19:03:22 +0000 UTC</td>
|
|
<td>ebe7dd3e9f46e02b3eae1f260f5d7dff570a1dbe</td>
|
|
<td>8a4c22783ec537a9fc68d5e50a28676fe800dcf324fba540ce87d22eaa6ab1bb0803377edd42293f26862065e575adfc</td>
|
|
<td>78046ba3d8a7c7407dcd74fae5a5593be51a4a1b9422a633245b907adfa1ec8d3043fee6e7a27833f281d7953abf918781cb6bc9321fdadf99f8e13db0579a1a</td>
|
|
<td>2025-08-09 09:45:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7180b610c1b42f95fcc13a2e684b7abefca30b30f8920a27ccc5546e91696361</td>
|
|
<td>[68a3146b5f0c41860c8c853e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\contextlib.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[c7c8787dc599c99b0745a0e0b8518991]</td>
|
|
<td>[31a5f241f37f656cc0bcd1f7e46ecc135a978a6c]</td>
|
|
<td>[8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d]</td>
|
|
<td>[c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>contextlib.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>30502</td>
|
|
<td>c7c8787dc599c99b0745a0e0b8518991</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>31a5f241f37f656cc0bcd1f7e46ecc135a978a6c</td>
|
|
<td>8335db97a48b4e6a83d71c1b6275340a2e89730987ad42c4f7fcbb4f2c18ff369103d748c5848253293bf9c304bfa15d</td>
|
|
<td>c32c044035a492e37d5a1ff544288e3d4375b96050eaba234c6ee32536524b90030c3f4a04790e48ec3dcc19bd49cd237b9c1ba37e228562662303e86e3864ea</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71899528418198443452afbed990e9e5d84f4e2f9b4711e89293c9ca2bc12ca5</td>
|
|
<td>[68a2c20aaafba12a4e8cc590]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mxicw2rz.bqc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:02:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mxicw2rz.bqc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:02:43 +0000 UTC</td>
|
|
<td>2025-08-18 06:02:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:02:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71aa6db07375df25bd85f56968c13ae408973e021ef00026f759544a629c149c</td>
|
|
<td>[68a164141ed3a862f3f246f5, 68a2b5a2f6e54082fd90f248, 68a40742ca9c58cb5ddb32a1, 68a55680cbba54c28d7a3734]</td>
|
|
<td>[2]</td>
|
|
<td>[bunker2]</td>
|
|
<td>[vm-OSVstats]</td>
|
|
<td>[WVUH]</td>
|
|
<td>[C:\Users\bunker2\Desktop\BackUpZbase.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:23Z, 2025-08-18T05:00:23Z, 2025-08-19T05:00:23Z, 2025-08-20T05:00:23Z]</td>
|
|
<td>[ff5ef3ef0519c188c726abaf1c67cbfd]</td>
|
|
<td>[0d51e0760c23673c5aa81be4dca18e7ba8f45e22]</td>
|
|
<td>[d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba]</td>
|
|
<td>[5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba]</td>
|
|
<td>[172.17.251.140]</td>
|
|
<td>[172.17.251.140]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BackUpZbase.bat</td>
|
|
<td>C:\Users\bunker2\Desktop\</td>
|
|
<td></td>
|
|
<td>842</td>
|
|
<td>ff5ef3ef0519c188c726abaf1c67cbfd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-11-19 16:02:09 +0000 UTC</td>
|
|
<td>2019-12-02 16:07:03 +0000 UTC</td>
|
|
<td>0d51e0760c23673c5aa81be4dca18e7ba8f45e22</td>
|
|
<td>d9fea12086377635c321d32ff54f579ddb814556655ceebfe1e223a2c676b1d3f73022e8dac2548e5c9237b793ad24ba</td>
|
|
<td>5795946a8b38570915d3bf8448dfa01651a02d80af990b05638185ab99cd37e2894a5023d776cf13ad6341ea975e0ac4a69c087b234c7be852ef96e149d5ccba</td>
|
|
<td>2025-08-09 05:00:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>71afc8b3a19c1a3353abcff459034fe52f2c0160cd3f895966e196e237039ebd</td>
|
|
<td>[68a3146b5f0c41860c8c853f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\bz2.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[05c36e3f33744bd410b3b60ff06437b3]</td>
|
|
<td>[3bb9bf5aadd0e412054170f05be2eee25e7dcd09]</td>
|
|
<td>[765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e]</td>
|
|
<td>[657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>bz2.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>15173</td>
|
|
<td>05c36e3f33744bd410b3b60ff06437b3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>3bb9bf5aadd0e412054170f05be2eee25e7dcd09</td>
|
|
<td>765eec7a0d253882641add71fe68a1bf14812b3d1f1967d28779159afcbfa0d771531d90e1c7d584bd4f9878cdbeec0e</td>
|
|
<td>657a6e4fe12262e1b094a39d11d65ed4889dd50e0137fabe7cf4979ae62054e6f31b4edc58abacd3a098cf84e9804ac060125928802c2d59e2a5c589e519dc53</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>720267c540897db10c2b6a99b7967f86fcf6d1c0f6fb8a4b39422e38f85e9c69</td>
|
|
<td>[68a5239e621d09b2b1ed5e65]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Native.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[5136ca4e3d39d8f9ee3870d6cd8e7db3]</td>
|
|
<td>[f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55]</td>
|
|
<td>[44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf]</td>
|
|
<td>[c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.PeCommServices.Native.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.PeCommServices.Native</td>
|
|
<td>34816</td>
|
|
<td>5136ca4e3d39d8f9ee3870d6cd8e7db3</td>
|
|
<td>Stanley.PeCommServices.Native</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:26 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:26 +0000 UTC</td>
|
|
<td>f99e6f4b9f6ea49f0c1be1ca56e8d1c1e4d68c55</td>
|
|
<td>44903532387540dc1290abf15b4c7a355d34054e97d82fd8a681714b9c65ad9ef6a14718a93267fb77b8202b49d7f6cf</td>
|
|
<td>c5d9cce4a555d6a152c3cccb667a30a82a190e3d4ef0abfc5c3ab694523a9d6912a1023fe271cd89102f66b262b9233cce91d27d92b098c5e4d1415dd2ec5490</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7235dc5de7aef8308483b63e2c5c078a90d095ccd5f3156c2ed9ae89b322c9df</td>
|
|
<td>[68a17c189d49ad1bd9c4b8c8, 68a2cfae9ae51e4be825c7e3, 68a41f348cf879e8d23db673, 68a572add36d57a95b891e67]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[U-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\userlist.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T06:51:00Z, 2025-08-18T06:51:00Z, 2025-08-19T06:51:01Z, 2025-08-20T06:51:01Z]</td>
|
|
<td>[0a26ce7cf2e4c02915e778721ce44a21]</td>
|
|
<td>[143b0c534fd3539d647dcfaf6a2d108e43af8314]</td>
|
|
<td>[8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f]</td>
|
|
<td>[c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>userlist.bat</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>236</td>
|
|
<td>0a26ce7cf2e4c02915e778721ce44a21</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-17 13:21:40 +0000 UTC</td>
|
|
<td>2022-05-17 13:21:40 +0000 UTC</td>
|
|
<td>143b0c534fd3539d647dcfaf6a2d108e43af8314</td>
|
|
<td>8cbd4de9c2e6cba972e30312efa3f796da9131d86511c301acb0d6547b51d49172b65b906444d9dc83b0a93ececf763f</td>
|
|
<td>c31547a0957e9fa1f4825338c143531896f37775a454361e958c7a8ae8802aa3656cd995cb929bcc9558b86743a8d04483a6f846c8568672002e116ac349e39d</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d17c45fe4e843926f5d2728244f860ec044de86259fef8758dd6b2a69a83cbe</td>
|
|
<td>[68a164af314711b37247c0a2, 68a2b633bc43c5800255e661, 68a408552c9c833f6d66b3fa, 68a559867a66111383e972e5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\cg1A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[16212c7d9ea08699f15a1a4746990cdd]</td>
|
|
<td>[5ed1792245fbf6b311b2484bc6a6be49ea35e3d8]</td>
|
|
<td>[5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c]</td>
|
|
<td>[821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\cg1A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>16212c7d9ea08699f15a1a4746990cdd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>5ed1792245fbf6b311b2484bc6a6be49ea35e3d8</td>
|
|
<td>5bda9810d8eaba084aedfc11ba5c4021d5d98444668ab1b9f5690c6e7331c1b518e65f256f244ec7918ec28b4085837c</td>
|
|
<td>821bce6b77dd841188c35bab1ec95fa723cee6f3e9b8458927170e09654a84568cb76712a1ec183dc5ba30eda706b56280641168fb96a5a72e7d24b3ed9a4999</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d5608ed1ffe605381b7fdaaa1845f721f1c31c27c74b69df9af47d0294b2894</td>
|
|
<td>[68a1b61f71b0825b526a1d75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_oq5zqidg.eti.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:59:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_oq5zqidg.eti.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:59:29 +0000 UTC</td>
|
|
<td>2025-08-17 10:59:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:59:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6d8ddab3bbac620056a40b6be82e5efedfb813709b61851da809e2ccc5fb30b5</td>
|
|
<td>[68a18baf8d4efec2d0bb92e3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nIC-HIC-PRD4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bxygly1j.3u1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:58:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bxygly1j.3u1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:58:38 +0000 UTC</td>
|
|
<td>2025-08-17 07:58:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:58:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>6e99f8aea61200a8607767bebef8dd852f969d2a1801e29360bdca29220d4bf9</td>
|
|
<td>[68a1a186341538f20e730a04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_p4dua1rf.kfd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:31:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_p4dua1rf.kfd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:31:41 +0000 UTC</td>
|
|
<td>2025-08-17 09:31:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:31:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74793ee7d4de7bcad44804c194370595b3b0d548bfc828c57576582be19bf54b</td>
|
|
<td>[68a1aa799d53099ced8133dc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\highcharts-export-server.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:00Z]</td>
|
|
<td>[3ac81a5a7a9c633b48029c9dc507bd9f]</td>
|
|
<td>[3e480f1ee8bff400c708645833df38ce4fa472fe]</td>
|
|
<td>[90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213]</td>
|
|
<td>[cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>highcharts-export-server.cmd</td>
|
|
<td>C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\HighchartsExport\</td>
|
|
<td></td>
|
|
<td>305</td>
|
|
<td>3ac81a5a7a9c633b48029c9dc507bd9f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-16 22:42:52 +0000 UTC</td>
|
|
<td>2023-05-16 22:42:52 +0000 UTC</td>
|
|
<td>3e480f1ee8bff400c708645833df38ce4fa472fe</td>
|
|
<td>90c2611f316ba3025c5f45450ec4d9797eac715fdfcf1ebe6dd0cdcfba1868020fdcbfb2e1c609546a955005477a9213</td>
|
|
<td>cff009bc456d4902824763d7653bf2a067cda5aea54dcf8bd31b403ff4fc53e3fd356ef294daf131809b2eda74e7f9da6bbce0ecd574fddabe348c4866aa06d4</td>
|
|
<td>2025-08-10 10:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>747a834bd4231d3cf7fa52e9313d5c65887b64533d4b8f563ab5f72357aae059</td>
|
|
<td>[68a2410ae6d83d3b939c50d9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tftt2g0n.emh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:52:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tftt2g0n.emh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:52:12 +0000 UTC</td>
|
|
<td>2025-08-17 20:52:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:52:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>749002e7e2d66cbc153077e70ef99bab1f03c4286b5e508ae413f4c53fbcb560</td>
|
|
<td>[68a2a5a1b819e527e88aea78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_zaxf5awj.to1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:01:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zaxf5awj.to1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:01:34 +0000 UTC</td>
|
|
<td>2025-08-18 04:01:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:01:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74b304758f2740e15c3cb9527df68a81ff9e28e90445ec205bf348877535259f</td>
|
|
<td>[68a523949cec397f02de9f54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[f3bffbe05c98add2b7078000a29f5e76]</td>
|
|
<td>[8fa6ea825802a4c5104ab136854f7134874d2a56]</td>
|
|
<td>[0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19]</td>
|
|
<td>[537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>120320</td>
|
|
<td>f3bffbe05c98add2b7078000a29f5e76</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>8fa6ea825802a4c5104ab136854f7134874d2a56</td>
|
|
<td>0f05c9396f257609c9e4eb0ec9c427d721618d75c4aa5ca6a12df812ecfaf7ed26fc07d0e93002e90ce5e5c66833ce19</td>
|
|
<td>537f9e13b741749098ce13569ad94d58ad9e9b8831424886cff44befcd9bce97cc8d8d845f809daa7d205e4e2a6b75459082ddd047d07f7ac4ae15b0472b0bc1</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74e7f5f7c92b26fd056281c791dafc0adc825c46f2be2bb409bc724a5d999be6</td>
|
|
<td>[68a2736e6af8de2f97a7ad5a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_acpxurdw.4re.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:27:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_acpxurdw.4re.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:27:16 +0000 UTC</td>
|
|
<td>2025-08-18 00:27:16 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:27:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>702e1f3fedd238eb309fa93c899b2ef80102fa2cda74761f3ee41d67d71f0096</td>
|
|
<td>[68a162f2cceea19f4902f63e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_lwo31b0u.sz1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:04:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lwo31b0u.sz1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:04:47 +0000 UTC</td>
|
|
<td>2025-08-17 05:04:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:04:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7090012578e497459ba0272f5f77ea05b908814dd597eb04ecf09d2c66d08c56</td>
|
|
<td>[68a3e79bb5e28efad9fbee2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_188db70f606541b88ee2c950bdac4d70.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T02:55:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_188db70f606541b88ee2c950bdac4d70.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 02:55:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7141651941e1b1d78a349f0d54ceb767b3846890318b467b8f44fb3d2b5995fe</td>
|
|
<td>[68a1804bf8ae7dd3df476f07]</td>
|
|
<td>[2]</td>
|
|
<td>[postgres]</td>
|
|
<td>[vm-ASCNEO]</td>
|
|
<td>[VM-ASCNEO]</td>
|
|
<td>[C:\Users\postgres\AppData\Local\Temp\pgaABA6.tmp\2_2.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Program Files (x86)\pgAgent\bin\pgagent.exe]</td>
|
|
<td>[2025-08-17T07:00:01Z]</td>
|
|
<td>[849739b26d76f1e35ce128f843b7d476]</td>
|
|
<td>[3ba486d6253348b31f0a4eb255c38bc4a311e2ae]</td>
|
|
<td>[52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279]</td>
|
|
<td>[5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>[172.17.20.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>2_2.bat</td>
|
|
<td>C:\Users\postgres\AppData\Local\Temp\pgaA9AB.tmp\</td>
|
|
<td></td>
|
|
<td>53</td>
|
|
<td>849739b26d76f1e35ce128f843b7d476</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-10 07:00:04 +0000 UTC</td>
|
|
<td>2025-08-10 07:00:04 +0000 UTC</td>
|
|
<td>3ba486d6253348b31f0a4eb255c38bc4a311e2ae</td>
|
|
<td>52e91d95cc8d822189d502251d96c4995767b89e00722d42dcfaef6fb0518fd4babbbc7fbf246360042fe8f636d90279</td>
|
|
<td>5ff58c0ffe7c188b00b10ec78b2af233f2831385c042deb334b98af43fd7ff291238586649a1f177c13e151d4eb2c46d0b0e80ba615c6fd17c3ab335765663f7</td>
|
|
<td>2025-08-10 07:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7172f9bd46851da2b13c2a4453b256fd0c20124b9ad8e41a0173a7dbe902061f</td>
|
|
<td>[68a3408550f756d180107210]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Garrett]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vp0ubrbu.dgh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:02:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>[172.30.48.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vp0ubrbu.dgh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:02:25 +0000 UTC</td>
|
|
<td>2025-08-18 15:02:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:02:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7180409b727c790197b600295cbeb2a6e0ad6c3847727c639eb7f2cdb0d8498b</td>
|
|
<td>[68a55dba9b5d03e81a1e7635]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bgtryg2w.3id.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:31:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bgtryg2w.3id.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:31:32 +0000 UTC</td>
|
|
<td>2025-08-20 05:31:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:31:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7705512d28fbbbbd6d047b1c60856bd3bc9f14ce39412ebd16be6b72d8bf5f7e</td>
|
|
<td>[68a3439c162cd6949b8bf655]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nsdprodconn1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cncncost.gsu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.856]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T15:15:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>[172.25.23.179]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cncncost.gsu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 15:15:34 +0000 UTC</td>
|
|
<td>2025-08-18 15:15:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 15:15:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>77c0199279811333465d5e6a415262894f0b9094771a0107686bddc496a9110a</td>
|
|
<td>[68a514775cfd115be4b8dbd7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:18:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_0179f54b1aa0459287d7b9b33dbc2c30.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7828bc8e30426a75ceff982346b5fe7b1c717029b0896c4cc7c394a40ec314c0</td>
|
|
<td>[68a3146b5f0c41860c8c84ed, 68a3146b5f0c41860c8c854c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\threading.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[40e4a5f923e5816ab2963846fb674c1e]</td>
|
|
<td>[c0d26d50e3483ae5651124f6918939ae692f3a7d]</td>
|
|
<td>[741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732]</td>
|
|
<td>[23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>threading.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>63210</td>
|
|
<td>40e4a5f923e5816ab2963846fb674c1e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c0d26d50e3483ae5651124f6918939ae692f3a7d</td>
|
|
<td>741bba62e212d78272ed58d88056678dcada80c63cd95caa4b82ebbcf3866e0644d35f4f6b3a9d6fcd1b6ab138fa3732</td>
|
|
<td>23eb8f3017cb1d3740e0f7445bd4e77343cfaca4e97e890e219410c159410f6aa9df81020af73b155d8cb6b0a5752cf702ca78c6fbeb943ac6ad856c6ddefe03</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7830b20e1f8ae9e230de3156d17e98207f63cd6c63999ef912d40d4e99fb27a3</td>
|
|
<td>[68a311cdc2d0d6e3eb77f216]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\get-badpasswordsADUserBadPasswords.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[3b8629dc59dc96ce82adf91d1ab03739]</td>
|
|
<td>[7c3f23fa0bcac45de8bb40e38232e839f03eb158]</td>
|
|
<td>[e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2]</td>
|
|
<td>[14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>get-badpasswordsADUserBadPasswords.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>2702</td>
|
|
<td>3b8629dc59dc96ce82adf91d1ab03739</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-13 13:11:22 +0000 UTC</td>
|
|
<td>2025-06-09 20:40:05 +0000 UTC</td>
|
|
<td>7c3f23fa0bcac45de8bb40e38232e839f03eb158</td>
|
|
<td>e03bad24993c7d9ae2e982d3c828382f400db693a1db3d1cbaeff100225f635bdea4c904ba2a06b34a7b7d28f12b72e2</td>
|
|
<td>14f3e82fcfc535a334273051ccc8028b567ecd38c91f1dab6b27eee60c29c28c727970b83a686562c43eb83d028c0ed792bb8bf01eee4f1222be4191b4dee917</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>784d1aa46b8e65a94b7e1aa0313334ae3050be72c0ddad08686af6ddf4687c79</td>
|
|
<td>[68a311cdc2d0d6e3eb77f207]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\ManagedFolderAssistant-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[d70cd1d2313f5bacb6a51a2c0ef09b70]</td>
|
|
<td>[45164857af19d47125730a74732f7630326beac4]</td>
|
|
<td>[be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f]</td>
|
|
<td>[0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ManagedFolderAssistant-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>10816</td>
|
|
<td>d70cd1d2313f5bacb6a51a2c0ef09b70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:57:12 +0000 UTC</td>
|
|
<td>2025-04-02 20:49:07 +0000 UTC</td>
|
|
<td>45164857af19d47125730a74732f7630326beac4</td>
|
|
<td>be4cf751c874f168f2ae1c6d1f1617f6507a935eef5886feae950feb023f5ab422f051db1d4ab77b3de87b18c6f9294f</td>
|
|
<td>0cad2c3f6c40618f199cd565c31992eacdeb4ff39a99d05c0a0f7e15e2b578f976457ebae0bcc9f95a20ff8743728fda6a3ead1af85c137e8c13af3e2784d6ff</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>78ff80c56cd05df151c06670f6d96dcd5c6ee72ca66bcc647a12f9d7814c3408</td>
|
|
<td>[68a1a83ff1b55f2ff337408c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-17T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_ec033fb05e124ceaba5dad686dbe3c73.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:00:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>728f798cb1a5db0a13cf564ccbd4e4c1ff949fc578a23588a73b2e7a40a91f7f</td>
|
|
<td>[68a3146b5f0c41860c8c853d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\fnmatch.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[9fac8a18afd37269810c0599d6381114]</td>
|
|
<td>[c56472c5a615d096fc51a0c8db32ae5c62108803]</td>
|
|
<td>[69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a]</td>
|
|
<td>[7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>fnmatch.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>6810</td>
|
|
<td>9fac8a18afd37269810c0599d6381114</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>c56472c5a615d096fc51a0c8db32ae5c62108803</td>
|
|
<td>69855dff79e656a8c2239b31b3d24f98ca402841dcc8c06bec90a613ef4f164e079a4ab82f68e0e53429abb0da73f08a</td>
|
|
<td>7caa15d706b34ccf6e5b4bd5ba4b7c93c2f6a67e50002489edb56a0abcde36bef022bc0da76015d00860cd07988ce72bd7d7464c3d3e29015fc6a96d0d1c721a</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>72c74ec16b239cedb3a7a5f49ab164080d8b8d6594d6e7674d47f097fc7b81c3</td>
|
|
<td>[68a2415acd5be3d52d63a10e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_msorr1ae.sew.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_msorr1ae.sew.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:35 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>738d28284e023240ef65382c74ec40bf9a734d836835c7ef9cb91f97d1fbc3c8</td>
|
|
<td>[68a254df0dd861261676462f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_norjrfd4.bib.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:16:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_norjrfd4.bib.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:16:54 +0000 UTC</td>
|
|
<td>2025-08-17 22:16:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:17:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7424614171a04b6aa96afde3f4cd33390212c11fbbbdbd41498fad6d10439c42</td>
|
|
<td>[68a469467f8184e5222e6a4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_3ea4d31ef5e647b2b195425324bab514.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:08:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_3ea4d31ef5e647b2b195425324bab514.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:08:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>79ee9c9c5f8d352a018fdbfcf7a6b43bd929f0d2fb548332fb4b3eb59bc5a180</td>
|
|
<td>[68a166cbe2103169f36aaa4c, 68a2b85683c75b2a7728df23, 68a409fc2e5c970cd67b61bc, 68a55b98a62710d4188bf96a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\CBORDEOD.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:15:01Z, 2025-08-18T05:15:01Z, 2025-08-19T05:15:01Z, 2025-08-20T05:15:01Z]</td>
|
|
<td>[d1f95b9724125a1c5f984fb1d1bc62d8]</td>
|
|
<td>[be6d615c8334ff3e05fd27e3343f643770bf2e1f]</td>
|
|
<td>[543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b]</td>
|
|
<td>[121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CBORDEOD.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>1923</td>
|
|
<td>d1f95b9724125a1c5f984fb1d1bc62d8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-08-07 19:56:21 +0000 UTC</td>
|
|
<td>2018-08-07 19:57:34 +0000 UTC</td>
|
|
<td>be6d615c8334ff3e05fd27e3343f643770bf2e1f</td>
|
|
<td>543df8d43761e01271774ff557c403a095c5a3341b6340cb47d9076c03c35e851e540393839e98bf577c1b94b2077e5b</td>
|
|
<td>121f0b2948c874cb5d989d1048988b55e564094a323fd2b1cb67227714548ab4d67a5274f920b229abe86c2983022a80c5fbbe2c059066ad81df0583faf24700</td>
|
|
<td>2025-08-09 05:15:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7a036e3a324a555202141726993e8c9be46eae5d5025047d59729b1179f3e30a</td>
|
|
<td>[68a1590fe3d1de03981d3cb9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1yfzzf3t.n2s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:22:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1yfzzf3t.n2s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:22:31 +0000 UTC</td>
|
|
<td>2025-08-17 04:22:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:22:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7a24379c01420760711ad0a08f28f46d6a397601f0b51a4e48b96cffa037dd01</td>
|
|
<td>[68a34b98a6132bf659cce5c5, 68a34df0b71eea1289980a2a]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.DataExchange.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:46Z, 2025-08-18T15:58:46Z]</td>
|
|
<td>[50ea916f234c0715695ee3289f2ed436]</td>
|
|
<td>[6a0449cf6f27497d7e3e65c86b275f6b5775f3cc]</td>
|
|
<td>[3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf]</td>
|
|
<td>[a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.DataExchange.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Data Exchange Packages</td>
|
|
<td>1126912</td>
|
|
<td>50ea916f234c0715695ee3289f2ed436</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:08 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:08 +0000 UTC</td>
|
|
<td>6a0449cf6f27497d7e3e65c86b275f6b5775f3cc</td>
|
|
<td>3fd177eff5431ce9417383e6fa9f75a148acaffd8e233c0f0302e35e2defea00f9bdf76c7071b2483e0a8578d40e8daf</td>
|
|
<td>a62512e9cb98bbe6354531fd028d802c81a728b4ba52997ff48ed27854dacc3fa49298c9ba4b2fe06984e39072557b6d0e8333d58a1d56ce2277949e76693b9a</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b161486f98073b5ca3ae0e3e7f27c8f566ab06f8ad799373d2e403cc733db20</td>
|
|
<td>[68a4ccc785b914a60d739e4e, 68a4ce1fc826337212f53beb, 68a4d07753a851daf11e6936, 68a4d07753a851daf11e694b, 68a4d2d1ff2b441b8442812e, 68a4d2d1ff2b441b84428143]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\NamedCapture.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[13d4e8065c076cc03ca0b66f2f009cb2]</td>
|
|
<td>[08256197d2405a47f7154f36728228bb13613f5e]</td>
|
|
<td>[57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c]</td>
|
|
<td>[019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NamedCapture.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Tie\Hash\NamedCapture\</td>
|
|
<td></td>
|
|
<td>12288</td>
|
|
<td>13d4e8065c076cc03ca0b66f2f009cb2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:46 +0000 UTC</td>
|
|
<td>08256197d2405a47f7154f36728228bb13613f5e</td>
|
|
<td>57a6d351218447813ce9838bd83c72aed0d4083469d6c47490a2c4290aa8853b85c2d8c184a7c7f7abb4adaf01a1898c</td>
|
|
<td>019363f4050bfa37b18808ea22e7fb2be7b2181d2c17adf3adc57fdff727023030e8e8a6498b717ca81a5f7ead85c5081f6772fb4fc1b5f4daa47fdaf7f1688c</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b2434ec93f042d8373bd3cf763874ab9c43420543ed120001278db17adf9da6</td>
|
|
<td>[68a37f25e0879ae8dffd5e04]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2ivls3f0.sja.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:29:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2ivls3f0.sja.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:29:36 +0000 UTC</td>
|
|
<td>2025-08-18 19:29:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:29:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b91d127ab813bedce31cf44c9d0bb338d1e5dbb7c4d88a4a5f9596cb927c7f6</td>
|
|
<td>[68a5cc2ad273577648d7017b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:44Z]</td>
|
|
<td>[8afad2ba62831ccf1afb549e35a2b1bf]</td>
|
|
<td>[2446f2b1eb95bb93555f1a32943d542757ac10ae]</td>
|
|
<td>[7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1]</td>
|
|
<td>[50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>c1af0141-048f-4b3c-8f83-c2b3ad2320ee.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>854</td>
|
|
<td>8afad2ba62831ccf1afb549e35a2b1bf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:44 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:44 +0000 UTC</td>
|
|
<td>2446f2b1eb95bb93555f1a32943d542757ac10ae</td>
|
|
<td>7dddbb695d555e1209ac1437cba44009ed85b1e6a04921ea8538f537381881319a81e5000fb493951c913d9f4de2b5a1</td>
|
|
<td>50dc8cf8d79ad48d4639267d4253b9b5d7d4e118ac5cc3592bc986771259161c84ea5defc394d5f0fda6713e890bb0942ff68a74030771a7e3a9455cf0afe3e2</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7b997c3cc74d393501497378b3f9012e85446d45990a040bee7862fa2d512520</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21d]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Set-MSOLUser-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:49Z]</td>
|
|
<td>[64c78cb84a34c1aac1f9040f9b3fa98c]</td>
|
|
<td>[5412398356155b4fa91298e55f818b7817fac6b1]</td>
|
|
<td>[843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb]</td>
|
|
<td>[b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Set-MSOLUser-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>5935</td>
|
|
<td>64c78cb84a34c1aac1f9040f9b3fa98c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-08 16:20:08 +0000 UTC</td>
|
|
<td>2025-08-08 16:20:13 +0000 UTC</td>
|
|
<td>5412398356155b4fa91298e55f818b7817fac6b1</td>
|
|
<td>843b95c3a4b613cdb9356d7ee5c1506d222517c89551ad30143e3107426e66c93e5493aa0428538928f35f7107ffb0bb</td>
|
|
<td>b8dbad2e788b1fe126fea37cbcde8b6a5e8eba7477df62e0fbc14fe29c3a9ebb805cb5cf4a567c851350fb58eac0c0c2f5a2dc0312e7e857a654ac440faf8bca</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7c44f6e2dd5bec1edbd6982fb1e01986327ed9ad9e1ab078d43137cf5358e261</td>
|
|
<td>[68a3505955becb8a0ff1a792]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCGChaSdb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Affymetrix\dbcleanup\del30d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T16:00:01Z]</td>
|
|
<td>[2abe380b66aaa9644c02efe64b7ec488]</td>
|
|
<td>[d4f82f9d40f820fb58a6fd075507ec36fcb8a897]</td>
|
|
<td>[4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff]</td>
|
|
<td>[2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>del30d.ps1</td>
|
|
<td>C:\Affymetrix\dbcleanup\</td>
|
|
<td></td>
|
|
<td>153</td>
|
|
<td>2abe380b66aaa9644c02efe64b7ec488</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-02 19:44:08 +0000 UTC</td>
|
|
<td>2024-10-02 19:50:57 +0000 UTC</td>
|
|
<td>d4f82f9d40f820fb58a6fd075507ec36fcb8a897</td>
|
|
<td>4edd4b0f6f089241ad0c0b5dc5bf40dcb2c096bfefcb755711211b0fb537f28a9e5bbb69e2f5c5a23e9eeddc3a8c90ff</td>
|
|
<td>2fbcfaa137b5c079e7e5ffa64b546df4f59d6f201def93fd9769f1199c1975b5fcf8ae7f5f8d3a8ab6853744f1f7f21a70d1e750e315af72991d01a6ee10bcfa</td>
|
|
<td>2025-08-11 16:00:12 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7cc7c1291b2e252bcb756546657d8c00c4f79ca981f28ce37f5c8078a65132d8</td>
|
|
<td>[68a3146b5f0c41860c8c8509, 68a3146b5f0c41860c8c855c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\urllib\__pycache__\parse.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[a500c0a77b51df437e5212a3ccbbca4a]</td>
|
|
<td>[d8ed3a2e9e061f636a16798d3b66602754a5208d]</td>
|
|
<td>[369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0]</td>
|
|
<td>[8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>parse.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\urllib\__pycache__\</td>
|
|
<td></td>
|
|
<td>50297</td>
|
|
<td>a500c0a77b51df437e5212a3ccbbca4a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>d8ed3a2e9e061f636a16798d3b66602754a5208d</td>
|
|
<td>369d981af50bf09724c1b8adddbdee325d34b0fbfdc3b044b34804859672844f3cb1c3f58de7e1b600c78a95515d84b0</td>
|
|
<td>8306c182dc1ff609176b4c6fab0100f015634a4a7dbc945883b961fece74d32f00bc817d68d8cb0242f89aba6200cf3832206100a823eb9900a9832dc7b6b7a1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d031d09ec40cf9cfeb3455f9199da3e3f8b827cc4053d65f0a9ed878513cfe1</td>
|
|
<td>[68a3151a330e1d8c3da80971]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vmBKRIM]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\Instrument Manager\Drivers\diietldlservice.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>["E:\Instrument Manager\Drivers\diietldlservice.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-18T11:51:23Z]</td>
|
|
<td>[fa5ed12d9b5b2d41eed634a630122413]</td>
|
|
<td>[4afc7da9ab03e35ccdeb5a627579699df806659c]</td>
|
|
<td>[01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794]</td>
|
|
<td>[66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2]</td>
|
|
<td>[172.17.20.8]</td>
|
|
<td>[172.17.20.8]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>diietldlservice.exe</td>
|
|
<td>E:\Instrument Manager\Drivers\</td>
|
|
<td>Data Innovations LLC Lab GPS</td>
|
|
<td>78336</td>
|
|
<td>fa5ed12d9b5b2d41eed634a630122413</td>
|
|
<td>Instrument Manager</td>
|
|
<td>8.15.0008</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-03 15:35:11 +0000 UTC</td>
|
|
<td>2024-09-18 13:42:01 +0000 UTC</td>
|
|
<td>4afc7da9ab03e35ccdeb5a627579699df806659c</td>
|
|
<td>01de86e7e97a30770bb88f5a9b11255d76987dac301736020d4648a4750e236a4b36fbc7dfd2ed055ebb2f6a4a27a794</td>
|
|
<td>66255872a5786d32c902c22eb82917f083441fa145e5f5ad42f1079d49bdaa3e885d389b0513f5e2dba7934ae5190655fc8e01d083dc873a2dfee492f4dcb9d2</td>
|
|
<td>2025-07-17 13:02:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>74fe5996cba2af0f0d12f3dcb6c8a80a977bd795b4f37f0c62631dd542d77dcb</td>
|
|
<td>[68a4b0fb13fac5171eeef0d5]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.CustomControls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:07Z]</td>
|
|
<td>[6f4525a325cda08abf1b18a472526ee3]</td>
|
|
<td>[9171e03c1c96b37f539557128a1c32d0d71c9dcf]</td>
|
|
<td>[b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2]</td>
|
|
<td>[1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.AlliancePD.UI.CustomControls.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\Alliance 7 Client\</td>
|
|
<td>Cyrun.AlliancePD.UI.CustomControls</td>
|
|
<td>214528</td>
|
|
<td>6f4525a325cda08abf1b18a472526ee3</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 20:45:35 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:58 +0000 UTC</td>
|
|
<td>9171e03c1c96b37f539557128a1c32d0d71c9dcf</td>
|
|
<td>b2f93b822a77c2ea796f1e1c67e06d21daa7cf97bb5c19d08ba3f9cbd9e52cd6b516851f0124e0d95f30c177bf328aa2</td>
|
|
<td>1c15a6911274127faac610b43c9722f0261b67a3b652c275c416d3e1aa4134082da68c967358d8d94d9e62b5acce290c54030a5feedeaed09a27f1f0cb2c5af2</td>
|
|
<td>2025-05-22 18:54:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>755edeaf25a424b1e2540116cb002ded313b73da1f426ac79c380a0f5a47d692</td>
|
|
<td>[68a3146b5f0c41860c8c8534, 68a3146b5f0c41860c8c8570]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\iterators.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[94d122a5aa89600a9822e6eecac2470a]</td>
|
|
<td>[b47d3670867d1edf3170e1871f654699ccdd6558]</td>
|
|
<td>[b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1]</td>
|
|
<td>[9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>iterators.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>2824</td>
|
|
<td>94d122a5aa89600a9822e6eecac2470a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>b47d3670867d1edf3170e1871f654699ccdd6558</td>
|
|
<td>b542a690f44cc66ac8e43f54fc055ccb0f80ee247b6d0c3e28ff01c18bf0c464646748b490f9365b76b85a88e16ca6a1</td>
|
|
<td>9a18a941a4622ed707f9b709d7d79cd76137847bd3fd435459bfb7f7dccfaecd211c3ef29c09bfb8ff419a3f6326c73ad9efa36c0462e86873484ecd763c4f7d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d974abbff9ea70a534d75c24d021d96fc2d36fbef86539a7c32df8e99f11e9f</td>
|
|
<td>[68a3146b5f0c41860c8c8543]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\tempfile.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[7ab5aff3fa2b1f285db5557e42243465]</td>
|
|
<td>[ddfb6e39237347e33458183d7540eeef606d7ef9]</td>
|
|
<td>[e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2]</td>
|
|
<td>[477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tempfile.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>40711</td>
|
|
<td>7ab5aff3fa2b1f285db5557e42243465</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>ddfb6e39237347e33458183d7540eeef606d7ef9</td>
|
|
<td>e62c7bc13fc91e2b0786197e00994ee32744fd2860da507b76af851230edb44721b8abb366e855d3d714612bb0db6cb2</td>
|
|
<td>477266e9e40c2e92bccf53fe6756a84cdcda721a54890f0fdb4dc0d8ad69a1746851a252210de1ba556148daeb93b7aa888086784b42f7478c9d3907463939a3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e17cb2b9e2e5ac4b1f09011ecbbaf0650c23af74a9e04bc8e97cab19aa4e77c</td>
|
|
<td>[68a33f3383e5334c1360eeb1]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\__PSScriptPolicyTest_4ixogztp.vvu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\RuntimeBroker.exe]</td>
|
|
<td>[2025-08-18T14:56:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4ixogztp.vvu.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\11\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:56:41 +0000 UTC</td>
|
|
<td>2025-08-18 14:56:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:56:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e5ec9321797b7625a95073957004b3dbf6bb68dbe150739d70c989bd0fc30d4</td>
|
|
<td>[68a2055f52291ed98e81a02b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-Datsun]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ywzhivlf.tki.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T16:37:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>[172.17.23.222]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ywzhivlf.tki.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 16:37:42 +0000 UTC</td>
|
|
<td>2025-08-17 16:37:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 16:37:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e758ba1138fda4c2f6fe3d1dbf13865768509733a2b21297cb1854cdb41c3eb</td>
|
|
<td>[68a1e01c3977fb58c6e176eb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mksrzrw0.jcw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:58:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mksrzrw0.jcw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:58:47 +0000 UTC</td>
|
|
<td>2025-08-17 13:58:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:58:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7e88c063db7d11cc81424ad3a0b79439a708466a41d2515d39f435460a90ac6f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f214]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[04134a765a6766b8ccc33ab7b76c6484]</td>
|
|
<td>[a05c6df7ded795af80ad78b3109bf6c2456c4cf4]</td>
|
|
<td>[e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19]</td>
|
|
<td>[6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GP-Result.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>549</td>
|
|
<td>04134a765a6766b8ccc33ab7b76c6484</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2021-07-15 21:19:57 +0000 UTC</td>
|
|
<td>a05c6df7ded795af80ad78b3109bf6c2456c4cf4</td>
|
|
<td>e6e06be1aaa73d2ea92fa73bf1cb868b9930b08f0243d1abe03b5ece486d30bf90875d80f272238f521ec1f38d4c5b19</td>
|
|
<td>6edae6842a86d190ab169616ae6711eca18ba3cb2398407148a42c63574e6205c05a0766114f3855a6bd210a3a15a891f17152997baa4f7bf3348a6a2fa6f384</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7ee90d2d178643fa86a91c933bb12080aad0ea0b7399ef08f6045a4841c54372</td>
|
|
<td>[68a3146b5f0c41860c8c8521]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\getopt.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z]</td>
|
|
<td>[36b1336ce751d7a3a4f98ed3688bd5b8]</td>
|
|
<td>[4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc]</td>
|
|
<td>[864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc]</td>
|
|
<td>[1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>getopt.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>8470</td>
|
|
<td>36b1336ce751d7a3a4f98ed3688bd5b8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 22:08:49 +0000 UTC</td>
|
|
<td>2024-11-22 22:08:49 +0000 UTC</td>
|
|
<td>4f6083fb4d2ea2ebe2a34ccd67952b5a1afabccc</td>
|
|
<td>864930bc5d49b46337f0e4a23190cca5f00659a39a43a85b42922d5e4c2aeb4b4ef661449818fe98e6ddb6fefd76b4bc</td>
|
|
<td>1f1c87d2a44474efde81aba477b6f95b490806779f832d03e83910953ba2876cb3f3809449047063c7a486e029fbbad902abaa1333121122b94d39cc5ad41e52</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f1c7a6dd39bd07d8bb63423b0a1a20c1a21ad1049160828ab2d4526e49937ec</td>
|
|
<td>[68a3209bdb4bb30ce9fad5ab]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\aigevikz\aigevikz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>aigevikz.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\aigevikz\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:46:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f3ab2ae868507dd7a50a8a32ca35df13c57044a206339041bea2b8656324c6d</td>
|
|
<td>[68a3189a985e97167cef8607]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tftoj4kh.1uo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:12:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tftoj4kh.1uo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:12:01 +0000 UTC</td>
|
|
<td>2025-08-18 12:12:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:12:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>790685b721f1c02822e2c39c904ab990c088e6bf2934eacf9869129b18b201a7</td>
|
|
<td>[68a4d180b5900ae066920596]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:10Z]</td>
|
|
<td>[56c6d95ae5e68a0aa0da6568a48cd047]</td>
|
|
<td>[dcbd5930f6e52a715078f6ae99900819b3d5d1c3]</td>
|
|
<td>[ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72]</td>
|
|
<td>[0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>2786</td>
|
|
<td>56c6d95ae5e68a0aa0da6568a48cd047</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:33:06 +0000 UTC</td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>dcbd5930f6e52a715078f6ae99900819b3d5d1c3</td>
|
|
<td>ca9d2babfa35fbb9f14b40d6ae7f91a2b68711154da142a8da29c7ed60a1b1f2b641002e25380aed9104eb1ab2d89e72</td>
|
|
<td>0b6bfd7dcc72e259123a0f20c9e695633bbb540d6381d2593d6edd5bf436ae59ab8b3194a06e824c0392992f8697cba10640a7ee489c0761bc9dffbd9195e27f</td>
|
|
<td>2025-08-19 19:33:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7914a284be2811ffbc318ac97a2f6c21a503fadfcb460e81828ca0551dac35c0</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20a]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\PasswordExpirationDate.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[714d7d166b1ea948977b99df67d8c1b3]</td>
|
|
<td>[aa5398703aefacd2b30922cfda05af62e8343765]</td>
|
|
<td>[d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b]</td>
|
|
<td>[343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PasswordExpirationDate.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>1386</td>
|
|
<td>714d7d166b1ea948977b99df67d8c1b3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2025-04-29 12:08:30 +0000 UTC</td>
|
|
<td>aa5398703aefacd2b30922cfda05af62e8343765</td>
|
|
<td>d3152a79f441d842f158a3c1f543c37d6a3aafef96ace0e11bb3187ebda004e159fd4029375df6016f2e029593c83d7b</td>
|
|
<td>343388691f80819ff8fd8a5dfc1175519379fd2d1bcc12a20bd4d57914a01a3dedcd01e6c5f1511d2425d8f1920c33e4a5b170c4111cd9522e39c3339f5f249c</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>79464f4def37e5ba9e14652ce241f8f4ec97e70a54e49a0b13962298d861da62</td>
|
|
<td>[68a1f536f0fc96497865c3dc]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[i-nnvrpms]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_u4u2h52q.o3j.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T15:28:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.112]</td>
|
|
<td>[172.17.251.112]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_u4u2h52q.o3j.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:28:42 +0000 UTC</td>
|
|
<td>2025-08-17 15:28:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:28:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0a9dbe448ddb227553c9a48de77405193eb5fe2bebabab9d6527c15d84d8c2ba</td>
|
|
<td>[68a1a3e8ae65e4e5452ad825]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod10]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gasrem2i.gfx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:41:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gasrem2i.gfx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:41:54 +0000 UTC</td>
|
|
<td>2025-08-17 09:41:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80ed85556abb978978c3afeabdae83a61e828e13823ad8081b5656a15ac32295</td>
|
|
<td>[68a3146b5f0c41860c8c8513, 68a3146b5f0c41860c8c8566]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\header.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[5e51285c9cc412511aae0381df5af605]</td>
|
|
<td>[c34c9e21766749325670c8fb373441fa260ac2d4]</td>
|
|
<td>[3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1]</td>
|
|
<td>[6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>header.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>24610</td>
|
|
<td>5e51285c9cc412511aae0381df5af605</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>c34c9e21766749325670c8fb373441fa260ac2d4</td>
|
|
<td>3a95eb95f7c0217b7ff62ee891dc574570a387418c5a8c825e7b96dc3f130ca1ffe945d443ec1f41f0ae6e4652ff15c1</td>
|
|
<td>6b6f6775a7901a117a60b552c8c835f45855f0d953eb9feaa6eedb2b10d2240aa49d9b524e0fcc580bfe067a560daa251004574a2f1e7c285d58fa8537ee7099</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80eed1550c017565807bf8be35688e6845c564df5aaf1a006959e4714cfd990b</td>
|
|
<td>[68a31e4459685fc083f0f272]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:36:17Z]</td>
