API tools faq
paste
Guest User

Untitled

a guest
Sep 27th, 2024
53
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 273.83 KB | None | 0 0
raw download clone embed print report
  1. IWbemServices::Connect
  2. ***** 03:20:12.013 Grp=369008 Op=369009 _ClientProcessId=1261268 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  3. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  4. ***** 03:20:12.148 Stop Op=368895 0x0
  5. ***** 03:20:12.148 Stop Op=368898 0x0
  6. ***** 03:20:12.302 Stop Op=368903 0x0
  7. ***** 03:20:12.302 Stop Op=368905 0x0
  8. ***** 03:20:12.309 Stop Op=368896 0x0
  9. ***** 03:20:12.309 Stop Op=368900 0x0
  10. ***** 03:20:12.326 Grp=369011 _ClientProcessId=1274088 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  11. IWbemServices::Connect
  12. ***** 03:20:12.334 Grp=369012 Op=369013 _ClientProcessId=1274088 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  13. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  14. ***** 03:20:12.569 Stop Op=368887 0x0
  15. ***** 03:20:12.569 Stop Op=368889 0x0
  16. ***** 03:20:12.593 Grp=369015 _ClientProcessId=1252256 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  17. IWbemServices::Connect
  18. ***** 03:20:12.596 Grp=369016 Op=369017 _ClientProcessId=1252256 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  19. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  20. ***** 03:20:12.797 Stop Op=368907 0x0
  21. ***** 03:20:12.797 Stop Op=368909 0x0
  22. ***** 03:20:13.103 Grp=369019 _ClientProcessId=1249672 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  23. IWbemServices::Connect
  24. ***** 03:20:13.105 Grp=369020 _ClientProcessId=918188 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  25. IWbemServices::Connect
  26. ***** 03:20:13.106 Grp=369021 Op=369022 _ClientProcessId=1249672 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  27. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  28. ***** 03:20:13.108 Grp=369024 Op=369025 _ClientProcessId=918188 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  29. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  30. ***** 03:20:13.168 Grp=369027 _ClientProcessId=1247796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  31. IWbemServices::Connect
  32. ***** 03:20:13.171 Grp=369028 Op=369029 _ClientProcessId=1247796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  33. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  34. ***** 03:20:13.929 Grp=369031 _ClientProcessId=1199820 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  35. IWbemServices::Connect
  36. ***** 03:20:13.937 Grp=369032 Op=369033 _ClientProcessId=1199820 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  37. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  38. ***** 03:20:16.074 Stop Op=368915 0x0
  39. ***** 03:20:16.074 Stop Op=368917 0x0
  40. ***** 03:20:16.207 Grp=369035 _ClientProcessId=1272124 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  41. IWbemServices::Connect
  42. ***** 03:20:16.211 Grp=369036 Op=369037 _ClientProcessId=1272124 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  43. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  44. ***** 03:20:16.303 Stop Op=368943 0x0
  45. ***** 03:20:16.303 Stop Op=368945 0x0
  46. ***** 03:20:16.783 Grp=369039 _ClientProcessId=1272140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  47. IWbemServices::Connect
  48. ***** 03:20:16.787 Grp=369040 Op=369041 _ClientProcessId=1272140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  49. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  50. ***** 03:20:16.943 Stop Op=368935 0x0
  51. ***** 03:20:16.943 Stop Op=368937 0x0
  52. ***** 03:20:17.213 Grp=369043 _ClientProcessId=1274384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  53. IWbemServices::Connect
  54. ***** 03:20:17.225 Grp=369044 Op=369045 _ClientProcessId=1274384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  55. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  56. ***** 03:20:18.935 Stop Op=368679 0x0
  57. ***** 03:20:18.935 Stop Op=368681 0x0
  58. ***** 03:20:19.004 Stop Op=368911 0x0
  59. ***** 03:20:19.004 Stop Op=368913 0x0
  60. ***** 03:20:19.054 Stop Op=368939 0x0
  61. ***** 03:20:19.054 Stop Op=368941 0x0
  62. ***** 03:20:19.140 Grp=369047 _ClientProcessId=1273140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  63. IWbemServices::Connect
  64. ***** 03:20:19.142 Grp=369048 Op=369049 _ClientProcessId=1273140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  65. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  66. ***** 03:20:19.172 Grp=369051 _ClientProcessId=1274804 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  67. IWbemServices::Connect
  68. ***** 03:20:19.176 Grp=369052 Op=369053 _ClientProcessId=1274804 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  69. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  70. ***** 03:20:19.783 Stop Op=368923 0x0
  71. ***** 03:20:19.783 Stop Op=368925 0x0
  72. ***** 03:20:21.555 Grp=369055 _ClientProcessId=1274116 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  73. IWbemServices::Connect
  74. ***** 03:20:21.558 Grp=369056 Op=369057 _ClientProcessId=1274116 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  75. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  76. ***** 03:20:22.012 Stop Op=368959 0x0
  77. ***** 03:20:22.012 Stop Op=368961 0x0
  78. ***** 03:20:22.593 Grp=369059 _ClientProcessId=1270896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  79. IWbemServices::Connect
  80. ***** 03:20:22.596 Grp=369060 Op=369061 _ClientProcessId=1270896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  81. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  82. ***** 03:20:22.659 Grp=369063 _ClientProcessId=1254844 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  83. IWbemServices::Connect
  84. ***** 03:20:22.662 Grp=369064 Op=369065 _ClientProcessId=1254844 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  85. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  86. ***** 03:20:23.746 Stop Op=368991 0x0
  87. ***** 03:20:23.746 Stop Op=368993 0x0
  88. ***** 03:20:23.760 Stop Op=368951 0x0
  89. ***** 03:20:23.760 Stop Op=368953 0x0
  90. ***** 03:20:24.041 Stop Op=368984 0x0
  91. ***** 03:20:24.041 Stop Op=368986 0x0
  92. ***** 03:20:24.064 Stop Op=368631 0x0
  93. ***** 03:20:24.064 Stop Op=368633 0x0
  94. ***** 03:20:24.092 Stop Op=368931 0x0
  95. ***** 03:20:24.092 Stop Op=368933 0x0
  96. ***** 03:20:24.121 Stop Op=368715 0x0
  97. ***** 03:20:24.121 Stop Op=368717 0x0
  98. ***** 03:20:24.159 Grp=369067 _ClientProcessId=1257820 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  99. IWbemServices::Connect
  100. ***** 03:20:24.162 Grp=369068 Op=369069 _ClientProcessId=1257820 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  101. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  102. ***** 03:20:24.257 Grp=369071 _ClientProcessId=1273800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  103. IWbemServices::Connect
  104. ***** 03:20:24.260 Grp=369072 Op=369073 _ClientProcessId=1273800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  105. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  106. ***** 03:20:24.322 Grp=369075 _ClientProcessId=1273100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  107. IWbemServices::Connect
  108. ***** 03:20:24.327 Grp=369076 Op=369077 _ClientProcessId=1273100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  109. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  110. ***** 03:20:24.425 Stop Op=368967 0x0
  111. ***** 03:20:24.425 Stop Op=368973 0x0
  112. ***** 03:20:24.627 Grp=369079 _ClientProcessId=1263252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  113. IWbemServices::Connect
  114. ***** 03:20:24.630 Grp=369080 Op=369081 _ClientProcessId=1263252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  115. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  116. ***** 03:20:24.716 Grp=369083 _ClientProcessId=1274096 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  117. IWbemServices::Connect
  118. ***** 03:20:24.719 Grp=369084 Op=369085 _ClientProcessId=1274096 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  119. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  120. ***** 03:20:24.738 Grp=369087 _ClientProcessId=1274708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  121. IWbemServices::Connect
  122. ***** 03:20:24.740 Grp=369088 Op=369089 _ClientProcessId=1274708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  123. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  124. ***** 03:20:24.808 Stop Op=368968 0x0
  125. ***** 03:20:24.808 Stop Op=368970 0x0
  126. ***** 03:20:25.090 Stop Op=368999 0x0
  127. ***** 03:20:25.090 Stop Op=369001 0x0
  128. ***** 03:20:25.099 Stop Op=368947 0x0
  129. ***** 03:20:25.099 Stop Op=368949 0x0
  130. ***** 03:20:25.148 Stop Op=368983 0x0
  131. ***** 03:20:25.148 Stop Op=368988 0x0
  132. ***** 03:20:25.279 Stop Op=368979 0x0
  133. ***** 03:20:25.279 Stop Op=368981 0x0
  134. ***** 03:20:25.380 Stop Op=368963 0x0
  135. ***** 03:20:25.380 Stop Op=368965 0x0
  136. ***** 03:20:25.469 Stop Op=368707 0x0
  137. ***** 03:20:25.469 Stop Op=368709 0x0
  138. ***** 03:20:25.552 Stop Op=368955 0x0
  139. ***** 03:20:25.552 Stop Op=368957 0x0
  140. ***** 03:20:25.587 Grp=369091 _ClientProcessId=1267640 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  141. IWbemServices::Connect
  142. ***** 03:20:25.599 Grp=369092 Op=369093 _ClientProcessId=1267640 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  143. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  144. ***** 03:20:25.822 Grp=369095 _ClientProcessId=1270612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  145. IWbemServices::Connect
  146. ***** 03:20:25.825 Grp=369096 Op=369097 _ClientProcessId=1270612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  147. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  148. ***** 03:20:25.866 Grp=369099 _ClientProcessId=1272536 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  149. IWbemServices::Connect
  150. ***** 03:20:25.869 Stop Op=368691 0x0
  151. ***** 03:20:25.869 Stop Op=368693 0x0
  152. ***** 03:20:25.869 Grp=369100 Op=369101 _ClientProcessId=1272536 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  153. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  154. ***** 03:20:25.879 Grp=369103 _ClientProcessId=1266784 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  155. IWbemServices::Connect
  156. ***** 03:20:25.879 Grp=369104 _ClientProcessId=1274040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  157. IWbemServices::Connect
  158. ***** 03:20:25.882 Grp=369105 Op=369106 _ClientProcessId=1266784 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  159. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  160. ***** 03:20:25.882 Grp=369107 Op=369108 _ClientProcessId=1274040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  161. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  162. ***** 03:20:25.891 Grp=369111 _ClientProcessId=1165172 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  163. IWbemServices::Connect
  164. ***** 03:20:25.893 Grp=369112 Op=369113 _ClientProcessId=1165172 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  165. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  166. ***** 03:20:25.916 Grp=369115 _ClientProcessId=1253432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  167. IWbemServices::Connect
  168. ***** 03:20:25.920 Grp=369116 Op=369117 _ClientProcessId=1253432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  169. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  170. ***** 03:20:27.878 Grp=369119 _ClientProcessId=1267940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  171. IWbemServices::Connect
  172. ***** 03:20:27.884 Grp=369120 Op=369121 _ClientProcessId=1267940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  173. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  174. ***** 03:20:29.900 Stop Op=369027 0x0
  175. ***** 03:20:29.900 Stop Op=369029 0x0
  176. ***** 03:20:30.161 Grp=369123 _ClientProcessId=1271380 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  177. IWbemServices::Connect
  178. ***** 03:20:30.165 Grp=369124 Op=369125 _ClientProcessId=1271380 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  179. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  180. ***** 03:20:30.442 Stop Op=369019 0x0
  181. ***** 03:20:30.442 Stop Op=369022 0x0
  182. ***** 03:20:30.480 Grp=369127 _ClientProcessId=1273400 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  183. IWbemServices::Connect
  184. ***** 03:20:30.482 Grp=369128 Op=369129 _ClientProcessId=1273400 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  185. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  186. ***** 03:20:30.507 Stop Op=369007 0x0
  187. ***** 03:20:30.507 Stop Op=369009 0x0
  188. ***** 03:20:30.547 Grp=369131 _ClientProcessId=1260800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  189. IWbemServices::Connect
  190. ***** 03:20:30.550 Grp=369132 Op=369133 _ClientProcessId=1260800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  191. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  192. ***** 03:20:30.834 Stop Op=368995 0x0
  193. ***** 03:20:30.834 Stop Op=368997 0x0
  194. ***** 03:20:31.813 Grp=369135 _ClientProcessId=1274760 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  195. IWbemServices::Connect
  196. ***** 03:20:31.816 Grp=369136 Op=369137 _ClientProcessId=1274760 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  197. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  198. ***** 03:20:31.980 Grp=369139 _ClientProcessId=1272228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  199. IWbemServices::Connect
  200. ***** 03:20:31.987 Grp=369140 Op=369141 _ClientProcessId=1272228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  201. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  202. ***** 03:20:32.075 Stop Op=369020 0x0
  203. ***** 03:20:32.075 Stop Op=369025 0x0
  204. ***** 03:20:32.225 Grp=369143 _ClientProcessId=1267112 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  205. IWbemServices::Connect
  206. ***** 03:20:32.229 Grp=369144 Op=369145 _ClientProcessId=1267112 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  207. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  208. ***** 03:20:36.018 Stop Op=369031 0x0
  209. ***** 03:20:36.018 Stop Op=369033 0x0
  210. ***** 03:20:36.063 Stop Op=369003 0x0
  211. ***** 03:20:36.063 Stop Op=369005 0x0
  212. ***** 03:20:36.160 Grp=369147 _ClientProcessId=1259328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  213. IWbemServices::Connect
  214. ***** 03:20:36.163 Grp=369148 Op=369149 _ClientProcessId=1259328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  215. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  216. ***** 03:20:36.289 Grp=369151 _ClientProcessId=1243396 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  217. IWbemServices::Connect
  218. ***** 03:20:36.292 Grp=369152 Op=369153 _ClientProcessId=1243396 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  219. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  220. ***** 03:20:36.946 Stop Op=369035 0x0
  221. ***** 03:20:36.946 Stop Op=369037 0x0
  222. ***** 03:20:37.194 Stop Op=368919 0x0
  223. ***** 03:20:37.194 Stop Op=368921 0x0
  224. ***** 03:20:37.299 Stop Op=369015 0x0
  225. ***** 03:20:37.299 Stop Op=369017 0x0
  226. ***** 03:20:37.306 Stop Op=369043 0x0
  227. ***** 03:20:37.306 Stop Op=369045 0x0
  228. ***** 03:20:37.711 Grp=369155 _ClientProcessId=1257152 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  229. IWbemServices::Connect
  230. ***** 03:20:37.713 Grp=369156 Op=369157 _ClientProcessId=1257152 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  231. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  232. ***** 03:20:37.745 Grp=369159 _ClientProcessId=1254960 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  233. IWbemServices::Connect
  234. ***** 03:20:37.748 Grp=369160 Op=369161 _ClientProcessId=1254960 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  235. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  236. ***** 03:20:37.790 Grp=369163 _ClientProcessId=1273688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  237. IWbemServices::Connect
  238. ***** 03:20:37.793 Grp=369164 Op=369165 _ClientProcessId=1273688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  239. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  240. ***** 03:20:37.869 Stop Op=369059 0x0
  241. ***** 03:20:37.869 Stop Op=369061 0x0
  242. ***** 03:20:38.150 Stop Op=369051 0x0
  243. ***** 03:20:38.150 Stop Op=369053 0x0
  244. ***** 03:20:38.903 Stop Op=369047 0x0
  245. ***** 03:20:38.903 Stop Op=369049 0x0
  246. ***** 03:20:38.939 Stop Op=369039 0x0
  247. ***** 03:20:38.939 Stop Op=369041 0x0
  248. ***** 03:20:38.997 Stop Op=368739 0x0
  249. ***** 03:20:38.997 Stop Op=368741 0x0
  250. ***** 03:20:39.060 Grp=369167 _ClientProcessId=1272764 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  251. IWbemServices::Connect
  252. ***** 03:20:39.063 Grp=369168 Op=369169 _ClientProcessId=1272764 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  253. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  254. ***** 03:20:39.351 Stop Op=369063 0x0
  255. ***** 03:20:39.351 Stop Op=369065 0x0
  256. ***** 03:20:39.423 Grp=369171 _ClientProcessId=1269072 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  257. IWbemServices::Connect
  258. ***** 03:20:39.425 Grp=369172 _ClientProcessId=1274120 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  259. IWbemServices::Connect
  260. ***** 03:20:39.427 Grp=369173 Op=369174 _ClientProcessId=1269072 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  261. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  262. ***** 03:20:39.428 Grp=369176 Op=369177 _ClientProcessId=1274120 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  263. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  264. ***** 03:20:39.557 Stop Op=368779 0x0
  265. ***** 03:20:39.557 Stop Op=368781 0x0
  266. ***** 03:20:39.674 Stop Op=368843 0x0
  267. ***** 03:20:39.674 Stop Op=368845 0x0
  268. ***** 03:20:40.084 Grp=369179 _ClientProcessId=1274904 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  269. IWbemServices::Connect
  270. ***** 03:20:40.090 Grp=369180 _ClientProcessId=1274540 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  271. IWbemServices::Connect
  272. ***** 03:20:40.094 Grp=369181 Op=369182 _ClientProcessId=1274904 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  273. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  274. ***** 03:20:40.096 Grp=369184 Op=369185 _ClientProcessId=1274540 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  275. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  276. ***** 03:20:40.787 Grp=369187 _ClientProcessId=1274956 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  277. IWbemServices::Connect
  278. ***** 03:20:40.879 Grp=369188 Op=369189 _ClientProcessId=1274956 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  279. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  280. ***** 03:20:42.223 Grp=369191 _ClientProcessId=1271964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  281. IWbemServices::Connect
  282. ***** 03:20:42.225 Grp=369192 Op=369193 _ClientProcessId=1271964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  283. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  284. ***** 03:20:42.263 Grp=369195 _ClientProcessId=1274940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  285. IWbemServices::Connect
  286. ***** 03:20:42.274 Grp=369196 Op=369197 _ClientProcessId=1274940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  287. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  288. ***** 03:20:42.318 Grp=369199 _ClientProcessId=1272928 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  289. IWbemServices::Connect
  290. ***** 03:20:42.321 Grp=369200 Op=369201 _ClientProcessId=1272928 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  291. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  292. ***** 03:20:42.873 Stop Op=369087 0x0
  293. ***** 03:20:42.873 Stop Op=369089 0x0
  294. ***** 03:20:42.951 Stop Op=369104 0x0
  295. ***** 03:20:42.951 Stop Op=369108 0x0
  296. ***** 03:20:43.033 Stop Op=369119 0x0
  297. ***** 03:20:43.033 Stop Op=369121 0x0
  298. ***** 03:20:43.108 Stop Op=369083 0x0
  299. ***** 03:20:43.108 Stop Op=369085 0x0
  300. ***** 03:20:43.351 Grp=369203 _ClientProcessId=1275148 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  301. IWbemServices::Connect
  302. ***** 03:20:43.355 Grp=369204 Op=369205 _ClientProcessId=1275148 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  303. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  304. ***** 03:20:43.377 Stop Op=369111 0x0
  305. ***** 03:20:43.377 Stop Op=369113 0x0
  306. ***** 03:20:43.384 Stop Op=368775 0x0
  307. ***** 03:20:43.384 Stop Op=368777 0x0
  308. ***** 03:20:43.591 Grp=369207 _ClientProcessId=1275400 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  309. IWbemServices::Connect
  310. ***** 03:20:43.595 Grp=369208 Op=369209 _ClientProcessId=1275400 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  311. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  312. ***** 03:20:43.605 Grp=369211 _ClientProcessId=1275368 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  313. IWbemServices::Connect
  314. ***** 03:20:43.608 Grp=369212 Op=369213 _ClientProcessId=1275368 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  315. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  316. ***** 03:20:43.611 Grp=369215 _ClientProcessId=1275392 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  317. IWbemServices::Connect
  318. ***** 03:20:43.613 Stop Op=369099 0x0
  319. ***** 03:20:43.613 Stop Op=369101 0x0
  320. ***** 03:20:43.615 Grp=369216 Op=369217 _ClientProcessId=1275392 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  321. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  322. ***** 03:20:43.846 Grp=369219 _ClientProcessId=1275524 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  323. IWbemServices::Connect
  324. ***** 03:20:43.849 Grp=369220 Op=369221 _ClientProcessId=1275524 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  325. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  326. ***** 03:20:44.171 Stop Op=369075 0x0
  327. ***** 03:20:44.171 Stop Op=369077 0x0
  328. ***** 03:20:44.921 Grp=369223 _ClientProcessId=1275384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  329. IWbemServices::Connect
  330. ***** 03:20:44.925 Grp=369224 Op=369225 _ClientProcessId=1275384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  331. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  332. ***** 03:20:45.215 Stop Op=369115 0x0
  333. ***** 03:20:45.215 Stop Op=369117 0x0
  334. ***** 03:20:45.326 Grp=369227 _ClientProcessId=1275628 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  335. IWbemServices::Connect
