Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecQuery - Select * from Win32_Process |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="0"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="4"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="220"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="296"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="332"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="340"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="380"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="424"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="432"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="440"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="548"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="616"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="664"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="788"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="816"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="848"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="920"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="956"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1156"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1204"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1264"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1420"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1432"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1744"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1000"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1772"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1400"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1636"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1624"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="2856"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="2952"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="3100"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecQuery - Select * from Win32_Process |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="0"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="4"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="220"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="296"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="332"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="340"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="380"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="424"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="432"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="440"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="548"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="616"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="664"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="788"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="816"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="848"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="920"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="956"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1156"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1204"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1264"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1420"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1432"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1744"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1000"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1772"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1400"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1636"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="1624"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="2856"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="2952"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="3100"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="3268"::GetOwner |
Source: C:\Windows\System32\wscript.exe | WMI Queries: IWbemServices::ExecMethod - Win32_Process.Handle="3296"::GetOwner |