|
|
<td>[63f04652c1ffce069b2aade76da5bc56]</td>
|
|
<td>[253c1f10b1facd8919193a01d57d4ce26440467e]</td>
|
|
<td>[00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e]</td>
|
|
<td>[277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2198</td>
|
|
<td>63f04652c1ffce069b2aade76da5bc56</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:36:16 +0000 UTC</td>
|
|
<td>253c1f10b1facd8919193a01d57d4ce26440467e</td>
|
|
<td>00c38219ce3abd8ff4083006b538665f43a5c37d345f48f0d01156bc2f5f7d288ad6119a93d500d255aa3b34717e203e</td>
|
|
<td>277e6ff936582c94736d3bcca6c74c8b9a0962f2eca509753b1cd9ccc6e0cd9ce17f01dc0b05d415928940f4af604338f1ead6452bee06162f3cc176fdc3b51d</td>
|
|
<td>2025-08-18 12:36:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>81151bd7410efbbd5e12a433990f411b387d65dac6d015d82ba8214539435d31</td>
|
|
<td>[68a4730f28df70c6fde369ea]</td>
|
|
<td>[2]</td>
|
|
<td>[shke0124]</td>
|
|
<td>[Uniontown-DC-01]</td>
|
|
<td>[UTWNNET]</td>
|
|
<td>[C:\temp\test-pendingreboot.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:40:22Z]</td>
|
|
<td>[f3d03d56da1294ef5032ad5902a255d3]</td>
|
|
<td>[672d173b6c306d3c809c5409854c838452d10e25]</td>
|
|
<td>[2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b]</td>
|
|
<td>[7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804]</td>
|
|
<td>[10.144.17.62]</td>
|
|
<td>[10.144.17.62]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>test-pendingreboot.ps1</td>
|
|
<td>C:\temp\</td>
|
|
<td></td>
|
|
<td>762</td>
|
|
<td>f3d03d56da1294ef5032ad5902a255d3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-09 12:54:01 +0000 UTC</td>
|
|
<td>2025-07-09 12:54:01 +0000 UTC</td>
|
|
<td>672d173b6c306d3c809c5409854c838452d10e25</td>
|
|
<td>2520f4b0f421ecc4655a3fac8caa83a76e216a8026c93cf721dfbfdf5a23a2a23db65df85f7c4786faf33f33899ff39b</td>
|
|
<td>7b90091789f0f00b9876c6b4d797a0efa9e8105d9883e6d16adbf189bb87c1fe4761af95184a55043e4c949990489593570bb6094aae6199cc55a159f02cb804</td>
|
|
<td>2025-08-11 12:43:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>812b0f4b717665265bc5a0620fa8be3386853418328e5a28e7ff891462f9de6b</td>
|
|
<td>[68a5239e621d09b2b1ed5e4f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[7913110d2edd6e0303dd5cc770044109]</td>
|
|
<td>[47838c3517f0204ec04496a5da987943b905016f]</td>
|
|
<td>[5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf]</td>
|
|
<td>[3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Control</td>
|
|
<td>5632</td>
|
|
<td>7913110d2edd6e0303dd5cc770044109</td>
|
|
<td>Control</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>47838c3517f0204ec04496a5da987943b905016f</td>
|
|
<td>5bcf02175a5d3d3914a8104f2c390e6318da3d81149542a19e9a6546d3a4e4149e2c0f34e6dd0766f505e0627bc3acdf</td>
|
|
<td>3e22e85d1238f1f0f57be48f789a05a73039f51771bd2178c65e372fdb6a75b55aafb8ddb8ed1948267020746228847a834a78c89ea26483a04f46e49d1e3b4e</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>828e4feaa7f12dcf43874a32bc8a352c6179840111d514ea71acd32dbd924944</td>
|
|
<td>[68a311cdc2d0d6e3eb77f218]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\findemailfromfreiendlyname.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[fda42888811197b147f60b25940b6167]</td>
|
|
<td>[d244e5619d64dc92414029ae026b62703fe7a133]</td>
|
|
<td>[19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f]</td>
|
|
<td>[b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>findemailfromfreiendlyname.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>641</td>
|
|
<td>fda42888811197b147f60b25940b6167</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-15 13:32:59 +0000 UTC</td>
|
|
<td>2024-11-27 21:47:05 +0000 UTC</td>
|
|
<td>d244e5619d64dc92414029ae026b62703fe7a133</td>
|
|
<td>19892064aa94b7cd220cb47bf99e78c640985085b614b243122606eb5a74ae39b06640cf081a1a9dcabf3dd5d06d587f</td>
|
|
<td>b417c9f9a577fa1ab9bf149d0d6367d1ac86e395a74f3db57b521e7734451b58403e4feec255b2429cbc45d0784c97a160842cf027abf57a225306c014d4b204</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>83a979fb882f2a864bd8541ffb78d55fb88e15750faae26788a8a8d63c465dee</td>
|
|
<td>[68a194fcbd314bfebd3efbbe]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kzqzcg4d.co3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:38:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kzqzcg4d.co3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:38:09 +0000 UTC</td>
|
|
<td>2025-08-17 08:38:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:38:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84656aa54a0cb01d9269991ebd2a95d785e26a521297c8531b4ca03f6175cc63</td>
|
|
<td>[68a1e42dda86b7950e20922a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ihgyu0b3.oaq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T14:16:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ihgyu0b3.oaq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 14:16:08 +0000 UTC</td>
|
|
<td>2025-08-17 14:16:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 14:16:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d55249e54c24ac0fec23c3cee31809ddac6b79c9b79941fbbb566d93c3348a6</td>
|
|
<td>[68a42c746d8e3c910ac20520]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jnw042yi.z53.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T07:49:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jnw042yi.z53.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 07:49:00 +0000 UTC</td>
|
|
<td>2025-08-19 07:49:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 07:49:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7d5cb2ca9517d0abb090d033d3861aef472e348e6e0887bb8c33a9646074056b</td>
|
|
<td>[68a3146b5f0c41860c8c8506, 68a3146b5f0c41860c8c852c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_casefix.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[d0128e493756c7a62e9dd29cfac89d8c]</td>
|
|
<td>[cad9e3b8221f00371ba6e19dd31a01bab2f2ddda]</td>
|
|
<td>[74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee]</td>
|
|
<td>[40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_casefix.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>1824</td>
|
|
<td>d0128e493756c7a62e9dd29cfac89d8c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>cad9e3b8221f00371ba6e19dd31a01bab2f2ddda</td>
|
|
<td>74683973e8c215d9115728a8f6f6376bd2b1c9e8fcb213a250a312217a54f1c9a305bc08167cb291f9c6e2265ff650ee</td>
|
|
<td>40bbbe66d0465d00a53c80cb0f17929bb7f328095f85f0b6709ac45d7bbdebfd9945c86ef4bfa1d8bba6f2a8dcb4ecf9d2610ad7f22574f5e4b0a4833e0090ee</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f7196ee2c55c57bd6a32a85fdb5d9d6cbb0c143db529d30f65021be1f6794da</td>
|
|
<td>[68a16e26eef56db6411d81ce, 68a2bfb24201bf09ec6e1d53, 68a4115cc76143c265ae8f29, 68a562fc095f408404dbb6a7]</td>
|
|
<td>[2]</td>
|
|
<td>[IT.HelpDesk]</td>
|
|
<td>[PCH-BGSwap]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\WS_FTP_Scripts\Renamessi3.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:40:45Z, 2025-08-18T05:40:45Z, 2025-08-19T05:40:45Z, 2025-08-20T05:40:45Z]</td>
|
|
<td>[d9985deb5b260de564bcf74ddafcf4f6]</td>
|
|
<td>[6c6ddd5954aa3514b5100674c74a727ecdef2a81]</td>
|
|
<td>[24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c]</td>
|
|
<td>[fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>[10.20.22.79]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Renamessi3.bat</td>
|
|
<td>C:\WS_FTP_Scripts\</td>
|
|
<td></td>
|
|
<td>905</td>
|
|
<td>d9985deb5b260de564bcf74ddafcf4f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-10-29 14:30:30 +0000 UTC</td>
|
|
<td>2020-10-29 14:31:13 +0000 UTC</td>
|
|
<td>6c6ddd5954aa3514b5100674c74a727ecdef2a81</td>
|
|
<td>24558a06d94778b903f4319bb444a680b789651a4fccba78fd3a5ce79c9a23924781002f99c64dd2ebd462ce4381f90c</td>
|
|
<td>fade884a2a9975dab5d3da5d61762ca67147247441ccd201d73bf54b18a9b1de6ef2d4b0d123bfbcab6a672d220e6415ac6ca067544ec82ccf6ae54cc5da7e78</td>
|
|
<td>2025-08-09 05:44:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80962aa98ccf32b6398709a133a9d678a4277d666bf0f68be6881a727b94cdc2</td>
|
|
<td>[68a161e4df6c771867d5823e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MIntGTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbe1cxlh.z1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:00:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>[172.25.19.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jbe1cxlh.z1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:00:08 +0000 UTC</td>
|
|
<td>2025-08-17 05:00:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:00:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>80ac258e0852de329618df81b11d6beb684dd2d207b215a5559657ffefa44475</td>
|
|
<td>[68a25efe3635347d5469494e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\waxkiu4t.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>waxkiu4t.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:00:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ea212b296688a2fcb2dee591d081469da7cc09780e3eaf5ea0c98e34eddff46</td>
|
|
<td>[68a1af8e6937b3bfeec24717]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y3wqc145.xln.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:31:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_y3wqc145.xln.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:31:33 +0000 UTC</td>
|
|
<td>2025-08-17 10:31:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:31:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0eeae75aee6c2b8cfef58497f07cc728a2f169217e316453c9dc577daf51c831</td>
|
|
<td>[68a1b895b65e1946e3666f15]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\EpicHHEnvSUP_SmartUpdateFull.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T11:00:09Z]</td>
|
|
<td>[f4a871c36ce1398c5c89063c394fb796]</td>
|
|
<td>[ff814062a8182c82de32de600bbabd8b08551fb9]</td>
|
|
<td>[ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb]</td>
|
|
<td>[7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvSUP_SmartUpdateFull.bat</td>
|
|
<td>C:\HomeHealth\</td>
|
|
<td></td>
|
|
<td>98</td>
|
|
<td>f4a871c36ce1398c5c89063c394fb796</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:47:08 +0000 UTC</td>
|
|
<td>ff814062a8182c82de32de600bbabd8b08551fb9</td>
|
|
<td>ed73ce21118da24ee77fdc48c36e4e5e7e1106938f8c0ddad29d1c132b7b5a015a008223360e59bd6971c692f7079ebb</td>
|
|
<td>7113eceea7c9339724a81b2c02f3cb2f261dc9e9f4edf7e7fc2dfcd4df148a320bebb478b8a68852acf8e0c14c9e5121e9be7db9d7c47ffe82b86318b90caf15</td>
|
|
<td>2025-08-11 11:00:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f144dc59a8cf91c8457c46a563833c9fd3d1f7766c9c6b99f6e85a93e942ab1</td>
|
|
<td>[68a3146b5f0c41860c8c8523]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\gettext.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z]</td>
|
|
<td>[2b01d716b248affc1d5c61df52586f70]</td>
|
|
<td>[01231cf7bb85f5151d9846df82dafc6b9bffb225]</td>
|
|
<td>[930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38]</td>
|
|
<td>[9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>gettext.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>22565</td>
|
|
<td>2b01d716b248affc1d5c61df52586f70</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>01231cf7bb85f5151d9846df82dafc6b9bffb225</td>
|
|
<td>930acdf614bb1b3770877eb11e88b6a31d97117bd3df013b2ea3c304014870b55c5e059ba25633852d8419e54dac4b38</td>
|
|
<td>9f22977f142473da5490fc347a638ab32070f24ed7789ef5653615690d37ca99b3c2a5cbd7ad144678e7551214b597535b3d2f43e1608a72d39bfeecd78b55e2</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f1c26396d25e75da96d668173f3844426c38a9f41e23e3b17ef38c6711c5001</td>
|
|
<td>[68a1a97fd1ad1d02ded12163, 68a2fb0a27a9a45c7a219507, 68a44cbb02b8ceb81ab6baf5, 68a59e6101f0277939a73181]</td>
|
|
<td>[2]</td>
|
|
<td>[meditechbg]</td>
|
|
<td>[PCH-PRINTER003]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Printer_HP_Script\SSNP.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T10:00:27Z, 2025-08-18T10:00:27Z, 2025-08-19T10:00:27Z, 2025-08-20T10:00:27Z]</td>
|
|
<td>[7a39f19ce6c8fb1d161c443d1dc7f86f]</td>
|
|
<td>[6f028aff74eec5d0db149890d22a8fed50c536cb]</td>
|
|
<td>[67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2]</td>
|
|
<td>[5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>[10.20.22.81]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SSNP.bat</td>
|
|
<td>C:\Printer_HP_Script\</td>
|
|
<td></td>
|
|
<td>5014</td>
|
|
<td>7a39f19ce6c8fb1d161c443d1dc7f86f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-03-21 12:35:45 +0000 UTC</td>
|
|
<td>2014-07-09 19:42:40 +0000 UTC</td>
|
|
<td>6f028aff74eec5d0db149890d22a8fed50c536cb</td>
|
|
<td>67204d38c1bbca7c20b9f623bff69c887cefdce4283f81256b8695e9328bf62ffb3ddd9057a9579460f1226b6f303af2</td>
|
|
<td>5b548f7e02568aae6afa20cafeb2926255771c242468dd7be0655ad47d583ed58166032a8d5e6d1f0d090f9eea684d4e5489faba8ba6f0457fc29aa7fef97a67</td>
|
|
<td>2025-08-09 10:04:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0f3cafd07fecd666babef35d2e27c9be36744d46ccbadeffb332ac1c63fc20d4</td>
|
|
<td>[68a241462d53af320f145902]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tbmkjawl.w3u.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tbmkjawl.w3u.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:14 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:26 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fb8614c9264487aeb4520463d5be45b3de0f311e175fb7615ad95127046479c</td>
|
|
<td>[68a3146b5f0c41860c8c84f6, 68a3146b5f0c41860c8c8537]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\socket.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[faed5b0bdd655e08c6850bcf855f6058]</td>
|
|
<td>[d5a4515c70fa7338e895a47d73b6538dddb21cc9]</td>
|
|
<td>[54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b]</td>
|
|
<td>[cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>socket.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>42178</td>
|
|
<td>faed5b0bdd655e08c6850bcf855f6058</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>d5a4515c70fa7338e895a47d73b6538dddb21cc9</td>
|
|
<td>54f1458972436ce9d5e6bf70ad8ff0fc6ad552073c01b8ef1132ec06ca2d536f5b307356fe3f7854158eef2d5b1bb25b</td>
|
|
<td>cc2b8536da4e7950d7bb2be74b6e3fd39cf42690bf5a486bd896d6c0c1cea9e7454c5071316ec14fb2c04db14e8bccabf0139f6b26b8a858c59f08019f45cb2c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0fc35d2d6afaf1ed0ab607443617599e4b74b79171d41700d5e06c9ad5f9704b</td>
|
|
<td>[68a5239e621d09b2b1ed5e46]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringConfiguration.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:32Z]</td>
|
|
<td>[760728e545154c92a8f96402d642c1d5]</td>
|
|
<td>[f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac]</td>
|
|
<td>[226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de]</td>
|
|
<td>[e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringConfiguration.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>34816</td>
|
|
<td>760728e545154c92a8f96402d642c1d5</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:14 +0000 UTC</td>
|
|
<td>f9c8d6c7f206e0b7b7432e0c4a9f5962167d9bac</td>
|
|
<td>226514ac5c0fa4ccf6da052a4fb7be77111043a0d13b648c16995e5f05bf78bfee5f2323df734514ae6f6e7b1c01a6de</td>
|
|
<td>e1c1aeb4f222119d543c56077510a730e060c1fb669610ee464bde97bc009564eb7659e7071f2e26d87b4111484bbadf3eebd3ab24bd054936641f44611b8f01</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ffa8ca52df3c1c314eff6938435b63edee719cf8d49e070754f828bf4d9152a</td>
|
|
<td>[68a4864ff17c458cfe4c9f0c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedV_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>["C:\Stryker\Stryker Vision\Watchdog\Stryker.Vision.Watchdog.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-19T14:02:43Z]</td>
|
|
<td>[080059864bbff2e06e9634408e045e62]</td>
|
|
<td>[34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c]</td>
|
|
<td>[1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544]</td>
|
|
<td>[ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>[172.17.252.225]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.Vision.Watchdog.exe</td>
|
|
<td>C:\Stryker\Stryker Vision\Watchdog\</td>
|
|
<td>Stryker.Vision.Watchdog</td>
|
|
<td>138752</td>
|
|
<td>080059864bbff2e06e9634408e045e62</td>
|
|
<td>Stryker.Vision.Watchdog</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-25 19:13:22 +0000 UTC</td>
|
|
<td>2024-10-25 19:13:22 +0000 UTC</td>
|
|
<td>34f1a4ca5e6d1189c5b5c2c8c65592b957c3273c</td>
|
|
<td>1b437c8ebfc4ea2d196dd253268c9d902e9802a6ef75e5e9626d3d44f30903382db74c8e370946fa1940199250e19544</td>
|
|
<td>ceae83e6ada88eda5acc82384ab3d34157b4fb6281f2aa6fdc8e1a1498ee6352f3765c3ca90df06c69a3fb8ebf374bf727859cf59583d72031cf7f02ec5bfae0</td>
|
|
<td>2025-05-20 14:57:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0a0ff20d66f01b5fa8926bace01d4a73a24db54811a975ea5ea4a01d43eb585b</td>
|
|
<td>[68a5319ce132e4c5dc00a81c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3mWebTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vfkwh45z.3qh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:23:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>[172.25.19.83]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vfkwh45z.3qh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:23:12 +0000 UTC</td>
|
|
<td>2025-08-20 02:23:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:23:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8a1ced8a3f76ad3ff0b53b43010d53302e4b10d7affa3ffb69ba20a0ca24c1fb</td>
|
|
<td>[68a189ed0b483022e242e958]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nIC-HIC-PRD4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ax3ju4vv.gx3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:51:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>[172.17.46.252]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ax3ju4vv.gx3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:51:02 +0000 UTC</td>
|
|
<td>2025-08-17 07:51:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:51:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>84e95c6300aa357f75245f2c4da9e422ebe8bbe4db67283870cee53b02231ad7</td>
|
|
<td>[68a5239e621d09b2b1ed5e4c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServices.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[0d46a7d13dd192a9bc24c976aabe9eef]</td>
|
|
<td>[acd9024e775f0381eda5fb39210490e8804f32f8]</td>
|
|
<td>[965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348]</td>
|
|
<td>[af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PeCommServices.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PeCommServices</td>
|
|
<td>141824</td>
|
|
<td>0d46a7d13dd192a9bc24c976aabe9eef</td>
|
|
<td>PeCommServices</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>acd9024e775f0381eda5fb39210490e8804f32f8</td>
|
|
<td>965d88fcb84b6a94f3aedc225a32fefd2fccd79016fe529d7de1723fc9f3dcebeb96d1eb723c9d948f9367954a9db348</td>
|
|
<td>af0cd01b393a7119892892eb101a32c0617ab413c89a30a3b46461448f53f6e7b37a98b5bc4c773c9f5835a891d083081b1e962214df06fddcb89a5209d1c88a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>85326460bd3f08e5658ae173143694d725b390ee91cdfee712d33f5b6f5c7fc4</td>
|
|
<td>[68a327366b9e5d3847e6ff2e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jolominu.tok.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:14:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jolominu.tok.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:14:20 +0000 UTC</td>
|
|
<td>2025-08-18 13:14:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:14:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>861af6ae28998ad90daf332e6ce3f52e32cb6af6490029ccdf01861030529fe0</td>
|
|
<td>[68a5cc2ad273577648d7017a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:42Z]</td>
|
|
<td>[0ec39449979000ec0584ab01673080c2]</td>
|
|
<td>[fdaf52401fc4eaebb0252552d432b836277078a8]</td>
|
|
<td>[3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4]</td>
|
|
<td>[7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>c5b0a051-8d93-4cde-b97b-39011ecf9d38.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>991</td>
|
|
<td>0ec39449979000ec0584ab01673080c2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:41 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:41 +0000 UTC</td>
|
|
<td>fdaf52401fc4eaebb0252552d432b836277078a8</td>
|
|
<td>3616094a86e4603dd8fc1bddad80237a4c219b8a4a405e7ed0ec9224fbbe8272c82211d0bb805dbf61e7b9a70281dcf4</td>
|
|
<td>7e57750b39af01500356cb8b972cfe71a81f12f937fd0b14d1c10c8cd78305247af27e90c8827706c40070c4bdd852fe925f475e278700d4b37da6b4a68781c0</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>862923dddfc3e6f7a560567ef7ad9a8d12ba03fef8d6206164127bd69412b1cb</td>
|
|
<td>[68a60640d91a6169403521ce]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast4]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Scripts\Compare printers on I-nfp1 to u-nfp2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T17:30:34Z]</td>
|
|
<td>[fa7d347cd25e73c0b857d25867f6bcff]</td>
|
|
<td>[23fce09fe1c70011677b75fdc13d2b2d831bb22f]</td>
|
|
<td>[11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1]</td>
|
|
<td>[99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Compare printers on I-nfp1 to u-nfp2.ps1</td>
|
|
<td>C:\Scripts\</td>
|
|
<td></td>
|
|
<td>917</td>
|
|
<td>fa7d347cd25e73c0b857d25867f6bcff</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 17:30:23 +0000 UTC</td>
|
|
<td>2025-06-30 12:13:17 +0000 UTC</td>
|
|
<td>23fce09fe1c70011677b75fdc13d2b2d831bb22f</td>
|
|
<td>11c8120be57853067d51f1a06104f5a284a1346e69e01429bafdd9561dc63547beca10adac6e692af814a63fda7c44d1</td>
|
|
<td>99480c4b95a1370440d0fb34c348e1db07509d54e95c0759a3f03b464ba6936ba7dfa9ce1e5780e03aee5bf603d5edda44c6cd788e79955523422688bcf30887</td>
|
|
<td>2025-08-20 17:30:40 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>866164cb56991315fd38941ed74b5f8245a6469c0257f717ea063397bfb9cf0c</td>
|
|
<td>[68a611738671451adb8f5998]</td>
|
|
<td>[2]</td>
|
|
<td>[DEVSCCMADM]</td>
|
|
<td>[DP-Warehouse]</td>
|
|
<td>[DEV-WVUHS]</td>
|
|
<td>[C:\Windows\TempInst\is-SQO0N.tmp\driversetup.tmp]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897]</td>
|
|
<td>["C:\WINDOWS\TempInst\is-SQO0N.tmp\driversetup.tmp" /SL5="$80C2C,180455,180224,C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\driversetup.exe" /verysilent]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\PROGRA~3\Lenovo\SYSTEM~1\SESSIO~1\REPOSI~1\M2WLG0~1\DriverSetup.exe]</td>
|
|
<td>[C:\Program Files (x86)\Lenovo\System Update\Tvsukernel.exe]</td>
|
|
<td>[2025-08-20T18:17:00Z]</td>
|
|
<td>[8bf52dfd2770c37e8f26fbca3e773e8f]</td>
|
|
<td>[bbee69e2e92738aee823293871ad827fcf6e90a5]</td>
|
|
<td>[489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d]</td>
|
|
<td>[83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>[172.16.200.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>driversetup.tmp</td>
|
|
<td>C:\Windows\TempInst\is-CVOEI.tmp\</td>
|
|
<td>Setup/Uninstall</td>
|
|
<td>2907136</td>
|
|
<td>8bf52dfd2770c37e8f26fbca3e773e8f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-03-20 20:41:55 +0000 UTC</td>
|
|
<td>2025-03-20 20:41:55 +0000 UTC</td>
|
|
<td>bbee69e2e92738aee823293871ad827fcf6e90a5</td>
|
|
<td>489e928c9bc123c39a600bf2117d5595f74adf1f0ee7424c13fd90c2fd477d31800cacc8ecad05a4cbbf9967a372824d</td>
|
|
<td>83837015547e23efc7875b17cfaa94440a5100220e684dba5f5039cb5f270c8d8419c7a7c793cdb98ba7d30f4410b50077349b7fa32b606cfe9b8da4c76f5bf5</td>
|
|
<td>2025-03-20 20:42:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86c806c09a7803a770f23b20b51108d5f0d29c4d1a698bb0545c63f393abadc0</td>
|
|
<td>[68a3b572a3df3f11549b8bf8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5b425657313647968a206bfc77c3d0ce.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T23:21:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5b425657313647968a206bfc77c3d0ce.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:21:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86da2f4c83c0da4f1de628febb8696b29aec95d06d8b5284f668b135042940c5</td>
|
|
<td>[68a3146b5f0c41860c8c853c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\glob.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[270f681fa912e46a35c53cbd22e62dd5]</td>
|
|
<td>[f0b5eec09e7c91aaee55e0048029b8b2cc0e8196]</td>
|
|
<td>[49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585]</td>
|
|
<td>[a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>glob.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>23672</td>
|
|
<td>270f681fa912e46a35c53cbd22e62dd5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>f0b5eec09e7c91aaee55e0048029b8b2cc0e8196</td>
|
|
<td>49026226cfb4ff0556769faee94ac15b51d609d4d99078ffb2645d4242c039df0c80bd4b0add9419968ab2de06829585</td>
|
|
<td>a672bd5f7dd101955d94d467f3511c613882ccbd42183d60ced622b124105d1742e0674e39cd80e2fcb80d785df54402e63dd7a96c7a384ae0db868a32d37693</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>86e8b1e1ca221cda910b70f1a6d1897907e2c9ca96eccb7d5127bec87aa6869d</td>
|
|
<td>[68a1ab05c9c3c78a4a9c60c7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_y1xem3si.bim.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:12:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>[172.17.246.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_y1xem3si.bim.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:12:15 +0000 UTC</td>
|
|
<td>2025-08-17 10:12:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>872f4d2c0d8ef4ab77b5963e41450e69fd9561ff10cc9e426390e8e60a7ab8c2</td>
|
|
<td>[68a4ccc785b914a60d739e45, 68a4ce1fc826337212f53be5, 68a4d07753a851daf11e692f, 68a4d07753a851daf11e6942, 68a4d07753a851daf11e6948, 68a4d2d1ff2b441b84428127, 68a4d2d1ff2b441b8442813a, 68a4d2d1ff2b441b84428141]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[c:\gehc-it\ccg\quovadx\cis6.2/integrator/bin/perl -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5 -I. c:\gehc-it\ccg\quovadx\cis6.2/integrator/sbin/hcisetenv.pl -root nt , c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl c:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\hcisetenv.pl -site _wmc_test, c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/perl.exe -Ic:\gehc-it\ccg\quovadx\cis6.2\integrator/lib/perl5 c:\gehc-it\ccg\quovadx\cis6.2\integrator/bin/hcienginerun.pl -p qdxprocess]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe, C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[4caadd4e182d3699d9be956724a5b1b4]</td>
|
|
<td>[ba5ee1dc096bbc29f58afba973d21dca1c37dee7]</td>
|
|
<td>[f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1]</td>
|
|
<td>[77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>perl.exe</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\</td>
|
|
<td></td>
|
|
<td>11264</td>
|
|
<td>4caadd4e182d3699d9be956724a5b1b4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:15 +0000 UTC</td>
|
|
<td>2021-10-20 13:42:29 +0000 UTC</td>
|
|
<td>ba5ee1dc096bbc29f58afba973d21dca1c37dee7</td>
|
|
<td>f6e3da7d2fb19f1101810b626c40d7a895602c4d98c6f8e010cc9e63d19b87a526eb76bbc8e4f115d721e05e0292cfd1</td>
|
|
<td>77c0e4f45895bdc9b36c8ca6674f3ce8896877259e262c31abcab7c192ce46e991a0216bb1b413f3c81aac6fb72f4b6e6f3cff11608aec9e517fac5e44eec3ef</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>875bd9b26bac5ac888c47873184798b7e7c154a8ff5c8307e884ca895f158080</td>
|
|
<td>[68a246379a94894376e8c601]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mg01z4ld.0i1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:14:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mg01z4ld.0i1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:14:30 +0000 UTC</td>
|
|
<td>2025-08-17 21:14:30 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:14:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>7f3f1b3c3698f724b932cb15eb898fd4049fee06fb71c10dbde9e86b9c46e387</td>
|
|
<td>[68a17bfc1ee81336fa54a933]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xrgtzqe5.l50.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:51:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xrgtzqe5.l50.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:51:29 +0000 UTC</td>
|
|
<td>2025-08-17 06:51:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:51:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cfdf2a28b4b2141ed76efdb646aff13e98839e0899c6adb3251d869435c7f62</td>
|
|
<td>[68a31b06388be01815425c5c]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:28Z]</td>
|
|
<td>[5101faab8397e7d7a6a747b7b23e1120]</td>
|
|
<td>[a3b33248c78cd3c905ae66c5435c2eb59feaac5d]</td>
|
|
<td>[bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8]</td>
|
|
<td>[379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>5101faab8397e7d7a6a747b7b23e1120</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:27 +0000 UTC</td>
|
|
<td>a3b33248c78cd3c905ae66c5435c2eb59feaac5d</td>
|
|
<td>bf79a371c2299ada193bdf3282e919a8c1ba680c0acd1f740fa449b49d1ba0c5a73a760c37fce9e18c344459db7bfbc8</td>
|
|
<td>379e9be5653b92ba5b0b73aae297f3c15d23403e230d9d54a042395906b6a257aaccc1ad93388c4b06f20da12c25140f69609bb21fed175955d49fa586d91334</td>
|
|
<td>2025-08-18 12:22:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87e9dadb6f2dafe4516df3207431d866f6523092fea13c70bb87a04ac2ca874a</td>
|
|
<td>[68a46900de52a0eb07bb2cac]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_2c7bdf88483841c991f97ab70ee180cb.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:07:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_2c7bdf88483841c991f97ab70ee180cb.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:07:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87eced5a13c1c768b4afba0c29a797300d938b5c42cd9b9b8f1009381036335c</td>
|
|
<td>[68a2841dea878ec155eeabc0]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-071EF405-2DA4-4BF6-B3E2-9EEE181CBAE8\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-18T01:35:00Z]</td>
|
|
<td>[531d104b020b9f98268ff78dd349c950]</td>
|
|
<td>[b163a90df0687f4e273d7df02eddf0f06f9089b4]</td>
|
|
<td>[f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1]</td>
|
|
<td>[e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>531d104b020b9f98268ff78dd349c950</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 01:35:00 +0000 UTC</td>
|
|
<td>2025-08-18 01:35:00 +0000 UTC</td>
|
|
<td>b163a90df0687f4e273d7df02eddf0f06f9089b4</td>
|
|
<td>f5a27f2dfe9a0a181daceeaba535f78a29df336d1522754bbac12957ae85ab849891cb2f2d5dff3601afed3adbb928a1</td>
|
|
<td>e6e8daf680b3dc78b7b3e1ff8afe54ec9467c9edb3850cfa4a7fba8461a2fcfadbabba2d2ed4ae667abb30d803d5a72fcc1384e8f46267ae10990517ae76c1e4</td>
|
|
<td>2025-08-18 01:38:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>87fa12deba87e8480e2f908b117c04f544a29ad84bfad78b06ff20e5e9457a90</td>
|
|
<td>[68a234114e9e68c09ff3b3ce]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_gdgv0db5.spm.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gdgv0db5.spm.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:58 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:57:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8816ced466c6030ba2624ebacbae119f2d4acdba7debf14a74c73a97605385a5</td>
|
|
<td>[68a5239e621d09b2b1ed5e53]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackTest.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[bc77c1c66df02372edd7ac4456a17bcf]</td>
|
|
<td>[15712c630fd5da7ad894f532b3ace2694eb388c6]</td>
|
|
<td>[1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c]</td>
|
|
<td>[f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackTest.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Test</td>
|
|
<td>16896</td>
|
|
<td>bc77c1c66df02372edd7ac4456a17bcf</td>
|
|
<td>Test</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>15712c630fd5da7ad894f532b3ace2694eb388c6</td>
|
|
<td>1ed557cd75e1c210ee31047fd8d76bb1965c746ad3f1daab3127582f4760889a9287eedd34bfbe040a2a1ec65476c75c</td>
|
|
<td>f6e290ec26c16be17191ae619106a1f488ae23c227403405cb8a72cce1d55d630e3b899e6ffd4223ee117bee7cec6a7001a90bc6b659c4ccd667127991329984</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>885e56d813268fca1e04e3c8d7292dc138ac4e188f7e61ea277d544a5c080f12</td>
|
|
<td>[68a31fecb457e7ec963d10ed]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_777b7d42-1424-4b3a-90e5-74d50deef0a3_Untitled2.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-14 17:50:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8985e9e94144b1fd71aa39a7df8f1857ef43cdfc56eb1974c97181b55345a895</td>
|
|
<td>[68a4631d55f0b006fedad271]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\u05q5u1z.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:16Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>u05q5u1z.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\u05q5u1z\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:42:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89c5baa3f3a41900e2d66d77c1e63a9dab11d2d6d5e556a169b8fa2097b8441b</td>
|
|
<td>[68a4ccc785b914a60d739e47, 68a4ce1fc826337212f53be7, 68a4d07753a851daf11e6931, 68a4d07753a851daf11e6944, 68a4d07753a851daf11e6951, 68a4d2d1ff2b441b84428129, 68a4d2d1ff2b441b8442813c, 68a4d2d1ff2b441b84428149]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\Cwd.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[06bfbbd1e8fc346fa3358461f084d535]</td>
|
|
<td>[b979274e71278d1689608fbe3b5c639a3c334a55]</td>
|
|
<td>[39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737]</td>
|
|
<td>[d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cwd.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\Cwd\</td>
|
|
<td></td>
|
|
<td>15360</td>
|
|
<td>06bfbbd1e8fc346fa3358461f084d535</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:01 +0000 UTC</td>
|
|
<td>b979274e71278d1689608fbe3b5c639a3c334a55</td>
|
|
<td>39b484f7971e3b30bdfe8c8ad18ead02afd905bf6934f1df6a36adf37e1be122a57b58399cd5892b6ad5b6471ae55737</td>
|
|
<td>d63386651c7e91e981f97b238b774dd069e6fa12d7710bd227e64f72779b28d93f84901d0bd2e7ecf18f8a6da58699d4c118fe1e32afda57312e6e487177d0c1</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>89ed47dd7a86c0556557c69fc7d6b6fc94c05116f55431bc6cb4e3731df5c1b0</td>
|
|
<td>[68a26fdfc0e2189e95b436e5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gqwsgxba.yiw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:12:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gqwsgxba.yiw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:12:05 +0000 UTC</td>
|
|
<td>2025-08-18 00:12:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:12:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f37ca61813533be820b0c6f27c1a9de68bbf3da928e6d7f2d4eeba4c98e7e33</td>
|
|
<td>[68a4a6605961c54c81f645c9]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\PC Info.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:16Z]</td>
|
|
<td>[0f76b414d248a467589b20404835e659]</td>
|
|
<td>[79a088b56468ea7d8b28e19e914063eaa948d267]</td>
|
|
<td>[1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304]</td>
|
|
<td>[9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PC Info.ps1</td>
|
|
<td>\\whl07304\c$\Users\be10045\OneDrive - WVUM and HSC\Powershell\General\</td>
|
|
<td></td>
|
|
<td>2058</td>
|
|
<td>0f76b414d248a467589b20404835e659</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-22 13:59:56 +0000 UTC</td>
|
|
<td>2025-07-17 18:17:19 +0000 UTC</td>
|
|
<td>79a088b56468ea7d8b28e19e914063eaa948d267</td>
|
|
<td>1e51f08429022cd9e5028ccdcf069747fef396aac9c2461e7f1f39940036e54978a70e183a3261c2cbee582b363c7304</td>
|
|
<td>9927bfc84db61765cdb3c5d804735bff8c22e8424d8c9d20a5498896148396bfeb5ca5d8f2d1cb08db726243a49b633591ee2771e7c3e35bd18d232cdf75fc09</td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f8b7214d2120fb1d73129fba6d1bd628b2ca29df4907461730b5e0a7edab93f</td>
|
|
<td>[68a4ccc785b914a60d739e4b, 68a4ce1fc826337212f53bea, 68a4d07753a851daf11e6934, 68a4d07753a851daf11e6947, 68a4d2d1ff2b441b8442812c, 68a4d2d1ff2b441b8442813f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\setsite.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z]</td>
|
|
<td>[36475116d7add7e74ac00af1dd9878d5]</td>
|
|
<td>[240dc97909a4dd7ecd8f512611ca18c25fead0b3]</td>
|
|
<td>[a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe]</td>
|
|
<td>[85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite.cmd</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\sbin\</td>
|
|
<td></td>
|
|
<td>892</td>
|
|
<td>36475116d7add7e74ac00af1dd9878d5</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:06 +0000 UTC</td>
|
|
<td>2016-12-02 07:17:44 +0000 UTC</td>
|
|
<td>240dc97909a4dd7ecd8f512611ca18c25fead0b3</td>
|
|
<td>a6944cf94c63e52fa5025e50fc1b834d7e09fe4aaf64ed87f7f82c40ad762a8010c8cffe0f8963a323e7a6ba7ecbc0fe</td>
|
|
<td>85e5b44debcb9a562007822a3693de83704eb40aa92bd43d5e453e6920e58dd87ca15e230a7e15e9a6e1b8947239d9830b9353f15b72507410134b44a97834c3</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8aa7a83d12cd1daa9a802e686463263e91cb813627557b01861a89e27fde4b09</td>
|
|
<td>[68a2532c678a2fdf8182be04]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\archivescript\archive.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T22:00:01Z]</td>
|
|
<td>[ddf4199c681ada910f8e2a61d9af3fe8]</td>
|
|
<td>[e2e6b93f0619b5ab8141ee4886f87eca40482d09]</td>
|
|
<td>[5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a]</td>
|
|
<td>[3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>archive.ps1</td>
|
|
<td>D:\archivescript\</td>
|
|
<td></td>
|
|
<td>5996</td>
|
|
<td>ddf4199c681ada910f8e2a61d9af3fe8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-16 18:21:57 +0000 UTC</td>
|
|
<td>2015-04-22 19:31:33 +0000 UTC</td>
|
|
<td>e2e6b93f0619b5ab8141ee4886f87eca40482d09</td>
|
|
<td>5d25749ab5ce1c58865656eae50f5946e7b2e2b2a7bda9d9f417726178633f647b7a128e482b2cdde30887ddedd9b06a</td>
|
|
<td>3f554970297d64d55a55e4bcfb45aabcecddab4f54cfcaf19d9a6b2be208d82b461d3362d690bcd76f59c261bd1d2e86c9bcd04af589f8a8b90e0e3722fa1e31</td>
|
|
<td>2025-08-08 22:00:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b238948f852008a05ed3de256fe08c00bd98db5643b0edd083017ec744424d1</td>
|
|
<td>[68a2b38b161afab772184bd5]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\tmp_2kca3ybv.gtw.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T05:00:54Z]</td>
|
|
<td>[ae19d72b75e92e2a670f857ba9860ce3]</td>
|
|
<td>[e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a]</td>
|
|
<td>[e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377]</td>
|
|
<td>[2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_2kca3ybv.gtw.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_2kca3ybv.gtw\</td>
|
|
<td></td>
|
|
<td>4669570</td>
|
|
<td>ae19d72b75e92e2a670f857ba9860ce3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 05:00:54 +0000 UTC</td>
|
|
<td>2025-08-18 05:00:54 +0000 UTC</td>
|
|
<td>e9c0e03f0d38037a7a7bced808ea6cce6fc60f7a</td>
|
|
<td>e86692223c17bd66ab08e75a036900d84db0e3cf7e36bc04b410bae579c446d757765b4394455bfffa7a2cd5ba526377</td>
|
|
<td>2973106f644d13125bcff2afde1d72f705b9ca6f732f6281e7a33397723fd5f064d1f1571d3b4aac44a01445cc25496f34f618e820d14972aa7a38e0965ea715</td>
|
|
<td>2025-08-18 05:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b2bded6ab6979a63c277f41c62e15937dc5403fc74f17f14fa371316759700c</td>
|
|
<td>[68a166b2de4e1d2a0ca2c54c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_buqznmts.ghk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:20:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_buqznmts.ghk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:20:40 +0000 UTC</td>
|
|
<td>2025-08-17 05:20:40 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:20:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b2c4068b2411da1c364ab97163a8b222ba8452c911c51c6799afb17c5b66d6a</td>
|
|
<td>[68a46fd7a5344f430966555f, 68a4728c1dfbce27769ea0bf]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>["C:\software\Storage Manager Data Collector 20.1.2.14.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-19T12:36:02Z, 2025-08-19T12:39:10Z]</td>
|
|
<td>[61a2de8ddb935edca1d78ad7774a2c7b]</td>
|
|
<td>[6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e]</td>
|
|
<td>[97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9]</td>
|
|
<td>[6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Storage Manager Data Collector 20.1.2.14.exe</td>
|
|
<td>C:\software\</td>
|
|
<td>Dell SupportAssist Services</td>
|
|
<td>2042852084</td>
|
|
<td>61a2de8ddb935edca1d78ad7774a2c7b</td>
|
|
<td>Dell Storage Manager Data Collector</td>
|
|
<td>20.1.2.14</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:31:10 +0000 UTC</td>
|
|
<td>2022-08-17 14:32:05 +0000 UTC</td>
|
|
<td>6ce6e10fb7f81b8cfcc07ab3ad7d10ba83a4627e</td>
|
|
<td>97f4f213a4ae81e1b8a276a95ab633a5574fa3284580a8f4a0bd2dd6389b8c50001ee5a4687317a59c9d4fba9683ecd9</td>
|
|
<td>6f1b8a19cbbd62d7242f5430e5c54fa3aa9b5b22c546b00ac3fb5e5eabcdc8bdfbb0d14982951a15c8c4a84e43508f6ba6b52b29ce3a5f0a13e106cf51c2481b</td>
|
|
<td>2025-08-19 12:36:39 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8b6279297001a9f437b91303e1df24a03523664479215afb83a74924917f22c5</td>
|
|
<td>[68a31fe2fad6bdf6009b0cd2]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_c71b4a91-9975-432b-9a6b-e242e798b486_Untitled3.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:43:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c1ae98ab13bcbc9125b8c981a49c1d6d8b99ad4762922177b96e68c27654c08</td>
|
|
<td>[68a27b48e4b19da253904f3e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\tmpEXO_wjcpfw15.dhs.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T01:00:50Z]</td>
|
|
<td>[f85e53c7484a4249bc2823f1a02afcdb]</td>
|
|
<td>[7f875190fcfa319ef524f04ca2b59d97c4d659d7]</td>
|
|
<td>[fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf]</td>
|
|
<td>[fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_wjcpfw15.dhs.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_wjcpfw15.dhs\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>f85e53c7484a4249bc2823f1a02afcdb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 01:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 01:00:48 +0000 UTC</td>
|
|
<td>7f875190fcfa319ef524f04ca2b59d97c4d659d7</td>
|
|
<td>fbbc2cbd2bd2f2e5d29e5c929886fd731f28f9103a6362f02a0a30ed09c25a8d4632076fb50fd7883af3dde85959d3cf</td>
|
|
<td>fd9df52ecb5dce5b6d11ca69f8efe85d17e6430230b03834a91a7fa68f88dc62d5c2274841a08448f813bf0fed59f7562bf4b5e36ec717b3b36d553c40834600</td>
|
|
<td>2025-08-18 01:00:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c1db5e7aa9c9ad5d76b4f1f7d522b7b17092332d4995fc2392518f78174d13e</td>
|
|
<td>[68a523949cec397f02de9f5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Interfaces.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[973212aa3cb7ab0a2a17074bc5ba69d9]</td>
|
|
<td>[6d85906a470dd27d48a2db0c4c948479b85be40b]</td>
|
|
<td>[6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc]</td>
|
|
<td>[cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Interfaces.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>4608</td>
|
|
<td>973212aa3cb7ab0a2a17074bc5ba69d9</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>6d85906a470dd27d48a2db0c4c948479b85be40b</td>
|
|
<td>6a2d05357e333aa74669242538cf394978f7559aaa1431982e3d9e870987b23292b73a223597ff4cea631bc18f108efc</td>
|
|
<td>cd58c9e53a201df1df162c36052b22fea7e7ab7c0c46de449fa6b3a1c2dec18ab2ae828e722276d4a78c186ee539981e43189513b8c8d1853f8a30d241e0e98e</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c679263a27fbd607ce7190c8ea323b7ae362030e79a1ebba95720cdcdaa6e55</td>
|
|
<td>[68a289dc0e6a21d30c5fa31d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NKRONOSWEB2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\stop.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\cmd.exe]</td>
|
|
<td>[C:\Kronos\openfire\ns\bin\openfireService.exe]</td>
|
|
<td>[2025-08-18T02:00:00Z]</td>
|
|
<td>[6531a0177f81fedbb09ed25c3416e3d7]</td>
|
|
<td>[01743b37aa19e8ceae417626bf209d4c7a5c06f9]</td>
|
|
<td>[39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e]</td>
|
|
<td>[dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615]</td>
|
|
<td>[172.25.16.7]</td>
|
|
<td>[172.25.16.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>stop.bat</td>
|
|
<td>E:\kronos\openfire\ns\bin\</td>
|
|
<td></td>
|
|
<td>932</td>
|
|
<td>6531a0177f81fedbb09ed25c3416e3d7</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-18 22:31:05 +0000 UTC</td>
|
|
<td>2021-07-02 12:32:35 +0000 UTC</td>
|
|
<td>01743b37aa19e8ceae417626bf209d4c7a5c06f9</td>
|
|
<td>39b302e7c5811bb9de40213a6718b0906d31ef43b1ff539784c8828676cd37e9e62bcd1cbb4f9f4a6cfcaf304f5be00e</td>
|
|
<td>dfb2a3d16f4fec041446a65e4d634d3cb0e80ad30ae0404fd29387ce5b80ded7a341d3d03128b33205670fc2fc88fa0fd16ce1e934f8802057c09d58494db615</td>
|
|
<td>2025-07-22 23:34:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c720b6172950507ce095cf5a651cf3cb8e8a2aa959c0144c3f29c540aaef910</td>
|
|
<td>[68a3146b5f0c41860c8c8512, 68a3146b5f0c41860c8c8565]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_policybase.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[eebd4f03df5dd13bbf7b36b967e78312]</td>
|
|
<td>[65ddc336de7d067cd0a6459879a7c9554ba794dd]</td>
|
|
<td>[2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2]</td>
|
|
<td>[0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_policybase.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>17969</td>
|
|
<td>eebd4f03df5dd13bbf7b36b967e78312</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>65ddc336de7d067cd0a6459879a7c9554ba794dd</td>
|
|
<td>2435494f366e350289bcb8fc27607372536af87bd7af13366ac3f2aa539a8591b7446574dbc8d3009679d3d20d46a8e2</td>
|
|
<td>0ff39c02d6703a552143647c20c2c195f72a8b0ce14b688b9dc5f9d5fef70581a290cd4ad7e776231b7acc4dade232416f5184426d36b94d2fdf6d0904125d1f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8c9c462d5ce63854cb4ab58308f8210a5e659263270c98b847c1d02ba9284d33</td>