  336. ***** 03:20:45.329 Grp=369228 Op=369229 _ClientProcessId=1275628 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  337. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  338. ***** 03:20:45.331 Grp=369230 _ClientProcessId=1275696 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  339. IWbemServices::Connect
  340. ***** 03:20:45.564 Grp=369232 Op=369233 _ClientProcessId=1275696 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  341. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  342. ***** 03:20:45.578 Stop Op=369095 0x0
  343. ***** 03:20:45.578 Stop Op=369097 0x0
  344. ***** 03:20:45.943 Grp=369235 _ClientProcessId=1275852 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  345. IWbemServices::Connect
  346. ***** 03:20:45.945 Grp=369236 Op=369237 _ClientProcessId=1275852 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  347. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  348. ***** 03:20:46.128 Stop Op=369103 0x0
  349. ***** 03:20:46.128 Stop Op=369106 0x0
  350. ***** 03:20:46.877 Stop Op=369079 0x0
  351. ***** 03:20:46.877 Stop Op=369081 0x0
  352. ***** 03:20:48.528 Stop Op=369139 0x0
  353. ***** 03:20:48.528 Stop Op=369141 0x0
  354. ***** 03:20:48.566 Stop Op=369123 0x0
  355. ***** 03:20:48.566 Stop Op=369125 0x0
  356. ***** 03:20:48.656 Grp=369239 _ClientProcessId=1273248 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  357. IWbemServices::Connect
  358. ***** 03:20:48.659 Grp=369240 Op=369241 _ClientProcessId=1273248 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  359. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  360. ***** 03:20:48.711 Stop Op=368811 0x0
  361. ***** 03:20:48.711 Stop Op=368813 0x0
  362. ***** 03:20:48.727 Stop Op=368823 0x0
  363. ***** 03:20:48.727 Stop Op=368825 0x0
  364. ***** 03:20:48.809 Grp=369243 _ClientProcessId=1271492 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  365. IWbemServices::Connect
  366. ***** 03:20:48.821 Grp=369244 Op=369245 _ClientProcessId=1271492 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  367. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  368. ***** 03:20:48.827 Stop Op=368835 0x0
  369. ***** 03:20:48.827 Stop Op=368837 0x0
  370. ***** 03:20:48.835 Grp=369247 _ClientProcessId=1273172 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  371. IWbemServices::Connect
  372. ***** 03:20:48.969 Grp=369248 Op=369249 _ClientProcessId=1273172 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  373. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  374. ***** 03:20:48.969 Stop Op=368851 0x0
  375. ***** 03:20:48.969 Stop Op=368853 0x0
  376. ***** 03:20:49.097 Grp=369251 _ClientProcessId=1272888 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  377. IWbemServices::Connect
  378. ***** 03:20:49.099 Grp=369252 Op=369253 _ClientProcessId=1272888 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  379. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  380. ***** 03:20:52.069 Grp=369255 _ClientProcessId=1274508 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  381. IWbemServices::Connect
  382. ***** 03:20:52.072 Grp=369256 Op=369257 _ClientProcessId=1274508 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  383. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  384. ***** 03:20:54.052 Stop Op=369159 0x0
  385. ***** 03:20:54.052 Stop Op=369161 0x0
  386. ***** 03:20:54.186 Grp=369259 _ClientProcessId=1271588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  387. IWbemServices::Connect
  388. ***** 03:20:54.189 Grp=369260 Op=369261 _ClientProcessId=1271588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  389. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  390. ***** 03:20:54.225 Grp=369263 _ClientProcessId=1272376 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  391. IWbemServices::Connect
  392. ***** 03:20:54.231 Grp=369264 Op=369265 _ClientProcessId=1272376 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  393. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  394. ***** 03:20:54.346 Stop Op=369167 0x0
  395. ***** 03:20:54.346 Stop Op=369169 0x0
  396. ***** 03:20:54.367 Grp=369267 _ClientProcessId=1272684 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  397. IWbemServices::Connect
  398. ***** 03:20:54.370 Grp=369268 Op=369269 _ClientProcessId=1272684 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  399. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  400. ***** 03:20:54.822 Grp=369271 _ClientProcessId=1274128 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  401. IWbemServices::Connect
  402. ***** 03:20:54.825 Grp=369272 Op=369273 _ClientProcessId=1274128 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  403. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  404. ***** 03:20:54.836 Stop Op=369131 0x0
  405. ***** 03:20:54.836 Stop Op=369133 0x0
  406. ***** 03:20:54.875 Stop Op=369147 0x0
  407. ***** 03:20:54.875 Stop Op=369149 0x0
  408. ***** 03:20:55.971 Grp=369275 _ClientProcessId=1275792 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  409. IWbemServices::Connect
  410. ***** 03:20:55.974 Grp=369276 Op=369277 _ClientProcessId=1275792 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  411. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  412. ***** 03:20:56.149 Stop Op=369155 0x0
  413. ***** 03:20:56.149 Stop Op=369157 0x0
  414. ***** 03:20:56.372 Stop Op=369151 0x0
  415. ***** 03:20:56.372 Stop Op=369153 0x0
  416. ***** 03:20:56.810 Stop Op=369180 0x0
  417. ***** 03:20:56.810 Stop Op=369185 0x0
  418. ***** 03:20:56.810 Grp=369279 _ClientProcessId=1273056 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  419. IWbemServices::Connect
  420. ***** 03:20:56.814 Grp=369280 Op=369281 _ClientProcessId=1273056 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  421. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  422. ***** 03:20:56.816 Stop Op=369091 0x0
  423. ***** 03:20:56.816 Stop Op=369093 0x0
  424. ***** 03:20:56.828 Grp=369283 _ClientProcessId=1275300 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  425. IWbemServices::Connect
  426. ***** 03:20:56.831 Grp=369284 Op=369285 _ClientProcessId=1275300 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  427. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  428. ***** 03:20:57.967 Stop Op=369172 0x0
  429. ***** 03:20:57.967 Stop Op=369177 0x0
  430. ***** 03:20:57.967 Stop Op=368883 0x0
  431. ***** 03:20:57.967 Stop Op=368885 0x0
  432. ***** 03:20:57.990 Grp=369287 _ClientProcessId=1267840 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  433. IWbemServices::Connect
  434. ***** 03:20:57.993 Grp=369288 Op=369289 _ClientProcessId=1267840 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  435. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  436. ***** 03:20:58.013 Grp=369291 _ClientProcessId=1274728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  437. IWbemServices::Connect
  438. ***** 03:20:58.017 Grp=369292 Op=369293 _ClientProcessId=1274728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  439. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  440. ***** 03:20:58.033 Grp=369295 _ClientProcessId=1271836 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  441. IWbemServices::Connect
  442. ***** 03:20:58.033 Grp=369296 _ClientProcessId=1274288 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  443. IWbemServices::Connect
  444. ***** 03:20:58.038 Grp=369297 Op=369298 _ClientProcessId=1271836 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  445. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  446. ***** 03:20:58.039 Grp=369300 Op=369301 _ClientProcessId=1274288 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  447. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  448. ***** 03:20:58.113 Grp=369303 _ClientProcessId=1273148 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  449. IWbemServices::Connect
  450. ***** 03:20:58.115 Grp=369304 Op=369305 _ClientProcessId=1273148 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  451. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  452. ***** 03:20:58.271 Grp=369307 _ClientProcessId=1270900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  453. IWbemServices::Connect
  454. ***** 03:20:58.274 Grp=369308 Op=369309 _ClientProcessId=1270900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  455. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  456. ***** 03:21:01.210 Grp=369311 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  457. IWbemServices::Connect
  458. ***** 03:21:01.218 Grp=369312 Op=369313 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  459. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_OperatingSystem
  460. ***** 03:21:02.694 Grp=369320 _ClientProcessId=1272244 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  461. IWbemServices::Connect
  462. ***** 03:21:02.697 Grp=369321 Op=369322 _ClientProcessId=1272244 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  463. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  464. ***** 03:21:02.958 Stop Op=369171 0x0
  465. ***** 03:21:02.958 Stop Op=369174 0x0
  466. ***** 03:21:03.679 Stop Op=369203 0x0
  467. ***** 03:21:03.679 Stop Op=369205 0x0
  468. ***** 03:21:03.743 Grp=369324 _ClientProcessId=1272784 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  469. IWbemServices::Connect
  470. ***** 03:21:03.745 Grp=369325 Op=369326 _ClientProcessId=1272784 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  471. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  472. ***** 03:21:03.935 Stop Op=369199 0x0
  473. ***** 03:21:03.935 Stop Op=369201 0x0
  474. ***** 03:21:03.968 Stop Op=369251 0x0
  475. ***** 03:21:03.968 Stop Op=369253 0x0
  476. ***** 03:21:04.049 Stop Op=369219 0x0
  477. ***** 03:21:04.049 Stop Op=369221 0x0
  478. ***** 03:21:04.074 Grp=369328 _ClientProcessId=1269376 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  479. IWbemServices::Connect
  480. ***** 03:21:04.077 Grp=369329 Op=369330 _ClientProcessId=1269376 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  481. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  482. ***** 03:21:04.098 Stop Op=368891 0x0
  483. ***** 03:21:04.098 Stop Op=368893 0x0
  484. ***** 03:21:04.206 Grp=369332 _ClientProcessId=1275240 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  485. IWbemServices::Connect
  486. ***** 03:21:04.209 Grp=369333 Op=369334 _ClientProcessId=1275240 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  487. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  488. ***** 03:21:04.281 Stop Op=369187 0x0
  489. ***** 03:21:04.281 Stop Op=369189 0x0
  490. ***** 03:21:04.288 Stop Op=369230 0x0
  491. ***** 03:21:04.288 Stop Op=369233 0x0
  492. ***** 03:21:04.386 Grp=369336 _ClientProcessId=1274660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  493. IWbemServices::Connect
  494. ***** 03:21:04.389 Grp=369337 Op=369338 _ClientProcessId=1274660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  495. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  496. ***** 03:21:04.501 Grp=369340 _ClientProcessId=1273168 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  497. IWbemServices::Connect
  498. ***** 03:21:04.506 Grp=369341 Op=369342 _ClientProcessId=1273168 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  499. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  500. ***** 03:21:04.519 Stop Op=369235 0x0
  501. ***** 03:21:04.519 Stop Op=369237 0x0
  502. ***** 03:21:04.693 Grp=369344 _ClientProcessId=1275880 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  503. IWbemServices::Connect
  504. ***** 03:21:04.697 Grp=369345 Op=369346 _ClientProcessId=1275880 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  505. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  506. ***** 03:21:04.748 Stop Op=369243 0x0
  507. ***** 03:21:04.748 Stop Op=369245 0x0
  508. ***** 03:21:05.107 Stop Op=369191 0x0
  509. ***** 03:21:05.107 Stop Op=369193 0x0
  510. ***** 03:21:05.152 Grp=369348 _ClientProcessId=1272608 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  511. IWbemServices::Connect
  512. ***** 03:21:05.155 Grp=369349 Op=369350 _ClientProcessId=1272608 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  513. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  514. ***** 03:21:05.161 Stop Op=368927 0x0
  515. ***** 03:21:05.161 Stop Op=368929 0x0
  516. ***** 03:21:05.504 Grp=369352 _ClientProcessId=1276068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  517. IWbemServices::Connect
  518. ***** 03:21:05.507 Grp=369353 Op=369354 _ClientProcessId=1276068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  519. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  520. ***** 03:21:06.102 Stop Op=369195 0x0
  521. ***** 03:21:06.102 Stop Op=369197 0x0
  522. ***** 03:21:06.140 Stop Op=369207 0x0
  523. ***** 03:21:06.140 Stop Op=369209 0x0
  524. ***** 03:21:06.294 Stop Op=369227 0x0
  525. ***** 03:21:06.294 Stop Op=369229 0x0
  526. ***** 03:21:06.300 Stop Op=368975 0x0
  527. ***** 03:21:06.300 Stop Op=368977 0x0
  528. ***** 03:21:06.746 Stop Op=369011 0x0
  529. ***** 03:21:06.746 Stop Op=369013 0x0
  530. ***** 03:21:06.844 Grp=369356 _ClientProcessId=1276304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  531. IWbemServices::Connect
  532. ***** 03:21:06.847 Grp=369357 Op=369358 _ClientProcessId=1276304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  533. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  534. ***** 03:21:07.024 Grp=369360 _ClientProcessId=1275136 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  535. IWbemServices::Connect
  536. ***** 03:21:07.027 Grp=369361 _ClientProcessId=1271436 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  537. IWbemServices::Connect
  538. ***** 03:21:07.062 Grp=369362 Op=369363 _ClientProcessId=1275136 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  539. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  540. ***** 03:21:07.420 Stop Op=369071 0x0
  541. ***** 03:21:07.420 Stop Op=369073 0x0
  542. ***** 03:21:07.687 Grp=369365 Op=369366 _ClientProcessId=1271436 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  543. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  544. ***** 03:21:07.700 Grp=369368 _ClientProcessId=1276460 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  545. IWbemServices::Connect
  546. ***** 03:21:07.703 Grp=369369 Op=369370 _ClientProcessId=1276460 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  547. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  548. ***** 03:21:07.723 Grp=369372 _ClientProcessId=1276468 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  549. IWbemServices::Connect
  550. ***** 03:21:07.728 Grp=369373 Op=369374 _ClientProcessId=1276468 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  551. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  552. ***** 03:21:08.217 Grp=369376 _ClientProcessId=1276560 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  553. IWbemServices::Connect
  554. ***** 03:21:08.220 Grp=369377 Op=369378 _ClientProcessId=1276560 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  555. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  556. ***** 03:21:09.772 Grp=369380 _ClientProcessId=1276680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  557. IWbemServices::Connect
  558. ***** 03:21:09.822 Grp=369381 _ClientProcessId=1276744 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  559. IWbemServices::Connect
  560. ***** 03:21:09.857 Grp=369382 Op=369383 _ClientProcessId=1276680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  561. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  562. ***** 03:21:09.946 Grp=369385 Op=369386 _ClientProcessId=1276744 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  563. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  564. ***** 03:21:12.273 Grp=369388 _ClientProcessId=1276192 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  565. IWbemServices::Connect
  566. ***** 03:21:12.313 Grp=369390 Op=369391 _ClientProcessId=1276192 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  567. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  568. ***** 03:21:12.313 Grp=369389 _ClientProcessId=1276312 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  569. IWbemServices::Connect
  570. ***** 03:21:12.331 Grp=369393 Op=369394 _ClientProcessId=1276312 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  571. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  572. ***** 03:21:12.967 Grp=369396 _ClientProcessId=1276920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  573. IWbemServices::Connect
  574. ***** 03:21:12.971 Grp=369397 Op=369398 _ClientProcessId=1276920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  575. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  576. ***** 03:21:15.644 Stop Op=369303 0x0
  577. ***** 03:21:15.644 Stop Op=369305 0x0
  578. ***** 03:21:15.661 Stop Op=369267 0x0
  579. ***** 03:21:15.661 Stop Op=369269 0x0
  580. ***** 03:21:15.678 Stop Op=369295 0x0
  581. ***** 03:21:15.678 Stop Op=369298 0x0
  582. ***** 03:21:15.709 Stop Op=369263 0x0
  583. ***** 03:21:15.709 Stop Op=369265 0x0
  584. ***** 03:21:15.758 Stop Op=369291 0x0
  585. ***** 03:21:15.758 Stop Op=369293 0x0
  586. ***** 03:21:16.057 Stop Op=369223 0x0
  587. ***** 03:21:16.057 Stop Op=369225 0x0
  588. ***** 03:21:16.113 Stop Op=369296 0x0
  589. ***** 03:21:16.113 Stop Op=369301 0x0
  590. ***** 03:21:16.123 Grp=369400 _ClientProcessId=1272520 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  591. IWbemServices::Connect
  592. ***** 03:21:16.127 Grp=369401 Op=369402 _ClientProcessId=1272520 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  593. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  594. ***** 03:21:16.144 Stop Op=369275 0x0
  595. ***** 03:21:16.144 Stop Op=369277 0x0
  596. ***** 03:21:16.160 Grp=369404 _ClientProcessId=1268636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  597. IWbemServices::Connect
  598. ***** 03:21:16.167 Grp=369405 Op=369406 _ClientProcessId=1268636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  599. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  600. ***** 03:21:16.202 Grp=369408 _ClientProcessId=1272316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  601. IWbemServices::Connect
  602. ***** 03:21:16.210 Grp=369409 Op=369410 _ClientProcessId=1272316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  603. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  604. ***** 03:21:16.625 Stop Op=369279 0x0
  605. ***** 03:21:16.625 Stop Op=369281 0x0
  606. ***** 03:21:17.394 Grp=369412 _ClientProcessId=1275404 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  607. IWbemServices::Connect
  608. ***** 03:21:17.394 Grp=369413 _ClientProcessId=1265688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  609. IWbemServices::Connect
  610. ***** 03:21:17.398 Grp=369414 _ClientProcessId=1266584 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  611. IWbemServices::Connect
  612. ***** 03:21:17.400 Grp=369415 Op=369416 _ClientProcessId=1275404 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  613. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  614. ***** 03:21:17.401 Grp=369417 Op=369418 _ClientProcessId=1265688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  615. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  616. ***** 03:21:17.402 Grp=369419 Op=369420 _ClientProcessId=1266584 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  617. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  618. ***** 03:21:18.087 Grp=369424 _ClientProcessId=1274944 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  619. IWbemServices::Connect
  620. ***** 03:21:18.091 Grp=369425 Op=369426 _ClientProcessId=1274944 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  621. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  622. ***** 03:21:19.304 Grp=369428 _ClientProcessId=1269984 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  623. IWbemServices::Connect
  624. ***** 03:21:19.305 Grp=369429 _ClientProcessId=1275788 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  625. IWbemServices::Connect
  626. ***** 03:21:19.307 Grp=369430 Op=369431 _ClientProcessId=1269984 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  627. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  628. ***** 03:21:19.308 Grp=369433 Op=369434 _ClientProcessId=1275788 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  629. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  630. ***** 03:21:19.365 Stop Op=369259 0x0
  631. ***** 03:21:19.365 Stop Op=369261 0x0
  632. ***** 03:21:19.374 Stop Op=369271 0x0
  633. ***** 03:21:19.374 Stop Op=369273 0x0
  634. ***** 03:21:19.527 Grp=369436 _ClientProcessId=1273316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  635. IWbemServices::Connect
  636. ***** 03:21:19.530 Grp=369437 Op=369438 _ClientProcessId=1273316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  637. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  638. ***** 03:21:19.712 Grp=369440 _ClientProcessId=1254144 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  639. IWbemServices::Connect
  640. ***** 03:21:19.714 Grp=369441 Op=369442 _ClientProcessId=1254144 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  641. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  642. ***** 03:21:19.818 Stop Op=369287 0x0
  643. ***** 03:21:19.818 Stop Op=369289 0x0
  644. ***** 03:21:22.318 Stop Op=369313 0x0
  645. ***** 03:21:22.320 Grp=369312 Op=369444 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  646. Start IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_PhysicalMedia WHERE Tag="\\\\.\\PHYSICALDRIVE1"
  647. ***** 03:21:23.135 Stop Op=369444 0x0
  648. ***** 03:21:23.152 Stop Op=369311 0x0
  649. ***** 03:21:23.188 Grp=369449 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  650. IWbemServices::Connect
  651. ***** 03:21:23.189 Grp=369450 Op=369451 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  652. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_SystemEnclosure
  653. ***** 03:21:23.630 Stop Op=369451 0x0
  654. ***** 03:21:23.633 Grp=369450 Op=369453 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  655. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
  656. ***** 03:21:23.778 Stop Op=369453 0x0
  657. ***** 03:21:23.799 Stop Op=369449 0x0
  658. ***** 03:21:23.866 Grp=369455 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  659. IWbemServices::Connect
  660. ***** 03:21:23.866 Grp=369456 Op=369457 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  661. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  662. ***** 03:21:24.058 Stop Op=369457 0x0
  663. ***** 03:21:24.059 Grp=369456 Op=369459 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  664. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  665. ***** 03:21:24.064 Stop Op=369459 0x0
  666. ***** 03:21:24.064 Stop Op=369455 0x0
  667. ***** 03:21:24.095 Grp=369461 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  668. IWbemServices::Connect
