---
title: Event Details
slug: kronpam-agent-reference-guide-3-9-0/event-details
createdAt: 2026-10-12T13:06:37.882Z
---

To display the details of an application, click the actions button of its record:

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/sIA0_6RUHgwiorEO5KClm_image.png" size="80" caption="Figure – Event details of an application" isUploading="false" width="927" height="1127" darkWidth="927" darkHeight="1127" showCaption="true"}

The **Hash Version** list at the top of the window defines the file version that the window covers. An application has more than one hash when different versions of its file run on the endpoints. To display the events of one user, select the user in the **Users** list.

The table lists every agent and user that runs the selected file version, with the event count and the time of the last event.

Below the table, Kron PAM displays the file information: **File Name**, **SHA-256 Hash**, **File Path**, **Vendor**, **Signature**, and **Result**.

The **Risk & Reputation** section displays four panels:

- **Risk Score** shows the calculated risk of the application.
- **Event Count** shows the number of the executions.
- **External Reputation** shows how many engines report the file as malicious, suspicious, or undetected.
- **Reason** shows the policy or the agent mode that produces the result.