|
|
<td>[68a1a4c40fc81084514a3a33]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-devsqltest1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ehq3f2rs.q1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ehq3f2rs.q1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:34 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:45:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8cb7e004d91df55955d29932d6578e0c045c059763678afd3bedd01b7239c9ff</td>
|
|
<td>[68a4ccc785b914a60d739e51, 68a4ce1fc826337212f53bee, 68a4d07753a851daf11e6939, 68a4d07753a851daf11e694f, 68a4d2d1ff2b441b84428131, 68a4d2d1ff2b441b84428147]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\Util.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[63f02e1f06bcce8dfbafcf35d21a4fdf]</td>
|
|
<td>[81c04431647158995a1e96a1d4cb422363e86f2d]</td>
|
|
<td>[8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00]</td>
|
|
<td>[fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Util.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\List\Util\</td>
|
|
<td></td>
|
|
<td>38400</td>
|
|
<td>63f02e1f06bcce8dfbafcf35d21a4fdf</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:35 +0000 UTC</td>
|
|
<td>81c04431647158995a1e96a1d4cb422363e86f2d</td>
|
|
<td>8dd2275758f3f60dd6dbc4774ad9814f2a1db6dc4f64131df721a7355635cd3ce4df64aa376d8f459fc2987bc19bad00</td>
|
|
<td>fbdbd39e2933db5635ad7e3c6713855c82e0efbb14ccb879326f2968a2be97be3873ba2bc88ca7d87d71aa5ad6b70465af111856903ac55768a9787c44b6fcb8</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ccb8e7fc8941394c60374d45ba4a1539b1bd3b1d798142e8705eb4dcd391265</td>
|
|
<td>[68a22721aa3b1f3dd3941512]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\tmp_4dvp2nbj.c5a.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T19:01:51Z]</td>
|
|
<td>[9c8e384aff95c5d7fe6b82325ac590ee]</td>
|
|
<td>[a8d27f4a6211fb079c6f04717fe31e0fac54fc3c]</td>
|
|
<td>[82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b]</td>
|
|
<td>[e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_4dvp2nbj.c5a.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_4dvp2nbj.c5a\</td>
|
|
<td></td>
|
|
<td>4669542</td>
|
|
<td>9c8e384aff95c5d7fe6b82325ac590ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:01:49 +0000 UTC</td>
|
|
<td>2025-08-17 19:01:49 +0000 UTC</td>
|
|
<td>a8d27f4a6211fb079c6f04717fe31e0fac54fc3c</td>
|
|
<td>82fdf94923d41d00ab0f4c9d578c14fa3f13c13665f0f4dfea6eddd12e3b35ec3d79edf3ec0c26d22fe39af53fbb289b</td>
|
|
<td>e27578898b7d34ca9e51a83c69ce715e4d87d8ff8566171dd7ff85dd6cd336584a830196d05300d90b10d9b85b08843c771d076cb54088609c231d63da76f007</td>
|
|
<td>2025-08-17 19:01:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>930b1b9c71a3c5e16852cb23eaa4b624d9cfd50f4730ace88b34f3a2e0cc80f4</td>
|
|
<td>[68a38868065f0a2246a5fd5e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_dxct1uzy.sdn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2269.866]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T20:09:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_dxct1uzy.sdn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 20:09:06 +0000 UTC</td>
|
|
<td>2025-08-18 20:09:06 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 20:09:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>934ef5c14e218db7b86847cb7e8e5a2b985ccfa55c27805c72d8c3fb5103cfb4</td>
|
|
<td>[68a2369b3b43e7f02650554c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nz35alhg.5g5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:07:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nz35alhg.5g5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:07:42 +0000 UTC</td>
|
|
<td>2025-08-17 20:07:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:07:55 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>94e7408b722334f3631567ac6d326877568d1d35e377a0e1a2d601cbcca0ad6c</td>
|
|
<td>[68a3146b5f0c41860c8c84ec, 68a3146b5f0c41860c8c854d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\queue.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[20c4f8397302a02b31f63b5ee9bd03a3]</td>
|
|
<td>[76fd6d3949fd58da5a7e6f95a5938dccb396c415]</td>
|
|
<td>[635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506]</td>
|
|
<td>[9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>queue.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17359</td>
|
|
<td>20c4f8397302a02b31f63b5ee9bd03a3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>76fd6d3949fd58da5a7e6f95a5938dccb396c415</td>
|
|
<td>635fc33abeb6f51fe800f0c3d660cee4f4f1a4df56d0350f6738f9ce262cf859871aeb3af0c3d22ce16ceb9b55b48506</td>
|
|
<td>9d7bf8a15cb2b48eddebfffdf3cad818327727ff6c592245e72cd91bcfd217ce70dc7e594543505c3a2adb23abde3a2a46805a2377438efd09d438f038a48bc3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>95110c1a469b7d9b3827ddb372ed092836c8321395b9c25ba549b5dda9fbbed3</td>
|
|
<td>[68a34b98a6132bf659cce5ad, 68a34df0b71eea1289980a12]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:12Z, 2025-08-18T15:58:04Z]</td>
|
|
<td>[408f1dc91e0b03f6f257c34bdbc09d01]</td>
|
|
<td>[d5a3758015b9885cb698065828a86628665aa3ad]</td>
|
|
<td>[039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f]</td>
|
|
<td>[9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Common.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Common Library</td>
|
|
<td>564736</td>
|
|
<td>408f1dc91e0b03f6f257c34bdbc09d01</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:40 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:40 +0000 UTC</td>
|
|
<td>d5a3758015b9885cb698065828a86628665aa3ad</td>
|
|
<td>039cebdb3b608a9e45f839a64dd19ca6890e9e1e13a9deb9ab37c0e8e296c53332def5f12e99848c37a87332b56ae29f</td>
|
|
<td>9e759f2d73dff938de80844927294e85885cc861fd18513b622b428c054427c2618b7b004e7d188b7924db640e5c842019213ec293522dce845ca5e24e36d11d</td>
|
|
<td>2025-05-13 05:13:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8d423d38d1d19e45323c114230bc1dbb9cf712c19a3b91b1d4cc7f034e4212de</td>
|
|
<td>[68a230dc4f444eddb4af5547]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_w3bfksit.znv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:43:21Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w3bfksit.znv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:43:21 +0000 UTC</td>
|
|
<td>2025-08-17 19:43:21 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:43:24 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8d6314b0b132e4f90c614e0da514145f33cd612c61de6625846d0e3a851a8526</td>
|
|
<td>[68a1948400572dc6e953eac7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[nt-compass5]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_v0hjxpqk.y0v.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:36:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_v0hjxpqk.y0v.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:36:09 +0000 UTC</td>
|
|
<td>2025-08-17 08:36:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:36:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8dcc9eb968c2c9db5ba7f8ceed8ba69324b28b276c40c0df325ac6a22b5314f5</td>
|
|
<td>[68a523949cec397f02de9f51]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DataModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[87329721b4c0dfe9032c6801df4da2dd]</td>
|
|
<td>[2b3ebb3cbb2c964cb1dd4c6a953115785530cca2]</td>
|
|
<td>[4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23]</td>
|
|
<td>[c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DataModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>DataModel</td>
|
|
<td>28672</td>
|
|
<td>87329721b4c0dfe9032c6801df4da2dd</td>
|
|
<td>DataModel</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:10 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:10 +0000 UTC</td>
|
|
<td>2b3ebb3cbb2c964cb1dd4c6a953115785530cca2</td>
|
|
<td>4be2ddac261d4fe2f75afa275ce75d3ad8a6205c201020f40fa58263141e3b08d11cbab3cfa3fc9c79ab113edccd1a23</td>
|
|
<td>c19912cfafa55ae8a4d0ac941ea82717208123f44479679c873c029baf4ce947594c4ca8c4652a58d1b359c09ea92a0be1f13fe2bde320a5680f7a5046a5d15f</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ec0f3a5ed337c7cef9440f6ab170b140a44a3671f9c409ada11974538bdc872</td>
|
|
<td>[68a4ccc785b914a60d739e56, 68a4ce1fc826337212f53bf3, 68a4d07753a851daf11e693e, 68a4d07753a851daf11e6955, 68a4d2d1ff2b441b84428136, 68a4d2d1ff2b441b8442814d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\arybase.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[99b820a26387f39d63e59b64748df4ec]</td>
|
|
<td>[bd55986771d861f6ab5bcac33eec5c539e7164db]</td>
|
|
<td>[17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f]</td>
|
|
<td>[8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>arybase.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\arybase\</td>
|
|
<td></td>
|
|
<td>17408</td>
|
|
<td>99b820a26387f39d63e59b64748df4ec</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:57 +0000 UTC</td>
|
|
<td>bd55986771d861f6ab5bcac33eec5c539e7164db</td>
|
|
<td>17c093bdc05b933fbfebb001f942b8fa9d220ec4706920903ca7a04bf6aa7397e9d11af37283fc276d21273c96bc2c1f</td>
|
|
<td>8730007b89831349a6a8833cd83fd55d350cfa2a666b1572cf8d05c6b6bf3fdb23e5b1ced6f5185c8008685fa91ac154115c090fd4947bee8fbdadb00e0d2ffa</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8ed706d5ea69cb373505d2daa3f582641f725f565983408eb2c8dbacc6d06c1a</td>
|
|
<td>[68a1de82fe6f5faa447d1ddd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qm1pal05.wis.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:51:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qm1pal05.wis.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:51:56 +0000 UTC</td>
|
|
<td>2025-08-17 13:51:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:52:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>8f0151b909447385ff1d147edb39dbcf485b0950c3a987002149e05f7297575c</td>
|
|
<td>[68a523949cec397f02de9f52]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticsControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:28Z]</td>
|
|
<td>[0c03cf54e4169918390fc3695ced37ad]</td>
|
|
<td>[015ca7f33d308f2e835115ae9aaf496acc3f6869]</td>
|
|
<td>[0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2]</td>
|
|
<td>[49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticsControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Control</td>
|
|
<td>5632</td>
|
|
<td>0c03cf54e4169918390fc3695ced37ad</td>
|
|
<td>Control</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:08 +0000 UTC</td>
|
|
<td>015ca7f33d308f2e835115ae9aaf496acc3f6869</td>
|
|
<td>0dea888a5f485db4a9c778a6ac8282bf6e2060f9ff743d97d6a02bc27008aae469fbf1a9d7235185e5e2f9212fab91c2</td>
|
|
<td>49527e2ffb3ae65db2e1d0729f037a359397dadf96ca0a8b948db921bf768eb84ee2c454a8245f77f55448b8edd5e40ac402348d875c8e48cecf718c10959459</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>989ec9cc45afa5d70a781bf3c041eef2cf9b3a15b63b30448e8086f98d1efafb</td>
|
|
<td>[68a4709fa6c6568ae291d430]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\ISSetup.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:39:56Z]</td>
|
|
<td>[8656d6fdd16ca1d6e9155383064f43db]</td>
|
|
<td>[1b21d73c29fc305a870b33b76d3aa997e45adc4a]</td>
|
|
<td>[3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd]</td>
|
|
<td>[3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ISSetup.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{D58CD8B5-43DE-402D-942B-1F3968F740F2}\</td>
|
|
<td>InstallShield (R) Setup Engine</td>
|
|
<td>3583048</td>
|
|
<td>8656d6fdd16ca1d6e9155383064f43db</td>
|
|
<td>InstallShield</td>
|
|
<td>22.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:39:56 +0000 UTC</td>
|
|
<td>2025-08-19 12:39:56 +0000 UTC</td>
|
|
<td>1b21d73c29fc305a870b33b76d3aa997e45adc4a</td>
|
|
<td>3c8d1ffcce582773bf93108c0b3493d5829c1773c956a3a65e0c47f978510a252df201309fd73ed775f711c639c6fbbd</td>
|
|
<td>3e7907ec7ba722ed1414231d625e2376c112498998e2519b6edc8a35b6d7a46da629342ec6ff022b394221cf7e6a36ce9b503d64c6a1601817fe2f819340206d</td>
|
|
<td>2025-08-19 12:39:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98c5823148a8173192ad3c72d9f4ea39c6c9f246fdbbaa0951d52c0c5f8e77b8</td>
|
|
<td>[68a5239e621d09b2b1ed5e56]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\RecordingsGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:37Z]</td>
|
|
<td>[8a5f1e57ae11d28423d76cb656a26c7d]</td>
|
|
<td>[442bc003f5180cc49734aa713f71766826622f60]</td>
|
|
<td>[7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e]</td>
|
|
<td>[f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RecordingsGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>RecordingsGUI</td>
|
|
<td>51200</td>
|
|
<td>8a5f1e57ae11d28423d76cb656a26c7d</td>
|
|
<td>RecordingsGUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:54 +0000 UTC</td>
|
|
<td>442bc003f5180cc49734aa713f71766826622f60</td>
|
|
<td>7e3606338f0c06ca7de01ac6282e44c357e9dba5ee4451375f16d65b27469adb1b5b880a0ed4cd4617fba53c7e12b76e</td>
|
|
<td>f1f77ec4d7f9f2383a411a8f6edfdc412148e24b380a1f91e37596081ab9405eb9068108830be48c533cf13b4fe7aa194b674c7acdac66b54693e6606206981c</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98c7fa6109742b02106c96b2b99c72c0fefafae342651a8872b0796d11288b15</td>
|
|
<td>[68a46327817fe25f39e81a94]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\tmp_4a4ji0dj.v0h.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T11:42:27Z]</td>
|
|
<td>[a8a00094ca4d0ea2312187e43d5354ee]</td>
|
|
<td>[6567ea2e3352de1259d836237c57870a171d2ef4]</td>
|
|
<td>[d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c]</td>
|
|
<td>[fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_4a4ji0dj.v0h.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_4a4ji0dj.v0h\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>a8a00094ca4d0ea2312187e43d5354ee</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:42:27 +0000 UTC</td>
|
|
<td>2025-08-19 11:42:27 +0000 UTC</td>
|
|
<td>6567ea2e3352de1259d836237c57870a171d2ef4</td>
|
|
<td>d85ddd838324c641f8043bbf2eaa63c4393ab47dd5613b4f2e3f16e874d7f9e125d8f8dbc50380aa75f672f1345f1f4c</td>
|
|
<td>fe0c450c821e88c7cf0256dcb239420695de71fc125cb5f321b63986742e2a3a28b45c1dc8719e3536376d2a64a820b274db4a99f1423329112ee746ecf63ca7</td>
|
|
<td>2025-08-19 11:42:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98ca15715d87f7d35a7756ea9bcfdbe3767ed4163fb017d675587792a3152fea</td>
|
|
<td>[68a4cf29dfc75d42acc2fee6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98df3078f3f8bc3b2cd2b8ee77cb6c1b2ed806a39bbacb1384ae9efc24d9189f</td>
|
|
<td>[68a3146b5f0c41860c8c84e9, 68a3146b5f0c41860c8c851d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\cp1252.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[fa5b299bcf803667db7c4c48d05a08df]</td>
|
|
<td>[e854bca592b85a87408e883fb8ec1bbddee34662]</td>
|
|
<td>[bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481]</td>
|
|
<td>[4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>cp1252.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>3299</td>
|
|
<td>fa5b299bcf803667db7c4c48d05a08df</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>e854bca592b85a87408e883fb8ec1bbddee34662</td>
|
|
<td>bf360925cc585f9032994c4dc2830f7d8978d2efd32be3218216d68bf046b713fa6d00a8ff8da37055945d90e8f9c481</td>
|
|
<td>4c63c9a9db25344fc8e6b73004f573cb79bdc698aa0dae579f13df703d65fe9f65058d2c1688b9fa02bd2ffcc125fad7b8bbd97c48c579e444939e22800f885f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90812f7b5c7f20d66571d9443f189b21105bcb1623cc4f53e465e092c616b667</td>
|
|
<td>[68a18597b6a5f761a88cfa32, 68a2d8ecf31eeab05c2823c5, 68a428c2b79a1ebc024dfc24, 68a57a5ae65234fd31d524a1]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[UVOSCCN2]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:30:25Z, 2025-08-18T07:30:24Z, 2025-08-19T07:30:24Z, 2025-08-20T07:30:25Z]</td>
|
|
<td>[c799558e2a940cce61ff908c235a04ef]</td>
|
|
<td>[e991cadd79ff635a53623530e85eeb7b958ee0cc]</td>
|
|
<td>[7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e]</td>
|
|
<td>[46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2975</td>
|
|
<td>c799558e2a940cce61ff908c235a04ef</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:28:02 +0000 UTC</td>
|
|
<td>2022-05-08 10:28:59 +0000 UTC</td>
|
|
<td>e991cadd79ff635a53623530e85eeb7b958ee0cc</td>
|
|
<td>7a3e3d69c43fe22b6b24ad7d599cd37d078ddaafc3df8e76c8e1ee23d47cf9d15486327af14a3371e26b3347ebe0eb2e</td>
|
|
<td>46c40b4ea5560e939bd06eb1eb777cca53fc81edca02cec765bca85a7fe866e29955942403d67f2d94693775a6a9793ad6d65514559490dc14dbf91120789228</td>
|
|
<td>2025-08-09 07:30:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>90d4051cf517ac7bbe8c79ad0c4ec7f4649ce5ab42959aad199aa9cd94b1b87b</td>
|
|
<td>[68a34b98a6132bf659cce5c2, 68a34df0b71eea1289980a27]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Medeco.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:20Z, 2025-08-18T15:58:10Z]</td>
|
|
<td>[732c49ecabd8c6c5a5c7681a37b0fc1b]</td>
|
|
<td>[cc60b5a4ed985f4a278f5a9d213069668e158fb6]</td>
|
|
<td>[428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1]</td>
|
|
<td>[35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Medeco.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Medeco Integration</td>
|
|
<td>163328</td>
|
|
<td>732c49ecabd8c6c5a5c7681a37b0fc1b</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:34 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:34 +0000 UTC</td>
|
|
<td>cc60b5a4ed985f4a278f5a9d213069668e158fb6</td>
|
|
<td>428851e0de000d818b42f8e9f0ada909309148c91ed636a2777d0203657cfe34bf74d76040ebf90f55ad3879775c9ea1</td>
|
|
<td>35398925553e4b1a780506c1d7a0a303f22e4b47e49f3550c358456eb27393917c607c002f2e75c2a1c5f6fde85aeb5aad82eb7b6293a199a8f125a86c357cef</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>91120b1794849724fc9ad653ec6607ac3f1c69a20e5b813ed9691b465f3deb06</td>
|
|
<td>[68a1de00310078f5309be0d1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0qhxxeok.d1t.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:49:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0qhxxeok.d1t.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:49:44 +0000 UTC</td>
|
|
<td>2025-08-17 13:49:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:49:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9112c932f1ebb8bb91402140bcb506afc616bc2f94c27daebed1975ab396c6ea</td>
|
|
<td>[68a5d0d993ef7c7d1206147e]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_rojnfgz1.5of.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2291.881]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T13:42:41Z]</td>
|
|
<td>[82750d3658af09bec0468e8d3ce2aeb1]</td>
|
|
<td>[85d51df1579e58a1cb11665ee95e4858850d8401]</td>
|
|
<td>[b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e]</td>
|
|
<td>[9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rojnfgz1.5of.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>82750d3658af09bec0468e8d3ce2aeb1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:42:41 +0000 UTC</td>
|
|
<td>2025-08-20 13:42:41 +0000 UTC</td>
|
|
<td>85d51df1579e58a1cb11665ee95e4858850d8401</td>
|
|
<td>b10d97f0d4202b4c9cae5181b376ff08f1152f8596ca3b2519d573acdb6a55664bdd25cec85a725c386bf3db0b2a8b8e</td>
|
|
<td>9b99a475326d6ce70ddf5816795d8e032f3af723bd35ca380b8eb6c7ed1f1c18d70f34c1b0c0be4cf45a53e800811f19758894c73dd09cc66091bfa3a6c58e23</td>
|
|
<td>2025-08-20 13:42:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>917ab3848c77e9593866c25b4b135e29b394f91214d295074a9dcbb07592d16b</td>
|
|
<td>[68a524b7d65490728dc99895]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wsefqq2c.g5h.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T01:28:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wsefqq2c.g5h.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 01:28:13 +0000 UTC</td>
|
|
<td>2025-08-20 01:28:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 01:28:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>918cae3b9be1ee964521f29f95df80ca661f04fbfd790717c2bf044354d93d05</td>
|
|
<td>[68a19bf9f9fa0cbc93a3e18c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xkmgggns.rsj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:08:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xkmgggns.rsj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:08:04 +0000 UTC</td>
|
|
<td>2025-08-17 09:08:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:08:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>91ff3783187c447417b1e043d6548c6afd0bb6d23f08d61fd02459bae9712a45</td>
|
|
<td>[68a32e4676197e42f5a2fbd5, 68a45c02fdc422fb7bc1af75]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vCUACPub]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\AACM.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852, v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:38:25Z, 2025-08-19T11:02:01Z]</td>
|
|
<td>[65acd3aadd460333cdf00b7aa3496083]</td>
|
|
<td>[409f060afc9596b65a39165598013d9f3c666d1c]</td>
|
|
<td>[2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0]</td>
|
|
<td>[b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6]</td>
|
|
<td>[172.17.196.36]</td>
|
|
<td>[172.17.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AACM.dll</td>
|
|
<td>C:\Program Files (x86)\Cisco\Attendant Admin\DLLs\</td>
|
|
<td>Cisco Unified Attendant Console</td>
|
|
<td>6745088</td>
|
|
<td>65acd3aadd460333cdf00b7aa3496083</td>
|
|
<td>Cisco Unified Attendant Console Advanced</td>
|
|
<td>WEB 12.0.5.1823</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-19 18:20:02 +0000 UTC</td>
|
|
<td>2019-07-19 18:20:02 +0000 UTC</td>
|
|
<td>409f060afc9596b65a39165598013d9f3c666d1c</td>
|
|
<td>2bfd6dd8c9327d2d97029317757e8399a7679c872d2d5b8a7a922577c55b82e0b760b3cccb5a2af2d11b8660c85761b0</td>
|
|
<td>b8650ed6b4eac059d38a7d51833f2aea3cf0c47a64b1138746ea4e6138a70a123799e7eb67cfc4c9d0ac9a765bcc0e0b82e9fcf3b8c1cf1828036db9b16250d6</td>
|
|
<td>2025-05-15 16:47:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>923528caae4b397941a4cc7d31559130c34e624b777748c1711b22c6b1075878</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21a]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AD_Direct_reports.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[09cd0b51ba652e8b8f7a8f4156940364]</td>
|
|
<td>[6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57]</td>
|
|
<td>[a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b]</td>
|
|
<td>[62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AD_Direct_reports.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3119</td>
|
|
<td>09cd0b51ba652e8b8f7a8f4156940364</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-08-21 12:44:06 +0000 UTC</td>
|
|
<td>2025-06-13 14:43:10 +0000 UTC</td>
|
|
<td>6a6bb1eed7f92337d40e4033e6cfec94c4e1ea57</td>
|
|
<td>a13bcf453f009482ec1020fa4432ee23b5e44c3141f0e5fc2c5663e86c20790972ce077a79d802d679138976b6cfd29b</td>
|
|
<td>62b0a94ca929a9260a7d806412a6743800299a6eb5f879d390c0a58e81e022fccaaabc6c94f95e66e6c91025b0c76573ec720e771612c1d1b46c5fc165b49515</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>93012784c597277ba019572d4a60fc2b45f437fe68c39635b35ffdfb87b1bb13</td>
|
|
<td>[68a5cc2091727380a40e2b0d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\233afcee-6ced-4993-9401-b562fb70f217.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:31Z]</td>
|
|
<td>[b88f41bbc1e02900c47403eea28a10ea]</td>
|
|
<td>[9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552]</td>
|
|
<td>[c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334]</td>
|
|
<td>[904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>233afcee-6ced-4993-9401-b562fb70f217.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>790</td>
|
|
<td>b88f41bbc1e02900c47403eea28a10ea</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:30 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:30 +0000 UTC</td>
|
|
<td>9e7041e34c2322a8d96bea5d4bcf3dc7ac33f552</td>
|
|
<td>c2d229872cfef2ab2a0a0e677c8823f83ff053d8a3657c6ee8242ae8559cc8e00a6896930b07e6e9f4e47e8ee4341334</td>
|
|
<td>904ef50a624846b4869d564d0d7f57a1c7f0caaf10570e8b04be26b30163d2be4ea058c957c773c7da0e3123d776cba59e2eed39f9fd813792fc171dc47e410e</td>
|
|
<td>2025-08-20 13:22:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b4a8557217fe93c3a274d301e45c3f93caeb36f89b720a5f42ac34f7d27cd88</td>
|
|
<td>[68a472b1b022648922e235ae]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\xercesImpl-2.9.1.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\Java\bin\javaw.exe]</td>
|
|
<td>[C:\Program Files (x86)\Dell\Enterprise Manager\msagui\EnterpriseClient.exe]</td>
|
|
<td>[2025-08-19T12:48:45Z]</td>
|
|
<td>[da09b75b562ca9a8e9a535d2148be8e4]</td>
|
|
<td>[1136d197e2755bbde296ceee217ec5fe2917477b]</td>
|
|
<td>[3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a]</td>
|
|
<td>[37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>xercesImpl-2.9.1.jar</td>
|
|
<td>C:\Program Files (x86)\Dell\Enterprise Manager\msagui\lib\</td>
|
|
<td></td>
|
|
<td>1229289</td>
|
|
<td>da09b75b562ca9a8e9a535d2148be8e4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>2021-12-22 04:48:40 +0000 UTC</td>
|
|
<td>1136d197e2755bbde296ceee217ec5fe2917477b</td>
|
|
<td>3a3478037f6fff0161a4ed298cf23c98b6c31945eff5c5d2a948537c617d5f6209e870ba881522d7027f2f196f8e958a</td>
|
|
<td>37a13b129f3536a53f2a553151a53997da6de7ce4d7231efeefd26a68c92be309666f2ee1f527d3b8c38bc6addc9fccbbdd0d134759fd88667976b0cff842435</td>
|
|
<td>2025-08-19 11:29:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9b79b047ffcabcd68e19e7888c0cec805364b59493bf0434b1ef282004936da0</td>
|
|
<td>[68a354c3f5d774cd6ae7dfaa]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2259.858]</td>
|
|
<td>["C:\Program Files\RS2 Technologies\Access It! Universal.NET\PanelUtil.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T16:28:48Z]</td>
|
|
<td>[8f6ab8f8e345c8442395fc1e94abf53c]</td>
|
|
<td>[7437ec517002030fd0499496eb4e4c06399057a8]</td>
|
|
<td>[da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40]</td>
|
|
<td>[e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PanelUtil.exe</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Panel Utility</td>
|
|
<td>290304</td>
|
|
<td>8f6ab8f8e345c8442395fc1e94abf53c</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:03:10 +0000 UTC</td>
|
|
<td>2023-04-26 15:03:10 +0000 UTC</td>
|
|
<td>7437ec517002030fd0499496eb4e4c06399057a8</td>
|
|
<td>da8e5a9558133ead3d8c975a28ec126058970fb2e725cfa9ca618c78694ca5a6b730ecc3c71a6152e43ab130edb78a40</td>
|
|
<td>e7a6d4b3bc5f777aaaac723cd654c2c8f5f3b8393a8ce28bc00e837e62fce1ea7a2abd91b8f93cf32edaf7a8a9d60a72837b20f6698909e2fc3d6fdb95ee9da2</td>
|
|
<td>2025-08-18 16:28:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c26250cf5f231965e4dd9ee1b71e0e324551b86e64fbce130341ef3f2a47608</td>
|
|
<td>[68a164c5390404f85b716adc, 68a2b64cfd812c7de4e545af, 68a408129f3185cbaca3c5ca, 68a559bf118aff08c8ed4943]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vroggera]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\la\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z]</td>
|
|
<td>[e95e27be69f2216256a8ccf328a5ac17]</td>
|
|
<td>[39cb921aee036bf1584b9509ee9151157810659f]</td>
|
|
<td>[edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2]</td>
|
|
<td>[0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\la\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>e95e27be69f2216256a8ccf328a5ac17</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>39cb921aee036bf1584b9509ee9151157810659f</td>
|
|
<td>edf5a04e375dbd41ddc3e45ae21e0715fce23dcfba8de4162e81107d7241363cc9bbe3d2c8dda60a271e0a5ccdc910d2</td>
|
|
<td>0c431197cad9b183032370f20b3b864f07909ff8e81e640e8d2c738d04450b5f9472646cb56c9c125396018b7726d2103e9256d69b0323c245dd7b4350b4f287</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c269c3ccae8cdfd948a0ad38c2b7f1bf344ae0d021c265ab3e58b957b590831</td>
|
|
<td>[68a233fd88f628d5134f0d74]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ea0bsm2n.vub.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ea0bsm2n.vub.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:37 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9c4b5ce1dc29be4d5b9dddab220de247696495cf359c659d98e4a8faec482df8</td>
|
|
<td>[68a501fb7a753eb605659393]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\q0440fxp.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-19T23:00:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>q0440fxp.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 23:00:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>95feb7eb3e3ecf712806fd2a8be19bdd62c76ef7862756398639298a88f7cae0</td>
|
|
<td>[68a523949cec397f02de9f58]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ExcitersDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[159dbdfc8777d46c067121e0c063c16f]</td>
|
|
<td>[039bdf8d9e0ab6315b08c9564545dd6f3cd1a574]</td>
|
|
<td>[fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155]</td>
|
|
<td>[e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ExcitersDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>ExcitersDiagPlugIn</td>
|
|
<td>18944</td>
|
|
<td>159dbdfc8777d46c067121e0c063c16f</td>
|
|
<td>ExcitersDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>039bdf8d9e0ab6315b08c9564545dd6f3cd1a574</td>
|
|
<td>fa95c55939772fe253a97216fcc5916a9a36ffc8b0dd8524931774b54d5144dba6c6799e322a6204140499109ee15155</td>
|
|
<td>e9c2c0deb24618f2c4fd45284073cf0ada251b029521215658270ff13c1882de5c683fa341f26fdfed7fb350e8caf23b0442370b3d8fcaf1a596de2e41d65a37</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9647877a7e4fdb83bbda5a2173ff9135b2a52d3d083c444ca8af53f35f2d4837</td>
|
|
<td>[68a1d738c11dd0afce1560b6, 68a328b63412995838d5c362]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ITC-RODC-1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Npcap\CheckStatus.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248, v2253]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T13:11:09Z, 2025-08-18T13:11:05Z]</td>
|
|
<td>[c1a174f329ffa8b331f6fc4fe6ab42f6]</td>
|
|
<td>[47e61c26d8e04ebdf10dc2a848f7479ec31bd752]</td>
|
|
<td>[a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c]</td>
|
|
<td>[4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076]</td>
|
|
<td>[172.17.20.198]</td>
|
|
<td>[172.17.20.198]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CheckStatus.bat</td>
|
|
<td>C:\Program Files\Npcap\</td>
|
|
<td></td>
|
|
<td>880</td>
|
|
<td>c1a174f329ffa8b331f6fc4fe6ab42f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-09-25 03:12:08 +0000 UTC</td>
|
|
<td>2020-09-25 03:12:08 +0000 UTC</td>
|
|
<td>47e61c26d8e04ebdf10dc2a848f7479ec31bd752</td>
|
|
<td>a001892f98d08e55f56c2705e8010917a7b2ccae1294b7f8c518da7ef3229d40b3e86da2f1ce9f111985a8786c8bfd9c</td>
|
|
<td>4f017497cc4ef2fbd7f346c996806db5bf61c211258145126df71a962a1bfebb1d3166c6f9445f9a988fe6831f02e3f81fe2b6464af12c699721b3fe8e273076</td>
|
|
<td>2025-04-17 02:20:31 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>966b014872df2b10771a6d6599d9eec4fd8d07864b4640d6e4292d0ee2318cd3</td>
|
|
<td>[68a19d4d339a5398da5a5181]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zolibxmz.drt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:13:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zolibxmz.drt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:13:44 +0000 UTC</td>
|
|
<td>2025-08-17 09:13:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:13:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>975ea175eadfdf66d1737a5bba6259c1d7645ef6e366d2065c42a537522f9e74</td>
|
|
<td>[68a16fe817c245683297ce48]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_sasv0xj3.dj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-17T06:00:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_sasv0xj3.dj0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:00:01 +0000 UTC</td>
|
|
<td>2025-08-17 06:00:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>98785b23979f24fe0b15bb479bcb033372f10e9633e1a69522168b6a35b14392</td>
|
|
<td>[68a523949cec397f02de9f41]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AEMDictionary.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:24Z]</td>
|
|
<td>[f3f4cfa0df21c55ead9c48d0dfa26574]</td>
|
|
<td>[6ea7f80899194a24fbf750c0551fc6be488c11eb]</td>
|
|
<td>[80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4]</td>
|
|
<td>[4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AEMDictionary.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>286720</td>
|
|
<td>f3f4cfa0df21c55ead9c48d0dfa26574</td>
|
|
<td></td>
|
|
<td>1.0.8565.40716</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:16 +0000 UTC</td>
|
|
<td>6ea7f80899194a24fbf750c0551fc6be488c11eb</td>
|
|
<td>80f4c52a83b7476e45a84b6520a244adb2fec9548bb207874ee9d02acfdf1448af41f6e93f091eccb37ccd8b3721b6a4</td>
|
|
<td>4f4a8aee564da5fb93ac765d1b8fa2283d73072e9ae19e7f0b4487c1a64aecfed9230634629b960346ca41f29087e4f6f1ecd699d2f4087715cb6d6469c2017c</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9dfb220bb3f348f33dc86e0fc936db0ca2efc1a3789c9e1121cb512ec33077fa</td>
|
|
<td>[68a17ca68feea10e77a5fb6a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1x2unr4g.5ni.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:54:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1x2unr4g.5ni.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:54:25 +0000 UTC</td>
|
|
<td>2025-08-17 06:54:25 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:54:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9f6dc00e7d0000006079d5e2ce106967e2ebc046d4a9f8e041b02d6264831b71</td>
|
|
<td>[68a4cc1d3f45e81aa92ef529]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GEHC.XI.Shared.Formulas.Globals.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GESCProcess.exe]</td>
|
|
<td>[D:\CARDDAS\Backend\bin\GEServiceController.exe]</td>
|
|
<td>[2025-08-19T19:10:14Z]</td>
|
|
<td>[c06ed6d1d0a7c4eb01cd24bdc80fc3a2]</td>
|
|
<td>[eccd928e1bc57300c08c04737cc9e896d0cbd3f3]</td>
|
|
<td>[9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77]</td>
|
|
<td>[a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GEHC.XI.Shared.Formulas.Globals.dll</td>
|
|
<td>D:\CARDDAS\Backend\bin\</td>
|
|
<td>GEHC.XI.Shared.Formulas.Globals</td>
|
|
<td>30208</td>
|
|
<td>c06ed6d1d0a7c4eb01cd24bdc80fc3a2</td>
|
|
<td>Centricity Cardio Workflow</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-13 16:45:46 +0000 UTC</td>
|
|
<td>2020-12-02 02:05:25 +0000 UTC</td>
|
|
<td>eccd928e1bc57300c08c04737cc9e896d0cbd3f3</td>
|
|
<td>9d9b8abc688d06fc32f4a5b5c7665490318d162f51a4788e164a4d8fa377e01e89cefecab0f3a274b5f16ffc46a19b77</td>
|
|
<td>a32ef2926337b9646149636d6399fb9091c7b66e8496269af4b9c1d0cbfb033d19d5df8e45d708c5dfbc1d006749ae214d78ea1d205b6196eec37dcd83bc9168</td>
|
|
<td>2025-08-19 19:10:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743103669', 'name': 'PACS', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>994a611ef09f8ae2fe98c2da01d655ce4fa347baa82b9c9915df9f6ec9fbfbc3</td>
|
|
<td>[68a523a99ba7c92b34976f9c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Utils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:43Z]</td>
|
|
<td>[c709df517b83ce6b8dc1fea8d595054b]</td>
|
|
<td>[8f53280dfe52874cff44f8780c0fc0fc115b5f3e]</td>
|
|
<td>[dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490]</td>
|
|
<td>[9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Utils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>7168</td>
|
|
<td>c709df517b83ce6b8dc1fea8d595054b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>8f53280dfe52874cff44f8780c0fc0fc115b5f3e</td>
|
|
<td>dd26b4c7661c7a082dd151a4ae56fa4e42c8ca3de253b3e5f75cc38e9462ba2851fcaebcbfb5ef9e751d4acf04f58490</td>
|
|
<td>9b33064e58d636ec19edaa5e7fa810478bb151e62cf34e474e59bef33988eaef0c8228be65e6219295ca518da88a0b1021cbefa82680b5e11c6ab935a9765954</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9a3726ca46e5c03f051771dcde4dfb6ee31c3552a7a345655c5a916280a5fca0</td>
|
|
<td>[68a5f3b29b9fb9b13e357cc3]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_methinks]</td>
|
|
<td>[i-hMeThinks]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\svc_methinks\AppData\Local\Temp\1\8ca4fc1b-e498-4c03-ae74-6a16073d35b4.tmp.node]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2306]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Docker\Docker\frontend\Docker Desktop.exe]</td>
|
|
<td>[C:\Program Files\Docker\Docker\resources\com.docker.backend.exe]</td>
|
|
<td>[2025-08-20T16:01:57Z]</td>
|
|
<td>[595808a5981c518e408b20db02c91182]</td>
|
|
<td>[e039562b6f463711ed9c3ad8ac499d813afdf966]</td>
|
|
<td>[df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86]</td>
|
|
<td>[f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121]</td>
|
|
<td>[172.17.251.218]</td>
|
|
<td>[172.17.251.218]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>9c93f735-e0b0-426b-830a-650d88cf56a5.tmp.node</td>
|
|
<td>C:\Users\svc_methinks\AppData\Local\Temp\1\</td>
|
|
<td></td>
|
|
<td>155136</td>
|
|
<td>595808a5981c518e408b20db02c91182</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-16 16:01:47 +0000 UTC</td>
|
|
<td>2025-07-16 16:01:47 +0000 UTC</td>
|
|
<td>e039562b6f463711ed9c3ad8ac499d813afdf966</td>
|
|
<td>df84e9fe2aa5a5f1a0704340277a1af11792fcc1cb7c5ec2fd06f79d884bd6bbe60255816716433fd96876e4d636ff86</td>
|
|
<td>f4b09bf0a1efc607b8c38c4a594fa806324e0f70e0558187f363eeb7f5eabf110e696388a5b7264710b2f2d282c89f809272455e4913af9daf069ae29e305121</td>
|
|
<td>2025-07-16 16:01:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9a933035d08791e2782f9d3b15447d9d39970442a998a1bc5b1742acaa33f921</td>
|
|
<td>[68a46900de52a0eb07bb2cab]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:07:25Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_7e89cfca92ba44009d9fde863ec51fb9.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:07:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9addd5904e11aac0c9314145f7a3571f0a6c6904a088475ff74610d4021f7188</td>
|
|
<td>[68a3c3516dcf6e4208aef621]</td>
|
|
<td>[2]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[Teknicor]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\rm.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\teknicor\AppData\Local\Temp\4\CtxUp-3A9C2E87-DA60-427D-B80A-82DC7674B69E\CitrixReceiverUpdater.exe]</td>
|
|
<td>[C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe]</td>
|
|
<td>[2025-08-19T00:17:04Z]</td>
|
|
<td>[5b0b73b4180309831b886d262c2f581a]</td>
|
|
<td>[07878f7908801a602bd37e6a7a6612369487387a]</td>
|
|
<td>[fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6]</td>
|
|
<td>[c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>[10.20.20.68]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rm.bat</td>
|
|
<td>C:\Users\teknicor\AppData\Local\Temp\4\</td>
|
|
<td></td>
|
|
<td>7357</td>
|
|
<td>5b0b73b4180309831b886d262c2f581a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 00:17:04 +0000 UTC</td>
|
|
<td>2025-08-19 00:17:04 +0000 UTC</td>
|
|
<td>07878f7908801a602bd37e6a7a6612369487387a</td>
|
|
<td>fbb4c2b4d84b56f10f486a3b6ef5dfb46b9e3b0bb6d3b214b30b6d4ff92a397375f46f064c18646c3c5cc310e6f2c2a6</td>
|
|
<td>c018d5b9fab5ece1bd255b0851cbba0dbd8e1ae1d6a073e695a0a47b8ed9df7f076ac990ce56a6e724b0f590b63dd106c986beb30966c8176c1eb6b64ce4956c</td>
|
|
<td>2025-08-19 00:20:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9aedfab326d5e3f307d5205bfc6a53d1615990c94cfb16a8b223b9f97f6e0469</td>
|
|
<td>[68a16556adb18f56bab6ec7d, 68a2b4a8c289c4a5fdc2edb0, 68a4085529d877e962e90ae5, 68a557e71e5d7a1efef2595d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\cg1B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[80f96d46829afa7f40109f8216bf4750]</td>
|
|
<td>[079dfe49b49dfa8d5f323413b49c7a077a5758ab]</td>
|
|
<td>[7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e]</td>
|
|
<td>[02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\cg1B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>80f96d46829afa7f40109f8216bf4750</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>2021-10-07 20:05:32 +0000 UTC</td>
|
|
<td>079dfe49b49dfa8d5f323413b49c7a077a5758ab</td>
|
|
<td>7dcbdb3285fe67a9783221840928a97032e21645bf78c3ff091d91ee7ffb402d768ed37377fe5866dac44d6ee9f2ef6e</td>
|
|
<td>02c8dbd5fad3dbe3de9ca6c5087bd7defdc5e561446bc5dc81a5653461a8715293cdc396e9673f83ab1115862ed151e83eaefab1116fcfeb143f10d4f3515810</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a131c59ce31216aa82e7546a4b29e1afce259d87212f7f5cdfddf2cfcba76cc5</td>
|
|
<td>[68a523949cec397f02de9f56]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\EventMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[c159bbc0a5b7044ad2341d142bb49419]</td>
|
|
<td>[f4677064145ae5286fa91bf3a06c3f0362c1f6cc]</td>
|
|
<td>[4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4]</td>
|
|
<td>[cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EventMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>8192</td>
|
|
<td>c159bbc0a5b7044ad2341d142bb49419</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>f4677064145ae5286fa91bf3a06c3f0362c1f6cc</td>
|
|
<td>4b9aba13febc471289026f3c30e4e6f772dc568d30ead07bd1c437db9ec35d3f44afd430018e4c5e5fbc08879bd4eff4</td>
|
|
<td>cd4c9cfebd27333a919eacc3f148856f3ac95ebd413f42040b8e96763fd4ce8f9cf34d8d32ab73aa7f7e72cc1a302c41c2103ecfb409abd861245c20a401dd26</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a143f84acb242d2ae93165cf5caa808116878e47cb0686e9830bf9a0abb1fcd9</td>
|
|
<td>[68a1638d6b917cef7bc97208]</td>
|
|
<td>[2]</td>
|
|
<td>[insqadhocadmin]</td>
|
|
<td>[inSQADHOC]</td>
|
|
<td>[INSQADHOC]</td>
|
|
<td>[D:\DxFlats\SQ-AdHoc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:02Z]</td>
|
|
<td>[bb3305a61952566315ce176436bd4621]</td>
|
|
<td>[029fd1a6c08c26b003c740a134e6f98c79ad8496]</td>
|
|
<td>[fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901]</td>
|
|
<td>[f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c]</td>
|
|
<td>[172.17.253.151]</td>
|
|
<td>[172.17.253.151]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SQ-AdHoc.ps1</td>
|
|
<td>D:\DxFlats\</td>
|
|
<td></td>
|
|
<td>83576</td>
|
|
<td>bb3305a61952566315ce176436bd4621</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-06-13 14:05:23 +0000 UTC</td>
|
|
<td>2024-05-23 19:22:49 +0000 UTC</td>
|
|
<td>029fd1a6c08c26b003c740a134e6f98c79ad8496</td>
|
|
<td>fe114e770a1ae2b94683cb5f6046b43c391f7be30d8c23201521c0bef6763a7f8097463f4c472b4f9e68a28470347901</td>
|
|
<td>f8879969e0bc80433bd265423f261f1d28cb892860e1ea128487083c4f299cad9777ab38b6b74d92dd98acc8ce0dfdc40744d5115fdad43cb7e8db3e92bbe94c</td>
|
|
<td>2025-08-10 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a31ce0c5fb2fb5a70ae2f5675d2e718053ab5a33f61fe21ee4068a320772e549</td>
|
|
<td>[68a3263cd45919f0090e7c01]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_amguifg1.dah.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:10:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>[172.17.146.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_amguifg1.dah.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:10:15 +0000 UTC</td>
|
|
<td>2025-08-18 13:10:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:10:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a32017ae555c56a0e151a37d90e172e739a0be07eba0325f360d41187c2a4915</td>
|
|
<td>[68a3146b5f0c41860c8c8503, 68a3146b5f0c41860c8c8529]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_compiler.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[3fe222e07defb25b338445dbcab0bfb9]</td>
|
|
<td>[a105528d5535f8082be6782364ab5baaa5e0bfcb]</td>
|
|
<td>[4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16]</td>
|
|
<td>[f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_compiler.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>26774</td>
|
|
<td>3fe222e07defb25b338445dbcab0bfb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>a105528d5535f8082be6782364ab5baaa5e0bfcb</td>
|
|
<td>4d52517990369f8c23d9616999bb5fabe52324bae7449eef0f2ef9d846f5aaf524348d82ca5746628a633a1736ac8a16</td>
|
|
<td>f5be565b420d3339e301dd81ed134afa6b0275f959df0a9fd193d5fac37931d4b096e18a122e168c04bf32916f187db51194b87c4eddbb2d3a9a0d8687c693ac</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a324b6ad763bc358149289b8e56cf6af34165731120eac06b4c11545098abe80</td>
|
|
<td>[68a3344d439a37dcf9cca092]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rrmcis01.ufu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T14:10:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rrmcis01.ufu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:10:10 +0000 UTC</td>
|
|
<td>2025-08-18 14:10:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:10:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a35f7e2e854e0a9bec312d0e231257abf44ccd69ca8d4ce54a45a37c4b33e944</td>
|
|
<td>[68a3146b5f0c41860c8c84ee, 68a3146b5f0c41860c8c8544]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\warnings.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7d85eaf7564ffaa1209cf036319c7ee9]</td>
|
|
<td>[d08d019620615f931d936c43e8c10fe455351f14]</td>
|
|
<td>[258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232]</td>
|
|
<td>[50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>warnings.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>29539</td>
|
|
<td>7d85eaf7564ffaa1209cf036319c7ee9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>d08d019620615f931d936c43e8c10fe455351f14</td>
|
|
<td>258d18d14952eac161b603619219e4a3f3b66cd4d39e659e1949887ad8034807f87b0039c61a51970ef1cb984af5b232</td>
|
|
<td>50e491c8bb81afb233445bb7cecb7e40857de9dba412f156eeafd36c8fdec9d7bf5d13eb6c6f8672956cac4412cc48d26e0f163ef8fa21768cbf79649d3011f9</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a3724c84c328061648a13640100576fa1495c17595531d32511c386cb89ad0d0</td>