  669. ***** 03:21:24.095 Grp=369462 Op=369463 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  670. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  671. ***** 03:21:24.102 Grp=369465 _ClientProcessId=1276776 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  672. IWbemServices::Connect
  673. ***** 03:21:24.156 Grp=369466 Op=369467 _ClientProcessId=1276776 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  674. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  675. ***** 03:21:24.186 Stop Op=369463 0x0
  676. ***** 03:21:24.186 Grp=369462 Op=369469 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  677. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  678. ***** 03:21:24.188 Stop Op=369469 0x0
  679. ***** 03:21:24.188 Stop Op=369461 0x0
  680. ***** 03:21:24.203 Grp=369471 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  681. IWbemServices::Connect
  682. ***** 03:21:24.203 Grp=369472 Op=369473 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  683. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  684. ***** 03:21:24.316 Stop Op=369473 0x0
  685. ***** 03:21:24.316 Grp=369472 Op=369475 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  686. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  687. ***** 03:21:24.349 Stop Op=369475 0x0
  688. ***** 03:21:24.349 Stop Op=369471 0x0
  689. ***** 03:21:24.354 Grp=369477 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  690. IWbemServices::Connect
  691. ***** 03:21:24.354 Grp=369478 Op=369479 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  692. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  693. ***** 03:21:24.387 Stop Op=369479 0x0
  694. ***** 03:21:24.387 Grp=369478 Op=369481 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  695. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  696. ***** 03:21:24.396 Stop Op=369481 0x0
  697. ***** 03:21:24.398 Stop Op=369477 0x0
  698. ***** 03:21:24.420 Grp=369483 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  699. IWbemServices::Connect
  700. ***** 03:21:24.421 Grp=369484 Op=369485 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  701. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  702. ***** 03:21:24.465 Stop Op=369485 0x0
  703. ***** 03:21:24.465 Grp=369484 Op=369487 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  704. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  705. ***** 03:21:24.467 Stop Op=369487 0x0
  706. ***** 03:21:24.467 Stop Op=369483 0x0
  707. ***** 03:21:24.486 Grp=369489 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  708. IWbemServices::Connect
  709. ***** 03:21:24.486 Grp=369490 Op=369491 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  710. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  711. ***** 03:21:24.496 Stop Op=369491 0x0
  712. ***** 03:21:24.497 Grp=369490 Op=369493 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  713. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  714. ***** 03:21:24.505 Stop Op=369493 0x0
  715. ***** 03:21:24.505 Stop Op=369489 0x0
  716. ***** 03:21:24.655 Stop Op=369283 0x0
  717. ***** 03:21:24.655 Stop Op=369285 0x0
  718. ***** 03:21:24.848 Grp=369495 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  719. IWbemServices::Connect
  720. ***** 03:21:24.848 Grp=369496 Op=369497 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  721. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  722. ***** 03:21:24.860 Stop Op=369497 0x0
  723. ***** 03:21:24.860 Grp=369496 Op=369499 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  724. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  725. ***** 03:21:24.862 Stop Op=369499 0x0
  726. ***** 03:21:24.862 Stop Op=369495 0x0
  727. ***** 03:21:24.868 Grp=369501 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  728. IWbemServices::Connect
  729. ***** 03:21:24.869 Grp=369502 Op=369503 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  730. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  731. ***** 03:21:24.875 Stop Op=369503 0x0
  732. ***** 03:21:24.875 Grp=369502 Op=369505 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  733. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  734. ***** 03:21:24.898 Stop Op=369505 0x0
  735. ***** 03:21:24.902 Stop Op=369501 0x0
  736. ***** 03:21:25.219 Stop Op=369372 0x0
  737. ***** 03:21:25.219 Stop Op=369374 0x0
  738. ***** 03:21:25.340 Stop Op=369055 0x0
  739. ***** 03:21:25.340 Stop Op=369057 0x0
  740. ***** 03:21:25.358 Stop Op=369143 0x0
  741. ***** 03:21:25.358 Stop Op=369145 0x0
  742. ***** 03:21:25.364 Stop Op=369127 0x0
  743. ***** 03:21:25.364 Stop Op=369129 0x0
  744. ***** 03:21:25.389 Stop Op=369320 0x0
  745. ***** 03:21:25.389 Stop Op=369322 0x0
  746. ***** 03:21:25.395 Stop Op=369360 0x0
  747. ***** 03:21:25.396 Stop Op=369363 0x0
  748. ***** 03:21:25.427 Stop Op=369344 0x0
  749. ***** 03:21:25.427 Stop Op=369346 0x0
  750. ***** 03:21:25.440 Stop Op=369352 0x0
  751. ***** 03:21:25.440 Stop Op=369354 0x0
  752. ***** 03:21:25.441 Stop Op=369067 0x0
  753. ***** 03:21:25.441 Stop Op=369069 0x0
  754. ***** 03:21:25.488 Grp=369507 _ClientProcessId=1268196 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  755. IWbemServices::Connect
  756. ***** 03:21:25.492 Grp=369508 Op=369509 _ClientProcessId=1268196 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  757. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  758. ***** 03:21:25.493 Grp=369511 _ClientProcessId=1275668 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  759. IWbemServices::Connect
  760. ***** 03:21:25.493 Grp=369512 _ClientProcessId=1256696 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  761. IWbemServices::Connect
  762. ***** 03:21:25.495 Grp=369513 _ClientProcessId=1264808 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  763. IWbemServices::Connect
  764. ***** 03:21:25.496 Grp=369514 Op=369515 _ClientProcessId=1256696 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  765. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  766. ***** 03:21:25.498 Grp=369517 Op=369518 _ClientProcessId=1264808 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  767. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  768. ***** 03:21:25.512 Grp=369520 Op=369521 _ClientProcessId=1275668 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  769. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  770. ***** 03:21:25.521 Grp=369523 _ClientProcessId=1269860 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  771. IWbemServices::Connect
  772. ***** 03:21:25.524 Grp=369524 Op=369525 _ClientProcessId=1269860 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  773. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  774. ***** 03:21:25.619 Stop Op=369368 0x0
  775. ***** 03:21:25.619 Stop Op=369370 0x0
  776. ***** 03:21:25.623 Stop Op=369340 0x0
  777. ***** 03:21:25.623 Stop Op=369342 0x0
  778. ***** 03:21:25.624 Stop Op=369376 0x0
  779. ***** 03:21:25.624 Stop Op=369378 0x0
  780. ***** 03:21:25.758 Stop Op=369356 0x0
  781. ***** 03:21:25.758 Stop Op=369358 0x0
  782. ***** 03:21:25.844 Grp=369527 _ClientProcessId=1276536 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  783. IWbemServices::Connect
  784. ***** 03:21:25.847 Grp=369528 _ClientProcessId=911844 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  785. IWbemServices::Connect
  786. ***** 03:21:25.849 Grp=369529 Op=369530 _ClientProcessId=1276536 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  787. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  788. ***** 03:21:25.850 Grp=369532 Op=369533 _ClientProcessId=911844 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  789. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  790. ***** 03:21:25.925 Grp=369535 _ClientProcessId=1276476 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  791. IWbemServices::Connect
  792. ***** 03:21:25.928 Grp=369536 Op=369537 _ClientProcessId=1276476 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  793. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  794. ***** 03:21:25.973 Grp=369539 _ClientProcessId=1275708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  795. IWbemServices::Connect
  796. ***** 03:21:25.977 Grp=369540 Op=369541 _ClientProcessId=1275708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  797. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  798. ***** 03:21:26.187 Grp=369543 _ClientProcessId=1276528 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  799. IWbemServices::Connect
  800. ***** 03:21:26.194 Grp=369544 Op=369545 _ClientProcessId=1276528 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  801. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  802. ***** 03:21:26.790 Grp=369547 _ClientProcessId=1276308 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  803. IWbemServices::Connect
  804. ***** 03:21:26.803 Grp=369548 Op=369549 _ClientProcessId=1276308 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  805. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  806. ***** 03:21:26.804 Grp=369550 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  807. IWbemServices::Connect
  808. ***** 03:21:26.804 Grp=369551 Op=369552 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  809. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE NOT Manufacturer LIKE 'To Be Filled By O.E.M.%'
  810. ***** 03:21:27.740 Grp=369555 _ClientProcessId=1267924 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  811. IWbemServices::Connect
  812. ***** 03:21:27.742 Grp=369556 _ClientProcessId=1276328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  813. IWbemServices::Connect
  814. ***** 03:21:27.745 Grp=369557 Op=369558 _ClientProcessId=1267924 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  815. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  816. ***** 03:21:27.746 Grp=369559 Op=369560 _ClientProcessId=1276328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  817. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  818. ***** 03:21:27.763 Grp=369562 _ClientProcessId=1276584 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  819. IWbemServices::Connect
  820. ***** 03:21:27.866 Grp=369564 Op=369565 _ClientProcessId=1276584 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  821. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  822. ***** 03:21:28.485 Stop Op=369550 0x0
  823. ***** 03:21:28.485 Stop Op=369552 0x0
  824. ***** 03:21:28.498 Grp=369567 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  825. IWbemServices::Connect
  826. ***** 03:21:28.501 Grp=369568 Op=369569 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  827. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE NOT Manufacturer LIKE 'Ssystem manufacturer%'
  828. ***** 03:21:28.702 Stop Op=369567 0x0
  829. ***** 03:21:28.702 Stop Op=369569 0x0
  830. ***** 03:21:28.713 Grp=369571 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  831. IWbemServices::Connect
  832. ***** 03:21:28.717 Grp=369572 Op=369573 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  833. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE NOT Manufacturer LIKE 'empty%'
  834. ***** 03:21:28.923 Stop Op=369571 0x0
  835. ***** 03:21:28.923 Stop Op=369573 0x0
  836. ***** 03:21:28.936 Grp=369575 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  837. IWbemServices::Connect
  838. ***** 03:21:28.939 Grp=369576 Op=369577 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  839. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE NOT Manufacturer LIKE 'System manufacturer%'
  840. ***** 03:21:29.001 Stop Op=369575 0x0
  841. ***** 03:21:29.001 Stop Op=369577 0x0
  842. ***** 03:21:29.011 Grp=369579 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  843. IWbemServices::Connect
  844. ***** 03:21:29.014 Grp=369580 Op=369581 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  845. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'Tosh%'
  846. ***** 03:21:29.028 Stop Op=369381 0x0
  847. ***** 03:21:29.028 Stop Op=369386 0x0
  848. ***** 03:21:29.127 Stop Op=369579 0x0
  849. ***** 03:21:29.127 Stop Op=369581 0x0
  850. ***** 03:21:29.179 Grp=369583 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  851. IWbemServices::Connect
  852. ***** 03:21:29.179 Grp=369584 Op=369585 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  853. Start IWbemServices::ExecQuery - root\cimv2 : SELECT domain FROM Win32_ComputerSystem WHERE domain = 'wingroup.windeploy.ntdev.microsoft.com'
  854. ***** 03:21:29.202 Grp=369587 _ClientProcessId=1276420 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  855. IWbemServices::Connect
  856. ***** 03:21:29.271 Grp=369588 Op=369589 _ClientProcessId=1276420 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  857. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  858. ***** 03:21:29.279 Stop Op=369583 0x0
  859. ***** 03:21:29.279 Stop Op=369585 0x0
  860. ***** 03:21:29.662 Grp=369591 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  861. IWbemServices::Connect
  862. ***** 03:21:29.721 Grp=369592 Op=369593 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  863. Start IWbemServices::ExecQuery - root\cimv2 : SELECT domain from Win32_ComputerSystem WHERE domain = 'ntdev.corp.microsoft.com'
  864. ***** 03:21:29.900 Stop Op=369591 0x0
  865. ***** 03:21:29.900 Stop Op=369593 0x0
  866. ***** 03:21:29.951 Grp=369595 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  867. IWbemServices::Connect
  868. ***** 03:21:29.966 Grp=369596 Op=369597 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  869. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE "HEWLETT%" OR Manufacturer LIKE "HP%" OR Manufacturer LIKE "Compaq%" OR Manufacturer LIKE "CPQ%"
  870. ***** 03:21:32.030 Grp=369599 _ClientProcessId=1275660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  871. IWbemServices::Connect
  872. ***** 03:21:32.038 Grp=369600 Op=369601 _ClientProcessId=1275660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  873. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  874. ***** 03:21:32.575 Stop Op=369595 0x0
  875. ***** 03:21:32.575 Stop Op=369597 0x0
  876. ***** 03:21:32.667 Grp=369603 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  877. IWbemServices::Connect
  878. ***** 03:21:32.668 Grp=369604 Op=369605 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  879. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'NEC%'
  880. ***** 03:21:32.691 Stop Op=369603 0x0
  881. ***** 03:21:32.691 Stop Op=369605 0x0
  882. ***** 03:21:32.758 Grp=369607 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  883. IWbemServices::Connect
  884. ***** 03:21:32.758 Grp=369608 Op=369609 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  885. Start IWbemServices::ExecQuery - root\cimv2 : Select Manufacturer From Win32_ComputerSystem where Manufacturer LIKE 'Dell%'
  886. ***** 03:21:33.138 Stop Op=369607 0x0
  887. ***** 03:21:33.138 Stop Op=369609 0x0
  888. ***** 03:21:33.148 Grp=369611 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  889. IWbemServices::Connect
  890. ***** 03:21:33.149 Grp=369612 Op=369613 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  891. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'ASUSTeK%'
  892. ***** 03:21:33.174 Stop Op=369611 0x0
  893. ***** 03:21:33.174 Stop Op=369613 0x0
  894. ***** 03:21:33.185 Grp=369615 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  895. IWbemServices::Connect
  896. ***** 03:21:33.186 Grp=369616 Op=369617 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  897. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'HP Pav%' or Manufacturer LIKE 'Compaq Pres%'
  898. ***** 03:21:33.211 Stop Op=369615 0x0
  899. ***** 03:21:33.211 Stop Op=369617 0x0
  900. ***** 03:21:33.214 Grp=369619 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  901. IWbemServices::Connect
  902. ***** 03:21:33.214 Grp=369620 Op=369621 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  903. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'Matsushita%'
  904. ***** 03:21:33.252 Stop Op=369619 0x0
  905. ***** 03:21:33.252 Stop Op=369621 0x0
  906. ***** 03:21:33.256 Grp=369623 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  907. IWbemServices::Connect
  908. ***** 03:21:33.256 Grp=369624 Op=369625 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  909. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'Gateway%'
  910. ***** 03:21:33.413 Stop Op=369623 0x0
  911. ***** 03:21:33.413 Stop Op=369625 0x0
  912. ***** 03:21:33.415 Grp=369627 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  913. IWbemServices::Connect
  914. ***** 03:21:33.415 Grp=369628 Op=369629 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  915. Start IWbemServices::ExecQuery - root\cimv2 : select PartOfDomain from Win32_ComputerSystem WHERE PartOfDomain = True
  916. ***** 03:21:33.446 Stop Op=369627 0x0
  917. ***** 03:21:33.446 Stop Op=369629 0x0
  918. ***** 03:21:33.447 Grp=369631 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  919. IWbemServices::Connect
  920. ***** 03:21:33.448 Grp=369632 Op=369633 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  921. Start IWbemServices::ExecQuery - root\cimv2 : SELECT domain FROM Win32_ComputerSystem WHERE domain = 'redmond.corp.microsoft.com'
  922. ***** 03:21:33.483 Stop Op=369389 0x0
  923. ***** 03:21:33.483 Stop Op=369394 0x0
  924. ***** 03:21:33.531 Stop Op=369631 0x0
  925. ***** 03:21:33.531 Stop Op=369633 0x0
  926. ***** 03:21:33.536 Grp=369635 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  927. IWbemServices::Connect
  928. ***** 03:21:33.536 Grp=369636 Op=369637 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  929. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'IBM%' OR Manufacturer LIKE 'Lenovo%'
  930. ***** 03:21:33.545 Stop Op=369635 0x0
  931. ***** 03:21:33.545 Stop Op=369637 0x0
  932. ***** 03:21:33.555 Stop Op=369400 0x0
  933. ***** 03:21:33.555 Stop Op=369402 0x0
  934. ***** 03:21:33.680 Grp=369639 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  935. IWbemServices::Connect
  936. ***** 03:21:33.680 Grp=369640 Op=369641 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  937. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'Acer%'
  938. ***** 03:21:33.683 Grp=369642 _ClientProcessId=1275516 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  939. IWbemServices::Connect
  940. ***** 03:21:33.686 Grp=369643 Op=369644 _ClientProcessId=1275516 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  941. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  942. ***** 03:21:33.687 Grp=369646 _ClientProcessId=1276740 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  943. IWbemServices::Connect
  944. ***** 03:21:33.690 Grp=369648 Op=369649 _ClientProcessId=1276740 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  945. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  946. ***** 03:21:33.707 Stop Op=369639 0x0
  947. ***** 03:21:33.707 Stop Op=369641 0x0
  948. ***** 03:21:33.708 Grp=369651 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  949. IWbemServices::Connect
  950. ***** 03:21:33.708 Grp=369652 Op=369653 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  951. Start IWbemServices::ExecQuery - root\cimv2 : Select * FROM SoftwareLicensingProduct WHERE (ID = 'A19FB49B-85EE-4681-BB06-465CAE0C5CB4' OR ID = 'A8C83D22-513D-43EE-BF72-02CA8FA42452' OR ID = 'A0678A50-E4EB-40EB-9349-B734976FB08A') AND PartialProductKey IS NOT NULL
  952. ***** 03:21:33.718 Stop Op=369361 0x0
  953. ***** 03:21:33.718 Stop Op=369366 0x0
  954. ***** 03:21:34.420 Stop Op=369651 0x0
  955. ***** 03:21:34.420 Stop Op=369653 0x0
  956. ***** 03:21:34.445 Grp=369659 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  957. IWbemServices::Connect
  958. ***** 03:21:34.445 Grp=369660 Op=369661 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  959. Start IWbemServices::ExecQuery - root\cimv2 : Select * FROM Win32_SystemEnclosure WHERE SMBIOSAssetTag = '7783-7084-3265-9085-8269-3286-77'
  960. ***** 03:21:34.449 Stop Op=369659 0x0
  961. ***** 03:21:34.449 Stop Op=369661 0x0
  962. ***** 03:21:34.473 Stop Op=369396 0x0
  963. ***** 03:21:34.473 Stop Op=369398 0x0
  964. ***** 03:21:34.479 Stop Op=369388 0x0
  965. ***** 03:21:34.479 Stop Op=369391 0x0
  966. ***** 03:21:34.488 Stop Op=369179 0x0
  967. ***** 03:21:34.488 Stop Op=369182 0x0
  968. ***** 03:21:34.650 Stop Op=369412 0x0
  969. ***** 03:21:34.650 Stop Op=369416 0x0
  970. ***** 03:21:34.678 Grp=369663 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  971. IWbemServices::Connect
  972. ***** 03:21:34.679 Grp=369664 Op=369665 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  973. Start IWbemServices::ExecQuery - root\cimv2 : SELECT domain from Win32_ComputerSystem WHERE domain = 'wingroup.windeploy.ntdev.microsoft.com'
  974. ***** 03:21:34.684 Stop Op=369663 0x0
  975. ***** 03:21:34.684 Stop Op=369665 0x0
  976. ***** 03:21:34.685 Grp=369667 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  977. IWbemServices::Connect
  978. ***** 03:21:34.685 Grp=369668 Op=369669 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  979. Start IWbemServices::ExecQuery - root\cimv2 : select domain from Win32_ComputerSystem WHERE domain LIKE '%corp.microsoft.com'
  980. ***** 03:21:34.696 Stop Op=369667 0x0
  981. ***** 03:21:34.696 Stop Op=369669 0x0
  982. ***** 03:21:34.697 Grp=369671 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  983. IWbemServices::Connect
  984. ***** 03:21:34.698 Grp=369672 Op=369673 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  985. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'Samsung%'
  986. ***** 03:21:34.699 Stop Op=369163 0x0
  987. ***** 03:21:34.699 Stop Op=369165 0x0
  988. ***** 03:21:34.716 Stop Op=369671 0x0
  989. ***** 03:21:34.716 Stop Op=369673 0x0
  990. ***** 03:21:34.720 Grp=369675 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  991. IWbemServices::Connect
  992. ***** 03:21:34.720 Grp=369676 Op=369677 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  993. Start IWbemServices::ExecQuery - root\cimv2 : Select BatteryStatus from Win32_Battery where BatteryStatus = '2'
  994. ***** 03:21:34.723 Stop Op=369675 0x0
  995. ***** 03:21:34.723 Stop Op=369677 0x0
  996. ***** 03:21:34.725 Grp=369679 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  997. IWbemServices::Connect
  998. ***** 03:21:34.725 Grp=369680 Op=369681 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  999. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer = 'Panasonic Corporation'
  1000. ***** 03:21:34.732 Stop Op=369679 0x0
  1001. ***** 03:21:34.732 Stop Op=369681 0x0
  1002. ***** 03:21:34.744 Grp=369683 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1003. IWbemServices::Connect
  1004. ***** 03:21:34.744 Grp=369684 Op=369685 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1005. Start IWbemServices::ExecQuery - root\cimv2 : Select Manufacturer From Win32_ComputerSystem where Manufacturer = 'LG Electronics'
  1006. ***** 03:21:34.766 Stop Op=369683 0x0
  1007. ***** 03:21:34.766 Stop Op=369685 0x0
  1008. ***** 03:21:34.768 Grp=369687 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1009. IWbemServices::Connect
  1010. ***** 03:21:34.769 Grp=369688 Op=369689 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1011. Start IWbemServices::ExecQuery - root\cimv2 : select domain from Win32_ComputerSystem WHERE domain = 'ntdev.corp.microsoft.com'
  1012. ***** 03:21:34.806 Stop Op=369687 0x0
  1013. ***** 03:21:34.806 Stop Op=369689 0x0
  1014. ***** 03:21:34.807 Grp=369691 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1015. IWbemServices::Connect
  1016. ***** 03:21:34.807 Grp=369692 Op=369693 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1017. Start IWbemServices::ExecQuery - root\cimv2 : select domain from Win32_ComputerSystem WHERE domain = 'redmond.corp.microsoft.com'
  1018. ***** 03:21:34.840 Stop Op=369691 0x0
  1019. ***** 03:21:34.840 Stop Op=369693 0x0
  1020. ***** 03:21:34.850 Grp=369695 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1021. IWbemServices::Connect
  1022. ***** 03:21:34.850 Grp=369696 Op=369697 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1023. Start IWbemServices::ExecQuery - root\cimv2 : select domain from Win32_ComputerSystem WHERE domain = 'segroup.winse.corp.microsoft.com'
  1024. ***** 03:21:34.881 Stop Op=369695 0x0
  1025. ***** 03:21:34.881 Stop Op=369697 0x0
  1026. ***** 03:21:34.882 Grp=369699 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1027. IWbemServices::Connect
  1028. ***** 03:21:34.882 Grp=369700 Op=369701 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1029. Start IWbemServices::ExecQuery - root\cimv2 : SELECT domain from Win32_ComputerSystem WHERE domain = 'wingroup.windeploy.ntdev.microsoft.com'
  1030. ***** 03:21:34.909 Stop Op=369699 0x0
  1031. ***** 03:21:34.909 Stop Op=369701 0x0
  1032. ***** 03:21:34.912 Grp=369703 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1033. IWbemServices::Connect
  1034. ***** 03:21:34.912 Grp=369704 Op=369705 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1035. Start IWbemServices::ExecQuery - root\cimv2 : SELECT Manufacturer FROM Win32_ComputerSystem WHERE Manufacturer LIKE 'HEWLETT%' or Manufacturer LIKE 'HP%'or Manufacturer LIKE 'Compaq%'
  1036. ***** 03:21:34.933 Grp=369707 _ClientProcessId=1274640 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1037. IWbemServices::Connect
  1038. ***** 03:21:34.937 Grp=369708 Op=369709 _ClientProcessId=1274640 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1039. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1040. ***** 03:21:34.937 Stop Op=369703 0x0
  1041. ***** 03:21:34.937 Stop Op=369705 0x0
  1042. ***** 03:21:34.939 Grp=369710 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1043. IWbemServices::Connect
  1044. ***** 03:21:34.939 Grp=369712 Op=369713 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1045. Start IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_PnPEntity WHERE ClassGuid LIKE '{53d29ef7-377c-4d14-864b-eb3a85769359}'
  1046. ***** 03:21:34.944 Grp=369715 _ClientProcessId=1269520 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1047. IWbemServices::Connect
  1048. ***** 03:21:34.948 Grp=369716 Op=369717 _ClientProcessId=1269520 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1049. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1050. ***** 03:21:34.977 Stop Op=369710 0x0
  1051. ***** 03:21:34.977 Stop Op=369713 0x0
  1052. ***** 03:21:34.978 Stop Op=369428 0x0
  1053. ***** 03:21:34.978 Stop Op=369431 0x0
  1054. ***** 03:21:34.981 Grp=369719 _ClientProcessId=1274976 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1055. IWbemServices::Connect
  1056. ***** 03:21:34.984 Grp=369720 Op=369721 _ClientProcessId=1274976 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1057. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1058. ***** 03:21:34.986 Grp=369723 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1059. IWbemServices::Connect
  1060. ***** 03:21:34.986 Grp=369724 Op=369725 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1061. Start IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_PnPEntity WHERE ClassGuid LIKE '{53d29ef7-377c-4d14-864b-eb3a85769359}'
  1062. ***** 03:21:35.029 Stop Op=369723 0x0
  1063. ***** 03:21:35.029 Stop Op=369725 0x0
  1064. ***** 03:21:35.276 Grp=369727 _ClientProcessId=1276200 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1065. IWbemServices::Connect
  1066. ***** 03:21:35.278 Grp=369728 Op=369729 _ClientProcessId=1276200 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1067. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1068. ***** 03:21:36.516 Stop Op=369414 0x0
  1069. ***** 03:21:36.516 Stop Op=369420 0x0
  1070. ***** 03:21:38.168 Stop Op=369404 0x0
  1071. ***** 03:21:38.168 Stop Op=369406 0x0
  1072. ***** 03:21:38.306 Grp=369731 _ClientProcessId=1276908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1073. IWbemServices::Connect
  1074. ***** 03:21:38.309 Grp=369732 Op=369733 _ClientProcessId=1276908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1075. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1076. ***** 03:21:38.376 Grp=369735 _ClientProcessId=1255432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1077. IWbemServices::Connect
  1078. ***** 03:21:38.379 Grp=369736 Op=369737 _ClientProcessId=1255432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1079. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1080. ***** 03:21:39.371 Stop Op=369429 0x0
  1081. ***** 03:21:39.371 Stop Op=369434 0x0
  1082. ***** 03:21:39.543 Stop Op=369424 0x0
  1083. ***** 03:21:39.543 Stop Op=369426 0x0
  1084. ***** 03:21:39.620 Stop Op=369440 0x0
  1085. ***** 03:21:39.620 Stop Op=369442 0x0
  1086. ***** 03:21:39.742 Stop Op=369380 0x0
  1087. ***** 03:21:39.742 Stop Op=369383 0x0
  1088. ***** 03:21:40.207 Grp=369739 _ClientProcessId=1273920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1089. IWbemServices::Connect
  1090. ***** 03:21:40.209 Grp=369740 _ClientProcessId=1270176 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1091. IWbemServices::Connect
  1092. ***** 03:21:40.210 Grp=369741 _ClientProcessId=949356 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1093. IWbemServices::Connect
  1094. ***** 03:21:40.211 Grp=369742 Op=369743 _ClientProcessId=1273920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1095. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1096. ***** 03:21:40.212 Grp=369744 Op=369745 _ClientProcessId=1270176 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1097. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1098. ***** 03:21:40.213 Grp=369746 Op=369747 _ClientProcessId=949356 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1099. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1100. ***** 03:21:40.246 Grp=369751 _ClientProcessId=1274988 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1101. IWbemServices::Connect
  1102. ***** 03:21:40.249 Grp=369752 Op=369753 _ClientProcessId=1274988 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1103. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1104. ***** 03:21:40.375 Grp=369755 _ClientProcessId=1271236 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1105. IWbemServices::Connect
  1106. ***** 03:21:40.387 Grp=369756 Op=369757 _ClientProcessId=1271236 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1107. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1108. ***** 03:21:40.389 Grp=369758 _ClientProcessId=1271484 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1109. IWbemServices::Connect
  1110. ***** 03:21:42.433 Grp=369760 Op=369761 _ClientProcessId=1271484 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1111. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1112. ***** 03:21:42.976 Stop Op=369513 0x0
  1113. ***** 03:21:42.976 Stop Op=369518 0x0
  1114. ***** 03:21:42.990 Stop Op=369535 0x0
  1115. ***** 03:21:42.990 Stop Op=369537 0x0
  1116. ***** 03:21:43.082 Stop Op=369215 0x0
  1117. ***** 03:21:43.082 Stop Op=369217 0x0
  1118. ***** 03:21:43.155 Grp=369763 _ClientProcessId=1277216 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1119. IWbemServices::Connect
  1120. ***** 03:21:43.158 Stop Op=369413 0x0
  1121. ***** 03:21:43.158 Stop Op=369418 0x0
  1122. ***** 03:21:43.159 Grp=369764 Op=369765 _ClientProcessId=1277216 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1123. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1124. ***** 03:21:43.813 Grp=369767 _ClientProcessId=1277140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1125. IWbemServices::Connect
  1126. ***** 03:21:43.814 Grp=369768 _ClientProcessId=1268588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1127. IWbemServices::Connect
  1128. ***** 03:21:43.819 Grp=369769 Op=369770 _ClientProcessId=1277140 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1129. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1130. ***** 03:21:43.820 Grp=369772 Op=369773 _ClientProcessId=1268588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1131. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1132. ***** 03:21:43.821 Grp=369774 _ClientProcessId=1277068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1133. IWbemServices::Connect
  1134. ***** 03:21:43.825 Grp=369775 Op=369776 _ClientProcessId=1277068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1135. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1136. ***** 03:21:43.853 Stop Op=369436 0x0
  1137. ***** 03:21:43.853 Stop Op=369438 0x0
  1138. ***** 03:21:44.147 Grp=369779 _ClientProcessId=1277336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1139. IWbemServices::Connect
  1140. ***** 03:21:44.174 Grp=369780 Op=369781 _ClientProcessId=1277336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1141. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1142. ***** 03:21:44.193 Stop Op=369465 0x0
  1143. ***** 03:21:44.193 Stop Op=369467 0x0
  1144. ***** 03:21:44.236 Stop Op=369547 0x0
  1145. ***** 03:21:44.236 Stop Op=369549 0x0
  1146. ***** 03:21:44.350 Grp=369783 _ClientProcessId=1277416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1147. IWbemServices::Connect
  1148. ***** 03:21:44.360 Grp=369784 Op=369785 _ClientProcessId=1277416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1149. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1150. ***** 03:21:44.565 Stop Op=369211 0x0
  1151. ***** 03:21:44.565 Stop Op=369213 0x0
  1152. ***** 03:21:44.636 Stop Op=369555 0x0
  1153. ***** 03:21:44.636 Stop Op=369558 0x0
  1154. ***** 03:21:44.674 Stop Op=369239 0x0
  1155. ***** 03:21:44.674 Stop Op=369241 0x0
  1156. ***** 03:21:44.708 Stop Op=369528 0x0
  1157. ***** 03:21:44.708 Stop Op=369533 0x0
  1158. ***** 03:21:44.901 Stop Op=369511 0x0
  1159. ***** 03:21:44.901 Stop Op=369521 0x0
  1160. ***** 03:21:44.914 Grp=369787 _ClientProcessId=1277588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1161. IWbemServices::Connect
  1162. ***** 03:21:44.980 Stop Op=369527 0x0
  1163. ***** 03:21:44.980 Stop Op=369530 0x0
  1164. ***** 03:21:44.995 Grp=369788 Op=369789 _ClientProcessId=1277588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1165. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1166. ***** 03:21:45.036 Grp=369791 _ClientProcessId=1277660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1167. IWbemServices::Connect
  1168. ***** 03:21:45.039 Grp=369792 Op=369793 _ClientProcessId=1277660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1169. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1170. ***** 03:21:45.051 Stop Op=369556 0x0
  1171. ***** 03:21:45.051 Stop Op=369560 0x0
  1172. ***** 03:21:45.101 Grp=369795 _ClientProcessId=1277780 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1173. IWbemServices::Connect
  1174. ***** 03:21:45.104 Grp=369796 Op=369797 _ClientProcessId=1277780 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1175. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1176. ***** 03:21:45.156 Grp=369799 _ClientProcessId=1277944 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1177. IWbemServices::Connect
  1178. ***** 03:21:45.159 Grp=369800 Op=369801 _ClientProcessId=1277944 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1179. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1180. ***** 03:21:45.176 Grp=369803 _ClientProcessId=1272252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1181. IWbemServices::Connect
  1182. ***** 03:21:45.179 Grp=369805 Op=369806 _ClientProcessId=1272252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1183. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1184. ***** 03:21:45.179 Grp=369804 _ClientProcessId=1277924 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1185. IWbemServices::Connect
  1186. ***** 03:21:45.183 Grp=369808 Op=369809 _ClientProcessId=1277924 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1187. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1188. ***** 03:21:46.269 Grp=369811 _ClientProcessId=49004 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1189. IWbemServices::Connect
  1190. ***** 03:21:46.345 Grp=369812 Op=369813 _ClientProcessId=49004 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1191. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1192. ***** 03:21:46.906 Stop Op=369539 0x0
  1193. ***** 03:21:46.906 Stop Op=369541 0x0
  1194. ***** 03:21:46.989 Stop Op=369562 0x0
  1195. ***** 03:21:46.990 Stop Op=369565 0x0
  1196. ***** 03:21:47.075 Stop Op=369587 0x0
  1197. ***** 03:21:47.075 Stop Op=369589 0x0
  1198. ***** 03:21:47.459 Stop Op=369543 0x0
  1199. ***** 03:21:47.459 Stop Op=369545 0x0
  1200. ***** 03:21:47.481 Stop Op=369599 0x0
  1201. ***** 03:21:47.481 Stop Op=369601 0x0
  1202. ***** 03:21:48.064 Grp=369815 _ClientProcessId=1277508 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1203. IWbemServices::Connect
  1204. ***** 03:21:48.067 Grp=369816 Op=369817 _ClientProcessId=1277508 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1205. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1206. ***** 03:21:50.036 Grp=369819 _ClientProcessId=1272612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1207. IWbemServices::Connect
  1208. ***** 03:21:50.040 Grp=369820 Op=369821 _ClientProcessId=1272612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1209. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1210. ***** 03:21:50.255 Stop Op=369707 0x0
  1211. ***** 03:21:50.255 Stop Op=369709 0x0
  1212. ***** 03:21:50.442 Grp=369823 _ClientProcessId=1273080 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1213. IWbemServices::Connect
  1214. ***** 03:21:50.442 Grp=369824 _ClientProcessId=1275884 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1215. IWbemServices::Connect
  1216. ***** 03:21:50.446 Grp=369825 Op=369826 _ClientProcessId=1275884 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1217. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1218. ***** 03:21:50.446 Grp=369827 Op=369828 _ClientProcessId=1273080 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1219. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1220. ***** 03:21:50.586 Stop Op=369512 0x0
  1221. ***** 03:21:50.586 Stop Op=369515 0x0
  1222. ***** 03:21:50.785 Grp=369831 _ClientProcessId=1250548 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1223. IWbemServices::Connect
  1224. ***** 03:21:50.789 Grp=369832 Op=369833 _ClientProcessId=1250548 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1225. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1226. ***** 03:21:51.282 Stop Op=369646 0x0
  1227. ***** 03:21:51.282 Stop Op=369649 0x0
  1228. ***** 03:21:51.315 Grp=369835 _ClientProcessId=1276888 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1229. IWbemServices::Connect
  1230. ***** 03:21:51.318 Grp=369836 Op=369837 _ClientProcessId=1276888 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1231. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1232. ***** 03:21:52.937 Grp=369839 _ClientProcessId=1277732 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1233. IWbemServices::Connect
  1234. ***** 03:21:52.940 Grp=369840 Op=369841 _ClientProcessId=1277732 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1235. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1236. ***** 03:21:56.990 Grp=369843 _ClientProcessId=1275812 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1237. IWbemServices::Connect
  1238. ***** 03:21:56.994 Grp=369844 Op=369845 _ClientProcessId=1275812 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1239. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1240. ***** 03:21:57.008 Stop Op=369715 0x0
  1241. ***** 03:21:57.008 Stop Op=369717 0x0
  1242. ***** 03:21:58.787 Grp=369847 _ClientProcessId=1275324 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1243. IWbemServices::Connect
  1244. ***** 03:21:58.792 Grp=369848 Op=369849 _ClientProcessId=1275324 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1245. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1246. ***** 03:21:59.369 Grp=369851 _ClientProcessId=1275576 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1247. IWbemServices::Connect
  1248. ***** 03:21:59.372 Grp=369852 Op=369853 _ClientProcessId=1275576 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1249. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1250. ***** 03:21:59.394 Stop Op=369739 0x0
  1251. ***** 03:21:59.394 Stop Op=369743 0x0
  1252. ***** 03:21:59.434 Stop Op=369758 0x0
  1253. ***** 03:21:59.434 Stop Op=369761 0x0
  1254. ***** 03:21:59.569 Grp=369855 _ClientProcessId=1272168 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1255. IWbemServices::Connect
  1256. ***** 03:21:59.609 Grp=369856 Op=369857 _ClientProcessId=1272168 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1257. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1258. ***** 03:21:59.761 Grp=369859 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1259. IWbemServices::Connect
  1260. ***** 03:21:59.761 Grp=369860 Op=369861 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1261. Start IWbemServices::ExecQuery - root\CIMV2 : SELECT Version FROM Win32_InstalledStoreProgram WHERE Name='Microsoft.SecHealthUI' AND (Version LIKE '%.9000.0' OR Version = '1000.27703.1006.0')
  1262. ***** 03:21:59.769 Stop Op=369727 0x0
  1263. ***** 03:21:59.769 Stop Op=369729 0x0
  1264. ***** 03:21:59.785 Grp=369864 _ClientProcessId=1277052 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1265. IWbemServices::Connect
  1266. ***** 03:21:59.789 Grp=369865 Op=369866 _ClientProcessId=1277052 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1267. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1268. ***** 03:21:59.898 Grp=369868 _ClientProcessId=1276272 [WmiPrvSE.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1269. IWbemServices::Connect
  1270. ***** 03:21:59.899 Stop Op=369868 0x0
  1271. ***** 03:21:59.954 Stop Op=369751 0x0
  1272. ***** 03:21:59.954 Stop Op=369753 0x0
  1273. ***** 03:21:59.957 Grp=369871 _ClientProcessId=1276440 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1274. IWbemServices::Connect
  1275. ***** 03:21:59.961 Grp=369872 Op=369873 _ClientProcessId=1276440 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1276. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1277. ***** 03:22:00.141 Stop Op=369859 0x0
  1278. ***** 03:22:00.141 Stop Op=369861 0x0
  1279. ***** 03:22:00.408 Stop Op=369755 0x0
  1280. ***** 03:22:00.409 Stop Op=369757 0x0
  1281. ***** 03:22:00.484 Grp=369875 _ClientProcessId=1272336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1282. IWbemServices::Connect
  1283. ***** 03:22:00.485 Stop Op=369247 0x0
  1284. ***** 03:22:00.485 Stop Op=369249 0x0
  1285. ***** 03:22:00.488 Grp=369876 Op=369877 _ClientProcessId=1272336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1286. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1287. ***** 03:22:00.637 Grp=369879 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1288. IWbemServices::Connect
  1289. ***** 03:22:00.639 Grp=369880 Op=369881 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1290. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  1291. ***** 03:22:00.651 Stop Op=369881 0x0
  1292. ***** 03:22:00.651 Grp=369880 Op=369883 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1293. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  1294. ***** 03:22:00.657 Stop Op=369883 0x0
  1295. ***** 03:22:00.657 Stop Op=369879 0x0
  1296. ***** 03:22:00.748 Stop Op=369768 0x0
  1297. ***** 03:22:00.748 Stop Op=369773 0x0
  1298. ***** 03:22:00.967 Grp=369885 _ClientProcessId=1276860 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1299. IWbemServices::Connect
  1300. ***** 03:22:00.971 Grp=369886 Op=369887 _ClientProcessId=1276860 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1301. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1302. ***** 03:22:00.975 Grp=369889 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1303. IWbemServices::Connect
  1304. ***** 03:22:00.976 Grp=369890 Op=369891 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1305. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  1306. ***** 03:22:01.032 Stop Op=369891 0x0
  1307. ***** 03:22:01.032 Grp=369890 Op=369893 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1308. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  1309. ***** 03:22:01.037 Grp=369895 _ClientProcessId=1276816 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1310. IWbemServices::Connect
  1311. ***** 03:22:01.040 Grp=369896 Op=369897 _ClientProcessId=1276816 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1312. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1313. ***** 03:22:01.041 Stop Op=369795 0x0
  1314. ***** 03:22:01.041 Stop Op=369797 0x0
  1315. ***** 03:22:01.054 Stop Op=369893 0x0
  1316. ***** 03:22:01.054 Stop Op=369889 0x0
  1317. ***** 03:22:01.057 Grp=369899 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1318. IWbemServices::Connect
  1319. ***** 03:22:01.057 Grp=369900 Op=369901 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1320. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
  1321. ***** 03:22:01.102 Stop Op=369901 0x0
  1322. ***** 03:22:01.102 Grp=369900 Op=369903 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1323. Start IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
  1324. ***** 03:22:01.111 Stop Op=369903 0x0
  1325. ***** 03:22:01.111 Stop Op=369899 0x0
  1326. ***** 03:22:01.126 Grp=369905 _ClientProcessId=1262932 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1327. IWbemServices::Connect
  1328. ***** 03:22:01.129 Grp=369906 Op=369907 _ClientProcessId=1262932 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1329. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1330. ***** 03:22:01.645 Stop Op=369791 0x0
  1331. ***** 03:22:01.645 Stop Op=369793 0x0
  1332. ***** 03:22:01.708 Grp=369909 _ClientProcessId=1275064 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1333. IWbemServices::Connect
  1334. ***** 03:22:01.711 Grp=369910 Op=369911 _ClientProcessId=1275064 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1335. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1336. ***** 03:22:02.820 Grp=369913 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1337. IWbemServices::Connect