|
|
<td>[68a523a99ba7c92b34976f9a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\UnderlyingControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[81bb796392271fdee395ef35a86dd765]</td>
|
|
<td>[00289d1c9869b2ff54b9f6d773ba1a33719b7d1d]</td>
|
|
<td>[0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828]</td>
|
|
<td>[ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>UnderlyingControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>UnderlyingControl</td>
|
|
<td>43520</td>
|
|
<td>81bb796392271fdee395ef35a86dd765</td>
|
|
<td>UnderlyingControl</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:40 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:40 +0000 UTC</td>
|
|
<td>00289d1c9869b2ff54b9f6d773ba1a33719b7d1d</td>
|
|
<td>0ef004ea01fe47d11795e44083d458c2e648eddbb48877483ae41508223fc945181c2dd013b23408a30a348a0ae36828</td>
|
|
<td>ba6751685b80ddef5e9392112313303960796d8ce09778ad48503eda8073cae66f8c835969995a2954370c9ea4d9278ef6d0aaddd3b73efef8f71f83952e9b05</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9cdd435552e4798b104c63a8918b11cb96b5a4a7618907130342a4ffbd5a839a</td>
|
|
<td>[68a2452ec0a888da2a3144f6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s1puaykw.vxr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:09:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s1puaykw.vxr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:09:53 +0000 UTC</td>
|
|
<td>2025-08-17 21:09:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:10:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9cdf0d9852f8c3557cfe9a6e3ee68cd450c4fc09bd2664d77bfa66af82c82726</td>
|
|
<td>[68a3146b5f0c41860c8c8525, 68a3146b5f0c41860c8c856e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\message.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[1f9cf3f516b09dca73c5d70db0ae5491]</td>
|
|
<td>[2b812bdaf15435914d726ada0f6149e822eba183]</td>
|
|
<td>[d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa]</td>
|
|
<td>[6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>message.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>51634</td>
|
|
<td>1f9cf3f516b09dca73c5d70db0ae5491</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2b812bdaf15435914d726ada0f6149e822eba183</td>
|
|
<td>d0db38e5e69dabc6e939878a45f617a72a4347e652e056f66579ed9eb745fde608e6c449f3cca938d42e67be90f88bfa</td>
|
|
<td>6815e68f47797649cfed316ad8e1c5647a93b5f5747619eafe769e4816c65d2313683475138d765e7255880d7e4ab4dc476092af851c03b27162d61cdd42786d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d111e03218a7eea9537a00e1863cddde10211dba9218b3d6b47608f1e77c251</td>
|
|
<td>[68a3146b5f0c41860c8c8540]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_compression.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[af1c1193de59fb127d8911df425569ca]</td>
|
|
<td>[6fd4756649e5aad5421b16a620fd166330c51cce]</td>
|
|
<td>[a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1]</td>
|
|
<td>[fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_compression.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7813</td>
|
|
<td>af1c1193de59fb127d8911df425569ca</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>6fd4756649e5aad5421b16a620fd166330c51cce</td>
|
|
<td>a3700c726be40a1289668c9644373eb5550849b29293bca31a6f51272f075605e539409ab20d6011cb82c0e2153387a1</td>
|
|
<td>fbb973f98a6931915679079a0be606dec57454f472da93570c372e6b95088f75661a00db434ffa287d987cb5f6f405e995b9ef61e98a611e06f0767095c19298</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d59e4a2f76cd64d5749bd32d2ff4b194967c71546ab94d1ac2a1883f9738c35</td>
|
|
<td>[68a1a56518d384e847176013]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-devsqltest1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ejhf5yxn.j5m.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:48:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>[172.25.17.220]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ejhf5yxn.j5m.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:48:10 +0000 UTC</td>
|
|
<td>2025-08-17 09:48:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:48:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d97578780dbb03cc0c396200b96fce7e7645af7bafa5f5dc7fba849474f3c07</td>
|
|
<td>[68a5c8eceb9e7b7716dce203, 68a5ca39b5df6e9c598d9a15, 68a5ca39b5df6e9c598d9a22, 68a5ccf2ddfdba423e488638, 68a5ccf2ddfdba423e488646, 68a5ccf2ddfdba423e488654, 68a5ccf2ddfdba423e488661, 68a5ccf2ddfdba423e48866e, 68a5ccf2ddfdba423e48867b, 68a5ccf2ddfdba423e488688, 68a5ccf2ddfdba423e488695]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\powershell.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\DevOps_Agent_MDI\bin\Agent.Worker.exe]</td>
|
|
<td>[2025-08-20T13:08:52Z, 2025-08-20T13:08:56Z, 2025-08-20T13:08:58Z, 2025-08-20T13:22:24Z, 2025-08-20T13:22:28Z, 2025-08-20T13:22:30Z, 2025-08-20T13:22:32Z, 2025-08-20T13:22:41Z, 2025-08-20T13:22:44Z, 2025-08-20T13:22:49Z, 2025-08-20T13:22:52Z]</td>
|
|
<td>[774bf83f632cbecb715ee124673f4a07]</td>
|
|
<td>[1af8f80e3fac45073288d420016eb0718463a2df]</td>
|
|
<td>[1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016]</td>
|
|
<td>[ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>powershell.ps1</td>
|
|
<td>C:\_work_devops_mdi\_tasks\PowerShell_e213ff0f-5d5c-4791-802d-52ea3e7be1f1\2.230.0\</td>
|
|
<td></td>
|
|
<td>10213</td>
|
|
<td>774bf83f632cbecb715ee124673f4a07</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:38 +0000 UTC</td>
|
|
<td>2024-01-20 18:07:08 +0000 UTC</td>
|
|
<td>1af8f80e3fac45073288d420016eb0718463a2df</td>
|
|
<td>1ac396d2b345e240e1638620d065f4c870fadc1f43f2c338199d145627ebe8df96843c159035ed9fb0d139da2c5d1016</td>
|
|
<td>ab1727904a8c077e9a5bbb2165911fec45881445988fe92143cc38412e44aef2f4d5228fe7c3ec753a116d10b48b5fad6c9cc3f6b418fdf55c559dae8cf74855</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9d9a4969ee818d3ab6eb78ee164b44f9376111d781e2bcd9b51f52b35898d341</td>
|
|
<td>[68a24268b7be513faed67bb0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_koanizjm.loh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:58:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_koanizjm.loh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:58:10 +0000 UTC</td>
|
|
<td>2025-08-17 20:58:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:58:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>9da55b55bf7f629825cea208fa7f81ec54f6a19daa972c58ae7dc286f4d68594</td>
|
|
<td>[68a2a7d21e529195058821a8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_qmir4he3.i00.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:10:52Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qmir4he3.i00.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:10:52 +0000 UTC</td>
|
|
<td>2025-08-18 04:10:52 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:10:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a548df31d03d23622cb379acfbc0695202c0e6f9d3fd292b8231855119eed7eb</td>
|
|
<td>[68a50d976457caa3bd4cff40]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MedRadA_5_0_2_8.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:49:35Z]</td>
|
|
<td>[689ccd0909386b792a96ff44490c0330]</td>
|
|
<td>[ec4d7c17af12efd1448a71da2447d4ae8a11e588]</td>
|
|
<td>[6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35]</td>
|
|
<td>[513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MedRadA_5_0_2_8.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>851968</td>
|
|
<td>689ccd0909386b792a96ff44490c0330</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:49:26 +0000 UTC</td>
|
|
<td>2025-08-19 23:49:28 +0000 UTC</td>
|
|
<td>ec4d7c17af12efd1448a71da2447d4ae8a11e588</td>
|
|
<td>6942531a5fd548b56ffa00e2feac57ac7e95ffde670ca82118fb34a90d9f977f27b317c09f79e3c21fbba89f51398e35</td>
|
|
<td>513465d0649bfc43b1cdcda29c3855ea49fb38e58c4c18316edb1e73ec81f20eba15e45c09c0d68497754d3844e60570ae5d7292b5716e13ae1d3fabb63cfe22</td>
|
|
<td>2025-08-19 23:49:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a596db3f46aad59dc048c9604dd923c50cc42f4839cba96ce5341875ebfdfd96</td>
|
|
<td>[68a54627d2a51a0036bb0308]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2rcrpoi2.rwf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T03:50:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2rcrpoi2.rwf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 03:50:54 +0000 UTC</td>
|
|
<td>2025-08-20 03:50:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 03:51:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a5ff7457fce680ffacc0bba20ac6a177e78341c7dcae31abefcba7e577e64a7f</td>
|
|
<td>[68a32d9ee5fbd5313b7dadcc]</td>
|
|
<td>[2]</td>
|
|
<td>[shke0124]</td>
|
|
<td>[UH-ADSSP]</td>
|
|
<td>[UTWNNET]</td>
|
|
<td>[C:\DesktopInfo\dtlaunch2.vbs]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\wscript.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:41:46Z]</td>
|
|
<td>[e1ace6499530151980189be914a5f89a]</td>
|
|
<td>[3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3]</td>
|
|
<td>[ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba]</td>
|
|
<td>[eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b]</td>
|
|
<td>[172.17.253.172]</td>
|
|
<td>[172.17.253.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>dtlaunch2.vbs</td>
|
|
<td>C:\DesktopInfo\</td>
|
|
<td></td>
|
|
<td>176</td>
|
|
<td>e1ace6499530151980189be914a5f89a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-05-07 16:56:42 +0000 UTC</td>
|
|
<td>2019-04-30 12:25:16 +0000 UTC</td>
|
|
<td>3cc6121eb1fcb1d3b6b17b27cb499abe41203ab3</td>
|
|
<td>ddb814fc6a5b68bb17b8174a606c24b16e1d1776c7df0afc36c49416240751ff3e23cd74aa08d941019af9d6c39656ba</td>
|
|
<td>eb614accbe480c455a1c9dcb33dd64f7c82347095abb615d83cd2973025642caa85e4f6bcb877b42160f3a17dbb8616b2860b7981ec195d187a100d60414259b</td>
|
|
<td>2025-08-12 21:44:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a6b136aacbe10b92c762f356579330100e2c8b1ae9d6d5657974f9490b3b7f45</td>
|
|
<td>[68a3146b5f0c41860c8c8545]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\random.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[c2ce0e5ec437c6d8538c27ae345c1042]</td>
|
|
<td>[b7828fe39a90bb14a046eab7bf0a18259468b4d6]</td>
|
|
<td>[e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27]</td>
|
|
<td>[1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>random.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>35246</td>
|
|
<td>c2ce0e5ec437c6d8538c27ae345c1042</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>b7828fe39a90bb14a046eab7bf0a18259468b4d6</td>
|
|
<td>e0aca3ccbc577f48b604aadb9a613014f3aedeaf4a86d2a3fcf73085872efbb59eba4cc8e7c30caf63188387c75ddf27</td>
|
|
<td>1be06bcd7bb904ab8eb9017d646e75bb62a53a24bbde46f84b042e63b1e5331fb336bcf649c5c280cdf2dd6398950e7522a67b874cbcfc50914d6adb1481e2ff</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a70abcb3640f722ba91de8272c43459616c3249eed6a70fe73426299248a0921</td>
|
|
<td>[68a3b50e0570ac6ecb876346]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nBMCAtlas]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\charsets.jar]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Amazon Corretto\jdk1.8.0_352\bin\java.exe]</td>
|
|
<td>[C:\Atlas\PevcoCore\ServiceWrapper.exe]</td>
|
|
<td>[2025-08-18T23:19:40Z]</td>
|
|
<td>[d7251e5cfabd1851fc9f161add6c4614]</td>
|
|
<td>[f8109e7d9708f7915de0513be7afb9b34bf1654b]</td>
|
|
<td>[fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b]</td>
|
|
<td>[4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a]</td>
|
|
<td>[172.17.252.62]</td>
|
|
<td>[172.17.252.62]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>charsets.jar</td>
|
|
<td>C:\Program Files\Amazon Corretto\jdk1.8.0_352\jre\lib\</td>
|
|
<td></td>
|
|
<td>3092101</td>
|
|
<td>d7251e5cfabd1851fc9f161add6c4614</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-10-15 02:36:30 +0000 UTC</td>
|
|
<td>2022-10-15 02:36:30 +0000 UTC</td>
|
|
<td>f8109e7d9708f7915de0513be7afb9b34bf1654b</td>
|
|
<td>fd3dc90ee80f4c7e651a19768e80138b2d0d2c5ef81c684ba4bac7c75bb6cfc3caa29ca97dae6419d5a77ff2af2d125b</td>
|
|
<td>4cc89888f557ae26d77b7238eac366c0a5280e96d7564ce633abcd0ccafb11d3684a151dd9d6ec691377a22d13a20a6b4b4c3512755ea17c9d04a90f7dfcfd4a</td>
|
|
<td>2025-08-18 23:19:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a74e1014a652da7a239592f6d0165e69ba56f2890c3a6192f18481090e01ff37</td>
|
|
<td>[68a2529a2a645cc96ea797bf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cob2eltw.0et.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:07:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cob2eltw.0et.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:07:14 +0000 UTC</td>
|
|
<td>2025-08-17 22:07:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:07:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a767d9dc32d4a0e488878f652ef5e97ceb11636426ed07e4243ad94ac1a882c2</td>
|
|
<td>[68a1f0fecfcf9ec5faefd427]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MWeb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o0k5mtai.fpt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T15:10:44Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o0k5mtai.fpt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:10:44 +0000 UTC</td>
|
|
<td>2025-08-17 15:10:44 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:10:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a04620ce2adb9cce34ae2ec9142bcfdc9025b2b3c2e67014c22afecfc3b7bd02</td>
|
|
<td>[68a3146b5f0c41860c8c84e7, 68a3146b5f0c41860c8c851a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\aliases.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[6d4c823e9d2c59e8c7a1c22385febbc1]</td>
|
|
<td>[9c505a63924d0934af779792b915ccaf391a6a6b]</td>
|
|
<td>[8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3]</td>
|
|
<td>[7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>aliases.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>12393</td>
|
|
<td>6d4c823e9d2c59e8c7a1c22385febbc1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9c505a63924d0934af779792b915ccaf391a6a6b</td>
|
|
<td>8f7e0452d069ba0f1d6fb107edb9790206c937aa6cbc6f9cfacc7910ab482e572aeff373034bede060adc0eaf6d718b3</td>
|
|
<td>7a58b5b2976bb539f8b516ca07be77376a421402633dcbe12a0a39b2b5a9f0deb66308a8d4002e26d71c77b1237905563743faf87128ae31b4ea73491fc4ce22</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a08bb4d95e13cd7f071180ecc9b403249364af378c3a63dc24f56600ca6d54a1</td>
|
|
<td>[68a471ad04130eaeee8f8d05]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:44:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_289dd1c7c0474ba08bdd37b5e544b808.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:44:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a10b871ec3447828b319d9b2e28d6149b355385b2769f30727d4a0c8473ddf74</td>
|
|
<td>[68a1f34c27d6d6088ad4500e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-v3MWeb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_m1lxrrkv.j3z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T15:20:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>[172.25.19.80]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_m1lxrrkv.j3z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 15:20:36 +0000 UTC</td>
|
|
<td>2025-08-17 15:20:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 15:20:44 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>074ce0f504955fa14064a7193cfba318e61c1b6dc27e59b6975601e39df50845</td>
|
|
<td>[68a19f422de3174858366afa]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_gra3lynm.d1r.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:22:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_gra3lynm.d1r.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:22:04 +0000 UTC</td>
|
|
<td>2025-08-17 09:22:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:22:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07968177016a718ed43b2924f24461437c58d6be3aca549059e7097eb38fe4d4</td>
|
|
<td>[68a4b0fb13fac5171eeef0db]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.WinSocket.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:26Z]</td>
|
|
<td>[e04f8c818fa02aab64810078da470416]</td>
|
|
<td>[be46d5ecd87559de68ef86566904698276e28a1c]</td>
|
|
<td>[01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755]</td>
|
|
<td>[944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Infrastructure.WinSocket.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Infrastructure.Socket</td>
|
|
<td>33280</td>
|
|
<td>e04f8c818fa02aab64810078da470416</td>
|
|
<td>Cyrun.Infrastructure.Socket</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:20 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:46 +0000 UTC</td>
|
|
<td>be46d5ecd87559de68ef86566904698276e28a1c</td>
|
|
<td>01c6fe78473dc9fb2211d661e73688e6cdca7594e2f74772859895f5158dabfa14aa7de94c7746d5ed3e24f9e7cba755</td>
|
|
<td>944e5d35036dcf0ffd32a81370fde7d741a2a17f0dc5f370d7a981eb0a364b17f2610b0440774a5e51df23628663e31e050b8e2e8634539708d617e977416081</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a8ae15a09049933a89fdb4389e64b361166effd3c50059a27b421c35661ab8ec</td>
|
|
<td>[68a3146b5f0c41860c8c84f7, 68a3146b5f0c41860c8c8538]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\selectors.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[dce6f6cf31043a85ae09dd17ed5d2d5f]</td>
|
|
<td>[811715ac731526bdaee76bf10571075361ecf9d5]</td>
|
|
<td>[544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011]</td>
|
|
<td>[8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>selectors.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>26363</td>
|
|
<td>dce6f6cf31043a85ae09dd17ed5d2d5f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>811715ac731526bdaee76bf10571075361ecf9d5</td>
|
|
<td>544d87da95455dcfd19996364010531dbfea0ca1af8e1fb17d20f6ab52fc48f3a58dd26853e0012daa0ae4d2fee2c011</td>
|
|
<td>8b57c29b5771936426fff2097a3731f0e13beb48fe6a2fccd0fabff6d158be89fcc14131caae79c25fcfc1387006e56135f279e25c2640d265121fec7e66e786</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a8c69cff170a11e09c0db48f6eff36552f0e55bead875b852f53e4014d2ec4ad</td>
|
|
<td>[68a5ea05ebe5b1fd9532e2b9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nnvr8]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_0q2akhpz.hat.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2303.894]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T15:29:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.250.215]</td>
|
|
<td>[172.17.250.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0q2akhpz.hat.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 15:29:28 +0000 UTC</td>
|
|
<td>2025-08-20 15:29:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 15:30:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a95a3864848994037a1db9261c87490070f83ce90f08af579cd568bd979bfe8f</td>
|
|
<td>[68a5239e621d09b2b1ed5e5b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShellHostsDataModel.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[65262622b831d010834ff3548a3dd05a]</td>
|
|
<td>[f1f44b243a97ceff5f11eacd61789dc2e1ad3f21]</td>
|
|
<td>[bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4]</td>
|
|
<td>[517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShellHostsDataModel.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>13824</td>
|
|
<td>65262622b831d010834ff3548a3dd05a</td>
|
|
<td></td>
|
|
<td>1.0.8565.40718</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>f1f44b243a97ceff5f11eacd61789dc2e1ad3f21</td>
|
|
<td>bfcac26b047fa1a8cfd02428312b34698c6e2caa190ffc3825c838c0c61533ca28487065b4a094b2058c1d603addfbb4</td>
|
|
<td>517681c1ea4c96ad1434bffd842cf62652205118e5ef0744e173fdc9788a342a4d69c6f5e0c0799116e709ef5e4d41e07da6cc45fa306eb61b7d418be9c8e103</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>aa13263cf877fba12972c6ed947fca30c01b3d65106e1346ada8772145045119</td>
|
|
<td>[68a2676e765f21351af39a4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[HV-I-FAMELASTIC]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hjuufxzf.lny.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T23:36:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>[172.17.252.183]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hjuufxzf.lny.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 23:36:04 +0000 UTC</td>
|
|
<td>2025-08-17 23:36:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 23:36:14 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>aaf84151e67fc2d21578b8d07a8bc592af20149f26cf05cc67de7acee9f4637b</td>
|
|
<td>[68a2349d93dd7dbb6ab7e942]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nUHCPaging]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_53h31yga.ysi.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:59:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>[172.25.22.57]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_53h31yga.ysi.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:59:20 +0000 UTC</td>
|
|
<td>2025-08-17 19:59:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:59:25 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab0001b12e7ad572eb986b3f639d489d860bcdd5c1a84f13f16bc73235b11c44</td>
|
|
<td>[68a3146b5f0c41860c8c84ea, 68a3146b5f0c41860c8c851e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8_sig.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[efb0079be3128e1ca929caf3e6968501]</td>
|
|
<td>[3aad7766e3c7603ad9e0b90a344edb5158b6f556]</td>
|
|
<td>[7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664]</td>
|
|
<td>[dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utf_8_sig.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>6921</td>
|
|
<td>efb0079be3128e1ca929caf3e6968501</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:26:59 +0000 UTC</td>
|
|
<td>2024-11-22 16:26:59 +0000 UTC</td>
|
|
<td>3aad7766e3c7603ad9e0b90a344edb5158b6f556</td>
|
|
<td>7b7880e62416e43457db699c0d13f118be4957897e3ed0f0abfa5d561c00a952dbeab759666defa54f4c6035ce4fd664</td>
|
|
<td>dcb6e320c63b703914d97f4549dfb8adbd2e7670b21b9001da5412949953e816527d81537fc5b5d77d0e1ece4a1b6d838099d5fa8ca8ab894acf90d94bae91cb</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab2b298d409c891edf1513d3484c5c164cb6060a64944ea2e6c0b6dd496f0097</td>
|
|
<td>[68a246ffe80acba0b194f586]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_fxyje5js.4bs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:17:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fxyje5js.4bs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:17:47 +0000 UTC</td>
|
|
<td>2025-08-17 21:17:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:17:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a3a373e7af1e1a849e77ac7afeda3c2fcb310114787f26f0bda956e435b85a2e</td>
|
|
<td>[68a4cf1f4971da3ff4f65d7a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a4454856dcfed999425856c0fd6a1b93a0ffaa9f3847c3c8553a54171ceb81ed</td>
|
|
<td>[68a28941494a241570529b12]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\tmpEXO_4quyqcfh.c4k.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T02:00:24Z]</td>
|
|
<td>[3a71ee92f23de090c1f5c4f973e12c93]</td>
|
|
<td>[0e445921ea26bec3569ea162bf961f3a24c0ed37]</td>
|
|
<td>[961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116]</td>
|
|
<td>[a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_4quyqcfh.c4k.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_4quyqcfh.c4k\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>3a71ee92f23de090c1f5c4f973e12c93</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 02:00:23 +0000 UTC</td>
|
|
<td>2025-08-18 02:00:23 +0000 UTC</td>
|
|
<td>0e445921ea26bec3569ea162bf961f3a24c0ed37</td>
|
|
<td>961f4bb7498ccf7aa4751f30417494d243c79af1718f03f523c7cfd08426ffb1f87178c832c28e3e370da02049389116</td>
|
|
<td>a3858a3b7ceac461231c166bbddcbf6395fe81051594f92472cac154339690049a4d7a7ffeb995c469b9ed386356d300b43e0a7e8581e9aeb4bad65d77c65328</td>
|
|
<td>2025-08-18 02:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0afa64e00fa3297457ecce77cec084a74bb8249564892f7bebfeb90889821242</td>
|
|
<td>[68a3146b5f0c41860c8c8553]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\subprocess.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[b98aec5604af4147d92232924b474ec2]</td>
|
|
<td>[9f22741de1461c01ea9501244734fbed0b843d10]</td>
|
|
<td>[a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7]</td>
|
|
<td>[fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>subprocess.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>81473</td>
|
|
<td>b98aec5604af4147d92232924b474ec2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9f22741de1461c01ea9501244734fbed0b843d10</td>
|
|
<td>a44c4c9cc1414ed72482717d8500a2279ddb3e6254325e661876fc94b7c776f80b765bfd07ca7e1768d94b817aab0cf7</td>
|
|
<td>fc91aa3f9232832b8085bf30453b5c85c1bf4e3e35afdd5ffd668d9603a115b453e5e8ee1a1ae157cf0befbb12fd2bf84e541a43a553b4528b14a815827ec82b</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0b6dfe5782a8538388a876949b905a42200e3a0782364dc9ce4bc31d0715f921</td>
|
|
<td>[68a1c8289d2b908295246da3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_45ebkynn.fr2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T12:16:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_45ebkynn.fr2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 12:16:33 +0000 UTC</td>
|
|
<td>2025-08-17 12:16:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 12:16:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0b9cfba6305c8496162fda85b7983c16a54a0cf9f440e78036aa9b1bbbd1880a</td>
|
|
<td>[68a2a7be3873668df54ea750]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_e0qjqdxl.ujj.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:10:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_e0qjqdxl.ujj.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:10:32 +0000 UTC</td>
|
|
<td>2025-08-18 04:10:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:10:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0c13c35bf20b1a1396f441950fc850abdb4789e4c33a49b1e674cca2f73425df</td>
|
|
<td>[68a45d72612cd15680b4837a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_24pv0bd4.rpe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T11:17:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_24pv0bd4.rpe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:17:58 +0000 UTC</td>
|
|
<td>2025-08-19 11:17:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:18:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ccd449b623f55b26f3976be2274e35b140cf5272362574dbbe9d88d8b102ea9</td>
|
|
<td>[68a44b460463afe0b03c0304]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_8c97621ff3534cd19b9e38158d7134a1.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-19T10:00:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_8c97621ff3534cd19b9e38158d7134a1.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 10:00:38 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0ce6997fa6eafbce91ac022bb3118f6a8653a53c0863a4e9c6b6323576adb12b</td>
|
|
<td>[68a4d176f9567d58ffcb80f2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:33:06Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:33:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0cef77375419ad8202ff4e7155a1455435de15f2d60b15ede6bc211911fde757</td>
|
|
<td>[68a5239e621d09b2b1ed5e68]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManager.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[ca0b0d10eb53b26c35284118371cec1c]</td>
|
|
<td>[ba2ffd3912e3b01d09e74f5d0b929108f5493d5a]</td>
|
|
<td>[9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df]</td>
|
|
<td>[3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManager.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerGui</td>
|
|
<td>67584</td>
|
|
<td>ca0b0d10eb53b26c35284118371cec1c</td>
|
|
<td>SystemManagerGui</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:30 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:30 +0000 UTC</td>
|
|
<td>ba2ffd3912e3b01d09e74f5d0b929108f5493d5a</td>
|
|
<td>9122ea9a22321300d1ea5539ad637db458249f21ea449358037fb632288f42aec8a54459f3ea679c10beaca896f395df</td>
|
|
<td>3d69d5ae0c96f276a9f3dcd15397be55649f0076a22b5d8623c25b744521ca9c2a3b9ac8be4bb63fe9c1d23b92528fb05072f75f47efcafcfd58089afaded1ea</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06d6384eaa2d1376de884f3855044df87f2e12c1b92086a6f8723dd79a85457b</td>
|
|
<td>[68a4b0fb13fac5171eeef0d7]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_CyrunSrv1]</td>
|
|
<td>[vm-cyrun]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.Infrastructure.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2280.872]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Alliance 7 Client\Cyrun.AlliancePD.UI.exe]</td>
|
|
<td>[C:\Program Files (x86)\Cyrun\Launcher\Cyrun.Launcher.exe]</td>
|
|
<td>[2025-08-19T17:08:08Z]</td>
|
|
<td>[7d99492eba75b4117d502f502784bec7]</td>
|
|
<td>[3ec8beef2e968bb0740afb894a42a4cb412370a1]</td>
|
|
<td>[4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830]</td>
|
|
<td>[43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>[172.17.252.160]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Cyrun.Infrastructure.dll</td>
|
|
<td>C:\Program Files (x86)\Cyrun\ADS - 17978\</td>
|
|
<td>Cyrun.Infrastructure</td>
|
|
<td>125952</td>
|
|
<td>7d99492eba75b4117d502f502784bec7</td>
|
|
<td>Pegasus</td>
|
|
<td>7.0.4.4644</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-13 08:50:18 +0000 UTC</td>
|
|
<td>2025-05-22 18:17:46 +0000 UTC</td>
|
|
<td>3ec8beef2e968bb0740afb894a42a4cb412370a1</td>
|
|
<td>4a6df7d6ae07fbfbca7886ed0922458c6803ea6b44d7417fc0219dddb6af11e688140483a216973a6ff18cbefef74830</td>
|
|
<td>43a9481fdae2c2b2eef9ec926e4dffab5e4668cac7bb7237c2671a4885285ca656c23a57d4f49d2115a5bce428aeadc194e52e92f782e22cae2dd4c909118c6b</td>
|
|
<td>2025-05-22 18:47:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>06df260c7f1ba98730dee7d60aff5ecc12aa9273592a62980464f2493eb4db25</td>
|
|
<td>[68a523949cec397f02de9f49]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BSSIDControl.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[de8df8b7c6fc4502d6f9335776b32154]</td>
|
|
<td>[850b37d6e0057b3ff641e78b7dd7f64fe1d7f109]</td>
|
|
<td>[8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f]</td>
|
|
<td>[9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BSSIDControl.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BSSIDControl</td>
|
|
<td>10240</td>
|
|
<td>de8df8b7c6fc4502d6f9335776b32154</td>
|
|
<td>BSSIDControl</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:22 +0000 UTC</td>
|
|
<td>850b37d6e0057b3ff641e78b7dd7f64fe1d7f109</td>
|
|
<td>8469ad99cce5a2d5c4162fe2e925fe8271138d4b15e472a60e0a287a59f511282abce4513775989f9660cbc7da8ea73f</td>
|
|
<td>9c21b4971476a819c724d6d7eefac3d6ea9e81d7b7801d705304fa2e58d9648b98106222461c6179e9cfcd5501f37d68254ce90a5c2728883077c83346142e65</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ab9b7bb85b4a86b0959ea8ab79a27d2943d17f81f93306f5628edf2f0e1d69ee</td>
|
|
<td>[68a4855388937a93ff144374]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Authentication.Data.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:08:10Z]</td>
|
|
<td>[f6f2e748b8e7aebde05c149eccef41f3]</td>
|
|
<td>[279bb7a5349ffe29333bc142aac24e8e2cfa883c]</td>
|
|
<td>[c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de]</td>
|
|
<td>[2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Authentication.Data.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Authentication\</td>
|
|
<td>Stryker.iBedServer.Authentication.Data</td>
|
|
<td>11264</td>
|
|
<td>f6f2e748b8e7aebde05c149eccef41f3</td>
|
|
<td>Stryker.iBedServer.Authentication.Data</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:16 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:16 +0000 UTC</td>
|
|
<td>279bb7a5349ffe29333bc142aac24e8e2cfa883c</td>
|
|
<td>c17f5f932ae17aa983b6d24990ebf06c4d16bd6e278b97855315d81b951ddf7b6622a361ad07107727ee375edc9538de</td>
|
|
<td>2be8fb7233a7ad62e3043cfd4d1202dc1f07f3617f9a6a7f3701649e76083c6ad338246be9b6acc34d0979093a45db65473c3d6197e2dccdc5cec663ab6d13e8</td>
|
|
<td>2025-08-19 14:08:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>abfc4eadbf5b3acb9932b4f2d763d6aa06f05c2031a181854aa56996337ce231</td>
|
|
<td>[68a4ce1bb0bf18198cad4ef7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cweckucy.31w.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:18:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cweckucy.31w.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 19:18:42 +0000 UTC</td>
|
|
<td>2025-08-19 19:18:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:18:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ac5c7e37104a139a3ea877b75658eff5f399de2333e5ba8c3e5388f8890389dc</td>
|
|
<td>[68a523949cec397f02de9f4f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Control.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[3f5edae09a2d2bbfda7864aa86623e86]</td>
|
|
<td>[a31163d319bb84f551dcd9ee88b4bc9fb6323152]</td>
|
|
<td>[7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9]</td>
|
|
<td>[87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Control.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>20480</td>
|
|
<td>3f5edae09a2d2bbfda7864aa86623e86</td>
|
|
<td></td>
|
|
<td>1.0.8565.40744</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:10 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:10 +0000 UTC</td>
|
|
<td>a31163d319bb84f551dcd9ee88b4bc9fb6323152</td>
|
|
<td>7b722ba59d6e8cfa5c3ca0ff56b82ce04454ba014a09b92994a3a78310d3295bdcca6e4f01288a7004c5116a1a76c1b9</td>
|
|
<td>87fa8acdf4f530d483b08e2bfa763f45e8373a20031e456c98911ad8f157f5d6aeec7101ce61d52db603506b251cb46a26ca8c3f2a43d61b3f38dd0304ad1a47</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>acbc4f0a5eaf7c7d93ac6e6b7215bfc3335342b6e2dd8dca6f53dcb7ee79b033</td>
|
|
<td>[68a2a5fb28c6be6b08f580b6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_5tf0ydu5.0zc.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:03:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_5tf0ydu5.0zc.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:03:01 +0000 UTC</td>
|
|
<td>2025-08-18 04:03:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:03:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ad17815283c3efec2632516bfb653476c33644002df5f1aa22804c8b165f6170</td>
|
|
<td>[68a311cdc2d0d6e3eb77f21e]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\WindowsPowerShell\Microsoft.PowerShellISE_profile.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:39:07Z]</td>
|
|
<td>[51edb535cb2fcd632ec8c09c14fe100f]</td>
|
|
<td>[ed4596c1f4043fb241a493063969f44e970c3e04]</td>
|
|
<td>[994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd]</td>
|
|
<td>[a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Microsoft.PowerShellISE_profile.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\WindowsPowerShell\</td>
|
|
<td></td>
|
|
<td>152</td>
|
|
<td>51edb535cb2fcd632ec8c09c14fe100f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-29 17:38:09 +0000 UTC</td>
|
|
<td>2023-08-31 18:12:15 +0000 UTC</td>
|
|
<td>ed4596c1f4043fb241a493063969f44e970c3e04</td>
|
|
<td>994beab6a63b5f7e508a6a90fd6814e70f36a945daa0f4dbeb99bc8bf630d961bf800dc456dfdf978f5e18b12a7991dd</td>
|
|
<td>a4fe60c91cdd8d7316388ca7f9a124b275ff0fe592396d4ca403b528b433d73f1267fbcc6a3ef5b2870994651ab1d45e80bc9cb3b65e6da3c8b5acd16f6180a6</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ada1fdc640def878fdcc18021bedea9d70ed8c536f9747198187bbb5d17356cf</td>
|
|
<td>[68a238fd2d0808cf577455c5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_od0m00va.ovq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:17:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>[172.25.19.217]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_od0m00va.ovq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:17:57 +0000 UTC</td>
|
|
<td>2025-08-17 20:17:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:18:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>adaefc2aa3397945c97b623d64120ad2b6519d4851e36bff57f9f0883c771108</td>
|
|
<td>[68a164117581c1d365b56ef1, 68a2b59a1058adce8154cb02]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\adminscripts\SCMNightlyAdmin.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:00Z, 2025-08-18T05:00:00Z]</td>
|
|
<td>[3347796315705d161a99178531496358]</td>
|
|
<td>[edba27f15fb9731ee5129e5325e18ebbab93f9a2]</td>
|
|
<td>[2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687]</td>
|
|
<td>[0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCMNightlyAdmin.bat</td>
|
|
<td>D:\adminscripts\</td>
|
|
<td></td>
|
|
<td>70</td>
|
|
<td>3347796315705d161a99178531496358</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-17 15:10:50 +0000 UTC</td>
|
|
<td>2013-08-21 18:34:04 +0000 UTC</td>
|
|
<td>edba27f15fb9731ee5129e5325e18ebbab93f9a2</td>
|
|
<td>2bcd7236b49070f6a5eda6a27dcb53b35d3eb9ea8393c77b94df2fb1bcbf47ca951a3ff22de9423ac1f443bcda386687</td>
|
|
<td>0cee859fbbe8cccb093c0d1bef17a968f043c8cd23efccaf75464d7f9e843ad63941931c6f66d9ee9f95847b072928721e65cd11f3e2d4c8bfb056d91b7424e2</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae73137687a27f2a7dac88f244bb0a8bf7932a7d05c197173f1621766e66d7e2</td>
|
|
<td>[68a253ef9fa0433bd6158684]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_eygtkwak.uks.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:12:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eygtkwak.uks.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:12:56 +0000 UTC</td>
|
|
<td>2025-08-17 22:12:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:13:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a777578b5261143b213a8b866c266b434757c0d70c0bff30823ba2aa77cb6f99</td>
|
|
<td>[68a1dcde696c67888926ebf4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_g5umrco1.qad.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:44:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_g5umrco1.qad.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:44:48 +0000 UTC</td>
|
|
<td>2025-08-17 13:44:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:45:02 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>a7cccc87ac2b6a10d20c9bc854dda16ada4efba273b52f1b2aea2e1590febe83</td>
|
|
<td>[68a311cdc2d0d6e3eb77f213]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\AddRemoveADGroupMembers.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[6125933ae4a52b308e5db3f580da5971]</td>
|
|
<td>[9bd2f70e769baa4eeadac833831062423a4ace2b]</td>
|
|
<td>[c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b]</td>
|
|
<td>[3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AddRemoveADGroupMembers.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>433</td>
|
|
<td>6125933ae4a52b308e5db3f580da5971</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:40 +0000 UTC</td>
|
|
<td>2021-02-15 19:13:49 +0000 UTC</td>
|
|
<td>9bd2f70e769baa4eeadac833831062423a4ace2b</td>
|
|
<td>c9a0c058ed29dee98f40edce2e2432c6a3c1bf5ec098965ec28eeeb44fea9bb59466b5b3be265cb36ed6dd3cab31fc8b</td>
|
|
<td>3e6b4df4b8efefda0b240515e2de47d20fe6c35bb0e4fe4ce137a26132e6eabaa767e7c2c62febc673b2d695bda5e85df413f990a6985f087b8d0107941014d5</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b3aee295edf894a88964eb7fa381561a95f892e2a2a3c29630c97c882aab46d9</td>
|
|
<td>[68a31bbacbbb0c7bfb580ca8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2kil5soy.rh3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:25:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2kil5soy.rh3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:25:27 +0000 UTC</td>
|
|
<td>2025-08-18 12:25:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:25:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b3f3dce7a596ba8e3a87f5ddeaaad498b74d1b3393eecfc602a33d4968ffaf2b</td>
|
|
<td>[68a2219559db607aeb81cbd5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_a2eipcbx.muw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:38:04Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_a2eipcbx.muw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:38:04 +0000 UTC</td>
|
|
<td>2025-08-17 18:38:04 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:38:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ae938cf2fc97de3ecebb4366788b40c4b0278d5d8590cfec49822ceccaba6cc1</td>
|
|
<td>[68a32505df020a242f955315]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_q3yphmy4.esi.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T13:05:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_q3yphmy4.esi.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:05:08 +0000 UTC</td>
|
|
<td>2025-08-18 13:05:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 13:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afcee321d7c7d802d9cd2489bd88d1aa30043b3576078e4ecbfb9c8fb3b7df7b</td>
|
|
<td>[68a165183f1f36f01a2f3ff2, 68a2b69c8b983fbe0c82338d, 68a40846a972cb7f3cce6ebb, 68a5578d6ea23be9f4b23b73]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vroggerb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\rb\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z]</td>
|
|
<td>[9b70ea11df34de22f6a0b16fddf15abc]</td>
|
|
<td>[296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358]</td>
|
|
<td>[6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052]</td>
|
|
<td>[ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\rb\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>9b70ea11df34de22f6a0b16fddf15abc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:22 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:22 +0000 UTC</td>
|
|
<td>296e27b8b6aaaf4c3ff113c1fe54ec11da2ca358</td>
|
|
<td>6533cc428eeeb243b39cf2116af235893358ac126fd88d05a6c154eb95c783fb20372541c887e51c20fbd9cfedc7f052</td>
|
|
<td>ea7cff8a703ceaee4d497c9ab509e84d817c8b3fda9c43c881afcbbd5ef2d0c66e61100c5916fc54146c8fe3aa2e8974dacdc3dfa310671f51071fb63753d292</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>afd354cdedd2b9416488113376fb0d902eed137a474db3f4950dfe724f4af992</td>
|
|
<td>[68a3146b5f0c41860c8c84f1, 68a3146b5f0c41860c8c852e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\collections\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[d9f076f7a677fa5a6ef8c75ca0ba3c77]</td>
|
|
<td>[92b5e1df018c550f117247f779ae19db21eaae9f]</td>
|
|
<td>[4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a]</td>
|
|
<td>[a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\collections\__pycache__\</td>
|
|
<td></td>
|
|
<td>73105</td>
|
|
<td>d9f076f7a677fa5a6ef8c75ca0ba3c77</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>92b5e1df018c550f117247f779ae19db21eaae9f</td>
|
|
<td>4d44ee35c2002fecdf34c390332d2243c6af45a265fce29e3ce8f672a43fc4f406642236bc5a7eb1cd4510d32097717a</td>
|
|
<td>a6d051f168b3bcdca15eb50604ab5a50005d1ee8472a03e2d9fdbf8007674f032c3c84a5965fadb79864b9888ade4ff3b5cff14beee7d11f041a0dfd92d773ca</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b037b79be171f4aa0667e324cadfec44ffe7822980c741fe4c0e08263c13e651</td>
|
|
<td>[68a5239e621d09b2b1ed5e50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:35Z]</td>
|
|
<td>[3f67c30ff4a260e1eb472273f8adddae]</td>
|
|
<td>[6cc927b8950e31a2117aabc6226b40ba6e255fe0]</td>
|
|
<td>[1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98]</td>
|
|
<td>[32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Data</td>
|
|
<td>1496576</td>
|
|
<td>3f67c30ff4a260e1eb472273f8adddae</td>
|
|
<td>Data</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:24 +0000 UTC</td>
|
|
<td>6cc927b8950e31a2117aabc6226b40ba6e255fe0</td>
|
|
<td>1906b337b56fba3236609c837840193779b5c3cc6a1b0355eaf33874bddcdfbfb3684672cd770bb47cc7a97df62cac98</td>
|
|
<td>32d4bced131f206b477410e3489a747c00c91aaf3cf456744a661521e404f1371788f7950130a02fb6cf820970a468ea27131ca487c1580e74352d385412b874</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b05164c297f162623bc1e95e24652366aefa9c1981e348865e032cd0560206f2</td>
|
|
<td>[68a198085cb01f9c46d51708]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kvkgjkg.3ev.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:51:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1kvkgjkg.3ev.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:51:14 +0000 UTC</td>
|
|
<td>2025-08-17 08:51:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:51:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b0c8cbaecbdb0386376e51b838bdc5126f68432b9ae7ee2a40ccaabf7aa347b7</td>
|
|
<td>[68a533e1954adb953e029f0c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_o5ngoajq.xjy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T02:33:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o5ngoajq.xjy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 02:33:00 +0000 UTC</td>
|
|
<td>2025-08-20 02:33:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 02:33:05 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b13fd81c7196ec3a08414d632e41768dd453368707898569a112522c52d021a8</td>
|
|
<td>[68a191be4a6689329df75d3c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_0cdtq1pr.td3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:24:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_0cdtq1pr.td3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:24:26 +0000 UTC</td>
|
|
<td>2025-08-17 08:24:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:24:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b1488a51345ec65399924b338a116841ec55647b58545f134b763fc74e6cdd6b</td>
|
|
<td>[68a5239e621d09b2b1ed5e51]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PlaybackGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[91881048e0480bb6f1d2a01a584dbc0e]</td>
|
|
<td>[197bbba69f29bd0ad3259f80e9fbaa46572c04ec]</td>
|
|
<td>[56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a]</td>