  1338. ***** 03:22:02.835 Grp=369914 Op=369915 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1339. Start IWbemServices::ExecQuery - root\cimv2 : SELECT AdapterRAM FROM Win32_VideoController WHERE AdapterRAM >= 2147483648
  1340. ***** 03:22:02.974 Stop Op=369913 0x0
  1341. ***** 03:22:02.974 Stop Op=369915 0x0
  1342. ***** 03:22:02.990 Grp=369917 _ClientProcessId=1272668 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1343. IWbemServices::Connect
  1344. ***** 03:22:02.998 Grp=369918 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1345. IWbemServices::Connect
  1346. ***** 03:22:03.002 Grp=369919 Op=369920 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1347. Start IWbemServices::ExecQuery - root\cimv2 : SELECT AdapterRAM FROM Win32_VideoController WHERE AdapterRAM >= 1073741824
  1348. ***** 03:22:03.002 Grp=369921 Op=369922 _ClientProcessId=1272668 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1349. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1350. ***** 03:22:03.023 Stop Op=369918 0x0
  1351. ***** 03:22:03.023 Stop Op=369920 0x0
  1352. ***** 03:22:03.042 Grp=369925 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1353. IWbemServices::Connect
  1354. ***** 03:22:03.042 Grp=369926 Op=369927 _ClientProcessId=1272692 [svchost.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1355. Start IWbemServices::ExecQuery - root\cimv2 : SELECT AdapterRAM FROM Win32_VideoController WHERE AdapterRAM >= 4293918720
  1356. ***** 03:22:03.081 Stop Op=369925 0x0
  1357. ***** 03:22:03.081 Stop Op=369927 0x0
  1358. ***** 03:22:04.103 Stop Op=369741 0x0
  1359. ***** 03:22:04.103 Stop Op=369747 0x0
  1360. ***** 03:22:04.113 Stop Op=369804 0x0
  1361. ***** 03:22:04.113 Stop Op=369809 0x0
  1362. ***** 03:22:04.186 Grp=369929 _ClientProcessId=1276552 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1363. IWbemServices::Connect
  1364. ***** 03:22:04.189 Grp=369930 Op=369931 _ClientProcessId=1276552 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1365. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1366. ***** 03:22:04.199 Grp=369933 _ClientProcessId=1273164 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1367. IWbemServices::Connect
  1368. ***** 03:22:04.202 Grp=369934 Op=369935 _ClientProcessId=1273164 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1369. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1370. ***** 03:22:04.213 Stop Op=369799 0x0
  1371. ***** 03:22:04.213 Stop Op=369801 0x0
  1372. ***** 03:22:04.225 Stop Op=369740 0x0
  1373. ***** 03:22:04.225 Stop Op=369745 0x0
  1374. ***** 03:22:04.284 Grp=369937 _ClientProcessId=1270908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1375. IWbemServices::Connect
  1376. ***** 03:22:04.287 Grp=369938 Op=369939 _ClientProcessId=1270908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1377. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1378. ***** 03:22:04.355 Grp=369941 _ClientProcessId=1164932 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1379. IWbemServices::Connect
  1380. ***** 03:22:04.359 Grp=369942 Op=369943 _ClientProcessId=1164932 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1381. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1382. ***** 03:22:04.385 Stop Op=369779 0x0
  1383. ***** 03:22:04.385 Stop Op=369781 0x0
  1384. ***** 03:22:04.640 Grp=369945 _ClientProcessId=1247304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1385. IWbemServices::Connect
  1386. ***** 03:22:04.643 Grp=369946 Op=369947 _ClientProcessId=1247304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1387. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1388. ***** 03:22:04.787 Stop Op=369787 0x0
  1389. ***** 03:22:04.787 Stop Op=369789 0x0
  1390. ***** 03:22:04.811 Stop Op=369774 0x0
  1391. ***** 03:22:04.811 Stop Op=369776 0x0
  1392. ***** 03:22:04.993 Stop Op=369735 0x0
  1393. ***** 03:22:04.993 Stop Op=369737 0x0
  1394. ***** 03:22:05.071 Stop Op=369811 0x0
  1395. ***** 03:22:05.071 Stop Op=369813 0x0
  1396. ***** 03:22:05.352 Grp=369949 _ClientProcessId=1277680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1397. IWbemServices::Connect
  1398. ***** 03:22:05.355 Grp=369950 Op=369951 _ClientProcessId=1277680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1399. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1400. ***** 03:22:05.413 Stop Op=369767 0x0
  1401. ***** 03:22:05.413 Stop Op=369770 0x0
  1402. ***** 03:22:05.604 Grp=369953 _ClientProcessId=1277636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1403. IWbemServices::Connect
  1404. ***** 03:22:05.608 Grp=369954 Op=369955 _ClientProcessId=1277636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1405. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1406. ***** 03:22:05.902 Stop Op=369824 0x0
  1407. ***** 03:22:05.902 Stop Op=369826 0x0
  1408. ***** 03:22:06.096 Stop Op=369815 0x0
  1409. ***** 03:22:06.096 Stop Op=369817 0x0
  1410. ***** 03:22:06.220 Grp=369957 _ClientProcessId=1277892 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1411. IWbemServices::Connect
  1412. ***** 03:22:06.224 Grp=369958 Op=369959 _ClientProcessId=1277892 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1413. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1414. ***** 03:22:06.242 Grp=369961 _ClientProcessId=1275016 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1415. IWbemServices::Connect
  1416. ***** 03:22:06.245 Grp=369962 Op=369963 _ClientProcessId=1275016 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1417. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1418. ***** 03:22:06.251 Grp=369965 _ClientProcessId=3204 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1419. IWbemServices::Connect
  1420. ***** 03:22:06.254 Grp=369966 Op=369967 _ClientProcessId=3204 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1421. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1422. ***** 03:22:06.257 Grp=369969 _ClientProcessId=1277320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1423. IWbemServices::Connect
  1424. ***** 03:22:06.260 Grp=369970 Op=369971 _ClientProcessId=1277320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1425. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1426. ***** 03:22:06.373 Grp=369973 _ClientProcessId=1274980 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1427. IWbemServices::Connect
  1428. ***** 03:22:06.376 Grp=369974 Op=369975 _ClientProcessId=1274980 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1429. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1430. ***** 03:22:07.171 Grp=369977 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1431. IWbemServices::Connect
  1432. ***** 03:22:07.173 Grp=369978 Op=369979 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1433. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData
  1434. ***** 03:22:07.176 Stop Op=369977 0x0
  1435. ***** 03:22:07.176 Stop Op=369979 0x0
  1436. ***** 03:22:07.178 Grp=369981 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1437. IWbemServices::Connect
  1438. ***** 03:22:07.179 Grp=369982 Op=369983 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1439. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%360????%' OR displayName LIKE '%360 Total Security%' OR displayName LIKE '%360 ????%' OR displayName LIKE '%360 ??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360 Internet Security%')
  1440. ***** 03:22:07.183 Stop Op=369981 0x0
  1441. ***** 03:22:07.183 Stop Op=369983 0x0
  1442. ***** 03:22:07.185 Grp=369984 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1443. IWbemServices::Connect
  1444. ***** 03:22:07.185 Grp=369985 Op=369986 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1445. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%360????%' OR displayName LIKE '%360 Total Security%' OR displayName LIKE '%360 ????%' OR displayName LIKE '%360 ??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360 Internet Security%') AND statusCode = 1244
  1446. ***** 03:22:07.186 Stop Op=369984 0x0
  1447. ***** 03:22:07.186 Stop Op=369986 0x0
  1448. ***** 03:22:07.186 Grp=369987 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1449. IWbemServices::Connect
  1450. ***** 03:22:07.187 Grp=369988 Op=369989 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1451. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%360????%' OR displayName LIKE '%360 Total Security%' OR displayName LIKE '%360 ????%' OR displayName LIKE '%360 ??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360 Internet Security%') AND statusCode != 0 AND statusCode != 1244
  1452. ***** 03:22:07.187 Stop Op=369987 0x0
  1453. ***** 03:22:07.187 Stop Op=369989 0x0
  1454. ***** 03:22:07.188 Grp=369990 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1455. IWbemServices::Connect
  1456. ***** 03:22:07.188 Grp=369991 Op=369992 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1457. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%360????%' OR displayName LIKE '%360 Total Security%' OR displayName LIKE '%360 ????%' OR displayName LIKE '%360 ??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360 Internet Security%') AND hresultCode != 0
  1458. ***** 03:22:07.189 Stop Op=369990 0x0
  1459. ***** 03:22:07.189 Stop Op=369992 0x0
  1460. ***** 03:22:07.193 Grp=369993 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1461. IWbemServices::Connect
  1462. ***** 03:22:07.195 Grp=369994 Op=369995 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1463. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%360????%' OR displayName LIKE '%360 Total Security%' OR displayName LIKE '%360 ????%' OR displayName LIKE '%360 ??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360??%' OR displayName LIKE '%360 Internet Security%') AND iniString = 'INI file too big'
  1464. ***** 03:22:07.196 Stop Op=369993 0x0
  1465. ***** 03:22:07.196 Stop Op=369995 0x0
  1466. ***** 03:22:07.198 Grp=369996 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1467. IWbemServices::Connect
  1468. ***** 03:22:07.199 Grp=369997 Op=369998 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1469. Start IWbemServices::ExecQuery - root\cimv2 : SELECT FreeSpace FROM Win32_LogicalDisk WHERE DeviceId = "C:"
  1470. ***** 03:22:07.201 Stop Op=369998 0x80041032
  1471. ***** 03:22:07.201 Stop Op=369996 0x0
  1472. ***** 03:22:07.202 Grp=370000 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1473. IWbemServices::Connect
  1474. ***** 03:22:07.202 Grp=370001 Op=370002 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1475. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Sophos%')
  1476. ***** 03:22:07.216 Stop Op=370000 0x0
  1477. ***** 03:22:07.216 Stop Op=370002 0x0
  1478. ***** 03:22:07.218 Grp=370003 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1479. IWbemServices::Connect
  1480. ***** 03:22:07.219 Grp=370004 Op=370005 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1481. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Sophos%') AND statusCode = 1244
  1482. ***** 03:22:07.220 Stop Op=370003 0x0
  1483. ***** 03:22:07.220 Stop Op=370005 0x0
  1484. ***** 03:22:07.220 Grp=370006 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1485. IWbemServices::Connect
  1486. ***** 03:22:07.220 Grp=370007 Op=370008 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1487. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Sophos%') AND statusCode != 0 AND statusCode != 1244
  1488. ***** 03:22:07.221 Stop Op=370006 0x0
  1489. ***** 03:22:07.221 Stop Op=370008 0x0
  1490. ***** 03:22:07.221 Grp=370009 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1491. IWbemServices::Connect
  1492. ***** 03:22:07.222 Grp=370010 Op=370011 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1493. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Sophos%') AND hresultCode != 0
  1494. ***** 03:22:07.224 Stop Op=370009 0x0
  1495. ***** 03:22:07.224 Stop Op=370011 0x0
  1496. ***** 03:22:07.224 Grp=370012 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1497. IWbemServices::Connect
  1498. ***** 03:22:07.225 Grp=370013 Op=370014 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1499. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Sophos%') AND iniString = 'INI file too big'
  1500. ***** 03:22:07.225 Stop Op=370012 0x0
  1501. ***** 03:22:07.225 Stop Op=370014 0x0
  1502. ***** 03:22:07.229 Grp=370015 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1503. IWbemServices::Connect
  1504. ***** 03:22:07.229 Grp=370016 Op=370017 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1505. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avast%' OR displayName LIKE '%AVG Antivirus%' OR displayName LIKE '%AVG Anti-Virus%' OR displayName LIKE '%AVG Internet Security%' OR displayName LIKE '%AVG update module%' OR displayName LIKE '%Norman Endpoint Protection%' OR displayName LIKE '%Norman Security%')
  1506. ***** 03:22:07.231 Stop Op=370015 0x0
  1507. ***** 03:22:07.231 Stop Op=370017 0x0
  1508. ***** 03:22:07.232 Grp=370018 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1509. IWbemServices::Connect
  1510. ***** 03:22:07.232 Grp=370019 Op=370020 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1511. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avast%' OR displayName LIKE '%AVG Antivirus%' OR displayName LIKE '%AVG Anti-Virus%' OR displayName LIKE '%AVG Internet Security%' OR displayName LIKE '%AVG update module%' OR displayName LIKE '%Norman Endpoint Protection%' OR displayName LIKE '%Norman Security%') AND statusCode = 1244
  1512. ***** 03:22:07.232 Stop Op=370018 0x0
  1513. ***** 03:22:07.232 Stop Op=370020 0x0
  1514. ***** 03:22:07.233 Grp=370021 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1515. IWbemServices::Connect
  1516. ***** 03:22:07.234 Grp=370022 Op=370023 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1517. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avast%' OR displayName LIKE '%AVG Antivirus%' OR displayName LIKE '%AVG Anti-Virus%' OR displayName LIKE '%AVG Internet Security%' OR displayName LIKE '%AVG update module%' OR displayName LIKE '%Norman Endpoint Protection%' OR displayName LIKE '%Norman Security%') AND statusCode != 0 AND statusCode != 1244
  1518. ***** 03:22:07.235 Stop Op=370021 0x0
  1519. ***** 03:22:07.235 Stop Op=370023 0x0
  1520. ***** 03:22:07.235 Grp=370024 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1521. IWbemServices::Connect
  1522. ***** 03:22:07.236 Grp=370025 Op=370026 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1523. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avast%' OR displayName LIKE '%AVG Antivirus%' OR displayName LIKE '%AVG Anti-Virus%' OR displayName LIKE '%AVG Internet Security%' OR displayName LIKE '%AVG update module%' OR displayName LIKE '%Norman Endpoint Protection%' OR displayName LIKE '%Norman Security%') AND hresultCode != 0
  1524. ***** 03:22:07.238 Stop Op=370024 0x0
  1525. ***** 03:22:07.238 Stop Op=370026 0x0
  1526. ***** 03:22:07.239 Grp=370027 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1527. IWbemServices::Connect
  1528. ***** 03:22:07.240 Grp=370028 Op=370029 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1529. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avast%' OR displayName LIKE '%AVG Antivirus%' OR displayName LIKE '%AVG Anti-Virus%' OR displayName LIKE '%AVG Internet Security%' OR displayName LIKE '%AVG update module%' OR displayName LIKE '%Norman Endpoint Protection%' OR displayName LIKE '%Norman Security%') AND iniString = 'INI file too big'
  1530. ***** 03:22:07.240 Stop Op=370027 0x0
  1531. ***** 03:22:07.240 Stop Op=370029 0x0
  1532. ***** 03:22:07.251 Grp=370030 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1533. IWbemServices::Connect
  1534. ***** 03:22:07.251 Grp=370031 Op=370032 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1535. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Kaspersky Internet Security%' OR displayName LIKE '%Kaspersky%Anti%Virus%' OR displayName LIKE '%Kaspersky CRYSTAL%' OR displayName LIKE '%Kaspersky Endpoint Security%' OR displayName LIKE '%Kaspersky Free%' OR displayName LIKE '%Kaspersky Security%' OR displayName LIKE '%Kaspersky Small Office Security%' OR displayName LIKE '%Kaspersky Total Security%' OR displayName LIKE '%SonicWall Enforced Client-AntiVirus%' OR displayName LIKE '%??????? ???????%' OR displayName LIKE '%??????? ??????? ??????%' OR displayName LIKE '%??????? ???? ???? ??????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%?????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%')
  1536. ***** 03:22:07.266 Stop Op=370030 0x0
  1537. ***** 03:22:07.266 Stop Op=370032 0x0
  1538. ***** 03:22:07.267 Grp=370033 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1539. IWbemServices::Connect
  1540. ***** 03:22:07.268 Grp=370034 Op=370035 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1541. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Kaspersky Internet Security%' OR displayName LIKE '%Kaspersky%Anti%Virus%' OR displayName LIKE '%Kaspersky CRYSTAL%' OR displayName LIKE '%Kaspersky Endpoint Security%' OR displayName LIKE '%Kaspersky Free%' OR displayName LIKE '%Kaspersky Security%' OR displayName LIKE '%Kaspersky Small Office Security%' OR displayName LIKE '%Kaspersky Total Security%' OR displayName LIKE '%SonicWall Enforced Client-AntiVirus%' OR displayName LIKE '%??????? ???????%' OR displayName LIKE '%??????? ??????? ??????%' OR displayName LIKE '%??????? ???? ???? ??????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%?????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%') AND statusCode = 1244
  1542. ***** 03:22:07.280 Stop Op=370033 0x0
  1543. ***** 03:22:07.280 Stop Op=370035 0x0
  1544. ***** 03:22:07.282 Grp=370036 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1545. IWbemServices::Connect
  1546. ***** 03:22:07.283 Grp=370037 Op=370038 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1547. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Kaspersky Internet Security%' OR displayName LIKE '%Kaspersky%Anti%Virus%' OR displayName LIKE '%Kaspersky CRYSTAL%' OR displayName LIKE '%Kaspersky Endpoint Security%' OR displayName LIKE '%Kaspersky Free%' OR displayName LIKE '%Kaspersky Security%' OR displayName LIKE '%Kaspersky Small Office Security%' OR displayName LIKE '%Kaspersky Total Security%' OR displayName LIKE '%SonicWall Enforced Client-AntiVirus%' OR displayName LIKE '%??????? ???????%' OR displayName LIKE '%??????? ??????? ??????%' OR displayName LIKE '%??????? ???? ???? ??????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%?????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%') AND statusCode != 0 AND statusCode != 1244
  1548. ***** 03:22:07.299 Stop Op=370036 0x0
  1549. ***** 03:22:07.299 Stop Op=370038 0x0
  1550. ***** 03:22:07.301 Grp=370039 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1551. IWbemServices::Connect
  1552. ***** 03:22:07.302 Grp=370040 Op=370041 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1553. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Kaspersky Internet Security%' OR displayName LIKE '%Kaspersky%Anti%Virus%' OR displayName LIKE '%Kaspersky CRYSTAL%' OR displayName LIKE '%Kaspersky Endpoint Security%' OR displayName LIKE '%Kaspersky Free%' OR displayName LIKE '%Kaspersky Security%' OR displayName LIKE '%Kaspersky Small Office Security%' OR displayName LIKE '%Kaspersky Total Security%' OR displayName LIKE '%SonicWall Enforced Client-AntiVirus%' OR displayName LIKE '%??????? ???????%' OR displayName LIKE '%??????? ??????? ??????%' OR displayName LIKE '%??????? ???? ???? ??????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%?????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%') AND hresultCode != 0
  1554. ***** 03:22:07.309 Stop Op=370039 0x0
  1555. ***** 03:22:07.309 Stop Op=370041 0x0
  1556. ***** 03:22:07.310 Grp=370042 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1557. IWbemServices::Connect
  1558. ***** 03:22:07.311 Grp=370043 Op=370044 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1559. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Kaspersky Internet Security%' OR displayName LIKE '%Kaspersky%Anti%Virus%' OR displayName LIKE '%Kaspersky CRYSTAL%' OR displayName LIKE '%Kaspersky Endpoint Security%' OR displayName LIKE '%Kaspersky Free%' OR displayName LIKE '%Kaspersky Security%' OR displayName LIKE '%Kaspersky Small Office Security%' OR displayName LIKE '%Kaspersky Total Security%' OR displayName LIKE '%SonicWall Enforced Client-AntiVirus%' OR displayName LIKE '%??????? ???????%' OR displayName LIKE '%??????? ??????? ??????%' OR displayName LIKE '%??????? ???? ???? ??????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%???????????%' OR displayName LIKE '%?????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%' OR displayName LIKE '%????????%') AND iniString = 'INI file too big'
  1560. ***** 03:22:07.314 Stop Op=370042 0x0
  1561. ***** 03:22:07.314 Stop Op=370044 0x0
  1562. ***** 03:22:07.316 Grp=370045 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1563. IWbemServices::Connect
  1564. ***** 03:22:07.316 Grp=370046 Op=370047 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1565. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Bitdefender%')
  1566. ***** 03:22:07.317 Stop Op=370045 0x0
  1567. ***** 03:22:07.317 Stop Op=370047 0x0
  1568. ***** 03:22:07.317 Grp=370048 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1569. IWbemServices::Connect
  1570. ***** 03:22:07.317 Grp=370049 Op=370050 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1571. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Bitdefender%') AND statusCode = 1244
  1572. ***** 03:22:07.318 Stop Op=370048 0x0
  1573. ***** 03:22:07.318 Stop Op=370050 0x0
  1574. ***** 03:22:07.318 Grp=370051 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1575. IWbemServices::Connect
  1576. ***** 03:22:07.319 Grp=370052 Op=370053 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1577. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Bitdefender%') AND statusCode != 0 AND statusCode != 1244
  1578. ***** 03:22:07.320 Stop Op=370051 0x0
  1579. ***** 03:22:07.320 Stop Op=370053 0x0
  1580. ***** 03:22:07.320 Grp=370054 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1581. IWbemServices::Connect
  1582. ***** 03:22:07.320 Grp=370055 Op=370056 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1583. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Bitdefender%') AND hresultCode != 0
  1584. ***** 03:22:07.321 Stop Op=370054 0x0
  1585. ***** 03:22:07.321 Stop Op=370056 0x0
  1586. ***** 03:22:07.322 Grp=370057 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1587. IWbemServices::Connect
  1588. ***** 03:22:07.322 Grp=370058 Op=370059 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1589. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Bitdefender%') AND iniString = 'INI file too big'
  1590. ***** 03:22:07.323 Stop Op=370057 0x0
  1591. ***** 03:22:07.323 Stop Op=370059 0x0
  1592. ***** 03:22:07.324 Grp=370060 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1593. IWbemServices::Connect
  1594. ***** 03:22:07.324 Grp=370061 Op=370062 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1595. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Trend Micro%' OR displayName LIKE '%PC-cillin%' OR displayName LIKE '%????????????%' OR displayName LIKE '%???????? ???????? ??????????????????%' OR displayName LIKE '%????????????????%' OR displayName LIKE '%Anti-Virus Plus Security%' OR displayName LIKE '%Micro Application Anti-Virus Plus%')
  1596. ***** 03:22:07.324 Stop Op=370060 0x0
  1597. ***** 03:22:07.324 Stop Op=370062 0x0
  1598. ***** 03:22:07.325 Grp=370063 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1599. IWbemServices::Connect
  1600. ***** 03:22:07.325 Grp=370064 Op=370065 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1601. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Trend Micro%' OR displayName LIKE '%PC-cillin%' OR displayName LIKE '%????????????%' OR displayName LIKE '%???????? ???????? ??????????????????%' OR displayName LIKE '%????????????????%' OR displayName LIKE '%Anti-Virus Plus Security%' OR displayName LIKE '%Micro Application Anti-Virus Plus%') AND statusCode = 1244
  1602. ***** 03:22:07.325 Stop Op=370063 0x0
  1603. ***** 03:22:07.325 Stop Op=370065 0x0
  1604. ***** 03:22:07.334 Grp=370066 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1605. IWbemServices::Connect
  1606. ***** 03:22:07.335 Grp=370067 Op=370068 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1607. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Trend Micro%' OR displayName LIKE '%PC-cillin%' OR displayName LIKE '%????????????%' OR displayName LIKE '%???????? ???????? ??????????????????%' OR displayName LIKE '%????????????????%' OR displayName LIKE '%Anti-Virus Plus Security%' OR displayName LIKE '%Micro Application Anti-Virus Plus%') AND statusCode != 0 AND statusCode != 1244
  1608. ***** 03:22:07.337 Stop Op=370066 0x0
  1609. ***** 03:22:07.337 Stop Op=370068 0x0
  1610. ***** 03:22:07.338 Grp=370069 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1611. IWbemServices::Connect
  1612. ***** 03:22:07.338 Grp=370070 Op=370071 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1613. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Trend Micro%' OR displayName LIKE '%PC-cillin%' OR displayName LIKE '%????????????%' OR displayName LIKE '%???????? ???????? ??????????????????%' OR displayName LIKE '%????????????????%' OR displayName LIKE '%Anti-Virus Plus Security%' OR displayName LIKE '%Micro Application Anti-Virus Plus%') AND hresultCode != 0
  1614. ***** 03:22:07.340 Stop Op=370069 0x0
  1615. ***** 03:22:07.340 Stop Op=370071 0x0
  1616. ***** 03:22:07.341 Grp=370072 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1617. IWbemServices::Connect
  1618. ***** 03:22:07.341 Grp=370073 Op=370074 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1619. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Trend Micro%' OR displayName LIKE '%PC-cillin%' OR displayName LIKE '%????????????%' OR displayName LIKE '%???????? ???????? ??????????????????%' OR displayName LIKE '%????????????????%' OR displayName LIKE '%Anti-Virus Plus Security%' OR displayName LIKE '%Micro Application Anti-Virus Plus%') AND iniString = 'INI file too big'
  1620. ***** 03:22:07.341 Stop Op=370072 0x0
  1621. ***** 03:22:07.341 Stop Op=370074 0x0
  1622. ***** 03:22:07.355 Grp=370075 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1623. IWbemServices::Connect
  1624. ***** 03:22:07.362 Grp=370076 Op=370077 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1625. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avira%' OR displayName LIKE '%BullGuard Antispyware%' OR displayName LIKE '%BullGuard Antivirus%' OR displayName LIKE '%Norton%360%' OR displayName LIKE '%Norton AntiVirus%' OR displayName LIKE '%Norton Internet Security%' OR displayName LIKE '%Norton Security%' OR displayName LIKE '%Norton%Internet%Security%' OR displayName LIKE '%Savapi Antivirus%' OR displayName LIKE '%???? 360%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%????% ??????%')
  1626. ***** 03:22:07.363 Stop Op=370075 0x0
  1627. ***** 03:22:07.363 Stop Op=370077 0x0
  1628. ***** 03:22:07.364 Grp=370078 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1629. IWbemServices::Connect
  1630. ***** 03:22:07.364 Grp=370079 Op=370080 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1631. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avira%' OR displayName LIKE '%BullGuard Antispyware%' OR displayName LIKE '%BullGuard Antivirus%' OR displayName LIKE '%Norton%360%' OR displayName LIKE '%Norton AntiVirus%' OR displayName LIKE '%Norton Internet Security%' OR displayName LIKE '%Norton Security%' OR displayName LIKE '%Norton%Internet%Security%' OR displayName LIKE '%Savapi Antivirus%' OR displayName LIKE '%???? 360%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%????% ??????%') AND statusCode = 1244
  1632. ***** 03:22:07.364 Stop Op=370078 0x0
  1633. ***** 03:22:07.364 Stop Op=370080 0x0
  1634. ***** 03:22:07.365 Grp=370081 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1635. IWbemServices::Connect
  1636. ***** 03:22:07.365 Grp=370082 Op=370083 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1637. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avira%' OR displayName LIKE '%BullGuard Antispyware%' OR displayName LIKE '%BullGuard Antivirus%' OR displayName LIKE '%Norton%360%' OR displayName LIKE '%Norton AntiVirus%' OR displayName LIKE '%Norton Internet Security%' OR displayName LIKE '%Norton Security%' OR displayName LIKE '%Norton%Internet%Security%' OR displayName LIKE '%Savapi Antivirus%' OR displayName LIKE '%???? 360%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%????% ??????%') AND statusCode != 0 AND statusCode != 1244
  1638. ***** 03:22:07.366 Stop Op=370081 0x0
  1639. ***** 03:22:07.366 Stop Op=370083 0x0
  1640. ***** 03:22:07.366 Grp=370084 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1641. IWbemServices::Connect
  1642. ***** 03:22:07.366 Grp=370085 Op=370086 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1643. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avira%' OR displayName LIKE '%BullGuard Antispyware%' OR displayName LIKE '%BullGuard Antivirus%' OR displayName LIKE '%Norton%360%' OR displayName LIKE '%Norton AntiVirus%' OR displayName LIKE '%Norton Internet Security%' OR displayName LIKE '%Norton Security%' OR displayName LIKE '%Norton%Internet%Security%' OR displayName LIKE '%Savapi Antivirus%' OR displayName LIKE '%???? 360%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%????% ??????%') AND hresultCode != 0
  1644. ***** 03:22:07.367 Stop Op=370084 0x0
  1645. ***** 03:22:07.367 Stop Op=370086 0x0
  1646. ***** 03:22:07.367 Grp=370087 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1647. IWbemServices::Connect
  1648. ***** 03:22:07.368 Grp=370088 Op=370089 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1649. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Avira%' OR displayName LIKE '%BullGuard Antispyware%' OR displayName LIKE '%BullGuard Antivirus%' OR displayName LIKE '%Norton%360%' OR displayName LIKE '%Norton AntiVirus%' OR displayName LIKE '%Norton Internet Security%' OR displayName LIKE '%Norton Security%' OR displayName LIKE '%Norton%Internet%Security%' OR displayName LIKE '%Savapi Antivirus%' OR displayName LIKE '%???? 360%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%???? ???????%' OR displayName LIKE '%????% ??????%') AND iniString = 'INI file too big'
  1650. ***** 03:22:07.368 Stop Op=370087 0x0
  1651. ***** 03:22:07.368 Stop Op=370089 0x0
  1652. ***** 03:22:07.369 Grp=370090 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1653. IWbemServices::Connect
  1654. ***** 03:22:07.369 Grp=370091 Op=370092 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1655. Start IWbemServices::ExecQuery - root\cimv2 : SELECT FreeSpace FROM Win32_LogicalDisk WHERE DeviceId = "C:"
  1656. ***** 03:22:07.371 Stop Op=370090 0x0
  1657. ***** 03:22:07.371 Stop Op=370092 0x0
  1658. ***** 03:22:07.374 Grp=370094 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1659. IWbemServices::Connect
  1660. ***** 03:22:07.375 Grp=370095 Op=370096 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1661. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Reason Cybersecurity%' OR displayName LIKE '%Cybereason%' OR displayName LIKE '%Reason Up%')
  1662. ***** 03:22:07.419 Stop Op=370094 0x0
  1663. ***** 03:22:07.419 Stop Op=370096 0x0
  1664. ***** 03:22:07.420 Grp=370097 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1665. IWbemServices::Connect
  1666. ***** 03:22:07.421 Grp=370098 Op=370099 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1667. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Reason Cybersecurity%' OR displayName LIKE '%Cybereason%' OR displayName LIKE '%Reason Up%') AND statusCode = 1244
  1668. ***** 03:22:07.424 Stop Op=370097 0x0
  1669. ***** 03:22:07.424 Stop Op=370099 0x0
  1670. ***** 03:22:07.425 Grp=370100 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1671. IWbemServices::Connect
  1672. ***** 03:22:07.425 Grp=370101 Op=370102 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1673. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Reason Cybersecurity%' OR displayName LIKE '%Cybereason%' OR displayName LIKE '%Reason Up%') AND statusCode != 0 AND statusCode != 1244
  1674. ***** 03:22:07.428 Stop Op=370100 0x0
  1675. ***** 03:22:07.428 Stop Op=370102 0x0
  1676. ***** 03:22:07.429 Grp=370103 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1677. IWbemServices::Connect
  1678. ***** 03:22:07.429 Grp=370104 Op=370105 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1679. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Reason Cybersecurity%' OR displayName LIKE '%Cybereason%' OR displayName LIKE '%Reason Up%') AND hresultCode != 0
  1680. ***** 03:22:07.429 Stop Op=370103 0x0
  1681. ***** 03:22:07.429 Stop Op=370105 0x0
  1682. ***** 03:22:07.430 Grp=370106 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1683. IWbemServices::Connect
  1684. ***** 03:22:07.430 Grp=370107 Op=370108 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1685. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Reason Cybersecurity%' OR displayName LIKE '%Cybereason%' OR displayName LIKE '%Reason Up%') AND iniString = 'INI file too big'
  1686. ***** 03:22:07.430 Stop Op=370106 0x0
  1687. ***** 03:22:07.430 Stop Op=370108 0x0
  1688. ***** 03:22:07.432 Grp=370109 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1689. IWbemServices::Connect
  1690. ***** 03:22:07.433 Grp=370110 Op=370111 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1691. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????%??VirusScan%' OR displayName LIKE '%McAfee%VirusScan%' OR displayName LIKE '%McAfee Endpoint Security%' OR displayName LIKE '%McAfee MOVE AV%' OR displayName LIKE '%VirusScan%McAfee%' OR displayName LIKE '%?????%VirusScan%')
  1692. ***** 03:22:07.434 Stop Op=370109 0x0
  1693. ***** 03:22:07.434 Stop Op=370111 0x0
  1694. ***** 03:22:07.434 Grp=370112 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1695. IWbemServices::Connect
  1696. ***** 03:22:07.435 Grp=370113 Op=370114 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1697. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????%??VirusScan%' OR displayName LIKE '%McAfee%VirusScan%' OR displayName LIKE '%McAfee Endpoint Security%' OR displayName LIKE '%McAfee MOVE AV%' OR displayName LIKE '%VirusScan%McAfee%' OR displayName LIKE '%?????%VirusScan%') AND statusCode = 1244
  1698. ***** 03:22:07.452 Stop Op=370112 0x0
  1699. ***** 03:22:07.452 Stop Op=370114 0x0
  1700. ***** 03:22:07.455 Grp=370115 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1701. IWbemServices::Connect
  1702. ***** 03:22:07.457 Grp=370116 Op=370117 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1703. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????%??VirusScan%' OR displayName LIKE '%McAfee%VirusScan%' OR displayName LIKE '%McAfee Endpoint Security%' OR displayName LIKE '%McAfee MOVE AV%' OR displayName LIKE '%VirusScan%McAfee%' OR displayName LIKE '%?????%VirusScan%') AND statusCode != 0 AND statusCode != 1244
  1704. ***** 03:22:07.460 Stop Op=370115 0x0
  1705. ***** 03:22:07.460 Stop Op=370117 0x0
  1706. ***** 03:22:07.461 Grp=370118 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1707. IWbemServices::Connect
  1708. ***** 03:22:07.461 Grp=370119 Op=370120 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1709. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????%??VirusScan%' OR displayName LIKE '%McAfee%VirusScan%' OR displayName LIKE '%McAfee Endpoint Security%' OR displayName LIKE '%McAfee MOVE AV%' OR displayName LIKE '%VirusScan%McAfee%' OR displayName LIKE '%?????%VirusScan%') AND hresultCode != 0
  1710. ***** 03:22:07.467 Stop Op=370118 0x0
  1711. ***** 03:22:07.467 Stop Op=370120 0x0
  1712. ***** 03:22:07.467 Grp=370121 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1713. IWbemServices::Connect
  1714. ***** 03:22:07.468 Grp=370122 Op=370123 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1715. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????%??VirusScan%' OR displayName LIKE '%McAfee%VirusScan%' OR displayName LIKE '%McAfee Endpoint Security%' OR displayName LIKE '%McAfee MOVE AV%' OR displayName LIKE '%VirusScan%McAfee%' OR displayName LIKE '%?????%VirusScan%') AND iniString = 'INI file too big'
  1716. ***** 03:22:07.468 Stop Op=370121 0x0
  1717. ***** 03:22:07.468 Stop Op=370123 0x0
  1718. ***** 03:22:07.620 Stop Op=369823 0x0
  1719. ***** 03:22:07.620 Stop Op=369828 0x0
  1720. ***** 03:22:08.317 Grp=370124 _ClientProcessId=1262004 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1721. IWbemServices::Connect
  1722. ***** 03:22:08.320 Grp=370125 Op=370126 _ClientProcessId=1262004 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1723. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1724. ***** 03:22:09.659 Grp=370128 _ClientProcessId=1277028 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1725. IWbemServices::Connect
  1726. ***** 03:22:09.662 Grp=370129 Op=370130 _ClientProcessId=1277028 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1727. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1728. ***** 03:22:10.748 Stop Op=369835 0x0
  1729. ***** 03:22:10.748 Stop Op=369837 0x0
  1730. ***** 03:22:11.562 Grp=370132 _ClientProcessId=1275476 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1731. IWbemServices::Connect
  1732. ***** 03:22:11.565 Grp=370133 Op=370134 _ClientProcessId=1275476 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1733. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1734. ***** 03:22:11.803 Stop Op=369839 0x0
  1735. ***** 03:22:11.803 Stop Op=369841 0x0
  1736. ***** 03:22:13.957 Grp=370136 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1737. IWbemServices::Connect
  1738. ***** 03:22:13.957 Grp=370137 Op=370138 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1739. Start IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT State FROM Win32_Service
  1740. ***** 03:22:15.214 Grp=370144 _ClientProcessId=1041648 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1741. IWbemServices::Connect
  1742. ***** 03:22:15.287 Grp=370145 Op=370146 _ClientProcessId=1041648 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1743. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1744. ***** 03:22:15.334 Grp=370148 _ClientProcessId=1272144 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1745. IWbemServices::Connect
  1746. ***** 03:22:15.622 Grp=370149 Op=370150 _ClientProcessId=1272144 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1747. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1748. ***** 03:22:16.488 Stop Op=370138 0x80041032
  1749. ***** 03:22:16.488 Stop Op=370136 0x0
  1750. ***** 03:22:18.395 Stop Op=369843 0x0
  1751. ***** 03:22:18.395 Stop Op=369845 0x0
  1752. ***** 03:22:18.401 Stop Op=369855 0x0
  1753. ***** 03:22:18.401 Stop Op=369857 0x0
  1754. ***** 03:22:18.416 Stop Op=369905 0x0
  1755. ***** 03:22:18.416 Stop Op=369907 0x0
  1756. ***** 03:22:18.483 Stop Op=369895 0x0
  1757. ***** 03:22:18.483 Stop Op=369897 0x0
  1758. ***** 03:22:18.515 Grp=370152 _ClientProcessId=1272080 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1759. IWbemServices::Connect
  1760. ***** 03:22:18.518 Grp=370153 Op=370154 _ClientProcessId=1272080 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1761. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1762. ***** 03:22:18.544 Stop Op=369885 0x0
  1763. ***** 03:22:18.544 Stop Op=369887 0x0
  1764. ***** 03:22:18.549 Stop Op=369847 0x0
  1765. ***** 03:22:18.549 Stop Op=369849 0x0
  1766. ***** 03:22:18.581 Grp=370156 _ClientProcessId=1277936 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1767. IWbemServices::Connect
  1768. ***** 03:22:18.584 Grp=370157 Op=370158 _ClientProcessId=1277936 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1769. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1770. ***** 03:22:18.608 Stop Op=369871 0x0
  1771. ***** 03:22:18.608 Stop Op=369873 0x0
  1772. ***** 03:22:18.646 Grp=370160 _ClientProcessId=1272900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1773. IWbemServices::Connect
  1774. ***** 03:22:18.649 Grp=370161 Op=370162 _ClientProcessId=1272900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1775. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1776. ***** 03:22:18.657 Grp=370164 _ClientProcessId=1277484 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1777. IWbemServices::Connect
  1778. ***** 03:22:18.660 Grp=370165 Op=370166 _ClientProcessId=1277484 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1779. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1780. ***** 03:22:18.709 Stop Op=369819 0x0
  1781. ***** 03:22:18.709 Stop Op=369821 0x0
  1782. ***** 03:22:18.717 Grp=370168 _ClientProcessId=1276544 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1783. IWbemServices::Connect
  1784. ***** 03:22:18.791 Grp=370169 _ClientProcessId=1275068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1785. IWbemServices::Connect
  1786. ***** 03:22:18.794 Grp=370170 Op=370171 _ClientProcessId=1275068 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1787. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1788. ***** 03:22:18.798 Grp=370173 _ClientProcessId=1269904 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1789. IWbemServices::Connect
  1790. ***** 03:22:18.800 Grp=370174 Op=370175 _ClientProcessId=1269904 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1791. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1792. ***** 03:22:18.815 Grp=370177 Op=370178 _ClientProcessId=1276544 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1793. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1794. ***** 03:22:19.661 Stop Op=369864 0x0
  1795. ***** 03:22:19.661 Stop Op=369866 0x0
  1796. ***** 03:22:20.123 Grp=370180 _ClientProcessId=1274612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1797. IWbemServices::Connect
  1798. ***** 03:22:20.126 Grp=370181 Op=370182 _ClientProcessId=1274612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1799. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1800. ***** 03:22:21.531 Stop Op=369255 0x0
  1801. ***** 03:22:21.531 Stop Op=369257 0x0
  1802. ***** 03:22:21.630 Stop Op=369909 0x0
  1803. ***** 03:22:21.630 Stop Op=369911 0x0
  1804. ***** 03:22:21.684 Stop Op=369328 0x0
  1805. ***** 03:22:21.684 Stop Op=369330 0x0
  1806. ***** 03:22:21.736 Stop Op=369965 0x0
  1807. ***** 03:22:21.736 Stop Op=369967 0x0
  1808. ***** 03:22:21.751 Grp=370184 _ClientProcessId=1270796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1809. IWbemServices::Connect
  1810. ***** 03:22:21.754 Grp=370185 Op=370186 _ClientProcessId=1270796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1811. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1812. ***** 03:22:21.756 Stop Op=369937 0x0
  1813. ***** 03:22:21.756 Stop Op=369939 0x0
  1814. ***** 03:22:21.803 Grp=370188 _ClientProcessId=1275912 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1815. IWbemServices::Connect
  1816. ***** 03:22:21.806 Grp=370189 Op=370190 _ClientProcessId=1275912 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1817. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1818. ***** 03:22:21.807 Stop Op=369949 0x0
  1819. ***** 03:22:21.807 Stop Op=369951 0x0
  1820. ***** 03:22:21.832 Grp=370192 _ClientProcessId=1273040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1821. IWbemServices::Connect
  1822. ***** 03:22:21.835 Grp=370193 Op=370194 _ClientProcessId=1273040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1823. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1824. ***** 03:22:21.853 Stop Op=369851 0x0
  1825. ***** 03:22:21.853 Stop Op=369853 0x0
  1826. ***** 03:22:21.874 Grp=370196 _ClientProcessId=1275984 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1827. IWbemServices::Connect
  1828. ***** 03:22:21.878 Grp=370197 Op=370198 _ClientProcessId=1275984 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1829. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1830. ***** 03:22:21.915 Grp=370200 _ClientProcessId=1276164 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1831. IWbemServices::Connect
  1832. ***** 03:22:21.918 Grp=370201 Op=370202 _ClientProcessId=1276164 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1833. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1834. ***** 03:22:21.984 Stop Op=369917 0x0
  1835. ***** 03:22:21.984 Stop Op=369922 0x0
  1836. ***** 03:22:22.008 Grp=370204 _ClientProcessId=1276288 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1837. IWbemServices::Connect
  1838. ***** 03:22:22.011 Grp=370205 Op=370206 _ClientProcessId=1276288 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1839. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1840. ***** 03:22:22.145 Stop Op=369961 0x0
  1841. ***** 03:22:22.145 Stop Op=369963 0x0
  1842. ***** 03:22:22.167 Grp=370208 _ClientProcessId=1276672 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1843. IWbemServices::Connect
  1844. ***** 03:22:22.169 Stop Op=369307 0x0
  1845. ***** 03:22:22.169 Stop Op=369309 0x0
  1846. ***** 03:22:22.171 Grp=370209 Op=370210 _ClientProcessId=1276672 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1847. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1848. ***** 03:22:22.320 Grp=370212 _ClientProcessId=1273268 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1849. IWbemServices::Connect
  1850. ***** 03:22:22.324 Grp=370213 Op=370214 _ClientProcessId=1273268 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1851. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1852. ***** 03:22:22.334 Stop Op=369332 0x0
  1853. ***** 03:22:22.334 Stop Op=369334 0x0
  1854. ***** 03:22:22.397 Stop Op=369957 0x0
  1855. ***** 03:22:22.397 Stop Op=369959 0x0
  1856. ***** 03:22:22.478 Grp=370216 _ClientProcessId=1270056 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1857. IWbemServices::Connect
  1858. ***** 03:22:22.482 Grp=370217 Op=370218 _ClientProcessId=1270056 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1859. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1860. ***** 03:22:22.532 Stop Op=369969 0x0
  1861. ***** 03:22:22.532 Stop Op=369971 0x0