|
|
<td>[4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PlaybackGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>112128</td>
|
|
<td>91881048e0480bb6f1d2a01a584dbc0e</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:58 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:58 +0000 UTC</td>
|
|
<td>197bbba69f29bd0ad3259f80e9fbaa46572c04ec</td>
|
|
<td>56eb181b593e401bd4ece48906b5ac8eeff5bd06fb4210c07a3cd9174858c76012b413654d176ad25a60a18268a1e20a</td>
|
|
<td>4a0dea4d61863254a0d60da4ffa1712f3ad08895959944b9db23395dca236d7de4ee942b601bc09640c8f10f4db8fbbcce56dd51cbf1fc81ca430cd0dd046cc0</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b78984455debffa0028d3e0622604eed012e7af47b86694db7145688d5665881</td>
|
|
<td>[68a3245120cdf2a94b146f91]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\tmp_xyrtah4t.fox.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:02:08Z]</td>
|
|
<td>[5a50d1d12cefd1d7851797d436fefba4]</td>
|
|
<td>[bf6cbc8bade556ceffa2a7e056ad531a37ae415f]</td>
|
|
<td>[0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60]</td>
|
|
<td>[b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_xyrtah4t.fox.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmp_xyrtah4t.fox\</td>
|
|
<td></td>
|
|
<td>4669542</td>
|
|
<td>5a50d1d12cefd1d7851797d436fefba4</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:02:08 +0000 UTC</td>
|
|
<td>2025-08-18 13:02:08 +0000 UTC</td>
|
|
<td>bf6cbc8bade556ceffa2a7e056ad531a37ae415f</td>
|
|
<td>0d41cdeacaff8a12f1e7b5e73b59266976493bf00d13cda19fd72beefc385dfef2053543fb83c4cf022108e20928cb60</td>
|
|
<td>b49cd086ed6679f2d28daa0951e87460134d0f87d644ae8628b4d49fa77974464addcc80f4e924a78d9105c72449bf32e340a8ee11ee2275ee44bbdd087081e8</td>
|
|
<td>2025-08-18 13:02:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7b074a8be506995e4f7f47f986e3fa7e7e5de6b93db80ae4b178c336f308368</td>
|
|
<td>[68a4c47e2db3c760ec3d2a2b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_7df3f40078b24ec2b13b78976237aec3.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T18:37:40Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_7df3f40078b24ec2b13b78976237aec3.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 18:37:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b180bc0178b09ceeda8bfbc9d31b027b81c5d22112d3565439e93d55fba48e26</td>
|
|
<td>[68a34b98a6132bf659cce5b6, 68a34df0b71eea1289980a1b]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.BadgeDesigner.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:16Z, 2025-08-18T15:58:07Z]</td>
|
|
<td>[494ef760b62995f95b39dbab2b3dede0]</td>
|
|
<td>[daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4]</td>
|
|
<td>[b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81]</td>
|
|
<td>[973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.BadgeDesigner.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Badge Designer</td>
|
|
<td>1878528</td>
|
|
<td>494ef760b62995f95b39dbab2b3dede0</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:58 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:58 +0000 UTC</td>
|
|
<td>daa5c123115f7f9f8f3a9aa99e65bb720c1d03e4</td>
|
|
<td>b3e1b6a5db65284b07f1f266a0530a5104de39af3f14e7763f9d62ca12b0d9e8d76a97d17595cb579433b8e0f1528e81</td>
|
|
<td>973791a80c23132f526c24a39d5917f8c46c0957b4955f8775c4d36e220230ad43a04eaf1c55a04c333cfb6dcff4141276377516cdac013bac82694bdeffd27a</td>
|
|
<td>2025-05-13 05:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b20b976d3c543ddaf040e446fb5d2b222c48d92f4138ac8c84ff50c098a595a1</td>
|
|
<td>[68a311cdc2d0d6e3eb77f215]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GP-Result-2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[5df2e31963b90c169c0b60f6fcbe78ca]</td>
|
|
<td>[3d68e24539d2676b2e1baf19621f037391dc5d8b]</td>
|
|
<td>[5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e]</td>
|
|
<td>[c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GP-Result-2.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>281</td>
|
|
<td>5df2e31963b90c169c0b60f6fcbe78ca</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-02-22 21:35:08 +0000 UTC</td>
|
|
<td>2023-02-22 21:35:08 +0000 UTC</td>
|
|
<td>3d68e24539d2676b2e1baf19621f037391dc5d8b</td>
|
|
<td>5eef406206be197882e94f9489c713250e0f4e219bb2b509ef6b28f60ed70ea2d52c6e8227cc3fabb511f0f6025d043e</td>
|
|
<td>c25c5f4b655424bdddc4202ba18db27f9d1543a8e38c251f5837901221d09c9f05af673bfb8709fcbec6098772d76a90e9b0d1fa7450387f0fe91d3eb04d0a0d</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b29891eb56e0294032177d3e010dc819c5b71ef58a86a6b4d59901c6903f24bd</td>
|
|
<td>[68a5239e621d09b2b1ed5e4d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PeCommServicesFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[2b18faf53fc63bb5296888bd87664da1]</td>
|
|
<td>[4f0c9afc061841d8539cc5a3e3320483d837b9da]</td>
|
|
<td>[be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb]</td>
|
|
<td>[2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PeCommServicesFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PeCommServicesFacade</td>
|
|
<td>90624</td>
|
|
<td>2b18faf53fc63bb5296888bd87664da1</td>
|
|
<td>PeCommServicesFacade</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:18 +0000 UTC</td>
|
|
<td>4f0c9afc061841d8539cc5a3e3320483d837b9da</td>
|
|
<td>be78d23afaab6d16ee02244bc6ca2f02a1b20de56bb431a6f955213b772bf7fa08acd89dcbe92fc83abdc321c953c2eb</td>
|
|
<td>2cdb1f5c63cba08a1696ee5dbedcf81c2cc13f91977f90117d4ddd06ec60c1f0d4c24f8114758c90fb5ed7a100e260cbd26f077b3e1de09fcb50102891a7f393</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b2b829e8a8e70f50b6a8cf06fce67da3a1ca6a94edaf3695549d26121c3b7714</td>
|
|
<td>[68a4767cdfcdccd185a6a0e1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_d04ale1f.v4l.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T13:04:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>[172.17.246.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_d04ale1f.v4l.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 13:04:58 +0000 UTC</td>
|
|
<td>2025-08-19 13:04:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 13:05:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b2f925f8d062ab2fc1673c086fb48594e430fd2c0ec7eb934f81d96a34d0ea16</td>
|
|
<td>[68a164af314711b37247c0a3, 68a2b633bc43c5800255e65f, 68a408552c9c833f6d66b3f9, 68a559867a66111383e972e2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG1A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[ef14e4a8cc642332fc30ac0bcb94fe34]</td>
|
|
<td>[6caa0f9496776587777d38905a7de70c6487a3a3]</td>
|
|
<td>[04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74]</td>
|
|
<td>[22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG1A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>ef14e4a8cc642332fc30ac0bcb94fe34</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:31 +0000 UTC</td>
|
|
<td>2022-12-21 07:59:47 +0000 UTC</td>
|
|
<td>6caa0f9496776587777d38905a7de70c6487a3a3</td>
|
|
<td>04ca73f3538b5ce58f6fa9f33f56043ec01d1be5bb9759b52ec155bd0d0f7e27214fa4a5db73d8372f51af890d362c74</td>
|
|
<td>22236d4439ded9bdd3bf7ca10b2befe1bacee593598f5210b5441208530c06cd0e725b62942ca1aff3a9cdcea7b24e749fe7d2a0c03c69b557e8d433f9623000</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b37be6e880d1111feb27c4482864a487c1ce7bf7ff74f481aef0aa5cbd0cb936</td>
|
|
<td>[68a5c233a5c8de03b7ff4fb5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_fec2b8080fd34625874eec49b533f1b5.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.879]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:40:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_fec2b8080fd34625874eec49b533f1b5.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba0a35ba189d00bdb6b111752821f3669b627aaca52bb4b10f5fcf64160f529b</td>
|
|
<td>[68a223c52dfc87abfe6c481e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Fairmont]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xhjpbhxc.j3s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T18:47:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>[172.16.121.132]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xhjpbhxc.j3s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 18:47:29 +0000 UTC</td>
|
|
<td>2025-08-17 18:47:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 18:47:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba6629e795cffb8817cc3c0107f7236a6c5de18c79028ebf70764952b39da475</td>
|
|
<td>[68a523949cec397f02de9f50]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CoverageAndAccuracyAnalyzer.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[ae5d8bbe8d977a4803d26ca7e9f13e54]</td>
|
|
<td>[8657b548e0b81e31a64d88c4fb0a7ddc694c7823]</td>
|
|
<td>[868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9]</td>
|
|
<td>[c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CoverageAndAccuracyAnalyzer.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>458752</td>
|
|
<td>ae5d8bbe8d977a4803d26ca7e9f13e54</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:24 +0000 UTC</td>
|
|
<td>8657b548e0b81e31a64d88c4fb0a7ddc694c7823</td>
|
|
<td>868dea31934ed59cc7dbf4d47292288b7e139602bd30fb57caff4ab8dd58d0d1ff533253f148adc993f2f0f2848178f9</td>
|
|
<td>c76ac0168d2aad7fd569aaa450ffab394de0693f1be83d076558e63d8741785c0c71485d58730b7bddb97a0a9ef49705ef0f0b87ed26e00571383041e66618c6</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ba72fc4388172874b1939f7066f2216e2a3bc68fd4270ce70289271537f3b218</td>
|
|
<td>[68a34b98a6132bf659cce5aa, 68a34df0b71eea1289980a0f]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Controls.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:10Z, 2025-08-18T15:58:03Z]</td>
|
|
<td>[b31ce0cf803ae8da1785b059a6bfbb59]</td>
|
|
<td>[1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb]</td>
|
|
<td>[19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b]</td>
|
|
<td>[f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Controls.dll</td>
|
|
<td>C:\Program Files\RS2 Technologies\Access It! Universal.NET\</td>
|
|
<td>Controls</td>
|
|
<td>823296</td>
|
|
<td>b31ce0cf803ae8da1785b059a6bfbb59</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 15:02:44 +0000 UTC</td>
|
|
<td>2023-04-26 15:02:44 +0000 UTC</td>
|
|
<td>1d8bb8c981f8a2dda5692f07f4f0a7676873bfeb</td>
|
|
<td>19ab0c174c2bd40d55d07beeb252db5b5e921cbd88401643ac3e029a3953a57ffb722f58fe27f3d1b3527affe1fea34b</td>
|
|
<td>f9e91f0d887b1a5504d8d67bd605d988afa4f53bb244fbe6dd8d02669cf4a8defb522b50afe2f9d7f6eea6dc49336fe61c15c7d94c09e7b2f1e769f8aa9a34b8</td>
|
|
<td>2025-05-13 12:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b4078ab651d17c4b369f8715ad39efccc3486c43f9251216892df4b2c5803d82</td>
|
|
<td>[68a1a4ec481e55b8d125b626]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cvo0wbij.qu1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:46:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cvo0wbij.qu1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:46:14 +0000 UTC</td>
|
|
<td>2025-08-17 09:46:14 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:46:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b511a6022af485b824a56917829fb0ef0ca73c3f9e1d33f129726fc72d2c3336</td>
|
|
<td>[68a523949cec397f02de9f44]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\AnalyzerFacade.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:25Z]</td>
|
|
<td>[8b60c2b5e55285098541e339810946da]</td>
|
|
<td>[6d4c57ebde036e7090fcdd723f58ad5eee852c70]</td>
|
|
<td>[7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1]</td>
|
|
<td>[6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AnalyzerFacade.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>AnalyzerFacade</td>
|
|
<td>12800</td>
|
|
<td>8b60c2b5e55285098541e339810946da</td>
|
|
<td>AnalyzerFacade</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>6d4c57ebde036e7090fcdd723f58ad5eee852c70</td>
|
|
<td>7a4ec6eb5e38019e3d6eb28c4f249650ca4b819ef4ffe8a8eee702c70c335c6b98e509e7c60504598124cd67eb71a0c1</td>
|
|
<td>6700f8ca55ec50fb70e73ecf201c959b05cfb8c978263f48c1538b639ab42b13f05b1f3fccf0ed491ce055939bec4dd7a7d6fa2ef410e32d85d6a09ce17bf7e2</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b561139fa338c5b200834e229f07a555a9205fe738e17c4049ff79395c89908a</td>
|
|
<td>[68a55e004fbc48ef3ae2d514]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_cann4xwj.005.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:32:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>[172.17.146.5]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cann4xwj.005.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:32:41 +0000 UTC</td>
|
|
<td>2025-08-20 05:32:41 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:32:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b59250b9adde69abc6f23216abeb16e32637bb047a8192277bc1a8c55586c512</td>
|
|
<td>[68a3146b5f0c41860c8c8533]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\signal.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z]</td>
|
|
<td>[98e32654cc4beecc5b9986354e2cb5dd]</td>
|
|
<td>[8a835d62b26651f30621da221a647e38e6c7a3df]</td>
|
|
<td>[c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff]</td>
|
|
<td>[59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>signal.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>4546</td>
|
|
<td>98e32654cc4beecc5b9986354e2cb5dd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>8a835d62b26651f30621da221a647e38e6c7a3df</td>
|
|
<td>c94620ef40be8876acd3a24f13915b9111a17bc55a4aabf52ac490b70e590c4f0ed369bca57d0b2c42502a3763f594ff</td>
|
|
<td>59a1e0f047f25c10658694ded8f4a8435f481de50a7fa137ebf7c24a1da833866b97ae6e1cc6e8678b2ec0f783252d2484ab6183be03a409ef4ea6689d93a708</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b59bec3484b1e3784e15b424f7e821225085d138b019e05882bda94241dc00e3</td>
|
|
<td>[68a311cdc2d0d6e3eb77f210]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\STJ-RoboCopy Backups.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[c31cd4a84106cd950c509053746c600a]</td>
|
|
<td>[6947d2e1b5f8f8b4edc283006497752985874c4b]</td>
|
|
<td>[8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398]</td>
|
|
<td>[15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>STJ-RoboCopy Backups.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>2852</td>
|
|
<td>c31cd4a84106cd950c509053746c600a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:22 +0000 UTC</td>
|
|
<td>2025-04-16 19:23:14 +0000 UTC</td>
|
|
<td>6947d2e1b5f8f8b4edc283006497752985874c4b</td>
|
|
<td>8da3a70adb0f56bd4839114bd3a4606f4b3194d679bbc95661fde7fb5b472d4fea02dfa4e5cfe5463a9da1e40cd0d398</td>
|
|
<td>15d7ac69b0ccf8d0c09d852c2f4591cb8c82a53dfafb57779f2c3dd1e5cb65b9f5d491553b8d49ea2567e098ca635beca0a3b0b34abd25d6bb3b584be7165577</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b5d7aeb1b57572ef3c25893b3dbdfbddff207e741e87b3af78941e08b1b66f3c</td>
|
|
<td>[68a31ae889b2c7794e79451a]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045\AppData\Local\Temp\2\__PSScriptPolicyTest_hwz0hraw.sk0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:21:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hwz0hraw.sk0.ps1</td>
|
|
<td>C:\Users\be10045\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:21:56 +0000 UTC</td>
|
|
<td>2025-08-18 12:21:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:22:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b67e96557db684ea3d20a57301813992a9bb287858163364903b7812408d80dc</td>
|
|
<td>[68a2a2b145e54eb8011b598c, 68a3f3b82b0ad9191f472694, 68a545ad1588ee149e3e4b07]</td>
|
|
<td>[2]</td>
|
|
<td>[jskwv]</td>
|
|
<td>[I-nMoveItXfer]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\MOVEitTransfer\Scheduler\Transfer_Backup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T03:39:01Z, 2025-08-19T03:39:01Z, 2025-08-20T03:39:01Z]</td>
|
|
<td>[74742b6a20af7f6a8d04c5730e252d6f]</td>
|
|
<td>[5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9]</td>
|
|
<td>[705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc]</td>
|
|
<td>[3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>[172.17.253.253]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Transfer_Backup.bat</td>
|
|
<td>E:\MOVEitTransfer\Scheduler\</td>
|
|
<td></td>
|
|
<td>179</td>
|
|
<td>74742b6a20af7f6a8d04c5730e252d6f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-02-21 18:38:03 +0000 UTC</td>
|
|
<td>2024-02-27 13:33:08 +0000 UTC</td>
|
|
<td>5ffc8726c6e61e78d3ec8db5725fa34325c1e9c9</td>
|
|
<td>705ba06a0392b195a44a232dbb82cfb6d32a72f5e83c68876778ce8e25ec3143bd83b331b3df7bedd1080327bc7e67fc</td>
|
|
<td>3ad5f34d43d6032834e83715ae3abc1a07cb09ded2be2e3a206011e4a6a61be2c4990258f4ec0ea39f40d18bbc450a49d2746f8854d1ef4d95cdf443d2c22ff9</td>
|
|
<td>2025-08-09 03:39:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b77c030cc7905994ec426f0da89c90fe737ec024b6c5993906e40ecb5da71451</td>
|
|
<td>[68a37f2f3086ee3e1235fb78]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_biqeuy3o.ye3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:29:49Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_biqeuy3o.ye3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:29:49 +0000 UTC</td>
|
|
<td>2025-08-18 19:29:49 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:29:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7825fdc3e3579c3e55c8ada3988398c80f2bf0210559ffd4a4a2e877281142e</td>
|
|
<td>[68a254cb23f365394e70285a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fed2ttov.ux0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:16:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fed2ttov.ux0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:16:32 +0000 UTC</td>
|
|
<td>2025-08-17 22:16:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:16:43 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bd79e98f45782e89ee51e26e013872c1faf37f65e8587e8548d46ad3f983620c</td>
|
|
<td>[68a241507a42095fec9759e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hintranet]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aolq2wnp.tpe.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:53:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>[172.25.18.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aolq2wnp.tpe.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:53:27 +0000 UTC</td>
|
|
<td>2025-08-17 20:53:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:53:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7d519ae6a735e97fcb0cd79bdab293c9bcfa2506bb6bd7f8fa5d472db60459c</td>
|
|
<td>[68a523949cec397f02de9f4e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\CommonPropertiesViewAccessor.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:27Z]</td>
|
|
<td>[d5b36a1cfb5d705b9b73158b06477362]</td>
|
|
<td>[d9fd05e56d2e29cc1562b515b18468fc3f4a5b78]</td>
|
|
<td>[d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f]</td>
|
|
<td>[3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CommonPropertiesViewAccessor.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>CommonPropertiesViews</td>
|
|
<td>10240</td>
|
|
<td>d5b36a1cfb5d705b9b73158b06477362</td>
|
|
<td>CommonPropertiesViews</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>d9fd05e56d2e29cc1562b515b18468fc3f4a5b78</td>
|
|
<td>d0e376cb9e8a2c62161617ed84e3fd473acecb5f59a16f8542586481cc21a8b1fc6e178e8804559f42c86589e949a83f</td>
|
|
<td>3f2f1b40032d7a3e7ac3e1f646016751dd4f002c861124f7ac47eca0bc0d4a9149ef581bb5a710ebaf9dbf777caf9c594b1ebd3605a28173d2f249744c733a0e</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7f2e8f1f6db47a8161afee3f7622b254ca82a8359fd0abb491c6c6dfbf4d64f</td>
|
|
<td>[68a311cdc2d0d6e3eb77f206]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\Get-O365Recip-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[499c7364c1c683bfe66b60484bcd9d37]</td>
|
|
<td>[ac1ccb570f21610993e4deae5958e14f68b2e40c]</td>
|
|
<td>[3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd]</td>
|
|
<td>[01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Get-O365Recip-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>47512</td>
|
|
<td>499c7364c1c683bfe66b60484bcd9d37</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:56:32 +0000 UTC</td>
|
|
<td>2025-02-28 16:56:32 +0000 UTC</td>
|
|
<td>ac1ccb570f21610993e4deae5958e14f68b2e40c</td>
|
|
<td>3abc426c6aa3d9d2d331d37d54ef56e5fbafaa4c79f9fc1d33da5c4af35a2e13d37713543580dbffbc885b28bd63f9cd</td>
|
|
<td>01be1987b4672b36f36ed785abf1b380f3227de496d620a6d6424b0b1bebc4c3ea161684cc7f02e8a077979d21fd4df7d4b1c6a6b3395dab30080fec9c722b68</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b7fe4622933d7c1a7c53299db1c824d52a784e0af74283aae7ec1b9169dd8a20</td>
|
|
<td>[68a164af314711b37247c0a4, 68a2b633bc43c5800255e660, 68a408552c9c833f6d66b3f8, 68a559867a66111383e972e4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG3A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[527c15cbb2fe42bc3c85f5a6c8722700]</td>
|
|
<td>[ab323a93daa8ccdbc6c23f5fbf5779189899cfc3]</td>
|
|
<td>[030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c]</td>
|
|
<td>[890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG3A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>527c15cbb2fe42bc3c85f5a6c8722700</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:45 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:45 +0000 UTC</td>
|
|
<td>ab323a93daa8ccdbc6c23f5fbf5779189899cfc3</td>
|
|
<td>030fe54070844f7dd5149887df925d73eaad8b07a9534e371e438903a0a89ba02e1d5d9c2f02f8ae763e09cf5cb01e9c</td>
|
|
<td>890fe4abceb4612a14f4d4c88128a0288c04e4e9faccc34aee07b6492f1454a65332dd1ead98329ab73b48eb17d54c269d588f599d793475a1b020140a013a4d</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b84fc2be29f8ec8d88aeeab2dcb336c1f5f8e6ca8377fc5e362c14b5d7107cfa</td>
|
|
<td>[68a5be0ff6fc3715f4449f44]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\tmp_5ltoq3rq.ifx.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:33Z]</td>
|
|
<td>[965ce93ed86a419fab19dac9c846905f]</td>
|
|
<td>[db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef]</td>
|
|
<td>[3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e]</td>
|
|
<td>[6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_5ltoq3rq.ifx.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_5ltoq3rq.ifx\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>965ce93ed86a419fab19dac9c846905f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 12:22:33 +0000 UTC</td>
|
|
<td>2025-08-20 12:22:33 +0000 UTC</td>
|
|
<td>db6a51a4cf084c9f2314b2e6fa3af165b5ea19ef</td>
|
|
<td>3ac10e80263e9761c96a0dfddb3550468cc8d548a9486eb1779a12e1db1bdb2c38c9561bce3e66a6d7d240697a1cb37e</td>
|
|
<td>6e8b3777b1a08b62563e89271ec1a3736b432210a5b6ebbd5437d5f89c842113c377c8ea4e3ac26945d8c5d719f63fc2ff5f9a76bfddfa782735159ad7bf8234</td>
|
|
<td>2025-08-20 12:22:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b85b23da452663f58b6f9b7ab45593958feea65172bf427c8b37face06a87982</td>
|
|
<td>[68a3146b5f0c41860c8c850b, 68a3146b5f0c41860c8c855e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_parseaddr.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[7b77eb5e6cbc5ad91a9839f110240b19]</td>
|
|
<td>[c026a9d1bf349081e31bc6d062263cd6283cadee]</td>
|
|
<td>[d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5]</td>
|
|
<td>[4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_parseaddr.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>23570</td>
|
|
<td>7b77eb5e6cbc5ad91a9839f110240b19</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>c026a9d1bf349081e31bc6d062263cd6283cadee</td>
|
|
<td>d16f5bf52433cec1a34eaf22dacf29bce0eb456170da048a4d549054a022ade50803ed2537307d47ffbf9c26fb727db5</td>
|
|
<td>4a82d2a579b60032d3e7ce657cf9191678117304818e18c65c91981ec0b5d630f6716e5a8c5a8a9b9ee899f854b33f985cb0368a4e257b37a4b348f0ce8712e6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b86ff7561af0f3e859b9e84637797298246dc1ce387949f2edbd3d5b1e77280a</td>
|
|
<td>[68a191aae18cc7bf65302e71]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_idh1m53d.0uw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:24:07Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>[172.25.10.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_idh1m53d.0uw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:24:07 +0000 UTC</td>
|
|
<td>2025-08-17 08:24:07 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:24:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b890b88192a223a900d9aad500373d9063f118fc8766d8b4735a325fb6801018</td>
|
|
<td>[68a51d7e1d680695d3f9edbd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_shrbidj0.cko.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T00:57:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_shrbidj0.cko.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 00:57:23 +0000 UTC</td>
|
|
<td>2025-08-20 00:57:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:57:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b89a7bc12b53e050d63c480c02dca3465ec46030fdc218b1e39fa9e3ac4de1b0</td>
|
|
<td>[68a5cc349d52e7a8b7af63d8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:53Z]</td>
|
|
<td>[818225421d2ff632a02c29cb34911515]</td>
|
|
<td>[fb0da057d2c2e63d16b2edabf800317ff1330839]</td>
|
|
<td>[747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650]</td>
|
|
<td>[55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>e9be577c-fd57-42a6-b5be-310d27ea2f32.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>1822</td>
|
|
<td>818225421d2ff632a02c29cb34911515</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:52 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:52 +0000 UTC</td>
|
|
<td>fb0da057d2c2e63d16b2edabf800317ff1330839</td>
|
|
<td>747f04676f956c456b2cc15a478bb17a496720fde7a38645a5e2287e8733fc4043f0c49b819fd7cbfa2b9c999c733650</td>
|
|
<td>55e1ee460a6cab72d5b1ef2a7107dae55e03fbbb49726f2acd43bc6ba00c58501b1926c12695b829674442aa4e8affb6068dedd1806c8e59a32c87d1aa8a1169</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b8b19794e923a87fdd28cbda97d035b042db36fcee37dd4484df192b845048d9</td>
|
|
<td>[68a34d6610b57c5bffc57dae]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_4ca1bf5d-1127-4942-b07d-2d63dea041d6_ADFSAzureMFA_Ut.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b96d73284c337848272fa37ac7ce8d932f38fac1e8ce7c4cad00d0269c3c6d95</td>
|
|
<td>[68a181c21bfbeda4694fdffa, 68a2d3509d0518d9d631f7e6, 68a424e9ee9f96031977be4b, 68a5773a7caf7da878b3cf54]</td>
|
|
<td>[2]</td>
|
|
<td>[hppc]</td>
|
|
<td>[ivOSCCN1]</td>
|
|
<td>[IVOSCCN1]</td>
|
|
<td>[C:\bin\OsccBackup.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:10:25Z, 2025-08-18T07:10:25Z, 2025-08-19T07:10:26Z, 2025-08-20T07:10:25Z]</td>
|
|
<td>[fcf50a056b3ffa96b640a38d655dc1f6]</td>
|
|
<td>[56bac5386ef9a04cd2807ff235f395be9bd0cfe6]</td>
|
|
<td>[d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113]</td>
|
|
<td>[0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530]</td>
|
|
<td>[172.17.21.34]</td>
|
|
<td>[172.17.21.34]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>OsccBackup.cmd</td>
|
|
<td>C:\bin\</td>
|
|
<td></td>
|
|
<td>2975</td>
|
|
<td>fcf50a056b3ffa96b640a38d655dc1f6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-08 10:19:37 +0000 UTC</td>
|
|
<td>2022-03-01 18:22:37 +0000 UTC</td>
|
|
<td>56bac5386ef9a04cd2807ff235f395be9bd0cfe6</td>
|
|
<td>d09fbfe6eea3a2eb97a94441b3ea32c698ada71a78535358793e9a1f828f175cf5e9ba5d5e3ef5c6f9a3e786c76c5113</td>
|
|
<td>0461e9e1386ddf701b704fd25319a37f54408e83b23a238bf6beb270c02e3ac8a85995dad3a65d8fd29207023c7971031621c35d53772ba232686d82f6474530</td>
|
|
<td>2025-08-09 07:10:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b99374cf4c828d4f0a0cc7479cd72181f5e1e8cb7d06e4542fe9f70a092364a7</td>
|
|
<td>[68a50d29c9694e1e7f8f163d]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_gs10109]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_gs10109\Downloads\MasimoA_5_0_3_6.msi]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[C:\Program Files\Google\Chrome\Application\chrome.exe]</td>
|
|
<td>[2025-08-19T23:47:50Z]</td>
|
|
<td>[b05d0a00db3ebcaaf5e56cadb578324c]</td>
|
|
<td>[ba246078ee4beeee2e07d8585ddba002f741bcc6]</td>
|
|
<td>[2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac]</td>
|
|
<td>[71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MasimoA_5_0_3_6.msi</td>
|
|
<td>C:\Users\CA_gs10109\Downloads\</td>
|
|
<td></td>
|
|
<td>836608</td>
|
|
<td>b05d0a00db3ebcaaf5e56cadb578324c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 23:47:36 +0000 UTC</td>
|
|
<td>2025-08-19 23:47:46 +0000 UTC</td>
|
|
<td>ba246078ee4beeee2e07d8585ddba002f741bcc6</td>
|
|
<td>2538dc75526efb7b924b3227903c4fe5163f0a5ee84744763679333513758c1dd7a0bc6c216b10e14f6ceb77ee7310ac</td>
|
|
<td>71de1b28636b4caa966549b303cdc941a28f64bbb36f785dd3192df862deeed509124b680dcabcdf4db04c3689110d588d972e2dde04d1fd92b867a531d89405</td>
|
|
<td>2025-08-19 23:47:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>b9a96cee003b20d0bb55c2e7f974aa492bd30d4b320ff76462b277aa41ff1298</td>
|
|
<td>[68a4698d5445b9aa205794ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:09:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_c777ad400cfe475d8437b8a651b2ce5d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:09:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c20c9862e9f229c783934344ec3cf0effa49a4fa48f8aa9ec11af817ce5f9624</td>
|
|
<td>[68a17f77d37f800f0e604b32]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_s2orxsm0.eiy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:06:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_s2orxsm0.eiy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:06:19 +0000 UTC</td>
|
|
<td>2025-08-17 07:06:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:06:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bbd86edc2c3565783aa1938aa5f3bd807cc89a133ace4980c6023c6002109e50</td>
|
|
<td>[68a1b24bfa129e536415c635]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_2gnb4wcd.hsz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:43:10Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_2gnb4wcd.hsz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:43:10 +0000 UTC</td>
|
|
<td>2025-08-17 10:43:10 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:43:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc9ae90107a5c1f70c604ec5dff275f870d4e75c684dc03d05ef9fa4406d0c70</td>
|
|
<td>[68a5621beb84499e47622cf6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-EXTHSW-NP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qqnyxqog.4g5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:50:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>[172.17.46.130]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qqnyxqog.4g5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:50:09 +0000 UTC</td>
|
|
<td>2025-08-20 05:50:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:50:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bc9cf02ea7753bec4aa072388d1712951cb6fbdf6189a89af968a0049dca7e5a</td>
|
|
<td>[68a4a6605961c54c81f645c8]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\be10045eu\AppData\Local\Temp\2\__PSScriptPolicyTest_lxe33krl.g3q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_lxe33krl.g3q.ps1</td>
|
|
<td>C:\Users\be10045eu\AppData\Local\Temp\2\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 16:29:15 +0000 UTC</td>
|
|
<td>2025-08-19 16:29:15 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bcb7eca729429e6e4bde18597726ed72e9254a2170afc225e8153e8adc0c4647</td>
|
|
<td>[68a1a47e2fff6fd1138de638]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-hvhprod10]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_vxfvtst4.00q.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:44:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>[172.25.19.215]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_vxfvtst4.00q.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:44:20 +0000 UTC</td>
|
|
<td>2025-08-17 09:44:20 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:44:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bd2fb70755ce42ee8c06c2369072646bb3b358d84caad212790cc7a7765f4aa2</td>
|
|
<td>[68a31bce8786a3280b2dd174]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nWHLAPP01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_r4slq4hq.rmb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:25:48Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>[172.17.146.33]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_r4slq4hq.rmb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:25:48 +0000 UTC</td>
|
|
<td>2025-08-18 12:25:48 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:25:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c5aff149a88b77be98108f0bcd11aecbc95552b149633da6e4802ebacebb5b7a</td>
|
|
<td>[68a5562678064307c83a4ac0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jbgibpfr.i4d.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T04:59:17Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jbgibpfr.i4d.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 04:59:17 +0000 UTC</td>
|
|
<td>2025-08-20 04:59:17 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 04:59:18 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c5ed39440ed5c887e029536b2385b4abcb5c92dc545a0aa6da398b6d107d47ec</td>
|
|
<td>[68a17aee0ae38deaa00d340b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-v3MAppTest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_pwoh1wzv.2ff.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:47:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>[172.17.23.50]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_pwoh1wzv.2ff.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:47:02 +0000 UTC</td>
|
|
<td>2025-08-17 06:47:02 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:47:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c64d02709f5a2a0f2b1f7fdce51ea690718e118b044861c776bd216796720ce1</td>
|
|
<td>[68a27594b1c6255cad9f46e0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_fqfwtzyh.2si.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:36:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_fqfwtzyh.2si.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:36:24 +0000 UTC</td>
|
|
<td>2025-08-18 00:36:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:36:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c6b6dc489be976c353613a2e6ccc00459d683607f7016bf7100b54f3840c9de8</td>
|
|
<td>[68a514957c462c6feed1d6ec]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_645608853d614555ad24aa760135fa91.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:19:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_645608853d614555ad24aa760135fa91.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:19:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>be5e9587e3ca556aef9c2cde627026bcf487a2c0577ed5d5878c9045719f8ac0</td>
|
|
<td>[68a2a383740bfa0e8661429f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tnnwgcbz.kx3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T03:52:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tnnwgcbz.kx3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 03:52:27 +0000 UTC</td>
|
|
<td>2025-08-18 03:52:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 03:52:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>be82e978adc037a3a56135bf555c5d4442c67d8c4e58572201d2349fba6f7b0e</td>
|
|
<td>[68a1951058f868128a49bffc]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_o1ghm1vm.52u.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:38:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_o1ghm1vm.52u.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:38:28 +0000 UTC</td>
|
|
<td>2025-08-17 08:38:28 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:38:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bf42bb8c665225c28749685e2f8b661c02baa300701ba9ec2b32e0703b41073c</td>
|
|
<td>[68a5239e621d09b2b1ed5e5f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.Infra.CommLayerBase.Helpers.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[328d30770ede8b155abe1fa9a87ef03a]</td>
|
|
<td>[7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708]</td>
|
|
<td>[7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44]</td>
|
|
<td>[2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers</td>
|
|
<td>9728</td>
|
|
<td>328d30770ede8b155abe1fa9a87ef03a</td>
|
|
<td>Stanley.Infra.CommLayerBase.Helpers</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>7fc4b548bd955e5c8ff3cf2ad56abb1e0d915708</td>
|
|
<td>7e4d6e5297b1d03c0a363dc983fb2fc2437f8179a692830c0e243b1255d6b6be85546a90794c129a16597b45fa6f3d44</td>
|
|
<td>2484702ec0adc3a59e2f2ee891780ba8f909b35d27ffd2aac198235edf132e37de7757f3aac59a00fc6960183cc5a17802f62bcfa8fecae37918ecf7c878a736</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>bff9aab5dab9e2075db20262c2f58cf81db4c6ee97c513c599029bf441282a7a</td>
|
|
<td>[68a15648b3fb2a7f3ef2c4b5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nfas0q2g.4wq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:10:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nfas0q2g.4wq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:10:35 +0000 UTC</td>
|
|
<td>2025-08-17 04:10:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:10:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c06ca9f2522de6b59a5bdf15e8be2f96e2ca48ae6a1fdef55b7de47d63ba64aa</td>
|
|
<td>[68a511b1e4d3ba2a8e3af5c3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:07:02Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_a5872b6e7aa845a7ac69d08c882b2b7d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:07:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c0a8ed297345fae7a0e2c5e97b92df98da9107d5ebea48a0ef63d094ca6f0d99</td>
|
|
<td>[68a4ccc785b914a60d739e42, 68a4d07753a851daf11e692c, 68a4d2d1ff2b441b84428124]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[D:\Qdx_work\custom_scripts\CloverleafAutoStart.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T19:13:00Z, 2025-08-19T19:23:00Z, 2025-08-19T19:33:00Z]</td>
|
|
<td>[6070a9a674793a659ece679e56c0413c]</td>
|
|
<td>[55204a5d25518210d99df5e3908b07b14d5c3c17]</td>
|
|
<td>[c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78]</td>
|
|
<td>[9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>CloverleafAutoStart.ps1</td>
|
|
<td>D:\Qdx_work\custom_scripts\</td>
|
|
<td></td>
|
|
<td>3464</td>
|
|
<td>6070a9a674793a659ece679e56c0413c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2020-04-27 17:40:48 +0000 UTC</td>
|
|
<td>2020-04-27 17:40:48 +0000 UTC</td>
|
|
<td>55204a5d25518210d99df5e3908b07b14d5c3c17</td>
|
|
<td>c22a8ba78c4440b77a41cbcdf9df3c40d3cad57765c0404fd6c2153d5cd4116105774b2a629b1e7581ed7230e5325f78</td>
|
|
<td>9c84f9227dfd59fdbb593078de192dd885949ad2f18862c738edd94d7873dd48da3d28ac26eb4680dbc0aaa191ed2dcd8dfc1e4394acc1d27fc62c5f06c82a82</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c0ebe5d656d755ce4f5f399105a936b82b36951fc2640a2e64c72316414e16a1</td>
|
|
<td>[68a55d10a6e1a08ed492f8f2]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[DP-Jackson]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_imgqx5ud.rnw.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:28:42Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>[172.31.113.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_imgqx5ud.rnw.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:28:42 +0000 UTC</td>
|
|
<td>2025-08-20 05:28:42 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:28:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ca0f677ea03e930eab6d803e0015635200a3e4a1de4391cd78a7c6b33b722ad7</td>
|
|
<td>[68a3146b5f0c41860c8c8550, 68a3146b5f0c41860c8c8576]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\textwrap.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[a983cb636c494edd66f26bbb0d50debd]</td>
|
|
<td>[b1e72b671ead0a94705dc8fce5642bba7d658c8c]</td>
|
|
<td>[07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb]</td>
|
|
<td>[83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>textwrap.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>17938</td>
|
|
<td>a983cb636c494edd66f26bbb0d50debd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>b1e72b671ead0a94705dc8fce5642bba7d658c8c</td>
|
|
<td>07876ba5b976e524ede5919001c2007781b76ac0a447578779fcd62470a743cae2524c85e58a48fcd1a80a2a40af1bdb</td>
|
|
<td>83d6662dd7dbeb5618015caac9d8a7aa3f3734992d9d2eb4098b609a7dc03fa7de5fb797fae779c2a794c3f750c1a30ff113c90e19ec7f18702c7211531fb3b6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c301ca5c745a7ea2471ae58975afc931ee83421bb7d51d06311cce889fd41407</td>
|
|
<td>[68a17a26093dbf71ffe19bcf]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mhcpaqhq.f01.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:43:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>[172.17.246.16]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mhcpaqhq.f01.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:43:45 +0000 UTC</td>
|
|
<td>2025-08-17 06:43:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:43:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3667c28750579a47d4170b1f5e1442a386fe1cebe6246179a6c27d1b53c2de5</td>
|
|
<td>[68a2324e8d5b232a80ba583b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_jrvnheh0.wft.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:45:56Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_jrvnheh0.wft.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:45:56 +0000 UTC</td>
|
|
<td>2025-08-17 19:45:56 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:49:34 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c3a00c139fea67d3b256e9119dd35e0bbaef4fd51a800022f693a0f157bdcdd3</td>
|
|
<td>[68a3240b38d5d5195ff8315f]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\tmpEXO_h3psaegy.pzf.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2253.852]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T13:00:50Z]</td>
|
|
<td>[4337273c42ec7d667280321798203a81]</td>
|
|
<td>[6cecb446e53d0bceb0598e63c47129b289f76680]</td>
|
|
<td>[01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b]</td>
|
|
<td>[81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_h3psaegy.pzf.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_h3psaegy.pzf\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>4337273c42ec7d667280321798203a81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 13:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 13:00:48 +0000 UTC</td>
|
|
<td>6cecb446e53d0bceb0598e63c47129b289f76680</td>
|
|
<td>01ebfc04bb8a6f17b8cbc229f8401abd3ec700e361f1b79816ff620b0a1623c9c871c4d3d144ff88c1fe9ccac002556b</td>
|
|
<td>81481563aef2f1ccbb9b3e0868d47a61acf0ef780f4becb4e4afef6b602854254aada14f543c40c87d8d2b80fa162fdc50a81d41eb29a2bf68b2fdd657c3b493</td>
|
|
<td>2025-08-18 13:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c47706e64fc4a76a6a9491ecb56a34662e8b6e68399c73a5b2cf319b46ada3a6</td>
|
|
<td>[68a3364098a9a1f4e6f8e02d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kft34fye.mii.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T14:18:32Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kft34fye.mii.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 14:18:32 +0000 UTC</td>
|
|
<td>2025-08-18 14:18:32 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 14:18:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c48ee8109815a5443615dc6932ffe0a3fa4d8ba3ba73cc481a0eea00785f76be</td>
|
|
<td>[68a16fc09b16dfa10f38c979]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WH1EMGSQL1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_hkdjfhdi.ivf.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:59:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>[172.18.99.115]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_hkdjfhdi.ivf.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:59:23 +0000 UTC</td>
|
|
<td>2025-08-17 05:59:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:59:28 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c534f09b89879437205c2c070f09e847f00ca5462acc567fab450fe01d667c57</td>
|
|
<td>[68a3146b5f0c41860c8c8505, 68a3146b5f0c41860c8c852b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\_constants.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[ad6cb6b298821e0783d24bd040205667]</td>
|
|
<td>[1068bc2e3f910a9d0d9a00b67dc90a726720fdc8]</td>
|
|
<td>[fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0]</td>
|
|
<td>[47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_constants.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>5382</td>
|
|
<td>ad6cb6b298821e0783d24bd040205667</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>1068bc2e3f910a9d0d9a00b67dc90a726720fdc8</td>
|
|
<td>fc9d4ed8015de304714a5b931e1b1c14a4c35a704517d580c40cacc6c1ef3523c29531ea7b2f47ba62ea00658029cad0</td>
|
|
<td>47aec59aff4addea75b16d4e51ef7053a901420c1634756be09fcc8e25c4b4bd723e9cfd15bd6abfeef36cf022a05cc4694142525565a2a6452c2061b4918ac6</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c535b5c57d55794d09c08b5caba7399add0cfd2043491bafb35453d6aebff17a</td>
|
|
<td>[68a4ccc785b914a60d739e53, 68a4ce1fc826337212f53bf1, 68a4d07753a851daf11e693c, 68a4d07753a851daf11e6952, 68a4d2d1ff2b441b84428134, 68a4d2d1ff2b441b8442814b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\API.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[6ddc8640259abb08c4a7aab5963f9132]</td>
|
|
<td>[64c7beca37e5f11c99f66bf2ba9aa4d549147813]</td>
|
|
<td>[c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710]</td>
|
|
<td>[7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>API.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\API\</td>
|
|
<td></td>
|
|
<td>17920</td>
|
|
<td>6ddc8640259abb08c4a7aab5963f9132</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:13:04 +0000 UTC</td>