  1862. ***** 03:22:22.553 Stop Op=369945 0x0
  1863. ***** 03:22:22.553 Stop Op=369947 0x0
  1864. ***** 03:22:22.564 Stop Op=369953 0x0
  1865. ***** 03:22:22.564 Stop Op=369955 0x0
  1866. ***** 03:22:22.600 Grp=370220 _ClientProcessId=1275544 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1867. IWbemServices::Connect
  1868. ***** 03:22:22.601 Grp=370221 _ClientProcessId=1277840 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1869. IWbemServices::Connect
  1870. ***** 03:22:22.605 Grp=370222 Op=370223 _ClientProcessId=1275544 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1871. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1872. ***** 03:22:22.606 Grp=370224 Op=370225 _ClientProcessId=1277840 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1873. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1874. ***** 03:22:22.678 Grp=370228 _ClientProcessId=1275036 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1875. IWbemServices::Connect
  1876. ***** 03:22:22.682 Grp=370229 Op=370230 _ClientProcessId=1275036 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1877. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1878. ***** 03:22:22.687 Grp=370232 _ClientProcessId=1277772 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1879. IWbemServices::Connect
  1880. ***** 03:22:22.690 Grp=370233 Op=370234 _ClientProcessId=1277772 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1881. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1882. ***** 03:22:23.450 Grp=370236 _ClientProcessId=1276660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1883. IWbemServices::Connect
  1884. ***** 03:22:23.453 Grp=370237 Op=370238 _ClientProcessId=1276660 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1885. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1886. ***** 03:22:24.395 Stop Op=369973 0x0
  1887. ***** 03:22:24.395 Stop Op=369975 0x0
  1888. ***** 03:22:24.880 Stop Op=369941 0x0
  1889. ***** 03:22:24.880 Stop Op=369943 0x0
  1890. ***** 03:22:26.187 Grp=370240 _ClientProcessId=1275432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1891. IWbemServices::Connect
  1892. ***** 03:22:26.190 Grp=370241 Op=370242 _ClientProcessId=1275432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1893. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1894. ***** 03:22:26.319 Stop Op=369933 0x0
  1895. ***** 03:22:26.319 Stop Op=369935 0x0
  1896. ***** 03:22:27.599 Grp=370244 _ClientProcessId=1252988 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1897. IWbemServices::Connect
  1898. ***** 03:22:27.602 Grp=370245 Op=370246 _ClientProcessId=1252988 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1899. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1900. ***** 03:22:27.618 Grp=370248 _ClientProcessId=1255176 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1901. IWbemServices::Connect
  1902. ***** 03:22:27.622 Grp=370249 Op=370250 _ClientProcessId=1255176 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1903. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1904. ***** 03:22:27.651 Grp=370252 _ClientProcessId=1209940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1905. IWbemServices::Connect
  1906. ***** 03:22:27.655 Grp=370253 Op=370254 _ClientProcessId=1209940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1907. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1908. ***** 03:22:27.688 Stop Op=370128 0x0
  1909. ***** 03:22:27.688 Stop Op=370130 0x0
  1910. ***** 03:22:32.888 Grp=370256 _ClientProcessId=1275328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1911. IWbemServices::Connect
  1912. ***** 03:22:32.891 Grp=370257 Op=370258 _ClientProcessId=1275328 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1913. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1914. ***** 03:22:33.991 Stop Op=370152 0x0
  1915. ***** 03:22:33.991 Stop Op=370154 0x0
  1916. ***** 03:22:34.611 Grp=370260 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1917. IWbemServices::Connect
  1918. ***** 03:22:34.611 Grp=370261 Op=370262 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1919. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Adaptive Defense 360%' OR displayName LIKE '%Panda Antivirus Pro%' OR displayName LIKE '%Panda Cloud Antivirus%' OR displayName LIKE '%Panda Cloud Office Protection%' OR displayName LIKE '%Panda Dome%' OR displayName LIKE '%Panda Endpoint Protection%' OR displayName LIKE '%Panda Free Antivirus%' OR displayName LIKE '%Panda Global Protection%' OR displayName LIKE '%Panda GOLD Protection%' OR displayName LIKE '%Panda Internet Security%' OR displayName LIKE '%Panda Protection%' OR displayName LIKE '%Panda Security%' OR displayName LIKE '%Turbo-X Global Protection%' OR displayName LIKE '%Turbo-X Internet Security%')
  1920. ***** 03:22:34.613 Stop Op=370124 0x0
  1921. ***** 03:22:34.613 Stop Op=370126 0x0
  1922. ***** 03:22:34.613 Stop Op=370260 0x0
  1923. ***** 03:22:34.613 Stop Op=370262 0x0
  1924. ***** 03:22:34.613 Grp=370263 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1925. IWbemServices::Connect
  1926. ***** 03:22:34.614 Grp=370264 Op=370265 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1927. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Adaptive Defense 360%' OR displayName LIKE '%Panda Antivirus Pro%' OR displayName LIKE '%Panda Cloud Antivirus%' OR displayName LIKE '%Panda Cloud Office Protection%' OR displayName LIKE '%Panda Dome%' OR displayName LIKE '%Panda Endpoint Protection%' OR displayName LIKE '%Panda Free Antivirus%' OR displayName LIKE '%Panda Global Protection%' OR displayName LIKE '%Panda GOLD Protection%' OR displayName LIKE '%Panda Internet Security%' OR displayName LIKE '%Panda Protection%' OR displayName LIKE '%Panda Security%' OR displayName LIKE '%Turbo-X Global Protection%' OR displayName LIKE '%Turbo-X Internet Security%') AND statusCode = 1244
  1928. ***** 03:22:34.735 Grp=370266 _ClientProcessId=1275340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1929. IWbemServices::Connect
  1930. ***** 03:22:34.738 Grp=370267 Op=370268 _ClientProcessId=1275340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  1931. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  1932. ***** 03:22:34.780 Stop Op=370164 0x0
  1933. ***** 03:22:34.780 Stop Op=370166 0x0
  1934. ***** 03:22:35.387 Stop Op=370132 0x0
  1935. ***** 03:22:35.387 Stop Op=370134 0x0
  1936. ***** 03:22:35.445 Stop Op=370263 0x0
  1937. ***** 03:22:35.445 Stop Op=370265 0x0
  1938. ***** 03:22:35.446 Grp=370270 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1939. IWbemServices::Connect
  1940. ***** 03:22:35.447 Grp=370271 Op=370272 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1941. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Adaptive Defense 360%' OR displayName LIKE '%Panda Antivirus Pro%' OR displayName LIKE '%Panda Cloud Antivirus%' OR displayName LIKE '%Panda Cloud Office Protection%' OR displayName LIKE '%Panda Dome%' OR displayName LIKE '%Panda Endpoint Protection%' OR displayName LIKE '%Panda Free Antivirus%' OR displayName LIKE '%Panda Global Protection%' OR displayName LIKE '%Panda GOLD Protection%' OR displayName LIKE '%Panda Internet Security%' OR displayName LIKE '%Panda Protection%' OR displayName LIKE '%Panda Security%' OR displayName LIKE '%Turbo-X Global Protection%' OR displayName LIKE '%Turbo-X Internet Security%') AND statusCode != 0 AND statusCode != 1244
  1942. ***** 03:22:35.447 Stop Op=370270 0x0
  1943. ***** 03:22:35.447 Stop Op=370272 0x0
  1944. ***** 03:22:35.448 Grp=370273 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1945. IWbemServices::Connect
  1946. ***** 03:22:35.448 Grp=370274 Op=370275 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1947. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Adaptive Defense 360%' OR displayName LIKE '%Panda Antivirus Pro%' OR displayName LIKE '%Panda Cloud Antivirus%' OR displayName LIKE '%Panda Cloud Office Protection%' OR displayName LIKE '%Panda Dome%' OR displayName LIKE '%Panda Endpoint Protection%' OR displayName LIKE '%Panda Free Antivirus%' OR displayName LIKE '%Panda Global Protection%' OR displayName LIKE '%Panda GOLD Protection%' OR displayName LIKE '%Panda Internet Security%' OR displayName LIKE '%Panda Protection%' OR displayName LIKE '%Panda Security%' OR displayName LIKE '%Turbo-X Global Protection%' OR displayName LIKE '%Turbo-X Internet Security%') AND hresultCode != 0
  1948. ***** 03:22:35.449 Stop Op=370273 0x0
  1949. ***** 03:22:35.449 Stop Op=370275 0x0
  1950. ***** 03:22:35.450 Grp=370276 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1951. IWbemServices::Connect
  1952. ***** 03:22:35.450 Grp=370277 Op=370278 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1953. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Adaptive Defense 360%' OR displayName LIKE '%Panda Antivirus Pro%' OR displayName LIKE '%Panda Cloud Antivirus%' OR displayName LIKE '%Panda Cloud Office Protection%' OR displayName LIKE '%Panda Dome%' OR displayName LIKE '%Panda Endpoint Protection%' OR displayName LIKE '%Panda Free Antivirus%' OR displayName LIKE '%Panda Global Protection%' OR displayName LIKE '%Panda GOLD Protection%' OR displayName LIKE '%Panda Internet Security%' OR displayName LIKE '%Panda Protection%' OR displayName LIKE '%Panda Security%' OR displayName LIKE '%Turbo-X Global Protection%' OR displayName LIKE '%Turbo-X Internet Security%') AND iniString = 'INI file too big'
  1954. ***** 03:22:35.450 Stop Op=370276 0x0
  1955. ***** 03:22:35.450 Stop Op=370278 0x0
  1956. ***** 03:22:35.454 Grp=370279 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1957. IWbemServices::Connect
  1958. ***** 03:22:35.454 Grp=370280 Op=370281 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1959. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%CrowdStrike%')
  1960. ***** 03:22:35.454 Stop Op=370279 0x0
  1961. ***** 03:22:35.454 Stop Op=370281 0x0
  1962. ***** 03:22:35.455 Grp=370282 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1963. IWbemServices::Connect
  1964. ***** 03:22:35.455 Grp=370283 Op=370284 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1965. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%CrowdStrike%') AND statusCode = 1244
  1966. ***** 03:22:35.455 Stop Op=370282 0x0
  1967. ***** 03:22:35.455 Stop Op=370284 0x0
  1968. ***** 03:22:35.456 Grp=370285 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1969. IWbemServices::Connect
  1970. ***** 03:22:35.456 Grp=370286 Op=370287 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1971. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%CrowdStrike%') AND statusCode != 0 AND statusCode != 1244
  1972. ***** 03:22:35.457 Stop Op=370285 0x0
  1973. ***** 03:22:35.457 Stop Op=370287 0x0
  1974. ***** 03:22:35.458 Grp=370288 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1975. IWbemServices::Connect
  1976. ***** 03:22:35.459 Grp=370289 Op=370290 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1977. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%CrowdStrike%') AND hresultCode != 0
  1978. ***** 03:22:35.460 Stop Op=370288 0x0
  1979. ***** 03:22:35.460 Stop Op=370290 0x0
  1980. ***** 03:22:35.461 Grp=370291 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1981. IWbemServices::Connect
  1982. ***** 03:22:35.461 Grp=370292 Op=370293 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1983. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%CrowdStrike%') AND iniString = 'INI file too big'
  1984. ***** 03:22:35.462 Stop Op=370291 0x0
  1985. ***** 03:22:35.462 Stop Op=370293 0x0
  1986. ***** 03:22:35.463 Grp=370294 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1987. IWbemServices::Connect
  1988. ***** 03:22:35.464 Grp=370295 Op=370296 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1989. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Webroot SecureAnywhere%' OR displayName LIKE '%Webroot ?????? ??? ???? ??????????%' OR displayName LIKE '%Webroot AntiVirus%')
  1990. ***** 03:22:35.464 Stop Op=370294 0x0
  1991. ***** 03:22:35.464 Stop Op=370296 0x0
  1992. ***** 03:22:35.464 Grp=370297 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1993. IWbemServices::Connect
  1994. ***** 03:22:35.465 Grp=370298 Op=370299 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1995. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Webroot SecureAnywhere%' OR displayName LIKE '%Webroot ?????? ??? ???? ??????????%' OR displayName LIKE '%Webroot AntiVirus%') AND statusCode = 1244
  1996. ***** 03:22:35.465 Stop Op=370297 0x0
  1997. ***** 03:22:35.465 Stop Op=370299 0x0
  1998. ***** 03:22:35.465 Grp=370300 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  1999. IWbemServices::Connect
  2000. ***** 03:22:35.466 Grp=370301 Op=370302 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2001. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Webroot SecureAnywhere%' OR displayName LIKE '%Webroot ?????? ??? ???? ??????????%' OR displayName LIKE '%Webroot AntiVirus%') AND statusCode != 0 AND statusCode != 1244
  2002. ***** 03:22:35.466 Stop Op=370300 0x0
  2003. ***** 03:22:35.466 Stop Op=370302 0x0
  2004. ***** 03:22:35.467 Grp=370303 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2005. IWbemServices::Connect
  2006. ***** 03:22:35.467 Grp=370304 Op=370305 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2007. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Webroot SecureAnywhere%' OR displayName LIKE '%Webroot ?????? ??? ???? ??????????%' OR displayName LIKE '%Webroot AntiVirus%') AND hresultCode != 0
  2008. ***** 03:22:35.467 Stop Op=370303 0x0
  2009. ***** 03:22:35.467 Stop Op=370305 0x0
  2010. ***** 03:22:35.468 Grp=370306 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2011. IWbemServices::Connect
  2012. ***** 03:22:35.468 Grp=370307 Op=370308 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2013. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Webroot SecureAnywhere%' OR displayName LIKE '%Webroot ?????? ??? ???? ??????????%' OR displayName LIKE '%Webroot AntiVirus%') AND iniString = 'INI file too big'
  2014. ***** 03:22:35.468 Stop Op=370306 0x0
  2015. ***** 03:22:35.468 Stop Op=370308 0x0
  2016. ***** 03:22:35.469 Grp=370309 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2017. IWbemServices::Connect
  2018. ***** 03:22:35.469 Grp=370310 Op=370311 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2019. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE pathToSignedProductExe != 'windowsdefender://'
  2020. ***** 03:22:35.469 Stop Op=370309 0x0
  2021. ***** 03:22:35.469 Stop Op=370311 0x0
  2022. ***** 03:22:35.470 Grp=370312 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2023. IWbemServices::Connect
  2024. ***** 03:22:35.470 Grp=370313 Op=370314 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2025. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE pathToSignedProductExe != 'windowsdefender://' AND statusCode = 1244
  2026. ***** 03:22:35.470 Stop Op=370312 0x0
  2027. ***** 03:22:35.470 Stop Op=370314 0x0
  2028. ***** 03:22:35.471 Grp=370315 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2029. IWbemServices::Connect
  2030. ***** 03:22:35.471 Grp=370316 Op=370317 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2031. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE pathToSignedProductExe != 'windowsdefender://' AND statusCode != 0 AND statusCode != 1244
  2032. ***** 03:22:35.471 Stop Op=370315 0x0
  2033. ***** 03:22:35.471 Stop Op=370317 0x0
  2034. ***** 03:22:35.472 Grp=370318 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2035. IWbemServices::Connect
  2036. ***** 03:22:35.472 Grp=370319 Op=370320 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2037. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE pathToSignedProductExe != 'windowsdefender://' AND hresultCode != 0
  2038. ***** 03:22:35.472 Stop Op=370318 0x0
  2039. ***** 03:22:35.472 Stop Op=370320 0x0
  2040. ***** 03:22:35.473 Grp=370321 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2041. IWbemServices::Connect
  2042. ***** 03:22:35.473 Grp=370322 Op=370323 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2043. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE pathToSignedProductExe != 'windowsdefender://' AND iniString = 'INI file too big'
  2044. ***** 03:22:35.473 Stop Op=370321 0x0
  2045. ***** 03:22:35.473 Stop Op=370323 0x0
  2046. ***** 03:22:35.476 Grp=370324 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2047. IWbemServices::Connect
  2048. ***** 03:22:35.476 Grp=370325 Op=370326 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2049. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE displayName LIKE '%??????%'
  2050. ***** 03:22:35.477 Stop Op=370324 0x0
  2051. ***** 03:22:35.477 Stop Op=370326 0x0
  2052. ***** 03:22:35.477 Grp=370327 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2053. IWbemServices::Connect
  2054. ***** 03:22:35.477 Grp=370328 Op=370329 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2055. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE displayName LIKE '%??????%' AND statusCode = 1244
  2056. ***** 03:22:35.478 Stop Op=370327 0x0
  2057. ***** 03:22:35.478 Stop Op=370329 0x0
  2058. ***** 03:22:35.478 Grp=370330 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2059. IWbemServices::Connect
  2060. ***** 03:22:35.478 Grp=370331 Op=370332 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2061. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE displayName LIKE '%??????%' AND statusCode != 0 AND statusCode != 1244
  2062. ***** 03:22:35.479 Stop Op=370330 0x0
  2063. ***** 03:22:35.479 Stop Op=370332 0x0
  2064. ***** 03:22:35.479 Grp=370333 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2065. IWbemServices::Connect
  2066. ***** 03:22:35.479 Grp=370334 Op=370335 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2067. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE displayName LIKE '%??????%' AND hresultCode != 0
  2068. ***** 03:22:35.480 Stop Op=370333 0x0
  2069. ***** 03:22:35.480 Stop Op=370335 0x0
  2070. ***** 03:22:35.480 Grp=370336 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2071. IWbemServices::Connect
  2072. ***** 03:22:35.480 Grp=370337 Op=370338 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2073. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE displayName LIKE '%??????%' AND iniString = 'INI file too big'
  2074. ***** 03:22:35.480 Stop Op=370336 0x0
  2075. ***** 03:22:35.480 Stop Op=370338 0x0
  2076. ***** 03:22:35.482 Grp=370339 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2077. IWbemServices::Connect
  2078. ***** 03:22:35.482 Grp=370340 Op=370341 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2079. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%ESET%' OR displayName LIKE '%ALYac%')
  2080. ***** 03:22:35.482 Stop Op=370339 0x0
  2081. ***** 03:22:35.482 Stop Op=370341 0x0
  2082. ***** 03:22:35.483 Grp=370342 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2083. IWbemServices::Connect
  2084. ***** 03:22:35.483 Grp=370343 Op=370344 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2085. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%ESET%' OR displayName LIKE '%ALYac%') AND statusCode = 1244
  2086. ***** 03:22:35.483 Stop Op=370342 0x0
  2087. ***** 03:22:35.483 Stop Op=370344 0x0
  2088. ***** 03:22:35.484 Grp=370345 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2089. IWbemServices::Connect
  2090. ***** 03:22:35.484 Grp=370346 Op=370347 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2091. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%ESET%' OR displayName LIKE '%ALYac%') AND statusCode != 0 AND statusCode != 1244
  2092. ***** 03:22:35.484 Stop Op=370345 0x0
  2093. ***** 03:22:35.484 Stop Op=370347 0x0
  2094. ***** 03:22:35.485 Grp=370348 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2095. IWbemServices::Connect
  2096. ***** 03:22:35.485 Grp=370349 Op=370350 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2097. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%ESET%' OR displayName LIKE '%ALYac%') AND hresultCode != 0
  2098. ***** 03:22:35.485 Stop Op=370348 0x0
  2099. ***** 03:22:35.485 Stop Op=370350 0x0
  2100. ***** 03:22:35.486 Grp=370351 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2101. IWbemServices::Connect
  2102. ***** 03:22:35.486 Grp=370352 Op=370353 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2103. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%ESET%' OR displayName LIKE '%ALYac%') AND iniString = 'INI file too big'
  2104. ***** 03:22:35.486 Stop Op=370351 0x0
  2105. ***** 03:22:35.486 Stop Op=370353 0x0
  2106. ***** 03:22:35.487 Grp=370354 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2107. IWbemServices::Connect
  2108. ***** 03:22:35.487 Grp=370355 Op=370356 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2109. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Lenovo Anti-Virus%')
  2110. ***** 03:22:35.487 Stop Op=370354 0x0
  2111. ***** 03:22:35.487 Stop Op=370356 0x0
  2112. ***** 03:22:35.487 Grp=370357 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2113. IWbemServices::Connect
  2114. ***** 03:22:35.488 Grp=370358 Op=370359 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2115. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Lenovo Anti-Virus%') AND statusCode = 1244
  2116. ***** 03:22:35.488 Stop Op=370357 0x0
  2117. ***** 03:22:35.488 Stop Op=370359 0x0
  2118. ***** 03:22:35.488 Grp=370360 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2119. IWbemServices::Connect
  2120. ***** 03:22:35.488 Grp=370361 Op=370362 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2121. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Lenovo Anti-Virus%') AND statusCode != 0 AND statusCode != 1244
  2122. ***** 03:22:35.489 Stop Op=370360 0x0
  2123. ***** 03:22:35.489 Stop Op=370362 0x0
  2124. ***** 03:22:35.490 Grp=370363 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2125. IWbemServices::Connect
  2126. ***** 03:22:35.552 Grp=370364 Op=370365 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2127. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Lenovo Anti-Virus%') AND hresultCode != 0
  2128. ***** 03:22:35.559 Stop Op=370363 0x0
  2129. ***** 03:22:35.559 Stop Op=370365 0x0
  2130. ***** 03:22:35.560 Grp=370366 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2131. IWbemServices::Connect
  2132. ***** 03:22:35.562 Grp=370367 Op=370368 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2133. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Lenovo Anti-Virus%') AND iniString = 'INI file too big'
  2134. ***** 03:22:35.564 Stop Op=370366 0x0
  2135. ***** 03:22:35.564 Stop Op=370368 0x0
  2136. ***** 03:22:35.565 Grp=370369 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2137. IWbemServices::Connect
  2138. ***** 03:22:35.565 Grp=370370 Op=370371 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2139. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Quick Heal%')
  2140. ***** 03:22:35.566 Stop Op=370369 0x0
  2141. ***** 03:22:35.566 Stop Op=370371 0x0
  2142. ***** 03:22:35.566 Grp=370372 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2143. IWbemServices::Connect