|
|
<td>64c7beca37e5f11c99f66bf2ba9aa4d549147813</td>
|
|
<td>c8c7f18ef39f0a60be2ee329da17eebaff6bc593d6e5714dc7805fcec1f616b876299344a744dcfddde5e355f4a09710</td>
|
|
<td>7acb32cdcf3be5e91a17ca064e97036d5e40f16c737d46b76c0972a067fdb9dbfb571984e7bf955175ece7cfd0e4e3d08e0f6dd90c44bb6de9a1bdd10ecce2c8</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ccb32d4642faabe002c701e6be6e3b163a048083828be362348f794b0f9747a5</td>
|
|
<td>[68a5caae25c43d3642b34826, 68a5ccf2ddfdba423e48862c]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_Talis1]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Talis\Atlas\temp\InstallSqlExpress.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe, C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:16:21Z, 2025-08-20T13:17:20Z]</td>
|
|
<td>[81440bc342bcb6afe5f64e770c1dbc77]</td>
|
|
<td>[6686557cf11cb209763c41f954d1cf9a8a700aa3]</td>
|
|
<td>[3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41]</td>
|
|
<td>[21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>InstallSqlExpress.ps1</td>
|
|
<td>C:\Talis\Atlas\temp\</td>
|
|
<td></td>
|
|
<td>833</td>
|
|
<td>81440bc342bcb6afe5f64e770c1dbc77</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:55 +0000 UTC</td>
|
|
<td>6686557cf11cb209763c41f954d1cf9a8a700aa3</td>
|
|
<td>3f746fbb8ab7e64292f565b7d58966d347138d8f06b682208af422221c118b0410c1fe5438825e62106c16f7cf15ba41</td>
|
|
<td>21614ea29494e556376dc48a365cbff705718cdb0f3b43e82f584757976910bdb26478798c153fec9f3be748835e64d816e7841d8e24b648fbd747c6b5a64af5</td>
|
|
<td>2025-08-20 13:16:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cce7f425a62f12d67abc77f70988d9a7d3825fea909f25f1bab56920c1547a13</td>
|
|
<td>[68a523a99ba7c92b34976f98]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\SystemManagerViews.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:42Z]</td>
|
|
<td>[348f84ac608fd0a3180668c30900baba]</td>
|
|
<td>[0503248ce5fe744f1ee7cfad7988b298938e0be5]</td>
|
|
<td>[bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6]</td>
|
|
<td>[ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SystemManagerViews.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>SystemManagerViews</td>
|
|
<td>1011712</td>
|
|
<td>348f84ac608fd0a3180668c30900baba</td>
|
|
<td>SystemManagerViews</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:52 +0000 UTC</td>
|
|
<td>0503248ce5fe744f1ee7cfad7988b298938e0be5</td>
|
|
<td>bae930e0616c1e15941440cfb9aaf0d3918b1fa6bf333612556fb4f1a5c6d06bcc2dc919c41355c2596564dc306c7ba6</td>
|
|
<td>ca87bc4a26314d71a456ca8841add4381a4d4ba485ad46ad7b994a565c3d9caaa35ece747a577e966b5d20e431034f6688e5cd5f475e464f8a61dbfd544345d4</td>
|
|
<td>2025-08-20 01:23:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ccfd4b0b29921797227890e20977974f0fe6926fb9f986a398ed037177b6857b</td>
|
|
<td>[68a375ce012e144044008db2]</td>
|
|
<td>[2]</td>
|
|
<td>[ellisonmea]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\tmpEXO_panxtvgi.v0r.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:49:45Z]</td>
|
|
<td>[689e2c4d14099359d012d5e70e628648]</td>
|
|
<td>[d263ae2c2def641b81fa637242f6d8fc9e91210e]</td>
|
|
<td>[bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30]</td>
|
|
<td>[baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_panxtvgi.v0r.psm1</td>
|
|
<td>C:\Users\ellisonmea\AppData\Local\Temp\28\tmpEXO_panxtvgi.v0r\</td>
|
|
<td></td>
|
|
<td>2308296</td>
|
|
<td>689e2c4d14099359d012d5e70e628648</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 18:49:44 +0000 UTC</td>
|
|
<td>2025-08-18 18:49:44 +0000 UTC</td>
|
|
<td>d263ae2c2def641b81fa637242f6d8fc9e91210e</td>
|
|
<td>bd25a8a087c6cb392342874b8c1d9a2ff2cc9d0cb8d0d51359450545aacc3187c7536df73f964cea222c6b4d3f4cab30</td>
|
|
<td>baaab32f59b8e891357177e1fb24a33e0981251d8d590a2c03da2e7f57ddeaba7a9069c130eae5abea30f3e7e5c70b4f62ec0fd3860aadbaeda6c292bc89c4be</td>
|
|
<td>2025-08-18 18:49:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cdcb9886eec269fe986be220ddc0a58d7cd307bdf3ecc1f48390b918bd56101d</td>
|
|
<td>[68a24655c6a8e4430722eaf8]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_ewmsmzj2.prq.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:14:55Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>[172.17.146.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ewmsmzj2.prq.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:14:55 +0000 UTC</td>
|
|
<td>2025-08-17 21:14:55 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:15:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cdf46074d14821e21128b09a9ee98fb39f61a843bcc71e0415e36bdba7fb2bf3</td>
|
|
<td>[68a25c735f19cff323c8f40b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zqbn2i55.u22.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:49:18Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zqbn2i55.u22.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:49:18 +0000 UTC</td>
|
|
<td>2025-08-17 22:49:18 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:49:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c826e8208f2d2a00b4b3b99d67e4e058607f19a4ed623b7b0d541f3b6d51ab05</td>
|
|
<td>[68a3146b5f0c41860c8c84fe, 68a3146b5f0c41860c8c8531]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\copyreg.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[2e6e1613760385356bd6e3679ca43aef]</td>
|
|
<td>[61aee40c895eb5ae249aec746a1e337d43ec0537]</td>
|
|
<td>[cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e]</td>
|
|
<td>[b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>copyreg.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>7544</td>
|
|
<td>2e6e1613760385356bd6e3679ca43aef</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>61aee40c895eb5ae249aec746a1e337d43ec0537</td>
|
|
<td>cd888009ef82715f838d8b4d093f370a9ce9ed9afadc7e071ec7495423a929b70d7fd30b8587eb2e4044755bb255a69e</td>
|
|
<td>b89567e069597bc2934b1b0f4c20de040db2df3ed29c47ece424c481722c09a10f78b4bd42bc7e9f08787d0a8263953e5a553aaa3a247a210096a10baf0fd447</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c8e0699e1ad7ef4335945a3df4a6b09fb48c4d6664c52528ef1b438a3f191dbc</td>
|
|
<td>[68a5239e621d09b2b1ed5e49]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\MonitoringGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[fdb5557de080a49af4fe2d6f23075dce]</td>
|
|
<td>[593450197694057604548da9fe073096fe4fb5dc]</td>
|
|
<td>[d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5]</td>
|
|
<td>[dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>MonitoringGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GUI</td>
|
|
<td>125952</td>
|
|
<td>fdb5557de080a49af4fe2d6f23075dce</td>
|
|
<td>GUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:20 +0000 UTC</td>
|
|
<td>593450197694057604548da9fe073096fe4fb5dc</td>
|
|
<td>d7017403da84813b24df0c9b36d89d124322e0a9b72aed71df2b05318653ada73f34576fe7dca2995c9b8338f49904d5</td>
|
|
<td>dbe45f6dee48526ac705f8b4eba20529459becfe891690933ec16c83d01e839d2f80bfda5de999d99fde4e06319b2215893dd675c6ef509d74723b33ee065e32</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c93a02f29261eb3cd4a6ea20651aa00d111b39dbd8fac6f9bc6bbab25e805335</td>
|
|
<td>[68a2c44535b1d4ea68c6ff9a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxsf-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_cxplm4ri.gl2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T06:12:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>[172.17.146.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_cxplm4ri.gl2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:12:08 +0000 UTC</td>
|
|
<td>2025-08-18 06:12:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:12:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>c9448c282682d6dcd44a45c57f7e86467ab4d1b9c2810d14ec339bee64373cfe</td>
|
|
<td>[68a558192779d54c7ac75dd5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NCTXSA-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_t2efjwra.hhh.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:07:34Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>[172.17.188.22]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_t2efjwra.hhh.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:07:34 +0000 UTC</td>
|
|
<td>2025-08-20 05:07:34 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:07:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cf53580ed462204e6798cf3e5b7b95b46bfd77b6bbf98a5de5659f9b08b49f86</td>
|
|
<td>[68a31e1752cf7ae3b21d642b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCGChaSdb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Affymetrix\ChASDx\DBScripts\backup-db-dx.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:31:00Z]</td>
|
|
<td>[ba9bc91d6cf75474827bdbe5cb54143a]</td>
|
|
<td>[7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec]</td>
|
|
<td>[4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846]</td>
|
|
<td>[34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>[172.17.250.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>backup-db-dx.bat</td>
|
|
<td>C:\Program Files\Affymetrix\ChASDx\DBScripts\</td>
|
|
<td></td>
|
|
<td>8176</td>
|
|
<td>ba9bc91d6cf75474827bdbe5cb54143a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-04-16 21:08:16 +0000 UTC</td>
|
|
<td>2024-04-16 21:08:16 +0000 UTC</td>
|
|
<td>7ccacf5c3bc92d3469d8f6966e132ac2a3dc4cec</td>
|
|
<td>4a43a29249b5c16432592f234f5051141a453f770f6dbdd446688fcad017f534a1801ddc76ebe600f86e7103df103846</td>
|
|
<td>34a763e84cb88242ba1fab77debd0e86c98b0e45094ec9530e0e7ce11c457096b7b8a3fcf7d5ab17bca4e15bbd012c8c633b065c746e5b4ff9afe31998ed7543</td>
|
|
<td>2025-08-11 12:31:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cfc7ff5198de9882b23541e72a7e55009b732822186d4e0fbe5d4de605ac2fa9</td>
|
|
<td>[68a606ccc8c5aba8e6424dc3, 68a62c4fe0cb7d1d0b6ef98f]</td>
|
|
<td>[2]</td>
|
|
<td>[NETWORK SERVICE]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2307.897, v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\HL7TrackerService\HL7TrackerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T17:27:31Z, 2025-08-20T20:05:48Z]</td>
|
|
<td>[72c43b468c92cb9fc0aff73b9a553afc]</td>
|
|
<td>[da0df395838297b918fa34920aed9a840c8b2c4b]</td>
|
|
<td>[1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5]</td>
|
|
<td>[2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HL7TrackerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\HL7TrackerService\</td>
|
|
<td>FormFast.FastPrint.HL7TrackerService</td>
|
|
<td>70656</td>
|
|
<td>72c43b468c92cb9fc0aff73b9a553afc</td>
|
|
<td>FormFast.FastPrint.HL7TrackerService</td>
|
|
<td>23.6.0.20130</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:25:04 +0000 UTC</td>
|
|
<td>2023-06-20 18:25:04 +0000 UTC</td>
|
|
<td>da0df395838297b918fa34920aed9a840c8b2c4b</td>
|
|
<td>1ba64dca1c8ff7b2db61f9833b4e1adcdcc6bc48129427962278dd3a798b3e2e8f69fc5b247cf44581817e52695e91b5</td>
|
|
<td>2bf9458b78e0b9066c7e1b48ac2d4543b7bfa091adf850165aa5dac6a6d7cb78bdae00924283d347e254716e8ec3b423ecad2618cb21f0d860c6633eea8389ee</td>
|
|
<td>2025-07-01 15:13:40 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d02dde50a8ac8cff74d90ba4819f52d21b089f7add0407bfe8e41f2390d4be90</td>
|
|
<td>[68a523949cec397f02de9f48]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseGUI.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[a1566f1d2da1f9413f76dc2b914f4311]</td>
|
|
<td>[6dcf1ac94eb4a724f25d13833404c64f4a0f1f16]</td>
|
|
<td>[fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307]</td>
|
|
<td>[f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BaseGUI.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BaseGUI</td>
|
|
<td>62464</td>
|
|
<td>a1566f1d2da1f9413f76dc2b914f4311</td>
|
|
<td>BaseGUI</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:42 +0000 UTC</td>
|
|
<td>6dcf1ac94eb4a724f25d13833404c64f4a0f1f16</td>
|
|
<td>fb7ec2b68ea9eb6298092078f501dc0dc246df7cd1f4a797442f8c34003062924be14a674b24aa43dab70b7f70710307</td>
|
|
<td>f4a7cba3c83952b9987695217efbbf35dd89ba3e666ecd93d6070190244046ff274fd3aa23256950be6d0cc036e664f33ac788610f09416b5f77aedc94d96fcc</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d070b1af61401b6ac25e9d3acc825add99084a26832db9f5f5cb23017c2148a3</td>
|
|
<td>[68a38065cabe22b27c6c0f7d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4sxq3vi5.4r5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2267.864]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T19:34:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4sxq3vi5.4r5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 19:34:53 +0000 UTC</td>
|
|
<td>2025-08-18 19:34:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 19:35:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d095c35b7eefd84a40162c8fd75586439afdf8d43f8194e076806d6ba1d80ea8</td>
|
|
<td>[68a48674c4cb2500be692640]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Clinical.Business.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z]</td>
|
|
<td>[1282e0d899b8c6c77293157e628f8fe9]</td>
|
|
<td>[b1bc26f40ef3caf7a21eb88d27f9a8041234c646]</td>
|
|
<td>[17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4]</td>
|
|
<td>[fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Clinical.Business.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Clinical.Business</td>
|
|
<td>15360</td>
|
|
<td>1282e0d899b8c6c77293157e628f8fe9</td>
|
|
<td>Stryker.iBedServer.Clinical.Business</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:30 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:30 +0000 UTC</td>
|
|
<td>b1bc26f40ef3caf7a21eb88d27f9a8041234c646</td>
|
|
<td>17cd30e65b29340e78f0bdc2a4ad660715c70ccd92e95587c36101453317f2599c366fe5f42368b8cc65cc7141d422f4</td>
|
|
<td>fc16163605e03662c1107de2ac97e03dc0046490f81bce5cd42df5f1169e111b9d79673f4e0ec54ea6baee13c969e84063255fa2cc16ea3e64931847c75de2ed</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d1a2e822a1ea07df47bc922137f71f102d160466cabe022f2deea5317148a526</td>
|
|
<td>[68a3146b5f0c41860c8c8551, 68a3146b5f0c41860c8c8577]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_colorize.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[b7b78adc50cac8e240a21e27725b637a]</td>
|
|
<td>[a53749b2d528d575041644b00e9efe548bcf3000]</td>
|
|
<td>[43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0]</td>
|
|
<td>[0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_colorize.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>2722</td>
|
|
<td>b7b78adc50cac8e240a21e27725b637a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>a53749b2d528d575041644b00e9efe548bcf3000</td>
|
|
<td>43292c71c8bec6001afa3eefb75add1642beb4f7f350a27fa9839fb7eee2b8e1dc22e14605e578d8a3d61380f6c14ad0</td>
|
|
<td>0ec3536ee246ac50c019ef83871df9b9b609dcc33198259e7c3636aeb891117a841c04d2ce88f948c278a591866fe035cf5f45a07b791231c060a3919a3fbfd3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d21817fe72ac59de692437e50c43dd1bae22fd9bfd9d5fe6f002ecc5001133aa</td>
|
|
<td>[68a4ccd13efa8341e1766c85]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setroot_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:13:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setroot_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:13:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>caaad5beee085968aa4b7c606e87506f20d0a5fc9f86604c2f71804bea252c94</td>
|
|
<td>[68a4cf29dfc75d42acc2fee7]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\Temp\setsite_1.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T19:23:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>setsite_1.cmd</td>
|
|
<td>C:\Windows\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 19:23:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cb91fc48deaa953fa6bc86e50101278ba472aa46d3997cf1d2f862e9d2faafc6</td>
|
|
<td>[68a17efae2809bffe9dd0ee5, 68a2d0803665ae20b1f78f7c, 68a42221091a6202e3d1b16e, 68a573b695791e485505569b]</td>
|
|
<td>[2]</td>
|
|
<td>[hyperwebsvc]</td>
|
|
<td>[I-NCTXEHH-001]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\HomeHealth\__SCRIPT REF Files\EpicHHEnvREF_SmartUpdate.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z]</td>
|
|
<td>[2b4fc9419788dc26cf2e48ff48ee8d59]</td>
|
|
<td>[d1cf90955367d76e04a1c2d0fb607bc614829af6]</td>
|
|
<td>[9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85]</td>
|
|
<td>[83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>[172.17.146.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>EpicHHEnvREF_SmartUpdate.bat</td>
|
|
<td>C:\HomeHealth\__SCRIPT REF Files\</td>
|
|
<td></td>
|
|
<td>114</td>
|
|
<td>2b4fc9419788dc26cf2e48ff48ee8d59</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-04-26 14:42:09 +0000 UTC</td>
|
|
<td>2025-04-17 14:44:28 +0000 UTC</td>
|
|
<td>d1cf90955367d76e04a1c2d0fb607bc614829af6</td>
|
|
<td>9d10a1fae97fac9e3c5e60742bf99dbee55435d1b2c3e8395b8025bad896d07dde172a8c47cabe2c1cb8646bb802fa85</td>
|
|
<td>83af528467dbbbb88bb5265867b6c6f4e195d92e44b611e3ef7d70591f55a199c03a22763d66ea514feb9b835c1832a3b737d2b79c19d2289e0fa20715b49276</td>
|
|
<td>2025-08-09 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbc1e9a027df224d6182596062ef744f07095fa259aef053f60330fdb55f44a1</td>
|
|
<td>[68a3146b5f0c41860c8c84f9, 68a3146b5f0c41860c8c8527]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\enum.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[b3d34b7698ce20e327b55db5543aa834]</td>
|
|
<td>[9ac116d05a984aff49961679e499920ef973f32f]</td>
|
|
<td>[a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066]</td>
|
|
<td>[602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>enum.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>84563</td>
|
|
<td>b3d34b7698ce20e327b55db5543aa834</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>9ac116d05a984aff49961679e499920ef973f32f</td>
|
|
<td>a45149016356c6342e20745513175cbf5ec0e0af5f2c024e33fba72f2fc943e0b8a4125632deb0061cec0d93d3353066</td>
|
|
<td>602ed3a401e479efd5c28d6449c47cebdcc5580023ca8c395bd048c1de28aa27966a26ec914f71d218ff26d5768f6a9ed47b9a23383a2dfa26f3b5633cf6822c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbce83feb3a1075e711a778264441ec9227105e1a9573289de7d59af2cf388ff</td>
|
|
<td>[68a5239e621d09b2b1ed5e5c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\ShortcutbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:38Z]</td>
|
|
<td>[314aa989c3340e2e4a88551949eec9f2]</td>
|
|
<td>[31bad1d1e4e96b06cf2f126a4e62be93446004da]</td>
|
|
<td>[f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252]</td>
|
|
<td>[7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ShortcutbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>12288</td>
|
|
<td>314aa989c3340e2e4a88551949eec9f2</td>
|
|
<td></td>
|
|
<td>1.0.8565.40750</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:22 +0000 UTC</td>
|
|
<td>31bad1d1e4e96b06cf2f126a4e62be93446004da</td>
|
|
<td>f380bc0a0db350030063c3579e245c9e493a3579b334d6412457a374ec254d9a1e631d2d545cb39e86ae28f76bff9252</td>
|
|
<td>7b15c1e2ae1730f49d6415307e52a5d1afa95109af247c54635f908b89b1d4b98f0729ffc1babd88259c9615dd5a8374c85a58cb064a39e708c4b0b535513ee8</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>cbe345399a7a40adc97084ceb3b564b8954687f82c1ff70e9ce060535e914c87</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20e]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\Get-Sidhistory.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[20ba5446b5e3742b0af6bf5e74c11c45]</td>
|
|
<td>[1e0cd7d9ccc008749c121260de20c255f1dd168b]</td>
|
|
<td>[a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281]</td>
|
|
<td>[5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Get-Sidhistory.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>213</td>
|
|
<td>20ba5446b5e3742b0af6bf5e74c11c45</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-24 18:19:40 +0000 UTC</td>
|
|
<td>2022-06-10 20:28:02 +0000 UTC</td>
|
|
<td>1e0cd7d9ccc008749c121260de20c255f1dd168b</td>
|
|
<td>a5f76c35b1bd46436baa740dba90b5d9e9071962067c27e0244ec3bd270ff145c97b7a0a869cb0ddafcdc4ad89409281</td>
|
|
<td>5c803f17d6ab6a48cc47bd327a009319b5ff461f903625e3b40921a14845aaeb99aff75f695799b487282e6376ecb6850fc5700f447ec4ffe112c9e495683668</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3618219fd8422d3844101b0d57fa596aee7e01dfa8cb6e7dc95eb9c8cd4818f</td>
|
|
<td>[68a62a808890319de023d467]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-NFP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2310.898]</td>
|
|
<td>["C:\Program Files (x86)\FormFast\Common\FFSchedulerService.exe"]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-20T20:05:16Z]</td>
|
|
<td>[232c2871a4ec6371d7629acb78e34fe5]</td>
|
|
<td>[1feca74aa50c755fa4c7f8d79fa6fa1557a119f0]</td>
|
|
<td>[2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797]</td>
|
|
<td>[6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>[172.25.17.195]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FFSchedulerService.exe</td>
|
|
<td>C:\Program Files (x86)\FormFast\Common\</td>
|
|
<td>FFSchedulerService</td>
|
|
<td>51200</td>
|
|
<td>232c2871a4ec6371d7629acb78e34fe5</td>
|
|
<td>FFSchedulerService</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-20 18:28:16 +0000 UTC</td>
|
|
<td>2023-06-20 18:28:16 +0000 UTC</td>
|
|
<td>1feca74aa50c755fa4c7f8d79fa6fa1557a119f0</td>
|
|
<td>2aeded794cb61557bf08041358dfbf935bd6e22b404c648203b4f56c818c2dd8613366ad58939b5e602ed7c7ac360797</td>
|
|
<td>6519756d7652bc8cf9f64e22cc8de2877c76811088973e3156bbe5a48041afcadfd94618c10e7d03c97b447c4da205b620d6e88f999506b298d47c039bd11fb2</td>
|
|
<td>2025-08-20 20:05:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3d7a66293ebab3af9baba4a16e865aedbb74adae7d5d4cf6ae2dda125ae0e7f</td>
|
|
<td>[68a246235d01fff0e1ca28f1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_axjq3wng.oka.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:10:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_axjq3wng.oka.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:10:43 +0000 UTC</td>
|
|
<td>2025-08-17 21:10:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:14:16 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d43a2099c8fd9976bc0e46f7249032ac3e3856f5ba5bc427e68b2d4e7e186585</td>
|
|
<td>[68a4ccc785b914a60d739e48, 68a4ce1fc826337212f53be2, 68a4ce1fc826337212f53be8, 68a4d07753a851daf11e6932, 68a4d07753a851daf11e6945, 68a4d07753a851daf11e6956, 68a4d2d1ff2b441b8442812a, 68a4d2d1ff2b441b8442813d, 68a4d2d1ff2b441b8442814e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\Registry.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:06Z, 2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:10Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:10Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[a203fffcd1d985aadfef505588b0a4cb]</td>
|
|
<td>[76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b]</td>
|
|
<td>[227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c]</td>
|
|
<td>[0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Registry.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32API\Registry\</td>
|
|
<td></td>
|
|
<td>158208</td>
|
|
<td>a203fffcd1d985aadfef505588b0a4cb</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:20 +0000 UTC</td>
|
|
<td>76c4ca49e4a1f2fbb627ada6e8c89c47f684d80b</td>
|
|
<td>227f7888dc2f9d76d07c813be85f8f742194f76dcbd65fb63a71a3cdecd3f58d2728bc68c6f0180a5a304d406c309b7c</td>
|
|
<td>0c493fde46758da05c120a1ba8efd17decb9e162cc68ba3f198aab341d430ce543d293ebc62a433fa4903d32c96e17a9991af1ae0c160a12b97fdb559d3f0cef</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d45a86e8eefb45e6d3246ea6244f969b8b01b9308364dec0aa47ef9f138c1891</td>
|
|
<td>[68a5e018c5b265f07bb9e53a]</td>
|
|
<td>[2]</td>
|
|
<td>[ghermanc]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\tmpEXO_rudypo3c.3fk.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2295.887]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T14:47:45Z]</td>
|
|
<td>[cf3be61b7b7864bd18276f2a15d1929e]</td>
|
|
<td>[5d5fdacd8a04903f4d950f608f12da17f71b1ee8]</td>
|
|
<td>[31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95]</td>
|
|
<td>[bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_rudypo3c.3fk.psm1</td>
|
|
<td>C:\Users\ghermanc\AppData\Local\Temp\30\tmpEXO_rudypo3c.3fk\</td>
|
|
<td></td>
|
|
<td>2308419</td>
|
|
<td>cf3be61b7b7864bd18276f2a15d1929e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 14:47:44 +0000 UTC</td>
|
|
<td>2025-08-20 14:47:44 +0000 UTC</td>
|
|
<td>5d5fdacd8a04903f4d950f608f12da17f71b1ee8</td>
|
|
<td>31100af374c2ecb6cf58a28d424f0f1ee8fdd2e88a0c9a43655922dda055a9062c8b508b949d5a12bdc67a46f28a0e95</td>
|
|
<td>bac2cf3c97938b5f5107a6a126ebee20411d8d6a0ad3f0b85e3db6aceb88c412d3fb7b7212f5a0c3eb97ab9ae8fa62c18620d0915432b6f16803a0d44820be90</td>
|
|
<td>2025-08-20 14:47:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d54451027064bc1d6df9f1c3ddee9ad674d26c622b11d3608f5afeb8bbfabf70</td>
|
|
<td>[68a523949cec397f02de9f47]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\BaseData.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:26Z]</td>
|
|
<td>[b2a5050b7d0bc08167b05bfe29af445d]</td>
|
|
<td>[abaccb61e12a56d1efad87526af3a9e07a3fd55b]</td>
|
|
<td>[77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7]</td>
|
|
<td>[36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>BaseData.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>BaseData</td>
|
|
<td>13824</td>
|
|
<td>b2a5050b7d0bc08167b05bfe29af445d</td>
|
|
<td>BaseData</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:38 +0000 UTC</td>
|
|
<td>abaccb61e12a56d1efad87526af3a9e07a3fd55b</td>
|
|
<td>77fd6ba08a9ceb4b980087a85168e35b53e351558c1dc9d7b015d32db294be86d8f6da4ca44fd4eec2bd18280c6a9ad7</td>
|
|
<td>36dbcc4c41ad5e804019c1f757c6de4e616e53ebfa6fcc366250b5f2126a78ef38584052eb1f14623ea89fe8ba35d2b58d01405017d9fe267193c6709ffe2839</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d6437530f4cba4030aec0cfaf564dc2f75ffee366a72651fea49297f3e4b4c9b</td>
|
|
<td>[68a31c8cd2481b6854d4f544]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_htoxxven.jj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:28:57Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_htoxxven.jj0.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:28:57 +0000 UTC</td>
|
|
<td>2025-08-18 12:28:57 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:29:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce6a9577d1e06139cd06bc9a39a07c301700792b3afac3878301dace79349d7c</td>
|
|
<td>[68a194caf9b0b5c55ccb01c0]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[nt-compass5]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_uic3pfdb.jpy.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:37:27Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>[172.29.172.3]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_uic3pfdb.jpy.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:37:27 +0000 UTC</td>
|
|
<td>2025-08-17 08:37:27 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:37:30 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ce84c2abd2888d88b9eed0496c93a5a2ba355c1d7eca42db9bc19048c05b7261</td>
|
|
<td>[68a165183f1f36f01a2f3ff3, 68a2b69c8b983fbe0c82338e, 68a40846a972cb7f3cce6ebc, 68a5578d6ea23be9f4b23b72]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vroggerb]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\lb\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z]</td>
|
|
<td>[307a281df67046994ab424072bef8918]</td>
|
|
<td>[ab7e9aeb72c04a2b35eb308f42b3f6fed9012698]</td>
|
|
<td>[e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233]</td>
|
|
<td>[a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>[172.25.196.35]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\lb\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>307a281df67046994ab424072bef8918</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>2021-10-07 20:03:35 +0000 UTC</td>
|
|
<td>ab7e9aeb72c04a2b35eb308f42b3f6fed9012698</td>
|
|
<td>e529633212dcffe58ca32fe55e9929ad05d403a0abcb4ee04b71844aad7e6f25cea3a78b7d181fdc82a048db3cbb5233</td>
|
|
<td>a3de4ba21152d9ea49c78ef0703cb5eea7c139ef4b21be5de21241c11bb5eaa264d3ee4dc11156b8fd5d5fecf96fa89c936f11825e3d3a086c150a5df86bbb94</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>038390889beb53877bcb82beff610051215f0d7773f5452fbb150d45afe4594b</td>
|
|
<td>[68a46f87474e4ad446dca4d9, 68a4728c1dfbce27769ea0bc]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa, SYSTEM]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS, NT AUTHORITY]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\_isuser_0x0409.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Client 20.1.2.14.exe, C:\Windows\SysWOW64\msiexec.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe, C:\Windows\System32\msiexec.exe]</td>
|
|
<td>[2025-08-19T12:35:14Z, 2025-08-19T12:35:29Z]</td>
|
|
<td>[92698c5a6197382994093641c6a72d29]</td>
|
|
<td>[f535aab772d9bf505b48124f8e076e830c4af33b]</td>
|
|
<td>[3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0]</td>
|
|
<td>[addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_isuser_0x0409.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{56195036-5F12-4F32-A719-DDBA25836460}\</td>
|
|
<td></td>
|
|
<td>24576</td>
|
|
<td>92698c5a6197382994093641c6a72d29</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:35:02 +0000 UTC</td>
|
|
<td>2025-08-19 12:35:02 +0000 UTC</td>
|
|
<td>f535aab772d9bf505b48124f8e076e830c4af33b</td>
|
|
<td>3796c8d0a2dcea8d09dc400711eea421aa680802f8b66f0124af0c7de27598d300506691adf50880bba5cb6e6903f4a0</td>
|
|
<td>addd82e506a2339435d5702a4f887c5c886dd49f2c20882dbdb22f38d5c2777700bbf6253db0e9b39ed8d52553c12b069d2fbc99e9717386d5a33bf428457e24</td>
|
|
<td>2025-08-19 12:35:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>03f227d3eda403e620c45f4986ee30554111c0ce60910e7d6858e3d887a40a7b</td>
|
|
<td>[68a16f23887230bce1ef3f8c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hBMCCure]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_nxignfvp.mzk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T05:56:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>[172.17.252.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_nxignfvp.mzk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 05:56:39 +0000 UTC</td>
|
|
<td>2025-08-17 05:56:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 05:56:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9d0fd73379de8bdc1eade22b7cc044fe5b529c69363603fe804c0532eb0c03c</td>
|
|
<td>[68a5119d85fcc7c992c6135c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T00:06:50Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_3f6a376a1b7748dd8f366e13c854a62b.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 00:06:53 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d9f7d9e7bb23fea463e56b71f502481381b3814bd7cb29a8f6e9e8635902f75b</td>
|
|
<td>[68a55e78808b9b08c1edd7d3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mctygn31.xjd.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:34:37Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mctygn31.xjd.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:34:37 +0000 UTC</td>
|
|
<td>2025-08-20 05:34:37 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:34:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da41728504a6b8736b7af7e25b17c6b48777776cbbc6ff3872b28fb5d84d9fd1</td>
|
|
<td>[68a5c233a5c8de03b7ff4fb4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.879]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:40:11Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_1b42c12ce71f48c19cfbdbaade69982f.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:40:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>da692790deb2efd860d435719a2efc139b3cc1dd0d01b5b764d693e57a326554</td>
|
|
<td>[68a5c8eceb9e7b7716dce207]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:08:58Z]</td>
|
|
<td>[fcbd65813fcd1136ccc166072f2645f2]</td>
|
|
<td>[750592861995231496d153cd8968f6d0ec9d4b52]</td>
|
|
<td>[79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0]</td>
|
|
<td>[585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>7561334a-232a-4040-84b4-38b3ff4cb8e3.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>379</td>
|
|
<td>fcbd65813fcd1136ccc166072f2645f2</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:08:58 +0000 UTC</td>
|
|
<td>2025-08-20 13:08:58 +0000 UTC</td>
|
|
<td>750592861995231496d153cd8968f6d0ec9d4b52</td>
|
|
<td>79f21312c874896288185f19b7cc3084897c1987d2307246ea7cef44dd30b4e8018cd2ea64f206150e74da3e260f2bf0</td>
|
|
<td>585b689e4af7a78ccb52b9b82ab03d28c714ab1029ed6271bcecf9fb75c51fe90df5f58a87b0bc89eb7a55219774f653184598983431f81f89c0e2b43bf02682</td>
|
|
<td>2025-08-20 13:09:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db47e797535a71d7971867b3e33ada1549410843ca9d2a361bfe802c5ba86eeb</td>
|
|
<td>[68a523949cec397f02de9f55]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\DiagnosticUnitTests.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:29Z]</td>
|
|
<td>[7990057f38e4716679765f0a52c270d1]</td>
|
|
<td>[48fb434df935c9ab7759f840f7e7924663f6b621]</td>
|
|
<td>[f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3]</td>
|
|
<td>[cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>DiagnosticUnitTests.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>DiagnosticUnitTests</td>
|
|
<td>25088</td>
|
|
<td>7990057f38e4716679765f0a52c270d1</td>
|
|
<td>DiagnosticUnitTests</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>48fb434df935c9ab7759f840f7e7924663f6b621</td>
|
|
<td>f76cc7a34a772b71475f93b9d3e2c06f465989574450656f92de67c278af301d0888f0ebe5233bc333f8bed159e2cef3</td>
|
|
<td>cc4e53b133e847d7ae2de1494f948676675a9ac1967604f3ca55aeb242c8b4ab042222ef7421e41e91e4a9ad48033f663470f4ba74cd6c010c82eabeedc4c252</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d2a581d4a6d27c24440d4a37a52ded76d4f22cdb5d200ed7939e4f1cf9ef63d9</td>
|
|
<td>[68a2c16aad07b1f3cadf8bd3]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLSERVERAGENT]</td>
|
|
<td>[SUNR1MSD]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\__PSScriptPolicyTest_yck4oyto.shs.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[D:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE]</td>
|
|
<td>[2025-08-18T06:00:00Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>[172.24.20.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yck4oyto.shs.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLSERVERAGENT\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 06:00:00 +0000 UTC</td>
|
|
<td>2025-08-18 06:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 06:00:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d326cab93b94da954e3255e3ae9798ccbb29cafdd6a42ec86f49db136837a447</td>
|
|
<td>[68a2cfaafd36357b5aad62ea]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\tmpEXO_vlwbbir4.r3y.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T07:00:50Z]</td>
|
|
<td>[8e1f2d25559f493185469321f6bbdb4c]</td>
|
|
<td>[d46dfdcb82328fa63f83d551ae51ef321adbbce9]</td>
|
|
<td>[3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759]</td>
|
|
<td>[d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_vlwbbir4.r3y.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_vlwbbir4.r3y\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>8e1f2d25559f493185469321f6bbdb4c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 07:00:48 +0000 UTC</td>
|
|
<td>2025-08-18 07:00:48 +0000 UTC</td>
|
|
<td>d46dfdcb82328fa63f83d551ae51ef321adbbce9</td>
|
|
<td>3d199419224ba120524e5446cb79457ddaa98b2a2b3e7f41a1a520fdd70b812ea8c4fcc32d0e2807d95622bcb886e759</td>
|
|
<td>d09c2cf61c9285ed056a796ea86cc2101490ea0b513aabcb28d1dccd8859f4119ca23a83e9f383a148d4306cda24859b93cb91603a86d7aaf047f6f041257a9d</td>
|
|
<td>2025-08-18 07:00:58 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d3445778ced79263ad697bbbeef21f6a13f06a58f291cec1a239efd0ef8bcbff</td>
|
|
<td>[68a4ccc785b914a60d739e57, 68a4d07753a851daf11e693f, 68a4d2d1ff2b441b84428137]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\Glob.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:23:06Z, 2025-08-19T19:33:06Z]</td>
|
|
<td>[473ab010839c2be697c44e2949f9e203]</td>
|
|
<td>[00022b4d9500e922d2e442a721ba5ecde46ffa26]</td>
|
|
<td>[fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d]</td>
|
|
<td>[e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Glob.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\auto\File\Glob\</td>
|
|
<td></td>
|
|
<td>22528</td>
|
|
<td>473ab010839c2be697c44e2949f9e203</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:12 +0000 UTC</td>
|
|
<td>2016-12-02 07:11:31 +0000 UTC</td>
|
|
<td>00022b4d9500e922d2e442a721ba5ecde46ffa26</td>
|
|
<td>fe6ff828dc412e52dd28634e442570619ed1cf8664fa65d17bdda7ee9b8596796a40ff2f4a3b30e79c1ff870b0cb1f4d</td>
|
|
<td>e34939226663fe6bf6ff23cae7401976a7e9a56ae16e89db01d61bb9160972fd5dbdced7e7bef82d065bbde1b205da2805561064e7ba44f7412622e282690f6d</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d7116e047fbcb4bf045d2268cf418e6cb6fc8102c12196f3727597e8464497dd</td>
|
|
<td>[68a16556adb18f56bab6ec7b, 68a2b4a8c289c4a5fdc2edb1, 68a4085529d877e962e90ae7, 68a557e71e5d7a1efef2595c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-vpg1b]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG2B\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[ddc535922ab8443cac70e8a5a1b1ca96]</td>
|
|
<td>[de0bed789f1c7a1ed257d4495b986eded933a71b]</td>
|
|
<td>[3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05]</td>
|
|
<td>[4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>[172.25.196.36]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG2B\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>ddc535922ab8443cac70e8a5a1b1ca96</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:37 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:37 +0000 UTC</td>
|
|
<td>de0bed789f1c7a1ed257d4495b986eded933a71b</td>
|
|
<td>3a663ce031a2332fed2191a6ed3e6b83e88b81d5301dfe8eee3f3d2a124323fa1bb4f4243465b9f8ab8aae8648998c05</td>
|
|
<td>4590c541931b09c44810ec61ce012aaf3665c0416e1d944eb460945daccf8b6ac5cdfc3d02f559d6382745d49d3b7a7a281c24763ac18d3bf998ec125afc9065</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>d79c2392afb4ba0f2422e52d1384a3c935e60c579ce42b2ad0c7ff9b4f41e6ea</td>
|
|
<td>[68a320afd74235903a162cdc]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\tmp_s4vxl2td.srp.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2251.850]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T12:46:32Z]</td>
|
|
<td>[3334cf3826bfe1d724ba53ca9ff4e71c]</td>
|
|
<td>[2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216]</td>
|
|
<td>[333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1]</td>
|
|
<td>[aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmp_s4vxl2td.srp.psm1</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\tmp_s4vxl2td.srp\</td>
|
|
<td></td>
|
|
<td>4669944</td>
|
|
<td>3334cf3826bfe1d724ba53ca9ff4e71c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:46:32 +0000 UTC</td>
|
|
<td>2025-08-18 12:46:32 +0000 UTC</td>
|
|
<td>2e85bf23d59fc2db6e7c1768c1e58cf31eeb5216</td>
|
|
<td>333476e04c8c70168a411eaadbff3e1707946071924bd8ace04b7d07d1ead8b2ae643513810459f4c6310bd17ce008c1</td>
|
|
<td>aa7935db09f6be31368bf51391d441d5403333091c6b4fe05bbdf2d2453a8620fb6ecc50d938c5a2423a1e79a62e718fcf67845979dad28d78832a97d2ffeb4f</td>
|
|
<td>2025-08-18 12:46:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07a30398c07f3854e1a7c3bd58c01fafe25c6a7d1bb13feea789727020a888b2</td>
|
|
<td>[68a17a44cb9bfce9795803bd]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tw4phzvm.nwz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:44:12Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tw4phzvm.nwz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:44:12 +0000 UTC</td>
|
|
<td>2025-08-17 06:44:12 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:44:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07c5a9e87f8d1342d99a2d1d8ff7895f21fbb4d1eb322cd2420fb24fe5e51948</td>
|
|
<td>[68a36b1bb41b8f9dba5eed01]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\InterSystems\HSFoundation\bin\csystray.exe" ]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[C:\Windows\System32\userinit.exe]</td>
|
|
<td>[2025-08-18T17:54:24Z]</td>
|
|
<td>[fdba33aaa9751de8b7604fbf6dfb51c8]</td>
|
|
<td>[71560cdf025fc32080b07eca0f4247a77d960368]</td>
|
|
<td>[56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426]</td>
|
|
<td>[18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>csystray.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Cube</td>
|
|
<td>1354240</td>
|
|
<td>fdba33aaa9751de8b7604fbf6dfb51c8</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:11:24 +0000 UTC</td>
|
|
<td>2019-07-16 21:11:24 +0000 UTC</td>
|
|
<td>71560cdf025fc32080b07eca0f4247a77d960368</td>
|
|
<td>56226040cb1f9528cd598492529048af5a420d4182e572c12d1e05272fc1708801c168262ffcfeaed9add3df4425d426</td>
|
|
<td>18df9409e0a972fe81e08bfa344f4c22322dca7a03354c5bf00213cbebd91df88bd5846ee98d3b053565c53ed16664b7f8eb81709af60cc8965278a5516f5d3d</td>
|
|
<td>2025-06-02 14:01:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>07e92a00627641ee1a5bd7dd8c11fca9dc02849587920392ed696a311e270f34</td>
|
|
<td>[68a1a4e2395a90b784ea5df9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_zeppjcbv.oxo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_zeppjcbv.oxo.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:59 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:59 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:46:10 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>082ee54996b9d1c387dd5fba170e1b0ca068decddc056bf52d1ed770debb2743</td>
|
|
<td>[68a31b1aa6cbff78a3c29454]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:22:44Z]</td>
|
|
<td>[5178c69f2009d11787441469d3cf852c]</td>
|
|
<td>[b98a92206f5e709e937c34e092b2d601dd1408d0]</td>
|
|
<td>[ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568]</td>
|
|
<td>[9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2199</td>
|
|
<td>5178c69f2009d11787441469d3cf852c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 12:22:40 +0000 UTC</td>
|
|
<td>b98a92206f5e709e937c34e092b2d601dd1408d0</td>
|
|
<td>ecdeefc7dff36be9fdbacc99e527882863c3163301bbd76e8c45ea535af035f12e04842eca50600c74887ec99cfd7568</td>
|
|
<td>9a8c018f25e07f9073bd2d20ed98451fe1ba0aefea652972fa002a63aa8efd13569ac9b933fe1546b591d0a36778def22014c77027e07ed4e3bcfcff0a8dac51</td>
|
|
<td>2025-08-18 12:22:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>087e4a37a25c5d223418e7436fb620da2355df097dc7e784d42a27eb285e705f</td>
|
|
<td>[68a3146b5f0c41860c8c84ef, 68a3146b5f0c41860c8c8549]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\_weakrefset.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[c3a0dbdac023a9bed4a30ae4a485e887]</td>
|
|
<td>[59ea990ad4dc88bc52852b0d7349a1512269acb2]</td>
|
|
<td>[16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e]</td>
|
|
<td>[e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_weakrefset.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>12041</td>
|
|
<td>c3a0dbdac023a9bed4a30ae4a485e887</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>59ea990ad4dc88bc52852b0d7349a1512269acb2</td>
|
|
<td>16b893bc0625d1a7ae2773c3ce386e32d9872a76382457b867210ca994d5d7e887c6b0b9769b9d86cc12afce7ebebb7e</td>
|
|
<td>e15fab128867b30d6d9f38b95dd1f52b48e97549046aa1acd64a9584d048286aa8838d4349c361f5aadd3b4e315e97528042f22413b977b7ba4b3b1925c2d417</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08b51bdd723445a16a1459d004236362881607ad0bda1cded1d8419840e45654</td>
|
|
<td>[68a45bd8dc6569137dd741b1]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[TMH-CTX-APP4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_kt0kbq03.23l.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T11:11:09Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>[172.17.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kt0kbq03.23l.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 11:11:09 +0000 UTC</td>
|
|
<td>2025-08-19 11:11:09 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 11:11:20 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>08f4b407953309b37462a1b49111c0346f505c18df73ad795fe1f3d08a26a13c</td>
|
|
<td>[68a2407e7f644124333c5597]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_az4bceeu.ygt.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:49:53Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_az4bceeu.ygt.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:49:53 +0000 UTC</td>
|
|
<td>2025-08-17 20:49:53 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:50:06 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>09225ceef00a8012fc441f581bb567e63e4d8c0379b8a9466e29ca79db1e0fd3</td>
|
|
<td>[68a1a41aafa35cf692bdcd7a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_4hscutvi.yka.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:42:47Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_4hscutvi.yka.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:42:47 +0000 UTC</td>
|
|
<td>2025-08-17 09:42:47 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:42:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>092d18bd968e95133e7af93ebf48edda4dacbff12db23935b3fda6156292f445</td>
|
|
<td>[68a23262644a537a218593af]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-CC-PRD1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ngnjcvkf.sli.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:49:46Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>[172.17.146.2]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ngnjcvkf.sli.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:49:46 +0000 UTC</td>
|
|
<td>2025-08-17 19:49:46 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:49:54 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db952a6299fb8c832b4006433c766c58a449e5b3da78577807051ea80e74724c</td>
|
|
<td>[68a4cc4fe7cc38673861dc6c]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-ncapsule12]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\software\WindowsDefenderATPLocalOnboardingScript.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T19:11:05Z]</td>
|
|
<td>[5cbcac73eacda04bf93734eac54ec250]</td>
|
|
<td>[b6a7d80a56fd86c90b2b84c0bea58308a83abad3]</td>
|
|
<td>[1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc]</td>
|
|
<td>[84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>[172.17.23.18]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WindowsDefenderATPLocalOnboardingScript.cmd</td>
|
|
<td>C:\software\</td>
|
|
<td></td>
|
|
<td>17420</td>
|
|
<td>5cbcac73eacda04bf93734eac54ec250</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-15 21:00:30 +0000 UTC</td>
|
|
<td>2025-08-19 18:11:40 +0000 UTC</td>
|
|
<td>b6a7d80a56fd86c90b2b84c0bea58308a83abad3</td>
|
|
<td>1fbdbe83904c2c8fb812aa1e9b28aa0564d3e73e57da3387dce7d1600c17f463a2f76489945ca3ec722f1b2b80fca7dc</td>
|
|
<td>84e2d4d126ed7edbff5700f01353492cb46c115185cf61c0b8434de6859c747107465f1bb1a56095675d194b3ccf76b7627f345f346413d892d83e5db1d0e6e4</td>
|
|
<td>2025-08-19 19:11:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>db9f7bd0a28a1567fd07b17ffb7689bf2e9b03d046a94003d0c62fc2f45bd648</td>
|
|
<td>[68a4ccc785b914a60d739e55, 68a4ce1fc826337212f53bf2, 68a4d07753a851daf11e693d, 68a4d07753a851daf11e6954, 68a4d2d1ff2b441b84428135, 68a4d2d1ff2b441b8442814c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[ccwtest]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\Pipe.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\gehc-it\ccg\quovadx\cis6.2\integrator\bin\perl.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-19T19:13:07Z, 2025-08-19T19:13:11Z, 2025-08-19T19:23:06Z, 2025-08-19T19:23:11Z, 2025-08-19T19:33:06Z, 2025-08-19T19:33:11Z]</td>
|
|
<td>[33426740c0243bb202d68a135106ecb9]</td>
|
|
<td>[7b96d6dad1ed33ea163a6650fe03599778926ab5]</td>
|
|
<td>[7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307]</td>
|
|
<td>[5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>[10.36.132.49]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Pipe.dll</td>
|
|
<td>C:\gehc-it\ccg\quovadx\cis6.2\integrator\lib\perl5\MSWin32-x64-multi-thread\auto\Win32\Pipe\</td>
|
|
<td></td>
|
|
<td>20992</td>
|
|
<td>33426740c0243bb202d68a135106ecb9</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-20 13:41:11 +0000 UTC</td>
|
|
<td>2016-12-02 07:12:48 +0000 UTC</td>
|
|
<td>7b96d6dad1ed33ea163a6650fe03599778926ab5</td>
|
|
<td>7f4b0de291e955d1a60a916bdf8a5b03568ddbea1406858e1b4fc6956d40e830690f1f74d2c49ce59416c1f0cf392307</td>
|
|
<td>5e866bc6e0622dcedfe7a3d81eff5cc84f26b11a0ea238d1b1d971d908e2cf90f6257b268ea2762033e2bc1f713b4e0a135481e567c695e5de78f10978e21f8a</td>
|
|
<td>2025-08-19 19:13:11 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dbe1be4ea777f96af8e8efc887e486012f84255f819c5bc54016fbc01c0513b5</td>
|
|
<td>[68a3e79bb5e28efad9fbee2b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T02:55:20Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_cb4e05a5ec8b41f9a4be1f784264a211.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 02:55:23 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dbf17863020ad597586a772324b5f8a58d30e5317860ed83a8759f3fee25c2ae</td>
|
|
<td>[68a17c6313d38093271e4d7e, 68a2cde79ef546c806451f9c, 68a4212d6d0e46c2f152938e, 68a5711ca55e4f736b7b2bfb]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[i-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:51:03Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z]</td>
|
|
<td>[5359fd72aed1c21485d8508751b4089a]</td>
|
|
<td>[3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec]</td>
|
|
<td>[191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b]</td>
|
|
<td>[f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d]</td>
|
|
<td>[172.17.253.167]</td>
|
|
<td>[172.17.253.167]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1574</td>
|
|
<td>5359fd72aed1c21485d8508751b4089a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-17 12:28:16 +0000 UTC</td>
|
|
<td>2022-05-17 19:02:24 +0000 UTC</td>
|
|
<td>3ba557fef4ff27669e5cb78777c4e1d4cdc0a9ec</td>
|
|
<td>191e363646a38e7b147163a6da57cb73e7c9600128b972b2a2d08be21199d6e3e0be88376042ba06a15d4f1ce8b3581b</td>
|
|
<td>f1f73cd71075ad6e28a4c1d8d9bf927a8b4b6e412b47cdf3d5c9ed6991fa4051f3d84f5ef4869a9d70ba03c5caa2f6ed70f818263ae0933d8623c43e2789d23d</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc10a0514210898ed1dbd718a2c4e7b4c160d38483e64aa119d92eb55353f3bc</td>
|
|
<td>[68a3146b5f0c41860c8c8555]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\locale.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z]</td>
|
|
<td>[1924fbd93c01ce7df32aa9d6789abc1e]</td>
|
|
<td>[5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b]</td>
|
|
<td>[a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1]</td>
|
|
<td>[e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>locale.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>58313</td>
|
|
<td>1924fbd93c01ce7df32aa9d6789abc1e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>5fce0ff17a38acf1c4ef26fac70b9c70cec0c50b</td>
|
|
<td>a7a50bcde23bb361a9d649e39e8f3686cd4a926bb8e40d4cec18af49a7aff12053de5a3a93bdc483c40da766685408a1</td>
|
|
<td>e23dd946dfc378dc6d370c8c3ddaaa744891e356f319aa991ecfce4ca390d58d8106b38e86b1404fb48f0eb8358d493a14f533c6a8ecaeeef3ed4b7f1ecafa1c</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc2d377b573c836bcfbf1885b27a262786b50fb097e7a3d6a25d8a56f2771131</td>
|
|
<td>[68a275a87ae917016bf0f3a9]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_w2kz3vcr.g3b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:36:45Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_w2kz3vcr.g3b.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:36:45 +0000 UTC</td>
|
|
<td>2025-08-18 00:36:45 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 00:36:56 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc4656d6b231fd607385735cbcd7eed759506b2415bd7a40671abe8282eb0612</td>
|
|
<td>[68a1755706bbf9d9f204ab88]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod01]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1kijrqnm.b1z.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:23:11Z]</td>
|
|
<td>[a3bac681cf65fc3842b038012980eae3]</td>
|
|
<td>[54945680ce53b32d40e084ebe34cd3d4ac330594]</td>
|
|
<td>[dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a]</td>
|
|
<td>[d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>[172.17.22.182]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1kijrqnm.b1z.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>a3bac681cf65fc3842b038012980eae3</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:23:11 +0000 UTC</td>
|
|
<td>2025-08-17 06:23:11 +0000 UTC</td>
|
|
<td>54945680ce53b32d40e084ebe34cd3d4ac330594</td>
|
|
<td>dee1480e92aa10c9425fe7e706b7471a86c0b329db1a00f11b92030d53487a6c6d180d15630def42b4fc68a368d67c6a</td>
|
|
<td>d5320f84229d2438d764279d34c7d2347f8169328411a3b52ed43556f7d2bf9867f5e882ac29076fc9cf4abf5c366c9b16372b2c92a1c53eaee119f279e749e4</td>
|
|
<td>2025-08-17 06:23:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dc61a774db540e08caa944d187b5fe5a72904a7a67839ac49d20c67fcdf05b05</td>
|
|
<td>[68a245fbaa03fce1f3591138]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GEEA2023]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_itgpliwy.fxx.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T21:09:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>[172.29.132.47]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_itgpliwy.fxx.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 21:09:58 +0000 UTC</td>
|
|
<td>2025-08-17 21:09:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 21:13:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcb6f710e34a6ba8e3494bd41b1847ee91db7430f961f80d5db0ff4c4feaeae9</td>
|
|
<td>[68a48674c4cb2500be69263e, 68a48674c4cb2500be692650]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-niBedW_Prod]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Stryker\iBed Server Application\Stryker.Clinical\Stryker.iBedServer.Common.dll, C:\Stryker\iBed Server Application\Stryker.Authentication\Stryker.iBedServer.Common.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2273]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T14:05:51Z, 2025-08-19T14:08:09Z]</td>
|
|
<td>[efce77c5c92dc4a8c516d430070e7b96]</td>
|
|
<td>[2baab49956994f6a532f589386b922aeb5ad1e6e]</td>
|
|
<td>[b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753]</td>
|
|
<td>[992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>[172.17.252.226]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stryker.iBedServer.Common.dll</td>
|
|
<td>C:\Stryker\iBed Server Application\Stryker.Clinical\</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>26624</td>
|
|
<td>efce77c5c92dc4a8c516d430070e7b96</td>
|
|
<td>Stryker.iBedServer.Common</td>
|
|
<td>1.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2023-03-16 10:22:14 +0000 UTC</td>
|
|
<td>2baab49956994f6a532f589386b922aeb5ad1e6e</td>
|
|
<td>b9bee6a088be7c7834e908a2fde375ebebe0fdd17f68cd1bb5e499da349408a3c4c076fd41022117b43b6dd6aa90a753</td>
|
|
<td>992fa7e946245ff39f9e28aa570bd858053698f278245cbacd58cd8db70a596b64ec3855a78355a55b7473d8ecac3b8643e31e4030b5bf40594b13453ff11abd</td>
|
|
<td>2025-07-15 14:08:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcb83c4b7ea70aefe52299b701b5109ef1e0f8c9388fc04a8ed85e1425206a04</td>
|
|
<td>[68a3f8c69a8abcb93d00959e, 68a54a4f1d8af79f39037b08]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_utn_nemoq]</td>
|
|
<td>[I-NUHNQENG]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[E:\NQS\Close Nemo-Q.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[E:\NQS\NQStatistics\QstartE.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T04:02:00Z, 2025-08-20T04:02:00Z]</td>
|
|
<td>[f6d90142253043a52879717926747842]</td>
|
|
<td>[a0e1b1f4a0cdfedc917af0a14b818e8762af92fb]</td>
|
|
<td>[1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a]</td>
|
|
<td>[5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Close Nemo-Q.bat</td>
|
|
<td>E:\NQS\</td>
|
|
<td></td>
|
|
<td>335</td>
|
|
<td>f6d90142253043a52879717926747842</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-24 14:39:37 +0000 UTC</td>
|
|
<td>2015-05-26 13:24:58 +0000 UTC</td>
|
|
<td>a0e1b1f4a0cdfedc917af0a14b818e8762af92fb</td>
|
|
<td>1f84da13b333eaf823a05317a101deb518d7b77c93846c6eb75dce39243327511ebeeabaedac2e0d2353498660ede96a</td>
|
|
<td>5ca24a00dcd35eb635558e638ffc5b41a56cf1e05617a990b36116a86054bdd7eb0c142d9bb7c60a03173c39d9bbee0ee36f92b1b73bb723201fbd44a0252c6e</td>
|
|
<td>2025-08-09 04:02:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dcfbdfdbde9cbef28c79eddee54f0c2accb67f89728b7145fe46d42cce9aa9c5</td>
|
|
<td>[68a19d39565cc98ae4760187]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF4]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_qedznpgp.ga2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:13:22Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>[172.17.246.9]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_qedznpgp.ga2.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:13:22 +0000 UTC</td>
|
|
<td>2025-08-17 09:13:22 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:13:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dd57120f1f0e0134e39fc66cab1a7663decce9115a80a252ce9a5793be13137e</td>
|
|
<td>[68a34b98a6132bf659cce5c4, 68a34df0b71eea1289980a29]</td>
|
|
<td>[2]</td>
|
|
<td>[SVC_SL_NewTech]</td>
|
|
<td>[i-nWHLBadge]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\RS2Technologies.AccessItUniversal.Reports.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\AIUniWksNET.exe]</td>
|
|
<td>[C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\AIUniWksNET.exe]</td>
|
|
<td>[2025-08-18T15:47:40Z, 2025-08-18T15:58:42Z]</td>
|
|
<td>[5f532decc4fe7a6cc887d3a1f58b0708]</td>
|
|
<td>[7692172ed549773ca24d98e7a532942ddc3fccc5]</td>
|
|
<td>[356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0]</td>
|
|
<td>[25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>[172.17.253.114]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RS2Technologies.AccessItUniversal.Reports.dll</td>
|
|
<td>C:\Users\ca_jnt_newtech1\AppData\Local\AIUniWksNET\app-10.1.0\</td>
|
|
<td></td>
|
|
<td>264192</td>
|
|
<td>5f532decc4fe7a6cc887d3a1f58b0708</td>
|
|
<td>Access It!</td>
|
|
<td>10.1.0.7</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-07-25 16:11:56 +0000 UTC</td>
|
|
<td>2023-07-25 16:11:56 +0000 UTC</td>
|
|
<td>7692172ed549773ca24d98e7a532942ddc3fccc5</td>
|
|
<td>356b2b25b91cfa9cb9345445f13740d240f5dd931a29e2be9aa48ca4bd179308602a3bdaaf6efb3f8961e9c062d90da0</td>
|
|
<td>25396bc4be7e8ffa342b998d8ca64a1918e36596122213ac55c2dcfd7a7f2983ab414e7ede635f057a6c045b7e83d9b8d5e1f68b906fc74e7b2ff30414924bfc</td>
|
|
<td>2025-06-09 22:00:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dd6a23c7089b29d9b9af510e2f872b5cc369c931923f5b21c9395923f098d9c1</td>
|
|
<td>[68a3146b5f0c41860c8c84eb, 68a3146b5f0c41860c8c851f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\pywin32_bootstrap.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:14Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[489c61297357b3b99fc16ea3dc1721ab]</td>
|
|
<td>[5eae896c5218fd0730f2f34757a7d18ea262c3e4]</td>
|
|
<td>[b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40]</td>
|
|
<td>[b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>pywin32_bootstrap.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\site-packages\win32\lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>1024</td>
|
|
<td>489c61297357b3b99fc16ea3dc1721ab</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:26:08 +0000 UTC</td>
|
|
<td>2024-11-22 16:26:08 +0000 UTC</td>
|
|
<td>5eae896c5218fd0730f2f34757a7d18ea262c3e4</td>
|
|
<td>b2480fe388c3e0214b9c58bce76a6ea334c093b3d169d501d6e918412a2e8841ac72ec64d567d1041f6ca0cd15883a40</td>
|
|
<td>b46edd6c84d999f08adb0451ef3a04a78cecb39844a3c6cfb2ffd6d15c42848436c379ad9ff28251f187b9c64e5ff33955f474e94533f49aff4c800929bd662f</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ddc733167b0596778d6e16240e331d1bb2883d883e36d7f1dfdc3776581914bb</td>
|
|
<td>[68a3146b5f0c41860c8c84e8, 68a3146b5f0c41860c8c851b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\encodings\__pycache__\utf_8.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:13Z, 2025-08-18T11:44:17Z]</td>
|
|
<td>[0dc440c9e1c9be2baf0810e74c9235fd]</td>
|
|
<td>[deefe130f31490b275806f838ec6646ef01515a3]</td>
|
|
<td>[31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089]</td>
|
|
<td>[0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>utf_8.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\encodings\__pycache__\</td>
|
|
<td></td>
|
|
<td>2292</td>
|
|
<td>0dc440c9e1c9be2baf0810e74c9235fd</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>deefe130f31490b275806f838ec6646ef01515a3</td>
|
|
<td>31e4929ed37617c9ec02cd3b15d1a0b9c5f125e1baae6d61e19579c8db6c01c0c2ee4d22dd9d49d1238bb928f1444089</td>
|
|
<td>0ad508672691a728c93aa05bd1b9f3fc3e25d532392597e3d3e3e81ff7bb09c153fb1690d1d4897ee40dca6328025b6a8fe806eb47bd0fdd62d2c626a31b47cc</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e33e6856e8edeae2c5890cc751457fb4e4cdc45d8ca536e16f4a16395c52a29c</td>
|
|
<td>[68a5cc2091727380a40e2b0e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:32Z]</td>
|
|
<td>[3ed2304bef9e68e2fb6a30c735a1859c]</td>
|
|
<td>[16a7c5690e080a97e8c9cd6df223db64b6493010]</td>
|
|
<td>[d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795]</td>
|
|
<td>[9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>b4866059-b3c6-4fe0-b696-e2e84243c64a.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>936</td>
|
|
<td>3ed2304bef9e68e2fb6a30c735a1859c</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:32 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:32 +0000 UTC</td>
|
|
<td>16a7c5690e080a97e8c9cd6df223db64b6493010</td>
|
|
<td>d64f944776e78ffefde629b291ffbeb54c1eb89f2dbc24dcf9294d163c31fbafad08cf39a5abc809dc9c0d7b1b504795</td>
|
|
<td>9a12b88c3b6d56ca3a823f9d8818fddc43028520af26b73fef3422ae00e05e1042fa3b4cd7136e65930ce69bbdf05078e4605fd59a5c5af32889d5f6a5d6a394</td>
|
|
<td>2025-08-20 13:22:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dea56f31a5b1d22c57115b748b64d8166d83fe01daae5c95607bbb8a6f95e449</td>
|
|
<td>[68a1b5c50915c3775058adfa]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nLanSweep1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iouipeum.4l3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:58:08Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>[172.25.17.127]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iouipeum.4l3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:58:08 +0000 UTC</td>
|
|
<td>2025-08-17 10:58:08 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:58:13 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>df58757712295dbb1f70447f2200ba2ecd8a06dc9ff15290548d1b3b80fb1b83</td>
|
|
<td>[68a387828e5327740b40aeae]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_c02y5bwl.mpb.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2268.865]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T20:05:19Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_c02y5bwl.mpb.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 20:05:19 +0000 UTC</td>
|
|
<td>2025-08-18 20:05:19 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 20:05:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dfb45ff554590eb9467d82835099f80d0f504c203845681b55292eaab0883644</td>
|
|
<td>[68a164c5390404f85b716adb, 68a2b64cfd812c7de4e545b0, 68a408129f3185cbaca3c5cb, 68a559bf118aff08c8ed4944]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vroggera]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\ra\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:00Z, 2025-08-18T05:05:01Z, 2025-08-19T05:05:01Z, 2025-08-20T05:05:01Z]</td>
|
|
<td>[8cb39e842d0db0518f876501538e460b]</td>
|
|
<td>[77b6e192cbf04a40b6e0e32a73cc770695495f56]</td>
|
|
<td>[afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88]</td>
|
|
<td>[339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>[172.17.196.42]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\ra\bin\</td>
|
|
<td></td>
|
|
<td>406</td>
|
|
<td>8cb39e842d0db0518f876501538e460b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:20 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:20 +0000 UTC</td>
|
|
<td>77b6e192cbf04a40b6e0e32a73cc770695495f56</td>
|
|
<td>afe0d447dc2a5aab884f9b2fccfcd77a111a661b6dedb5f53e97227f7cbad19af109ba29e7ccdd3cc1512f6143d40a88</td>
|
|
<td>339dadd1d7a1d81825d566574bf20009ecc3625c440caa937475d4bd146685f34c9d530fa476ec0e1edd05bb4f308bf87261be3534803372bb06b988b715e600</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>dfb65002256db6ec059ac1994861030cc37096640ef394054187e6e5df234542</td>
|
|
<td>[68a1b088a503d43204bbb9e4]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_sszg4ffh.uu5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:35:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_sszg4ffh.uu5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:35:39 +0000 UTC</td>
|
|
<td>2025-08-17 10:35:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:35:52 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e006a3c090e787efe255b9971ccedae2e9c06e45a5651a93bad0264d16e059c5</td>
|
|
<td>[68a4a6605961c54c81f645ca]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045eu]</td>
|
|
<td>[i-nsdprodmon1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\scripts\SSLCertCheck.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2276.868]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-19T16:29:16Z]</td>
|
|
<td>[14ef36866a2842bd51446da8d40d5cde]</td>
|
|
<td>[1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0]</td>
|
|
<td>[0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56]</td>
|
|
<td>[f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>[172.17.252.208]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SSLCertCheck.ps1</td>
|
|
<td>C:\scripts\</td>
|
|
<td></td>
|
|
<td>2636</td>
|
|
<td>14ef36866a2842bd51446da8d40d5cde</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-08-09 13:18:30 +0000 UTC</td>
|
|
<td>2025-07-21 19:17:19 +0000 UTC</td>
|
|
<td>1cddf4a5a87ae47c4a4a06c0ecaf057ffb6a09e0</td>
|
|
<td>0c726acfa76c513dccd46eac4a1b1751fec41528a89abde584f775db6b79bcb86bc8c0004e8dfb95e63363e0654eaa56</td>
|
|
<td>f5b604d9e5fbb1c510e08a21a6e68688cd65ed8fd445c38ff6545ba0c9d137296a2151e175bd4dbc2fc8108df8ba351bc25efea62e063a2a91036cba44e02fd1</td>
|
|
<td>2025-08-19 16:29:20 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0b4a5a243fe5848fc77cefd16f94933d35229556186830f24fcf2065eec786a</td>
|
|
<td>[68a17bc07b632e8a862c1429]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hvhprod12]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_xtfzriej.1md.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:50:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>[172.17.21.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_xtfzriej.1md.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:50:36 +0000 UTC</td>
|
|
<td>2025-08-17 06:50:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:50:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0bec8be6fc453c6af4051e4b801303bea9c328f59b7d7ff40251c10de600125</td>
|
|
<td>[68a232a8e87ce966b73e852e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_eiug2m5n.wwg.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:50:51Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>[172.17.146.24]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_eiug2m5n.wwg.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:50:51 +0000 UTC</td>
|
|
<td>2025-08-17 19:50:51 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:51:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e546c1ecd425ed469638ea9c8cd091f861f912c74e5d7afcfee51219c7a3c66f</td>
|
|
<td>[68a15602d61ba01a4f22a4fb, 68a2a78cc07c7d9334c20f46]</td>
|
|
<td>[2]</td>
|
|
<td>[sunrisebackup]</td>
|
|
<td>[CI1BEFS3]</td>
|
|
<td>[WHI]</td>
|
|
<td>[D:\adminscripts\SCMNightlyAdminRebuildOnly.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T04:05:00Z, 2025-08-18T04:05:00Z]</td>
|
|
<td>[c7ee3db23e15ef7844db279f1a285530]</td>
|
|
<td>[1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82]</td>
|
|
<td>[b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066]</td>
|
|
<td>[752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>[172.18.112.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>SCMNightlyAdminRebuildOnly.bat</td>
|
|
<td>D:\adminscripts\</td>
|
|
<td></td>
|
|
<td>85</td>
|
|
<td>c7ee3db23e15ef7844db279f1a285530</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2019-09-17 15:10:50 +0000 UTC</td>
|
|
<td>2015-02-26 19:14:36 +0000 UTC</td>
|
|
<td>1bcecd68c0cf63cb83db8a7ce70e95bbb68d8d82</td>
|
|
<td>b7922b60ae36dc58994159ca5ed14bb6dc08c6abf2f2ec757fb657cf4623acfe1ae0dd70950d660152e8d3e82ebac066</td>
|
|
<td>752fd6a66fb0fce9701cb5390a0e7c162816f1d61eb19424aceddbb31e7402def27aec0be55672f1fdeafb53fef14b91a63456f844178f8bc478707b9025c5e4</td>
|
|
<td>2025-08-09 04:05:07 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e575875c544fb1727f9016d19415241e94a0bafc82b05eaabb842c2b8e1bceec</td>
|
|
<td>[68a233fd88f628d5134f0d73]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_3o4q5llx.mi5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_3o4q5llx.mi5.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:33 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:45 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e0c668862894797d5ef235021b63abf727ee5c656d490ee98fecd70afaef483a</td>
|
|
<td>[68a34d6610b57c5bffc57db0]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_8fa091ee-09b9-43b3-92b9-3b52476ae719_updatevisionTru.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e15020453fd5682d980b735a7e1cfd739ff733d258644f24b48093d67b50f36d</td>
|
|
<td>[68a3146b5f0c41860c8c8532, 68a3146b5f0c41860c8c856f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\_encoded_words.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:18Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[862e39ae2a4dad0447fb922787ad011b]</td>
|
|
<td>[059fdab715b03cf4f835efa17f6c2bfad339872c]</td>
|
|
<td>[a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718]</td>
|
|
<td>[4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_encoded_words.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>8291</td>
|
|
<td>862e39ae2a4dad0447fb922787ad011b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>059fdab715b03cf4f835efa17f6c2bfad339872c</td>
|
|
<td>a4fcf0a1618e12c0fe524d7e9f029f4638e09a78b9587550f6b729776a05cb2e2f011e4a4a0212069b8d629abca0b718</td>
|
|
<td>4aa0a7285df908c747d8247259d3c9220c6f5badb34c8a2e6bf18844cbc68e1ff829b1dfd836a409e6c390a178058be26966c6848bc54a69351b81f3d62eca60</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e1c8c3702bc0abbf1b5ae61cc29d04c80a8a2bbd8d1fcbf0d11cc86ae6eaf444</td>
|
|
<td>[68a18e6597a47909aebcd988, 68a2ddd944d60e582ffc0d18, 68a42f7e81de93c2600b6ec4, 68a581188343e5a09486e03d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\NSI_Restart.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T08:00:12Z, 2025-08-18T08:00:11Z, 2025-08-19T08:00:11Z, 2025-08-20T08:00:11Z]</td>
|
|
<td>[643b85dab211d67f2a377645205e031b]</td>
|
|
<td>[a34d7f6dc0c990ae6dafaf6719be7f835dd6e680]</td>
|
|
<td>[218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0]</td>
|
|
<td>[851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>NSI_Restart.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>239</td>
|
|
<td>643b85dab211d67f2a377645205e031b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-02-18 16:14:38 +0000 UTC</td>
|
|
<td>2021-02-18 16:14:38 +0000 UTC</td>
|
|
<td>a34d7f6dc0c990ae6dafaf6719be7f835dd6e680</td>
|
|
<td>218f4711f8776aa755a6dd5eaf3a9571effd38221d5cf367a0c0524829105d1c9f3f947cb04485597f8bb4b2e37bdff0</td>
|
|
<td>851939c0a7d8f137a433a03cbf837c394e9710e190536540fd3abe8d8e056aab324cea08ffeb598a6441b4b44ce8433fb31484e8078801a00d2597bd300f432f</td>
|
|
<td>2025-08-09 08:00:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e1ff597b34a621df3054f1feff304913055fd02bd0d002b5c5f2d01aedf6351a</td>
|
|
<td>[68a2f9ca170585b222da8a8a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hccmctracer]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.exe]</td>
|
|
<td>[C:\Program Files (x86)\Trane\TracerEnsemble\Server\bin\Trane.OWS.Server.Manager.exe]</td>
|
|
<td>[2025-08-18T10:00:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>[172.17.252.28]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_223ff9e1290b4fda9cc98a8ae0576c4d.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3366.16</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 10:00:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e28c7ee6c3458c61330546eddf643de294705d96fb0d6188f19cd83bb07f75e8</td>
|
|
<td>[68a42a0830e7648dae66944e]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[uvOSCCN2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_iax0wn2e.gzu.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-19T07:38:39Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>[172.25.18.157]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_iax0wn2e.gzu.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 07:38:39 +0000 UTC</td>
|
|
<td>2025-08-19 07:38:39 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 07:38:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3155f4c18e0f01cd09af5fcbdfb7f841db769e1df5e24dbd013f688beac7327</td>
|
|
<td>[68a25fb2e970d941642e7edb, 68a25fb2e970d941642e7ee8, 68a3b2cf09045b56b2a707b3, 68a3b2cf09045b56b2a707c0, 68a502e12ae1a61fbf4caf11, 68a502e12ae1a61fbf4caf1e]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\LumenWorks.Framework.IO.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-17T23:00:05Z, 2025-08-17T23:00:15Z, 2025-08-18T23:00:06Z, 2025-08-18T23:00:15Z, 2025-08-19T23:00:05Z, 2025-08-19T23:00:15Z]</td>
|
|
<td>[5d44925a2cc697a34066331935d1f7f9]</td>
|
|
<td>[a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026]</td>
|
|
<td>[c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d]</td>
|
|
<td>[124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LumenWorks.Framework.IO.dll</td>
|
|
<td>C:\Program Files\WindowsPowerShell\Modules\dbatools.library\2024.3.9\desktop\third-party\LumenWorks\</td>
|
|
<td>LumenWorks.Framework.IO</td>
|
|
<td>46080</td>
|
|
<td>5d44925a2cc697a34066331935d1f7f9</td>
|
|
<td>LumenWorks.Framework.IO</td>
|
|
<td>4.0.0 e6be48</td>
|
|
<td>Not Signed</td>
|
|
<td>2024-03-28 18:35:30 +0000 UTC</td>
|
|
<td>2018-03-24 18:18:16 +0000 UTC</td>
|
|
<td>a272ea20337f1ad7b360c8f32bbfd1a9e6ce5026</td>
|
|
<td>c72a075f5da50e6c951a5d231d5c4fb69bd6c03f804bc27065bc3523aa16d7936cb97c38967e3e3643a4821559eb782d</td>
|
|
<td>124455470fa0785879c339474f4db1a14140d22e25d99f44c6ac24a9d25870d17846aa234941cd5703b7ddaf5bcd5781ea41cbbc6e189799581bfd2a722f484d</td>
|
|
<td>2025-05-10 23:00:33 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7a68bf65d100ee688ccbd5bc3ae56686f7242c452236e20b3694cf8ed799bc8</td>
|
|
<td>[68a18e00ac9837c6e03c8389, 68a2df7d66d5c17a898e511e, 68a431051f4ef020faf2a7a9, 68a5828bc061ac4c45b0fd35]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[I-NUHNQENG]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[E:\NQS\NQEngine\Engine2000S.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[E:\NQS\NQEngine\Engine2000S.exe]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\services.exe]</td>
|
|
<td>[C:\Windows\System32\wininit.exe]</td>
|
|
<td>[2025-08-17T08:00:01Z, 2025-08-18T08:00:04Z, 2025-08-19T08:00:06Z, 2025-08-20T08:00:08Z]</td>
|
|
<td>[7ffb1ce555b054984ec466e3d928178c]</td>
|
|
<td>[9bbbe25bfedb1c4b4d5c61d441025d0ae882567c]</td>
|
|
<td>[3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8]</td>
|
|
<td>[e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>[172.17.253.25]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Engine2000S.exe</td>
|
|
<td>E:\NQS\NQEngine\</td>
|
|
<td>NQ 2000</td>
|
|
<td>2737152</td>
|
|
<td>7ffb1ce555b054984ec466e3d928178c</td>
|
|
<td></td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2025-04-24 14:39:41 +0000 UTC</td>
|
|
<td>2016-02-12 20:07:11 +0000 UTC</td>
|
|
<td>9bbbe25bfedb1c4b4d5c61d441025d0ae882567c</td>
|
|
<td>3b376292fac8de44e5192d315437d168f81284985159995f0ef3e40cfc7f490b2c523113b639351f9583428e734d17d8</td>
|
|
<td>e690fa83bddc859b6c9a9c227f5df4c809313c51438c5989ac271c50de7966b3f3d64b2a9c09709f0c0aa9fed1313e4c20ba267ef2b24b603c5bb2ba5a833c0b</td>
|
|
<td>2025-07-17 08:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e7c553ff1a507979ea54919f4443f196c968882b087280f0e1d45dfe08f84b9f</td>
|
|
<td>[68a3146b5f0c41860c8c8517, 68a3146b5f0c41860c8c856a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\base64.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[ff71871ad5f9fc74456c58065b29b949]</td>
|
|
<td>[d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd]</td>
|
|
<td>[05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc]</td>
|
|
<td>[2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>base64.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>25797</td>
|
|
<td>ff71871ad5f9fc74456c58065b29b949</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>d7fb481bba4e08f6d5a60a4f4d41d3bd71119afd</td>
|
|
<td>05b80673f74f4f5cb00d3f34b178190d783b044be08ecd4af1d0afced61fa547d0c9d05f29383478c06203f41bb173bc</td>
|
|
<td>2146c87ca38b74898c859181d640aaba8175d0d548dad09ca80dbffee060753ef9d0fba9849830ee94163d1d0d04617e27b5ee2bf117cbddf7d8cde8deb5e3ea</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e84cb02c1ab3298ff285dcd0295bd943457ba976193591a8f0577f1d2a017b56</td>
|
|
<td>[68a2529a2a645cc96ea797be]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_woxkkhvu.n5y.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:07:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_woxkkhvu.n5y.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:07:13 +0000 UTC</td>
|
|
<td>2025-08-17 22:07:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:07:22 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e8871edd5a81b3ec00c8bd3a62c5151c8b07efe347a250f9962f96c82272052b</td>
|
|
<td>[68a5239e621d09b2b1ed5e54]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PositioningServerInterface.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:36Z]</td>
|
|
<td>[3365edfac602c0aab571c97489df3f5a]</td>
|
|
<td>[f2a108f5b854cdf677b13fdf57d02f0452c8983d]</td>
|
|
<td>[fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af]</td>
|
|
<td>[6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PositioningServerInterface.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PositioningServerInterface</td>
|
|
<td>295424</td>
|
|
<td>3365edfac602c0aab571c97489df3f5a</td>
|
|
<td>PositioningServerInterface</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:16 +0000 UTC</td>
|
|
<td>f2a108f5b854cdf677b13fdf57d02f0452c8983d</td>
|
|
<td>fe7dd6b0ffbb3e63ee925f8a0ca8ef262bd06fca126f96786aa8062d0446a26d66fd6b37bc1ce6bbcd3da5207c8a78af</td>
|
|
<td>6a910808781c0a96af2c85d1dabc025f3dc0d5d86ad430bb9caaf6a2e3fe14c18ec37e08b49693d14d52ede54810c70756c785bf7e0dbdb78de410d41ead730c</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3a2d912935cae9b54dfd538ee7eb7135947506037f46e5cd9b0bc84d16147a0</td>
|
|
<td>[68a195c4355950638b4c627b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nLanSweep2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_1npvq1ae.jnp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:41:36Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>[172.17.251.238]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_1npvq1ae.jnp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:41:36 +0000 UTC</td>
|
|
<td>2025-08-17 08:41:36 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:41:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e3c2629e3abf692e7083da7cf5fd646f4daa808b6c508101eb41967f95b21b79</td>
|
|
<td>[68a5239e621d09b2b1ed5e4b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBTagDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:34Z]</td>
|
|
<td>[bd3f6d1a4e44a151f39dfbc24eaa84d3]</td>
|
|
<td>[d1b0ba350c91996b8911a34f503200aa28213ff7]</td>
|
|
<td>[c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435]</td>
|
|
<td>[8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PBTagDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PBTagDiagPlugIn</td>
|
|
<td>29184</td>
|
|
<td>bd3f6d1a4e44a151f39dfbc24eaa84d3</td>
|
|
<td>PBTagDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:06 +0000 UTC</td>
|
|
<td>d1b0ba350c91996b8911a34f503200aa28213ff7</td>
|
|
<td>c44be60243f8b31aac5f908ce60e5a68df80be1efd5eb821720089a53eb036fd6a2b60f06c47d43022ceccbed62c0435</td>
|
|
<td>8d9e9e25c5e9f627fd4afcc663eb19bdfd4300c6a7b6fee9109ac70652066433885338d4b9a6e48291ee7f7aba3143b6064366e205f00e771ced2ef509fc4d3d</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e41c25b2cddca5e49140732debc1cecb6d24310050cd2d4751df81d7bff5dd70</td>
|
|
<td>[68a1a9b1552c0717cd81b68c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctxddc-dev1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_aa3qsaw5.zqk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T10:06:35Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>[172.17.146.23]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_aa3qsaw5.zqk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 10:06:35 +0000 UTC</td>
|
|
<td>2025-08-17 10:06:35 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 10:06:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e43742082134ff5d4d915ca172e8590e4514b785ec5e8502628ddd4a56928978</td>
|
|
<td>[68a17e2d75b9eb54d66b3e31]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\tmpEXO_dh1mrpen.jqt.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:50Z]</td>
|
|
<td>[ac7f8b7a05ad9ddcea083c53d571d542]</td>
|
|
<td>[6940392b4e96610355da57e6a1bbefa939d9c4a6]</td>
|
|
<td>[91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537]</td>
|
|
<td>[b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_dh1mrpen.jqt.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_dh1mrpen.jqt\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>ac7f8b7a05ad9ddcea083c53d571d542</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:00:48 +0000 UTC</td>
|
|
<td>2025-08-17 07:00:48 +0000 UTC</td>
|
|
<td>6940392b4e96610355da57e6a1bbefa939d9c4a6</td>
|
|
<td>91a11e1e91072093c2510a414d572be2c45ba8ac2904532497ef954535e568cf6bbe986d089f4780eeb62e3ca1fc5537</td>
|
|
<td>b971be2f09e6c44987ca8b6e96f09f267413fa47976b9fe51ec87ba8b104e485e345d990cc1e00becef3f98311026c231a7dbb9ffd5a4d481cffd3ee564103b4</td>
|
|
<td>2025-08-17 07:01:01 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e464c83307f9ee3bccc2f8e58a1a5cf19cff4dd16f52501a21ce7467107113e4</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20f]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\FindAccountLockouts.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[853693ccd74c3f9f1604548dd9906f01]</td>
|
|
<td>[ecbf76fe70056921b16d45cadb9a4e09bc8054c7]</td>
|
|
<td>[941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f]</td>
|
|
<td>[3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>FindAccountLockouts.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>6800</td>
|
|
<td>853693ccd74c3f9f1604548dd9906f01</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-01-12 15:17:36 +0000 UTC</td>
|
|
<td>2025-06-25 15:19:58 +0000 UTC</td>
|
|
<td>ecbf76fe70056921b16d45cadb9a4e09bc8054c7</td>
|
|
<td>941c49822d1217f73b59ee775312b32e524773be92b6642d2654d69a2a1fbef16b32ef60f0898e0aa6cb870b1fd8f18f</td>
|
|
<td>3086e5238cf609d49eabaa1f874a8881d1d54677b746e63bd68444cb58523ef46f2f1d5d3d53d3aa8dd0dd745d983cb93a85144a1d72ffc448e2de98432cd35c</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e46e3f2b0c9ed8d7ecbd79530b3054260eb6b284f52d8bf8f2927034c9786d06</td>
|
|
<td>[68a34d6610b57c5bffc57dac]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_6171b373-3a13-4b68-877e-3271b77e5729_Untitled2.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e4a5eaff1f0000536fa3658ecd4cab4da69e1cf7a8a5477fbcbd1c04d12031d2</td>
|
|
<td>[68a3146b5f0c41860c8c850c, 68a3146b5f0c41860c8c855f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\html\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:19Z]</td>
|
|
<td>[07992cf118f6f4289bfbbd047fd6fb0d]</td>
|
|
<td>[8c8a01f4ffe2e1a05358d1016f61e1fdb432736e]</td>
|
|
<td>[11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036]</td>
|
|
<td>[dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\html\__pycache__\</td>
|
|
<td></td>
|
|
<td>4387</td>
|
|
<td>07992cf118f6f4289bfbbd047fd6fb0d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>8c8a01f4ffe2e1a05358d1016f61e1fdb432736e</td>
|
|
<td>11709a0be0d2aa81eed1f2f706e76f9556a2b04759b6645f337810801daeea72e06e2e8677d035906852aea016697036</td>
|
|
<td>dc0958f90d2032dbe08f6bbf4b3c6e1f3cd5f8c64a7495cf0891c8f194dbc3782242330b95b7284104913df582a37ba969fa82ef18ffaa3b0c04972ae8a7e364</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ebb33e93bf4aa5605d294227a8093dc28a5320c6933101c7c95dbdabd8dd1256</td>
|
|
<td>[68a4709fa6c6568ae291d431]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-nkalani25]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\_isuser_0x0409.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\software\Storage Manager Data Collector 20.1.2.14.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:39:58Z]</td>
|
|
<td>[fd437e74f172ce8c5f247b12a3e5925a]</td>
|
|
<td>[4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc]</td>
|
|
<td>[fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5]</td>
|
|
<td>[753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>[172.17.23.146]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>_isuser_0x0409.dll</td>
|
|
<td>C:\Users\my10040sa\AppData\Local\Temp\{DCD9A6F7-9CDF-4CD0-B27B-38532CB27A05}\</td>
|
|
<td></td>
|
|
<td>86016</td>
|
|
<td>fd437e74f172ce8c5f247b12a3e5925a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-19 12:39:55 +0000 UTC</td>
|
|
<td>2025-08-19 12:39:55 +0000 UTC</td>
|
|
<td>4bd4bd47b19a5e822eeb20b45bcae1c3f8b7e3bc</td>
|
|
<td>fde642d01309f291fba6b3e16073b74dc3b57e60f32609abf029f0f6ae7dee390114f258bf4f7547eb6b1b7b43b4f0d5</td>
|
|
<td>753bcbef1c9dcfd065b5a0f2d7e8f7bc0da3218cd29989d19adc739728396a2cd7444f2f3b11e2257f79ca4db549ef33ca1cb9a2d15d178e908f813e648b83ae</td>
|
|
<td>2025-08-19 12:39:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ebed11e668287d54fa7671ec27caba844bc77d51026d96ba55b9223b02a274ed</td>
|
|
<td>[68a182e48913a6156189a448]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_b10tnrr1.e0s.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:21:03Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b10tnrr1.e0s.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:21:03 +0000 UTC</td>
|
|
<td>2025-08-17 07:21:03 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:21:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ec11abdeb642ae755f7c7b4d017e7c78b5da4e2b575c721f71eb4d57f3e7a88d</td>
|
|
<td>[68a469504fb71ee844e91321]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_5a52494c1f07448092c118c8e656989b.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T12:08:41Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_5a52494c1f07448092c118c8e656989b.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 12:08:48 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ec71b467028b6db965ff8ab64c235215c598f54d4a63cad113024dd8fc771dc3</td>
|
|
<td>[68a3146b5f0c41860c8c853a, 68a3146b5f0c41860c8c8572]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\mimetypes.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[7603dbb91271b3fdb5f1bc8cb3ca1d91]</td>
|
|
<td>[570e0305f2409135f29de45c38bdcdb053c14bf0]</td>
|
|
<td>[1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d]</td>
|
|
<td>[8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>mimetypes.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>24884</td>
|
|
<td>7603dbb91271b3fdb5f1bc8cb3ca1d91</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:39 +0000 UTC</td>
|
|
<td>570e0305f2409135f29de45c38bdcdb053c14bf0</td>
|
|
<td>1c93527d68fd84f0663b76e8925cb29d60828406c0879775382d44deabd3c1129f020a647c84dfc054b0d8bdcb23867d</td>
|
|
<td>8a9ba775135907c77f3b0e956f002c3f3960d359c090f195939e0af2235f5a82d164d09153f93e77ce8624cef0d7bab3bc7fa92b13b56540405775d0a404d3f3</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e642ba38c1b80ccb926e5d13c06a8ba9b700308edd6764b20b1d72973f1f7a3b</td>
|
|
<td>[68a3146b5f0c41860c8c8515, 68a3146b5f0c41860c8c8568]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\string.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[566c8c7cc2e8b6a0d8c56c8e9ecbaa3a]</td>
|
|
<td>[0034fdaf7b975f232e54048ebfde010287bb30bb]</td>
|
|
<td>[99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef]</td>
|
|
<td>[de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>string.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>11659</td>
|
|
<td>566c8c7cc2e8b6a0d8c56c8e9ecbaa3a</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>0034fdaf7b975f232e54048ebfde010287bb30bb</td>
|
|
<td>99ade353a9a7b854df293892973331af779719e84cd24e651f24bf0e5102141ef38d33ba8ea5bb123810d7825e5a15ef</td>
|
|
<td>de3d9ea2d12bc8cfafffd7bf6861792440974831a8d9bd7d0127e11819f21856f568eca3f0b33b48faee8fe82a0702edff3b0fa167f04d8cdfe6f8b9022ecfb1</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e74ce1799cb48cfd0822a610cf41a101f6b996f6246aac0ff28d21902a2df002</td>
|
|
<td>[68a2a5b5b3e0e8853da851bb]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nctx-pvs3]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_tgxzzgk2.4mz.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T04:01:54Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>[172.17.146.6]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tgxzzgk2.4mz.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 04:01:54 +0000 UTC</td>
|
|
<td>2025-08-18 04:01:54 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 04:01:57 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ee3cc7db22713da029361eb122a24463f48437a6e404852e50a494ffc1d1de56</td>
|
|
<td>[68a5239e621d09b2b1ed5e66]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\StatusbarMechanism.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:40Z]</td>
|
|
<td>[1a5715a26857fd5d1e91a011de5b5c8b]</td>
|
|
<td>[5d84c1c6eee8a6c260438cbcc5a1c387e51aa715]</td>
|
|
<td>[c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87]</td>
|
|
<td>[c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>StatusbarMechanism.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>9728</td>
|
|
<td>1a5715a26857fd5d1e91a011de5b5c8b</td>
|
|
<td></td>
|
|
<td>1.0.8565.40737</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:56 +0000 UTC</td>
|
|
<td>5d84c1c6eee8a6c260438cbcc5a1c387e51aa715</td>
|
|
<td>c7ff9ead3b4432b2c9e1ddaa1ff176fc9cce0dcfb17350f6e94616ccaaa2be5b3b0dc291f0911a0edbe47f2225bf2d87</td>
|
|
<td>c581a0a963fea63b9a0b2fc8fe3929ddb48d761f8ac8a264e52faa722e0ed74c063b0a4bd9a5b5f302637047227d64c58a558c87e6dedfd6cee40baafc6b556a</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ee4054fd2936ad6c0c3eec4328e9018272e8e3790e2c6ad97ef88cd7982f06ce</td>
|
|
<td>[68a311cdc2d0d6e3eb77f211]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\GetForestDCInfo.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[f365fc9dfa1de8d074ba768da6120a73]</td>
|
|
<td>[82ec0308883dd686ab4009e644bf5cc0b1710f80]</td>
|
|
<td>[3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e]</td>
|
|
<td>[b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GetForestDCInfo.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>4362</td>
|
|
<td>f365fc9dfa1de8d074ba768da6120a73</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-11-18 18:17:21 +0000 UTC</td>
|
|
<td>2025-03-06 21:51:56 +0000 UTC</td>
|
|
<td>82ec0308883dd686ab4009e644bf5cc0b1710f80</td>
|
|
<td>3a09583bb9c582638b8c4b5d36623cb8ba8f5b9ce072c0295b62cd9e7f33c768a767fd229ddbc5f7b72b39e40cedf91e</td>
|
|
<td>b65629993ea5ea79e9e8f127cfc4038ea2111a1ae40f4cd83aacbf4a3b5a139268286cce69f427f88e7381d8bb1ee80d373331f67aeac67ed6975682cc7426eb</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>efdd8526ee90a02300ee6859ff21d3c192df2760b14c92d78e3f40657602b7f0</td>
|
|
<td>[68a5239e621d09b2b1ed5e4a]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\PBDeviceDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:33Z]</td>
|
|
<td>[fccd46d7671843dc7a4835197d775094]</td>
|
|
<td>[ece368dcb0767f9917a8d3afc0ed9082d6700894]</td>
|
|
<td>[f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1]</td>
|
|
<td>[b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>PBDeviceDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>PBDeviceDiagPlugIn</td>
|
|
<td>27648</td>
|
|
<td>fccd46d7671843dc7a4835197d775094</td>
|
|
<td>PBDeviceDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:04 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:04 +0000 UTC</td>
|
|
<td>ece368dcb0767f9917a8d3afc0ed9082d6700894</td>
|
|
<td>f6a045f6218bb900fcc5cd4b031ae818251a4e08c95654639b370fcae3aea4a4f3d967b130190a88d2a35f23332256d1</td>
|
|
<td>b7c6651b06a90a6c29f5a71dd98414e342efc84dfa5e163b74977e5ea1ec15800b6a721c824093d2d9ab0323613ce25618bd9efbdcb8369abbb5819340d14c5e</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>e9fcae336dc75d1cb657622eeaa2ab81083a02b7daedf904f8ba15267c64c8d3</td>
|
|
<td>[68a1dc843e3eb3bfafb56906]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nOSCCAPP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tr4qf3zl.d0p.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:43:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tr4qf3zl.d0p.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:43:24 +0000 UTC</td>
|
|
<td>2025-08-17 13:43:24 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:43:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ea8ebc2434881a8707d0b7745bb45b216a93fc17cb44f7989e884986d3042ed4</td>
|
|
<td>[68a26d9b01bfd350e1216692]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[UH-APPS]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_plvpuyxw.2rp.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T00:02:27Z]</td>
|
|
<td>[e27a0a2d3577c6ec112ce253a21fd3da]</td>
|
|
<td>[3045a8bf5fe3e3e2ca9307923d50e98829725c76]</td>
|
|
<td>[c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9]</td>
|
|
<td>[c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>[172.17.253.46]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_plvpuyxw.2rp.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td>e27a0a2d3577c6ec112ce253a21fd3da</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 00:02:27 +0000 UTC</td>
|
|
<td>2025-08-18 00:02:27 +0000 UTC</td>
|
|
<td>3045a8bf5fe3e3e2ca9307923d50e98829725c76</td>
|
|
<td>c10ab31037f6b3f09443b36d18918c6d04efcc4a6b24edadaf1045fa4eea19f18496cf87fa64f78ed9edaa57af3c85d9</td>
|
|
<td>c57f860874053f9bc16abc6a658d573b3bca602b7d68f54aedc9e43d788ac20b0ecec2ff2394cee225ea0b2da6b3df86d5a482e4bad31fe5b36a55ea535977f1</td>
|
|
<td>2025-08-18 00:02:35 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0d4b9c238d24b510f54549e58b65ca771cec784837dcce1afed90b9fa76aeb0</td>
|
|
<td>[68a311cdc2d0d6e3eb77f205]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\UScripts\RestoreMailboxToOtherMailbox-U.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[1aceb94194ecbedc4297e2942461bb42]</td>
|
|
<td>[fff9c984488a363dede782841598d4a7d6ea65c9]</td>
|
|
<td>[cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7]</td>
|
|
<td>[f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RestoreMailboxToOtherMailbox-U.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\UScripts\</td>
|
|
<td></td>
|
|
<td>25506</td>
|
|
<td>1aceb94194ecbedc4297e2942461bb42</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-02-28 16:55:32 +0000 UTC</td>
|
|
<td>2025-07-02 12:22:49 +0000 UTC</td>
|
|
<td>fff9c984488a363dede782841598d4a7d6ea65c9</td>
|
|
<td>cb24c89b660b776281dd49f15af3fbd0414322fba927d1cce63d0fd7233de3bb72f95d70be4db3cfc45067d5373e9dc7</td>
|
|
<td>f7b65157a0069d60605e7a79740f63c34103969aa259add1e5f266e3ea243f858f006915a4b47dae34cb4f899679bba8fdd3935d9d9ab1726f76efb0b1bcc288</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f143981b39642060db0d79ca61d54d93831de9f62af0b4958067fecf1e483a55</td>
|
|
<td>[68a156984663bd83db8ebc96]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_wse2sex4.g1x.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T04:12:01Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_wse2sex4.g1x.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 04:12:01 +0000 UTC</td>
|
|
<td>2025-08-17 04:12:01 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 04:12:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f22fa52b2c27e95cd2a6cac5cfa0f131563e6a977b30d71196f1162fe4a5688b</td>
|
|
<td>[68a330781adb06bf567189ac]</td>
|
|
<td>[2]</td>
|
|
<td>[be10045]</td>
|
|
<td>[i-nsdprint1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\scripts\WorkdaySearch.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2255.853]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T13:53:53Z]</td>
|
|
<td>[f9d67ab54445d23d6c36da84993679bc]</td>
|
|
<td>[dbf31330f49f312513c003971506ed9206865011]</td>
|
|
<td>[62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7]</td>
|
|
<td>[bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>[172.17.252.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>WorkdaySearch.ps1</td>
|
|
<td>D:\scripts\</td>
|
|
<td></td>
|
|
<td>2202</td>
|
|
<td>f9d67ab54445d23d6c36da84993679bc</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-10-30 13:43:35 +0000 UTC</td>
|
|
<td>2025-08-18 13:53:45 +0000 UTC</td>
|
|
<td>dbf31330f49f312513c003971506ed9206865011</td>
|
|
<td>62a3fd546c0871c43f0c88ac7ceef7ce4987d7c8721e9d348c28a71dee1fc620bd981d0bdbccead7adc31a4f7a9e28a7</td>
|
|
<td>bc543c0b170a9d56933efd474560f2a4c464fe6729a01bfe26cfe8370aa18d8576fb8eb0df91bda106f2339b625de6c227ffa198f9ac1da500893e914762a79e</td>
|
|
<td>2025-08-18 13:54:00 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f2782880edc138832f75cd69dc0c6828c60da4a688c8890c5b0ffc48923ee4e5</td>
|
|
<td>[68a5239e621d09b2b1ed5e64]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Stanley.PeCommServices.Jms.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:39Z]</td>
|
|
<td>[a9718f9d3fe1e994d65410cbb3247fe7]</td>
|
|
<td>[07de5a6d30f9c398bdd133d45d866ab31b110436]</td>
|
|
<td>[4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c]</td>
|
|
<td>[d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Stanley.PeCommServices.Jms.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>Stanley.PeCommServices.Jms</td>
|
|
<td>12800</td>
|
|
<td>a9718f9d3fe1e994d65410cbb3247fe7</td>
|
|
<td>Stanley.PeCommServices.Jms</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>07de5a6d30f9c398bdd133d45d866ab31b110436</td>
|
|
<td>4f74db8136969234da70f6f1ee48a813eab1e6d290e0d01a1c759246ffe349328501822b709f3ccfaf5dc4ea283f379c</td>
|
|
<td>d94fa2344efff5ac9af4a1b3ae3bf869f09584839938e38f38a46e35b5b3719eed4f5b2155f99c0ba3340e04212a0d2cbbb6060c906418a53010f408c24f30d6</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed40ecd60e4ade1ed57b3949d0beb19565a6fbc9e9238e7d60ae5de0e431abea</td>
|
|
<td>[68a311cdc2d0d6e3eb77f20d]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\Documents\MAG\FromHV-Datsun\LastReboot.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T11:38:48Z]</td>
|
|
<td>[fd0d3b6d86dba9dcf7ae484c4f0ee02e]</td>
|
|
<td>[a5c9075875cc116e1c0251652af618da238c7fe4]</td>
|
|
<td>[ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc]</td>
|
|
<td>[aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>LastReboot.ps1</td>
|
|
<td>C:\Users\georgemag\Documents\MAG\FromHV-Datsun\</td>
|
|
<td></td>
|
|
<td>3398</td>
|
|
<td>fd0d3b6d86dba9dcf7ae484c4f0ee02e</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-10 13:26:50 +0000 UTC</td>
|
|
<td>2024-12-05 19:56:50 +0000 UTC</td>
|
|
<td>a5c9075875cc116e1c0251652af618da238c7fe4</td>
|
|
<td>ef8bea2b4856973bb3ab0529bac8077b8beba98974a479f2563063d4e43f470fe41eee0dec315228500733b8c7cdfadc</td>
|
|
<td>aadf43f83b642d3a3c9213b00c77f83d1de94ce7453ae348b391ef151d2ea39c38d73ebf144007a90ea0ccdfb7eca682a1469124ae96a3d4bcba6ed143ab68a9</td>
|
|
<td>2025-08-12 11:48:49 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed550633d5d9cca7b426dac56666ec9a076a0fd328a3578465617c705b9b7abf</td>
|
|
<td>[68a55bd959b5c4211a08ec3b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_mc0sxuun.dbv.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T05:23:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_mc0sxuun.dbv.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 05:23:31 +0000 UTC</td>
|
|
<td>2025-08-20 05:23:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 05:23:37 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed6a94369257cf5aeacc1717ba2325547c74f196b10586c90d35e25dbe1032a1</td>
|
|
<td>[68a523949cec397f02de9f5d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GUIUtils.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[e69064234c54b30c82038104ca321e12]</td>
|
|
<td>[1a8fe23753edb0a3136a87dc35a492fef353f2ca]</td>
|
|
<td>[96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69]</td>
|
|
<td>[38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GUIUtils.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>69632</td>
|
|
<td>e69064234c54b30c82038104ca321e12</td>
|
|
<td></td>
|
|
<td>1.0.8565.40691</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>2023-06-15 02:36:24 +0000 UTC</td>
|
|
<td>1a8fe23753edb0a3136a87dc35a492fef353f2ca</td>
|
|
<td>96015ee29f426532648cf51b2a326ea38e823bf0ef870dd2fcfd44aeea1b017143949935ace8bb9f5a3682a15d79ab69</td>
|
|
<td>38b81569e12fee21aff0100c2a5b0638465ea09ed6b0df2f8b6a82dc312902dcf1737ab5c39f67c0d2695aa4c286da475624681e25b9e78e2351428985800736</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed728dd8ff1738114e51955b8a8e18e26bfd61f721db5aae1bd2639d01035b5c</td>
|
|
<td>[68a1642ad1ecd8b85d19b5b0, 68a2b3a6e6ca2bd5ba2a7ac0, 68a4054c9ee88c99993abccd, 68a556e8217e3b11fe5ae34c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[vm-UHCcbord]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\cbordwin\RestartDataService.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:00:01Z, 2025-08-18T05:00:02Z, 2025-08-19T05:00:02Z, 2025-08-20T05:00:01Z]</td>
|
|
<td>[84ca3a5b98517c455870e62ca343e1a8]</td>
|
|
<td>[3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8]</td>
|
|
<td>[e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549]</td>
|
|
<td>[67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>[172.17.252.44]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>RestartDataService.bat</td>
|
|
<td>C:\cbordwin\</td>
|
|
<td></td>
|
|
<td>1168</td>
|
|
<td>84ca3a5b98517c455870e62ca343e1a8</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2018-08-07 19:53:41 +0000 UTC</td>
|
|
<td>2018-08-07 19:55:10 +0000 UTC</td>
|
|
<td>3ebd16108a1be8ab9eb7c09aa59cd31d7b912ad8</td>
|
|
<td>e570ea3d9ee2eb64b04a5ca34da98333a690a749ce8aa83d62c4d69b093b28d15639308c57d93c52280240f9c9275549</td>
|
|
<td>67144f0a46a0ad8e9f73388542867354bf3796165ca201e8ef183608942eff6b042c3496b9c1f7a75d72c29f01b460754d4a0c9fd8c8f86a1a9005ad4f6f45cf</td>
|
|
<td>2025-08-09 05:00:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed7f0c624fbdcf4020d4e80f6baf68134ed79f0fc414c9c57c225247b62bc875</td>
|
|
<td>[68a5d47cc6760b09dc6a843f, 68a5d5c523f474b5ba76fd33]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVA12]</td>
|
|
<td>[I-CA-PSM]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\MDE2016\install.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2293.885]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T13:58:13Z, 2025-08-20T14:01:29Z]</td>
|
|
<td>[15d5a2e4c9399180703644f6cec95845]</td>
|
|
<td>[ef5ac362659dfeacbfd6c52814339a25e653b7bc]</td>
|
|
<td>[f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a]</td>
|
|
<td>[b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>[172.17.252.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>install.ps1</td>
|
|
<td>C:\MDE2016\</td>
|
|
<td></td>
|
|
<td>99053</td>
|
|
<td>15d5a2e4c9399180703644f6cec95845</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-07-15 17:19:00 +0000 UTC</td>
|
|
<td>2025-01-28 14:53:54 +0000 UTC</td>
|
|
<td>ef5ac362659dfeacbfd6c52814339a25e653b7bc</td>
|
|
<td>f34f184f23ea53bc438edb6ddd1027e45a0482f90f5d52db779a33ea311e38bad23f86d84de50cb16b20d709869d407a</td>
|
|
<td>b2b3f1db3a7e0517c3db33d2df9ce146fff90c2c3c503734880866750e86e90cff36f3a7ee102d9389ee26af67e2037a737848e0a9f3d4563f99a1cb84a4d947</td>
|
|
<td>2025-07-15 17:19:21 +0000 UTC</td>
|
|
<td>[{'applicationid': '1743105177', 'name': 'Base System', 'version': ''}]</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ed8404ca8de2d42007eb59ba5c0404491b6eb7daeefeda349d13935753b126d8</td>
|
|
<td>[68a1d19347b05a9454215684, 68a322aceb4930c1ec69c2bb, 68a4746a6d77d97c70e006c6, 68a5c3cdc942eaeb78c702a0]</td>
|
|
<td>[2]</td>
|
|
<td>[jessie.pennington]</td>
|
|
<td>[PCH-DR001]</td>
|
|
<td>[PCH-DOMAIN]</td>
|
|
<td>[D:\HRG\HrgRun.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2251.851, v2272.867, v2287.879]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T12:43:21Z, 2025-08-18T12:43:21Z, 2025-08-19T12:43:21Z, 2025-08-20T12:43:21Z]</td>
|
|
<td>[7fcaa24a7148c75338c0bacced15af5b]</td>
|
|
<td>[30c8b042cf900a9cf906b1c755d5d1d25b32cacf]</td>
|
|
<td>[4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff]</td>
|
|
<td>[cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335]</td>
|
|
<td>[10.20.22.43]</td>
|
|
<td>[10.20.22.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>HrgRun.bat</td>
|
|
<td>D:\HRG\</td>
|
|
<td></td>
|
|
<td>1416</td>
|
|
<td>7fcaa24a7148c75338c0bacced15af5b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-05-22 14:08:08 +0000 UTC</td>
|
|
<td>2023-09-19 12:47:54 +0000 UTC</td>
|
|
<td>30c8b042cf900a9cf906b1c755d5d1d25b32cacf</td>
|
|
<td>4f5fdbbdc5dde691f26567ff701237ccaba8a3c564cfbc8a6a85df09d25feb7f6b61baab2f4c898a0b7378f6285e66ff</td>
|
|
<td>cf755a021d83c71467a8187a16f4b1d3da1f7e26196adb97b2791c4cbe17097891380cd0e1d4c92ae02ba9fa346a0368671975e620dec3b89d49b24bd10d8335</td>
|
|
<td>2025-08-09 12:46:51 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f4d78ec3aacc15e34bbcacd91f643ed1824f2dc7bd50ab1002f2e01e95456a4d</td>
|
|
<td>[68a17e9d450b6af860b2a048, 68a2d02202d2333d8d83417e, 68a421c7cf2d938484290f3b, 68a5735c4174cee301f60528]</td>
|
|
<td>[2]</td>
|
|
<td>[svc_Iatric]</td>
|
|
<td>[i-nSamDB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[G:\SAMImports\Provation\ExtractYesterday.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T07:00:00Z, 2025-08-18T07:00:00Z, 2025-08-19T07:00:00Z, 2025-08-20T07:00:00Z]</td>
|
|
<td>[e2132d40c92ea49fc2ba6f5a48a4e5e1]</td>
|
|
<td>[9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db]</td>
|
|
<td>[b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56]</td>
|
|
<td>[3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>[172.17.21.136]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>ExtractYesterday.bat</td>
|
|
<td>G:\SAMImports\Provation\</td>
|
|
<td></td>
|
|
<td>128</td>
|
|
<td>e2132d40c92ea49fc2ba6f5a48a4e5e1</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2023-03-06 16:35:20 +0000 UTC</td>
|
|
<td>2023-12-13 12:57:26 +0000 UTC</td>
|
|
<td>9a8b40c5a6c4c8e6d7ecd0153d011d8862e3d6db</td>
|
|
<td>b7b19ebca4432be2b01b9db4835b1bb09c4e86f0fe1905c0ab04fd030ec29b1cddb7ce4a3caad9c6e9756033f2d2da56</td>
|
|
<td>3b6b70a1b476a58d19397a188851463cc1953f68034b83966ee93f3a48d0e4dba9749ad590a7fe7ab8067d1591bff700d61e5415594b6c2db35c1bbf040cb213</td>
|
|
<td>2025-08-09 07:00:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f529e182b51d5b8921bc0134e5e6fab317321babe9fb10ba92da457f46c53793</td>
|
|
<td>[68a5239e621d09b2b1ed5e45]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\Module.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:32Z]</td>
|
|
<td>[dc2407a1a6409b2c68fb0cb6e69ec180]</td>
|
|
<td>[40155aeb60dffe49e6461c76fa66dc89b8ea9437]</td>
|
|
<td>[e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73]</td>
|
|
<td>[495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Module.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td></td>
|
|
<td>126976</td>
|
|
<td>dc2407a1a6409b2c68fb0cb6e69ec180</td>
|
|
<td></td>
|
|
<td>1.0.8565.40727</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:37:36 +0000 UTC</td>
|
|
<td>2023-06-15 02:37:36 +0000 UTC</td>
|
|
<td>40155aeb60dffe49e6461c76fa66dc89b8ea9437</td>
|
|
<td>e28033fb0365829e88d9c901065a895ea8e03dc10a2abffb1e072408081b33d09fdd8391a64a9e5de83f25696aac2e73</td>
|
|
<td>495a119cb8ed250d797b3e2f8df72a187076c8c0a1fc825c9746f76c8ad516aa0f3aa0ecc4d3cf56e15d645402835550e43cda9d647754ea239b6c4f5ed184bc</td>
|
|
<td>2025-08-20 01:23:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f530fa19af4b883e5fa5cded7db4d38f87828b68adda565f42a9f47dcb237d0e</td>
|
|
<td>[68a2b38b161afab772184bd4]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_ExchAuto]</td>
|
|
<td>[U-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\tmpEXO_iibpe4mm.2kz.psm1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T05:00:48Z]</td>
|
|
<td>[beb8c90fe57930da08c3e3ceeeefca0d]</td>
|
|
<td>[c983a10d79f3df73d3413c98e661499bb2163e0b]</td>
|
|
<td>[fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb]</td>
|
|
<td>[be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>[172.25.17.86]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tmpEXO_iibpe4mm.2kz.psm1</td>
|
|
<td>C:\Users\CA_Jnt_ExchAuto\AppData\Local\Temp\tmpEXO_iibpe4mm.2kz\</td>
|
|
<td></td>
|
|
<td>2290479</td>
|
|
<td>beb8c90fe57930da08c3e3ceeeefca0d</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 05:00:47 +0000 UTC</td>
|
|
<td>2025-08-18 05:00:47 +0000 UTC</td>
|
|
<td>c983a10d79f3df73d3413c98e661499bb2163e0b</td>
|
|
<td>fd153d2ad1dbd0bb9f4f302d964cf74938530378a36cb50272905f821e2b6217ee3979fcd146f4d02cdd52eb73e595bb</td>
|
|
<td>be795d3eaa6423fd4f922a58c619cffb454eeb9beeda3dbf6c91a0ef81f384eb3a3b949d21596e3e78b1e02ce1b557169ceb114f65c36ce41d8ca0ba675c688b</td>
|
|
<td>2025-08-18 05:00:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f5730988fcea216c2807c08c31f0f047cd77bfa91f500368883ab178cea72b05</td>
|
|
<td>[68a1dee6de61d9c2d3f810de]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[u-nOSCCAPP2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_404hqnm2.awk.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T13:53:30Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>[172.25.17.231]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_404hqnm2.awk.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 13:53:30 +0000 UTC</td>
|
|
<td>2025-08-17 13:53:30 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 13:53:42 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f5db951701b43d9e065c4d5548acbf9b2e8dc765caaccf137d33c2df17e42915</td>
|
|
<td>[68a31a5c2c2fd909a9789515]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCtx-SF2]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_yot1w4e0.sl3.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-18T12:19:33Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>[172.17.146.10]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_yot1w4e0.sl3.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-18 12:19:33 +0000 UTC</td>
|
|
<td>2025-08-18 12:19:33 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 12:19:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6136e0ffb0c22bc0011234c50eaa14f7b30b94b0fc3607b11b566a0d1886d61</td>
|
|
<td>[68a26ea46e6b6ee6bc972e27, 68a3c03623c2934753962dcb, 68a511ca8c3c7fce901b5863]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nGRNTBaxterDB]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[F:\app\oracle\fast_recovery_area\CEDB0601\rman_backup.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T00:00:01Z, 2025-08-19T00:00:01Z, 2025-08-20T00:00:01Z]</td>
|
|
<td>[608b8e09fac55079d60755d6fdbe776f]</td>
|
|
<td>[611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd]</td>
|
|
<td>[fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8]</td>
|
|
<td>[5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c]</td>
|
|
<td>[172.17.20.124]</td>
|
|
<td>[172.17.20.124]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>rman_backup.bat</td>
|
|
<td>F:\app\oracle\fast_recovery_area\CEDB0601\</td>
|
|
<td></td>
|
|
<td>141</td>
|
|
<td>608b8e09fac55079d60755d6fdbe776f</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-05-07 13:44:13 +0000 UTC</td>
|
|
<td>2025-05-07 13:45:30 +0000 UTC</td>
|
|
<td>611d9ff2ec717ca78598fe989e2c3f6e15aa1fcd</td>
|
|
<td>fd96424228eeb14592b53555151b2dc15962d25a7d9439a177f60dae0b12fcc8e8de29164a20f09a460e4a9f44ead9e8</td>
|
|
<td>5f9f9708c0df833f4f551d1a1fbb3f7a4cc0b4b26942908c72b103a603e95400c389e5f979de201f90e8a355173e69b17c984a54704370452cfffa4e1804335c</td>
|
|
<td>2025-08-09 00:00:08 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6a6c9f6b882d5870f8663518d1227f52605393e27eedf1dfbd79b2a5f4d8859</td>
|
|
<td>[68a3146b5f0c41860c8c8552, 68a3146b5f0c41860c8c8578]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\__pycache__\tokenize.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:19Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[d4f62a3f3588da7cf8adaae6570edf2b]</td>
|
|
<td>[ebda299175433b27ac007f69f74952d20ae5202b]</td>
|
|
<td>[4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5]</td>
|
|
<td>[7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>tokenize.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\__pycache__\</td>
|
|
<td></td>
|
|
<td>24812</td>
|
|
<td>d4f62a3f3588da7cf8adaae6570edf2b</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:37 +0000 UTC</td>
|
|
<td>ebda299175433b27ac007f69f74952d20ae5202b</td>
|
|
<td>4053c16bdef0f8ddf5fcddd9bf18944ba9bcd96293fa6c86d9629281cb783f7d9e3f03fbfa7de2ddfbdb920e25f250e5</td>
|
|
<td>7c7d6f99c4d70b760b4f7744a6ccab0e8732ec116dec206a0333fc1e8cd89efea2be501df280c3980647aa4c6134e953764a34108cf9097e486a7ce928500e0d</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6b501b9214e63a29c2c4568350f7b6b145946c144d9b014300fbcc0784f7c60</td>
|
|
<td>[68a5f159551ff431c0c2f46a]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_FormFast2]</td>
|
|
<td>[i-NTFFWEB1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\__PSScriptPolicyTest_b2yelpqr.qj0.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2306.895]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-20T16:01:26Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>[172.17.253.163]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_b2yelpqr.qj0.ps1</td>
|
|
<td>C:\Users\CA_Jnt_FormFast2\AppData\Local\Temp\12\</td>
|
|
<td></td>
|
|
<td>81</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 16:01:26 +0000 UTC</td>
|
|
<td>2025-08-20 16:01:26 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 16:01:29 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>eff71ebfb31f1822e569edc81990a969cf42a402a6a6f42cf4d1227e6ea0d1a7</td>
|
|
<td>[68a23457310f884f1ff6772d]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-hPRNRemisol]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_rgmk0of0.40c.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:58:05Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>[172.17.23.88]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_rgmk0of0.40c.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:58:05 +0000 UTC</td>
|
|
<td>2025-08-17 19:58:05 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:58:15 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f057202970b8bf95c8a587bd6c4e319eb753010daaeea4944e1ec5e269b3e120</td>
|
|
<td>[68a4dda823653165b0c6ea27]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_DAWS3]</td>
|
|
<td>[i-hMSFT-ODA]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Assessments\ADSecurityAssessment\run.cmd]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2283.876]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T20:20:40Z]</td>
|
|
<td>[8bd1e8d9b600a129656078512f623ff0]</td>
|
|
<td>[5745c02ec0e1eae0b43b16753beb8e1ccb8081a6]</td>
|
|
<td>[14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c]</td>
|
|
<td>[c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>[172.17.23.172]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>run.cmd</td>
|
|
<td>C:\Assessments\ADSecurityAssessment\</td>
|
|
<td></td>
|
|
<td>215</td>
|
|
<td>8bd1e8d9b600a129656078512f623ff0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-10-29 19:20:40 +0000 UTC</td>
|
|
<td>2024-10-29 19:20:40 +0000 UTC</td>
|
|
<td>5745c02ec0e1eae0b43b16753beb8e1ccb8081a6</td>
|
|
<td>14c2023c6fec21ea3102201b9cd62020e7e13afe0516de65741ff43c7e8f661919a8430180f2bd31bec10889772c960c</td>
|
|
<td>c317527789ee3ff1a8618c62046de76194b3a9f1441f8134620e438a4eb9ece4af194a5944b81cc7375930ffc5a39468dfb36e520b622fb048805c2792ee8094</td>
|
|
<td>2025-08-12 20:20:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0901d66025505ba75703951e37a08b7079d7077fb98a506057fe8fc141e06ef</td>
|
|
<td>[68a242b8fcb6ba0be2122339]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\__PSScriptPolicyTest_kiw23hmo.z5k.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T20:59:23Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_kiw23hmo.z5k.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 20:59:23 +0000 UTC</td>
|
|
<td>2025-08-17 20:59:23 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 20:59:36 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f0d097448b58a879149fea8c0fd5bfd34b72db3a858fb2f371e8438dbb8717c7</td>
|
|
<td>[68a233e95f55f21b103cd9c5]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nCTX-SessRec]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_h3vvd1ao.f0e.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T19:56:13Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>[172.17.146.20]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_h3vvd1ao.f0e.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 19:56:13 +0000 UTC</td>
|
|
<td>2025-08-17 19:56:13 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 19:56:25 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fbdd4672faf5ce1f6d58b336dd2cba9cab2624ea92c91371f8ca26c47c06adc4</td>
|
|
<td>[68a1933a637eb74a714c329b]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[WHL-STOREFRONT1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ic5gp5jg.stn.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T08:30:43Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>[172.18.112.145]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ic5gp5jg.stn.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 08:30:43 +0000 UTC</td>
|
|
<td>2025-08-17 08:30:43 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 08:30:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc110f30f53ee8362931a98ed1af4c37dadcf79a8dc5f09b4070eaa4a758698d</td>
|
|
<td>[68a523949cec397f02de9f59]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nMobileView]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\GenConfigDiagPlugIn.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[C:\Windows\System32\CompatTelRunner.exe]</td>
|
|
<td>[2025-08-20T01:23:30Z]</td>
|
|
<td>[a4540f55360e91330d7228e9b59bc092]</td>
|
|
<td>[5500674149e61c84977326de17b4029f1ee8f286]</td>
|
|
<td>[e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197]</td>
|
|
<td>[4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>[172.17.22.40]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>GenConfigDiagPlugIn.dll</td>
|
|
<td>C:\Program Files (x86)\AeroScout\AeroScout Engine Manager\bin\Rte\</td>
|
|
<td>GenConfigDiagPlugIn</td>
|
|
<td>22016</td>
|
|
<td>a4540f55360e91330d7228e9b59bc092</td>
|
|
<td>GenConfigDiagPlugIn</td>
|
|
<td>1.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>2023-06-15 02:38:02 +0000 UTC</td>
|
|
<td>5500674149e61c84977326de17b4029f1ee8f286</td>
|
|
<td>e038bd1bd4eb83351cf699aa4cf68c259096759edb6eb5a5db85e86d2ff0dc45ad31999a7b3a0b211b887092adc56197</td>
|
|
<td>4920555d4cc9b0507a3c910decd53081b8e5e6de33d4dba5fa37c4aa0db4bb6b8a4187a1e1ac051b1c1bd5d6b9725d12914492bbc2d402875328c7a80bd7afb1</td>
|
|
<td>2025-08-20 01:23:32 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc331eb357b655d600c2d206e7ecfc70febb0f298b81a190f1c7444258d15d48</td>
|
|
<td>[68a34d6610b57c5bffc57dad]</td>
|
|
<td>[2]</td>
|
|
<td>[CA_Jnt_SVAsp]</td>
|
|
<td>[i-hadfs-1]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2258.855]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-18T15:55:28Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>[172.17.253.100]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_5a3620fd-7871-4aea-9fff-07c1411bbad2_Untitled5.ps1</td>
|
|
<td>C:\Users\CA_Jnt_SVAsp\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-11 14:07:50 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fc4523c52329ec0e4c6c37175aa7dce0ce9ca97709430cda952ebc5c33f45af7</td>
|
|
<td>[68a177ff5edefd4d66a3be1f]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-CBPRO]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_bkndjlvo.aen.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T06:34:29Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>[172.25.17.173]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_bkndjlvo.aen.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 06:34:29 +0000 UTC</td>
|
|
<td>2025-08-17 06:34:29 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 06:34:39 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f86bbdcf20149796065c2615ecfff56ddd1aaa311e74d7952014b8d81dc3bc7b</td>
|
|
<td>[68a5bdfb54e99efcaf1f8db9]</td>
|
|
<td>[2]</td>
|
|
<td>[georgemag]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\vkgsr1ui.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-20T12:22:14Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>vkgsr1ui.dll</td>
|
|
<td>C:\Users\georgemag\AppData\Local\Temp\vkgsr1ui\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-20 12:22:19 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f8d7b2befffa01c23b301f5168c7e7e2282997099904057bfc6cac0ffaf53265</td>
|
|
<td>[68a17e555329b4ad00f14830]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[GMH-CTX-APP1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ynbbntyr.zmr.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T07:01:31Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>[172.31.241.7]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ynbbntyr.zmr.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 07:01:31 +0000 UTC</td>
|
|
<td>2025-08-17 07:01:31 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 07:01:41 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f9a0f6cdf5c1aa62deaffa6fbffbb56bf484a879e88f5d7f775bcadbb2a0c34e</td>
|
|
<td>[68a1a4c40fc81084514a3a34]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-nCTX-SF1]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_ie2wsj0b.m1p.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T09:45:38Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>[172.25.246.19]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_ie2wsj0b.m1p.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 09:45:38 +0000 UTC</td>
|
|
<td>2025-08-17 09:45:38 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 09:45:40 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f9c13d4ce6cf1962eb8e3cb201bb974b32f0db3a1806b0c6352a0a12e7877d30</td>
|
|
<td>[68a3f034978467a3921f39ac]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nimmulink]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\SystemTemp\expression_host_be420adaea8f45e69ad3e341273a38ab.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\inetsrv\w3wp.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-19T03:31:59Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>[172.17.253.89]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>expression_host_be420adaea8f45e69ad3e341273a38ab.dll</td>
|
|
<td>C:\Windows\SystemTemp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>12.2.3452.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-19 03:32:04 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>fb65774774f37bf9b61dfd39c7fc27ec58ecedc6cc2d6c9bedee2b6054b0711f</td>
|
|
<td>[68a36b076a7f8fce5714f796]</td>
|
|
<td>[2]</td>
|
|
<td>[my10040sa]</td>
|
|
<td>[i-hventana]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\Ccontrol.exe]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2264.862]</td>
|
|
<td>["D:\INTERSYSTEMS\HSFOUNDATION\BIN\CCONTROL.EXE" cterminal HSFOUNDATION2017]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[D:\InterSystems\HSFoundation\bin\csystray.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T18:03:45Z]</td>
|
|
<td>[becf6336d139fb201df8f0c25344fa85]</td>
|
|
<td>[83aaab5f7fe72010d6f1b45366fad34568ea330d]</td>
|
|
<td>[8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f]</td>
|
|
<td>[66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>[172.17.253.63]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>Ccontrol.exe</td>
|
|
<td>D:\InterSystems\HSFoundation\bin\</td>
|
|
<td>Cache' Control Program</td>
|
|
<td>25600</td>
|
|
<td>becf6336d139fb201df8f0c25344fa85</td>
|
|
<td>Cache'</td>
|
|
<td>2017.2.2.865.3.19109</td>
|
|
<td>Not Signed</td>
|
|
<td>2019-07-16 21:09:26 +0000 UTC</td>
|
|
<td>2019-07-16 21:09:26 +0000 UTC</td>
|
|
<td>83aaab5f7fe72010d6f1b45366fad34568ea330d</td>
|
|
<td>8866c50ca3724339102cafa3dc95199059df7b31eb2fe90b26831df65d82ee6a387bcfb70c18b91790d2ab28edb6926f</td>
|
|
<td>66a7df0fbad05e90bf71076c912f144c99730e53ef709609491435f71abdfa97f74366eea53e4e5c3bcc50b816203afd09ee8fc05a411d605c3252e266f7c634</td>
|
|
<td>2025-08-12 13:26:31 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>ff28639f74d693212ee201bb3eb552ea3aa6e485d828399380883531b6915fad</td>
|
|
<td>[68a3146b5f0c41860c8c8514, 68a3146b5f0c41860c8c8567]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\quoprimime.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:16Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[e8fe369f2c3111f2db22b808a1388e10]</td>
|
|
<td>[01bff92af9b094657904ccf3844f4017b6dd0883]</td>
|
|
<td>[070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe]</td>
|
|
<td>[178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>quoprimime.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>9911</td>
|
|
<td>e8fe369f2c3111f2db22b808a1388e10</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>01bff92af9b094657904ccf3844f4017b6dd0883</td>
|
|
<td>070412fe2d31e84a448ad81c60be97c6ba8512f53c2cf28d1b6b54904e73a8c2c2200773cee224113722610c798e76fe</td>
|
|
<td>178a0525c87d80f372365f6906d8334a98ff15d69ff067b082e1bd248e7d5f49cde09b6090e113af64fed3f9fee0130f48b53230635d0b690a373ffa7715ff96</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>00d51b889a3889f2b5a293eba542001db0bb43f7728f60a860265a7d9b81f0d5</td>
|
|
<td>[68a3146b5f0c41860c8c8520, 68a3146b5f0c41860c8c856c]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\email\__pycache__\encoders.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:17Z, 2025-08-18T11:44:20Z]</td>
|
|
<td>[629e2a9c50daf9538c8417fc8dcf7c14]</td>
|
|
<td>[f298e5565bd87637c224fad6b00e79e7376caed6]</td>
|
|
<td>[f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b]</td>
|
|
<td>[e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>encoders.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\email\__pycache__\</td>
|
|
<td></td>
|
|
<td>2061</td>
|
|
<td>629e2a9c50daf9538c8417fc8dcf7c14</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:38 +0000 UTC</td>
|
|
<td>f298e5565bd87637c224fad6b00e79e7376caed6</td>
|
|
<td>f45149e9f19e9c2dd0f67ac547defa30ac4992e47538d2d95862fa8a312f5b24ee3d4c739bbdb1bea1a0218f7ad8a77b</td>
|
|
<td>e7060ba9f42a9b4c8ef3f25615f6cd05c40c65d8dc933da11ca1f8f6fa3fd4cd7576da9bb6223a88b5019d4da9faa6006b4e5f15267ec22984d124a44d27a8fd</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f6f2c2ee898da74b0dae817a69b5674e23eea37d19051be446e361736afbc9b6</td>
|
|
<td>[68a5cc349d52e7a8b7af63d6]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[VM-TalisWave]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\_work_devops_mdi\_temp\77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2287.880]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-20T13:22:50Z]</td>
|
|
<td>[2b188a65d88d897daf549bee406d1735]</td>
|
|
<td>[e24730bac7f5091db0bf3b218b2d38ee31e53464]</td>
|
|
<td>[8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d]</td>
|
|
<td>[548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>[172.17.252.194]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>77c802f5-8bfc-48d8-b2be-c85fa56bb33b.ps1</td>
|
|
<td>C:\_work_devops_mdi\_temp\</td>
|
|
<td></td>
|
|
<td>374</td>
|
|
<td>2b188a65d88d897daf549bee406d1735</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>2025-08-20 13:22:50 +0000 UTC</td>
|
|
<td>e24730bac7f5091db0bf3b218b2d38ee31e53464</td>
|
|
<td>8a3f6245f53f330d1614899961e130ce48bfffced33a16cdf8e94054ba05a2031d4c393da7a65b8ee25904321e30cc3d</td>
|
|
<td>548cac5774667833f9b728ec0bceea9c3ca484873b5ced4d8dee379674f5121a8eb8a139c81273ac043d4bab2f110431a7b074c1ee9fd452271d77e90f07be61</td>
|
|
<td>2025-08-20 13:23:00 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f75b13c1a5390c281129aec20b64eda82ecdebfccf050514ad487a5979c44eea</td>
|
|
<td>[68a3b085a65533c1207e5253]</td>
|
|
<td>[2]</td>
|
|
<td>[SQLAgent$KRONOS]</td>
|
|
<td>[i-nSQL]</td>
|
|
<td>[NT SERVICE]</td>
|
|
<td>[C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\s4wkumbz.dll]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2272.867]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[D:\Program Files (x86)\Microsoft SQL Server\150\Tools\Binn\SQLPS.exe]</td>
|
|
<td>[2025-08-18T23:00:15Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>[172.17.252.12]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>s4wkumbz.dll</td>
|
|
<td>C:\Windows\ServiceProfiles\SQLAgent$KRONOS\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>0.0.0.0</td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-18 23:00:21 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>f838f549fd861f3358e3264cad8927bdb217d2cc84945325a8f4952f516023b7</td>
|
|
<td>[68a3146b5f0c41860c8c8502, 68a3146b5f0c41860c8c8526]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-nSASva]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Program Files\Python\Lib\re\__pycache__\__init__.cpython-313.pyc]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[C:\Program Files\Python\python.exe]</td>
|
|
<td>[2025-08-18T11:44:15Z, 2025-08-18T11:44:18Z]</td>
|
|
<td>[abb6e699fbac4a89b4b96a0923590806]</td>
|
|
<td>[3f0314f1612edc949568cb9863516b712df68f2f]</td>
|
|
<td>[546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968]</td>
|
|
<td>[846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>[172.17.252.131]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__init__.cpython-313.pyc</td>
|
|
<td>C:\Program Files\Python\Lib\re\__pycache__\</td>
|
|
<td></td>
|
|
<td>19374</td>
|
|
<td>abb6e699fbac4a89b4b96a0923590806</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>2024-11-22 16:23:36 +0000 UTC</td>
|
|
<td>3f0314f1612edc949568cb9863516b712df68f2f</td>
|
|
<td>546d1aaa2b931c5061a6243feb94d6aa59ca36449e537e1bde81dc63a1a109d0c967fe9a4a48cabbeb3176b999914968</td>
|
|
<td>846b9c693b1ecd1abeab4855025e0fb1eec1a89c32f0240ae83f87d35943c826de3155aa151ee9f087f20b9bfc0f28699a9713fd4b26415ad3263dac9e9b6f25</td>
|
|
<td>2025-08-09 05:02:59 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0193bed6287dff0234554d9d0b50949e96abf8acaca8a301f02332a7349276cf</td>
|
|
<td>[68a164af314711b37247c0a1, 68a2b633bc43c5800255e65e, 68a408552c9c833f6d66b3fb, 68a559867a66111383e972e3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[i-vpg1a]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\icm\pcce\PG2A\bin\purgeold.bat]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[C:\Windows\System32\svchost.exe]</td>
|
|
<td>[2025-08-17T05:05:01Z, 2025-08-18T05:05:00Z, 2025-08-19T05:05:00Z, 2025-08-20T05:05:00Z]</td>
|
|
<td>[592b171e23708bb8d19631cab6bd3ea6]</td>
|
|
<td>[256cda95b6960107ebebdb31310acd3adee827b1]</td>
|
|
<td>[a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae]</td>
|
|
<td>[f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>[172.17.196.43]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>purgeold.bat</td>
|
|
<td>C:\icm\pcce\PG2A\bin\</td>
|
|
<td></td>
|
|
<td>410</td>
|
|
<td>592b171e23708bb8d19631cab6bd3ea6</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2021-10-07 20:04:38 +0000 UTC</td>
|
|
<td>2021-10-07 20:04:38 +0000 UTC</td>
|
|
<td>256cda95b6960107ebebdb31310acd3adee827b1</td>
|
|
<td>a73f0affdb82ec76066616e448e52c9604fe1865df80831b8ef9f9d2936f7fb476db08bd0600320819f0c9d4628706ae</td>
|
|
<td>f425338b6b184e1ad274562195bbb6c8a32d6d7931d8f38772f79911119488585fa6e09a846e3bdf097e41e2cc80355fcdd7c8960bf2d4918c9bf7db5ac6dbd3</td>
|
|
<td>2025-08-09 05:05:09 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0240c288a723d59ab3c098c2479928dad48ac1f5ba1bb5180056ef7d24c84c68</td>
|
|
<td>[68a17c189d49ad1bd9c4b8c9, 68a2cfae9ae51e4be825c7e4, 68a41f348cf879e8d23db674, 68a572add36d57a95b891e68]</td>
|
|
<td>[2]</td>
|
|
<td>[WVUHPAN]</td>
|
|
<td>[U-NPANHS]</td>
|
|
<td>[HS]</td>
|
|
<td>[C:\Program Files\Quest Software\Management Shell for AD\no-ie.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849, v2272.867, v2284.877]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\cmd.exe]</td>
|
|
<td>[2025-08-17T06:51:02Z, 2025-08-18T06:51:02Z, 2025-08-19T06:51:02Z, 2025-08-20T06:51:02Z]</td>
|
|
<td>[1d1e0f45227d3a637e81d25a2a508187]</td>
|
|
<td>[61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a]</td>
|
|
<td>[27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776]</td>
|
|
<td>[7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>[172.25.17.205]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>no-ie.ps1</td>
|
|
<td>C:\Program Files\Quest Software\Management Shell for AD\</td>
|
|
<td></td>
|
|
<td>1456</td>
|
|
<td>1d1e0f45227d3a637e81d25a2a508187</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2022-05-16 20:03:59 +0000 UTC</td>
|
|
<td>2022-05-17 19:04:29 +0000 UTC</td>
|
|
<td>61f20ef88eb177eb65ccd0e7ea2b8e33a3933b8a</td>
|
|
<td>27f7901448b1e9fc77c833da05964aed74f788e1f3d491506e0d1dc191d752a1094832bcc34acb32c5afa19486983776</td>
|
|
<td>7780e5f5540b9de85dc821a46ad98887dabfba20f778f2136252f7fab81ff6c1521adc5e6ea2037ba05f3e02066a6ea2ffa6eaf56298f2f573ba38f6309df40f</td>
|
|
<td>2025-08-09 06:51:12 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>0241e737daa4255049e24dc3271c297bd1bde6963d7c3f990ec60ecdb59b616f</td>
|
|
<td>[68a25a433ab41f2de26688e3]</td>
|
|
<td>[2]</td>
|
|
<td>[SYSTEM]</td>
|
|
<td>[U-NCTXEHH-001]</td>
|
|
<td>[NT AUTHORITY]</td>
|
|
<td>[C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\__PSScriptPolicyTest_tquqr5iv.tb1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe]</td>
|
|
<td>[2025-08-17T22:39:58Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>[172.25.10.14]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>__PSScriptPolicyTest_tquqr5iv.tb1.ps1</td>
|
|
<td>C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\</td>
|
|
<td></td>
|
|
<td>80</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>2025-08-17 22:39:58 +0000 UTC</td>
|
|
<td>2025-08-17 22:39:58 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-17 22:40:03 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
<tr>
|
|
<td>029979e088bcb493e4582579eac4ec99faa48c615fe5ab74737fa8746b820228</td>
|
|
<td>[68a31fecb457e7ec963d10ec]</td>
|
|
<td>[2]</td>
|
|
<td>[GreyBeard]</td>
|
|
<td>[I-CAJump]</td>
|
|
<td>[WVUHS]</td>
|
|
<td>[C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1]</td>
|
|
<td>[Servers]</td>
|
|
<td>[Servers Audit]</td>
|
|
<td>[v2248.849]</td>
|
|
<td>[]</td>
|
|
<td>[Not Signed]</td>
|
|
<td>[C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe]</td>
|
|
<td>[C:\Windows\explorer.exe]</td>
|
|
<td>[2025-08-18T12:42:24Z]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>[172.17.252.110]</td>
|
|
<td>1</td>
|
|
<td>Success</td>
|
|
<td>AutoSaved_41c31aa2-4eb1-4431-89f2-b7e58cdad9bf_Untitled1.ps1</td>
|
|
<td>C:\Users\greybeard\AppData\Local\Microsoft_Corporation\PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpebq33gybmeoxukb04w\3.0.0.0\AutoSaveFiles\</td>
|
|
<td></td>
|
|
<td>0</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>Not Signed</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td>1970-01-01 00:00:00 +0000 UTC</td>
|
|
<td></td>
|
|
<td></td>
|
|
<td></td>
|
|
<td>2025-08-13 14:15:46 +0000 UTC</td>
|
|
<td>None</td>
|
|
<td>None</td>
|
|
<td>Never</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>UNKNOWN</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
<td>N/A</td>
|
|
</tr>
|
|
</tbody>
|
|
</table> |