  2144. ***** 03:22:35.567 Grp=370373 Op=370374 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2145. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Quick Heal%') AND statusCode = 1244
  2146. ***** 03:22:35.567 Stop Op=370372 0x0
  2147. ***** 03:22:35.567 Stop Op=370374 0x0
  2148. ***** 03:22:35.567 Grp=370375 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2149. IWbemServices::Connect
  2150. ***** 03:22:35.568 Grp=370376 Op=370377 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2151. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Quick Heal%') AND statusCode != 0 AND statusCode != 1244
  2152. ***** 03:22:35.568 Stop Op=370375 0x0
  2153. ***** 03:22:35.568 Stop Op=370377 0x0
  2154. ***** 03:22:35.569 Grp=370378 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2155. IWbemServices::Connect
  2156. ***** 03:22:35.569 Grp=370379 Op=370380 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2157. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Quick Heal%') AND hresultCode != 0
  2158. ***** 03:22:35.570 Stop Op=370378 0x0
  2159. ***** 03:22:35.570 Stop Op=370380 0x0
  2160. ***** 03:22:35.571 Grp=370381 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2161. IWbemServices::Connect
  2162. ***** 03:22:35.571 Grp=370382 Op=370383 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2163. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Quick Heal%') AND iniString = 'INI file too big'
  2164. ***** 03:22:35.572 Stop Op=370381 0x0
  2165. ***** 03:22:35.572 Stop Op=370383 0x0
  2166. ***** 03:22:35.573 Grp=370384 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2167. IWbemServices::Connect
  2168. ***** 03:22:35.573 Grp=370385 Op=370386 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2169. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Symantec Endpoint Protection%' OR displayName LIKE '%PC Tools AntiVirus%' OR displayName LIKE '%PC Tools Internet Security Anti-Virus%' OR displayName LIKE '%PC Tools Spyware Doctor with AntiVirus%')
  2170. ***** 03:22:35.574 Stop Op=370384 0x0
  2171. ***** 03:22:35.574 Stop Op=370386 0x0
  2172. ***** 03:22:35.574 Grp=370387 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2173. IWbemServices::Connect
  2174. ***** 03:22:35.575 Grp=370388 Op=370389 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2175. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Symantec Endpoint Protection%' OR displayName LIKE '%PC Tools AntiVirus%' OR displayName LIKE '%PC Tools Internet Security Anti-Virus%' OR displayName LIKE '%PC Tools Spyware Doctor with AntiVirus%') AND statusCode = 1244
  2176. ***** 03:22:35.576 Stop Op=370387 0x0
  2177. ***** 03:22:35.576 Stop Op=370389 0x0
  2178. ***** 03:22:35.577 Grp=370390 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2179. IWbemServices::Connect
  2180. ***** 03:22:35.577 Grp=370391 Op=370392 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2181. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Symantec Endpoint Protection%' OR displayName LIKE '%PC Tools AntiVirus%' OR displayName LIKE '%PC Tools Internet Security Anti-Virus%' OR displayName LIKE '%PC Tools Spyware Doctor with AntiVirus%') AND statusCode != 0 AND statusCode != 1244
  2182. ***** 03:22:35.578 Stop Op=370390 0x0
  2183. ***** 03:22:35.578 Stop Op=370392 0x0
  2184. ***** 03:22:35.579 Grp=370393 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2185. IWbemServices::Connect
  2186. ***** 03:22:35.579 Grp=370394 Op=370395 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2187. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Symantec Endpoint Protection%' OR displayName LIKE '%PC Tools AntiVirus%' OR displayName LIKE '%PC Tools Internet Security Anti-Virus%' OR displayName LIKE '%PC Tools Spyware Doctor with AntiVirus%') AND hresultCode != 0
  2188. ***** 03:22:35.580 Stop Op=370393 0x0
  2189. ***** 03:22:35.580 Stop Op=370395 0x0
  2190. ***** 03:22:35.580 Grp=370396 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2191. IWbemServices::Connect
  2192. ***** 03:22:35.580 Grp=370397 Op=370398 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2193. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%Symantec Endpoint Protection%' OR displayName LIKE '%PC Tools AntiVirus%' OR displayName LIKE '%PC Tools Internet Security Anti-Virus%' OR displayName LIKE '%PC Tools Spyware Doctor with AntiVirus%') AND iniString = 'INI file too big'
  2194. ***** 03:22:35.581 Stop Op=370396 0x0
  2195. ***** 03:22:35.581 Stop Op=370398 0x0
  2196. ***** 03:22:35.582 Grp=370399 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2197. IWbemServices::Connect
  2198. ***** 03:22:35.582 Grp=370400 Op=370401 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2199. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????????%' OR displayName LIKE '%Tencent EPM????%' OR displayName LIKE '%Tencent iOA????%' OR displayName LIKE '%Beike PC Manager????%' OR displayName LIKE '%SF iOA????%' OR displayName LIKE '%58 iOA????%')
  2200. ***** 03:22:35.582 Stop Op=370399 0x0
  2201. ***** 03:22:35.582 Stop Op=370401 0x0
  2202. ***** 03:22:35.583 Grp=370402 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2203. IWbemServices::Connect
  2204. ***** 03:22:35.583 Grp=370403 Op=370404 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2205. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????????%' OR displayName LIKE '%Tencent EPM????%' OR displayName LIKE '%Tencent iOA????%' OR displayName LIKE '%Beike PC Manager????%' OR displayName LIKE '%SF iOA????%' OR displayName LIKE '%58 iOA????%') AND statusCode = 1244
  2206. ***** 03:22:35.583 Stop Op=370402 0x0
  2207. ***** 03:22:35.583 Stop Op=370404 0x0
  2208. ***** 03:22:35.584 Grp=370405 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2209. IWbemServices::Connect
  2210. ***** 03:22:35.584 Grp=370406 Op=370407 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2211. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????????%' OR displayName LIKE '%Tencent EPM????%' OR displayName LIKE '%Tencent iOA????%' OR displayName LIKE '%Beike PC Manager????%' OR displayName LIKE '%SF iOA????%' OR displayName LIKE '%58 iOA????%') AND statusCode != 0 AND statusCode != 1244
  2212. ***** 03:22:35.585 Stop Op=370405 0x0
  2213. ***** 03:22:35.585 Stop Op=370407 0x0
  2214. ***** 03:22:35.586 Grp=370408 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2215. IWbemServices::Connect
  2216. ***** 03:22:35.586 Grp=370409 Op=370410 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2217. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????????%' OR displayName LIKE '%Tencent EPM????%' OR displayName LIKE '%Tencent iOA????%' OR displayName LIKE '%Beike PC Manager????%' OR displayName LIKE '%SF iOA????%' OR displayName LIKE '%58 iOA????%') AND hresultCode != 0
  2218. ***** 03:22:35.587 Stop Op=370408 0x0
  2219. ***** 03:22:35.587 Stop Op=370410 0x0
  2220. ***** 03:22:35.588 Grp=370411 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2221. IWbemServices::Connect
  2222. ***** 03:22:35.588 Grp=370412 Op=370413 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2223. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%????????%' OR displayName LIKE '%Tencent EPM????%' OR displayName LIKE '%Tencent iOA????%' OR displayName LIKE '%Beike PC Manager????%' OR displayName LIKE '%SF iOA????%' OR displayName LIKE '%58 iOA????%') AND iniString = 'INI file too big'
  2224. ***** 03:22:35.590 Stop Op=370411 0x0
  2225. ***** 03:22:35.590 Stop Op=370413 0x0
  2226. ***** 03:22:35.591 Grp=370414 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2227. IWbemServices::Connect
  2228. ***** 03:22:35.591 Grp=370415 Op=370416 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2229. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%FortiClient%' OR displayName LIKE '%Fortinet AntiVirus%')
  2230. ***** 03:22:35.592 Stop Op=370414 0x0
  2231. ***** 03:22:35.592 Stop Op=370416 0x0
  2232. ***** 03:22:35.593 Grp=370417 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2233. IWbemServices::Connect
  2234. ***** 03:22:35.593 Grp=370418 Op=370419 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2235. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%FortiClient%' OR displayName LIKE '%Fortinet AntiVirus%') AND statusCode = 1244
  2236. ***** 03:22:35.594 Stop Op=370417 0x0
  2237. ***** 03:22:35.594 Stop Op=370419 0x0
  2238. ***** 03:22:35.594 Grp=370420 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2239. IWbemServices::Connect
  2240. ***** 03:22:35.594 Grp=370421 Op=370422 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2241. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%FortiClient%' OR displayName LIKE '%Fortinet AntiVirus%') AND statusCode != 0 AND statusCode != 1244
  2242. ***** 03:22:35.595 Stop Op=370420 0x0
  2243. ***** 03:22:35.595 Stop Op=370422 0x0
  2244. ***** 03:22:35.596 Grp=370423 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2245. IWbemServices::Connect
  2246. ***** 03:22:35.596 Grp=370424 Op=370425 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2247. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%FortiClient%' OR displayName LIKE '%Fortinet AntiVirus%') AND hresultCode != 0
  2248. ***** 03:22:35.596 Stop Op=370423 0x0
  2249. ***** 03:22:35.596 Stop Op=370425 0x0
  2250. ***** 03:22:35.597 Grp=370426 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2251. IWbemServices::Connect
  2252. ***** 03:22:35.597 Grp=370427 Op=370428 _ClientProcessId=1255072 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2253. Start IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT displayName FROM WSC_CallerAMPPLData WHERE (displayName LIKE '%FortiClient%' OR displayName LIKE '%Fortinet AntiVirus%') AND iniString = 'INI file too big'
  2254. ***** 03:22:35.597 Stop Op=370426 0x0
  2255. ***** 03:22:35.597 Stop Op=370428 0x0
  2256. ***** 03:22:35.968 Grp=370429 _ClientProcessId=1228976 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2257. IWbemServices::Connect
  2258. ***** 03:22:35.971 Grp=370430 Op=370431 _ClientProcessId=1228976 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2259. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2260. ***** 03:22:35.984 Stop Op=370144 0x0
  2261. ***** 03:22:35.984 Stop Op=370146 0x0
  2262. ***** 03:22:35.991 Grp=370433 _ClientProcessId=1270868 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2263. IWbemServices::Connect
  2264. ***** 03:22:35.994 Grp=370434 Op=370435 _ClientProcessId=1270868 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2265. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2266. ***** 03:22:36.076 Grp=370437 _ClientProcessId=1277180 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2267. IWbemServices::Connect
  2268. ***** 03:22:36.079 Grp=370438 Op=370439 _ClientProcessId=1277180 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2269. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2270. ***** 03:22:36.107 Grp=370441 _ClientProcessId=1275388 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2271. IWbemServices::Connect
  2272. ***** 03:22:36.109 Grp=370442 Op=370443 _ClientProcessId=1275388 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2273. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2274. ***** 03:22:36.342 Stop Op=370148 0x0
  2275. ***** 03:22:36.342 Stop Op=370150 0x0
  2276. ***** 03:22:36.466 Stop Op=370169 0x0
  2277. ***** 03:22:36.466 Stop Op=370171 0x0
  2278. ***** 03:22:38.629 Stop Op=370173 0x0
  2279. ***** 03:22:38.629 Stop Op=370175 0x0
  2280. ***** 03:22:38.631 Stop Op=370156 0x0
  2281. ***** 03:22:38.631 Stop Op=370158 0x0
  2282. ***** 03:22:38.633 Stop Op=370160 0x0
  2283. ***** 03:22:38.633 Stop Op=370162 0x0
  2284. ***** 03:22:38.674 Stop Op=370212 0x0
  2285. ***** 03:22:38.674 Stop Op=370214 0x0
  2286. ***** 03:22:38.674 Stop Op=370184 0x0
  2287. ***** 03:22:38.674 Stop Op=370186 0x0
  2288. ***** 03:22:38.701 Grp=370445 _ClientProcessId=1277128 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2289. IWbemServices::Connect
  2290. ***** 03:22:38.704 Grp=370446 Op=370447 _ClientProcessId=1277128 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2291. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2292. ***** 03:22:38.719 Stop Op=370168 0x0
  2293. ***** 03:22:38.719 Stop Op=370178 0x0
  2294. ***** 03:22:38.727 Grp=370449 _ClientProcessId=1274916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2295. IWbemServices::Connect
  2296. ***** 03:22:38.760 Grp=370450 _ClientProcessId=1271320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2297. IWbemServices::Connect
  2298. ***** 03:22:38.761 Grp=370451 Op=370452 _ClientProcessId=1274916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2299. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2300. ***** 03:22:38.763 Grp=370454 Op=370455 _ClientProcessId=1271320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2301. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2302. ***** 03:22:38.786 Stop Op=370196 0x0
  2303. ***** 03:22:38.787 Stop Op=370198 0x0
  2304. ***** 03:22:38.839 Grp=370457 _ClientProcessId=1271752 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2305. IWbemServices::Connect
  2306. ***** 03:22:38.842 Grp=370458 Op=370459 _ClientProcessId=1271752 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2307. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2308. ***** 03:22:38.862 Grp=370461 _ClientProcessId=1274340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2309. IWbemServices::Connect
  2310. ***** 03:22:38.863 Grp=370462 _ClientProcessId=1244228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2311. IWbemServices::Connect
  2312. ***** 03:22:38.866 Grp=370463 Op=370464 _ClientProcessId=1274340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2313. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2314. ***** 03:22:38.872 Grp=370466 Op=370467 _ClientProcessId=1244228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2315. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2316. ***** 03:22:39.013 Stop Op=370232 0x0
  2317. ***** 03:22:39.013 Stop Op=370234 0x0
  2318. ***** 03:22:39.133 Grp=370469 _ClientProcessId=1262952 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2319. IWbemServices::Connect
  2320. ***** 03:22:39.138 Grp=370470 Op=370471 _ClientProcessId=1262952 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2321. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2322. ***** 03:22:39.229 Grp=370473 _ClientProcessId=1275292 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2323. IWbemServices::Connect
  2324. ***** 03:22:39.231 Grp=370474 Op=370475 _ClientProcessId=1275292 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2325. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2326. ***** 03:22:39.265 Grp=370477 _ClientProcessId=1272728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2327. IWbemServices::Connect
  2328. ***** 03:22:39.268 Grp=370478 Op=370479 _ClientProcessId=1272728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2329. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2330. ***** 03:22:39.357 Stop Op=370216 0x0
  2331. ***** 03:22:39.357 Stop Op=370218 0x0
  2332. ***** 03:22:39.375 Grp=370481 _ClientProcessId=1273196 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2333. IWbemServices::Connect
  2334. ***** 03:22:39.378 Grp=370482 Op=370483 _ClientProcessId=1273196 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2335. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2336. ***** 03:22:39.481 Stop Op=370180 0x0
  2337. ***** 03:22:39.481 Stop Op=370182 0x0
  2338. ***** 03:22:39.691 Grp=370485 _ClientProcessId=1262336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2339. IWbemServices::Connect
  2340. ***** 03:22:39.694 Grp=370486 Op=370487 _ClientProcessId=1262336 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2341. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2342. ***** 03:22:39.744 Grp=370489 _ClientProcessId=1272980 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2343. IWbemServices::Connect
  2344. ***** 03:22:39.747 Grp=370490 Op=370491 _ClientProcessId=1272980 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2345. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2346. ***** 03:22:40.660 Stop Op=369348 0x0
  2347. ***** 03:22:40.660 Stop Op=369350 0x0
  2348. ***** 03:22:40.740 Stop Op=369324 0x0
  2349. ***** 03:22:40.740 Stop Op=369326 0x0
  2350. ***** 03:22:40.822 Stop Op=370228 0x0
  2351. ***** 03:22:40.822 Stop Op=370230 0x0
  2352. ***** 03:22:40.838 Stop Op=369336 0x0
  2353. ***** 03:22:40.838 Stop Op=369338 0x0
  2354. ***** 03:22:41.036 Grp=370493 _ClientProcessId=1277688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2355. IWbemServices::Connect
  2356. ***** 03:22:41.041 Grp=370494 Op=370495 _ClientProcessId=1277688 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2357. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2358. ***** 03:22:41.127 Grp=370497 _ClientProcessId=1276480 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2359. IWbemServices::Connect
  2360. ***** 03:22:41.130 Grp=370498 Op=370499 _ClientProcessId=1276480 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2361. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2362. ***** 03:22:41.559 Grp=370501 _ClientProcessId=1277556 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2363. IWbemServices::Connect
  2364. ***** 03:22:41.563 Grp=370502 Op=370503 _ClientProcessId=1277556 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2365. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2366. ***** 03:22:41.573 Stop Op=370220 0x0
  2367. ***** 03:22:41.573 Stop Op=370223 0x0
  2368. ***** 03:22:41.736 Stop Op=369507 0x0
  2369. ***** 03:22:41.736 Stop Op=369509 0x0
  2370. ***** 03:22:41.973 Grp=370505 _ClientProcessId=1271284 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2371. IWbemServices::Connect
  2372. ***** 03:22:41.976 Grp=370506 Op=370507 _ClientProcessId=1271284 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2373. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2374. ***** 03:22:42.447 Grp=370509 _ClientProcessId=1275564 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2375. IWbemServices::Connect
  2376. ***** 03:22:42.451 Grp=370510 _ClientProcessId=1277756 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2377. IWbemServices::Connect
  2378. ***** 03:22:42.451 Grp=370511 Op=370512 _ClientProcessId=1275564 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2379. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2380. ***** 03:22:42.743 Stop Op=370236 0x0
  2381. ***** 03:22:42.743 Stop Op=370238 0x0
  2382. ***** 03:22:42.788 Stop Op=370240 0x0
  2383. ***** 03:22:42.788 Stop Op=370242 0x0
  2384. ***** 03:22:42.792 Grp=370514 Op=370515 _ClientProcessId=1277756 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2385. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2386. ***** 03:22:44.051 Stop Op=370200 0x0
  2387. ***** 03:22:44.051 Stop Op=370202 0x0
  2388. ***** 03:22:44.272 Grp=370517 _ClientProcessId=1274652 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2389. IWbemServices::Connect
  2390. ***** 03:22:44.275 Grp=370518 Op=370519 _ClientProcessId=1274652 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2391. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2392. ***** 03:22:44.357 Stop Op=370248 0x0
  2393. ***** 03:22:44.357 Stop Op=370250 0x0
  2394. ***** 03:22:44.690 Grp=370521 _ClientProcessId=1259296 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2395. IWbemServices::Connect
  2396. ***** 03:22:44.694 Grp=370522 Op=370523 _ClientProcessId=1259296 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2397. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2398. ***** 03:22:44.696 Grp=370524 _ClientProcessId=1269752 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2399. IWbemServices::Connect
  2400. ***** 03:22:44.702 Grp=370526 Op=370527 _ClientProcessId=1269752 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2401. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2402. ***** 03:22:50.448 Stop Op=369408 0x0
  2403. ***** 03:22:50.448 Stop Op=369410 0x0
  2404. ***** 03:22:50.533 Stop Op=369135 0x0
  2405. ***** 03:22:50.533 Stop Op=369137 0x0
  2406. ***** 03:22:50.613 Stop Op=370204 0x0
  2407. ***** 03:22:50.613 Stop Op=370206 0x0
  2408. ***** 03:22:50.630 Grp=370529 _ClientProcessId=1275716 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2409. IWbemServices::Connect
  2410. ***** 03:22:50.645 Grp=370530 Op=370531 _ClientProcessId=1275716 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2411. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2412. ***** 03:22:50.795 Stop Op=370252 0x0
  2413. ***** 03:22:50.795 Stop Op=370254 0x0
  2414. ***** 03:22:50.816 Grp=370533 _ClientProcessId=1274100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2415. IWbemServices::Connect
  2416. ***** 03:22:50.825 Grp=370534 Op=370535 _ClientProcessId=1274100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2417. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2418. ***** 03:22:51.402 Stop Op=369731 0x0
  2419. ***** 03:22:51.402 Stop Op=369733 0x0
  2420. ***** 03:22:51.458 Stop Op=370433 0x0
  2421. ***** 03:22:51.458 Stop Op=370435 0x0
  2422. ***** 03:22:51.499 Stop Op=369523 0x0
  2423. ***** 03:22:51.499 Stop Op=369525 0x0
  2424. ***** 03:22:51.544 Grp=370537 _ClientProcessId=1276484 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2425. IWbemServices::Connect
  2426. ***** 03:22:51.546 Grp=370538 _ClientProcessId=1273072 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2427. IWbemServices::Connect
  2428. ***** 03:22:51.548 Grp=370539 Op=370540 _ClientProcessId=1276484 [CompatTelRunner.exe] DESKTOP-HCTVPUG NT AUTHORITY\SYSTEM
  2429. Start IWbemServices::CreateInstanceEnum - root\securitycenter2 : AntiVirusProduct
  2430. ***** 03:22:51.549 Grp=370541 Op=370542 _ClientProcessId=1273072 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2431. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2432. ***** 03:22:51.552 Stop Op=370540 0x0
  2433. ***** 03:22:51.552 Stop Op=370537 0x0
  2434. ***** 03:22:51.552 Grp=370544 _ClientProcessId=1272824 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2435. IWbemServices::Connect
  2436. ***** 03:22:51.552 Grp=370545 _ClientProcessId=1273612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2437. IWbemServices::Connect
  2438. ***** 03:22:51.555 Grp=370546 Op=370547 _ClientProcessId=1272824 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2439. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2440. ***** 03:22:51.560 Grp=370549 Op=370550 _ClientProcessId=1273612 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2441. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2442. ***** 03:22:52.178 Stop Op=370441 0x0
  2443. ***** 03:22:52.178 Stop Op=370443 0x0
  2444. ***** 03:22:53.638 Stop Op=369763 0x0
  2445. ***** 03:22:53.638 Stop Op=369765 0x0
  2446. ***** 03:22:53.730 Stop Op=370244 0x0
  2447. ***** 03:22:53.730 Stop Op=370246 0x0
  2448. ***** 03:22:53.736 Stop Op=369719 0x0
  2449. ***** 03:22:53.736 Stop Op=369721 0x0
  2450. ***** 03:22:53.792 Stop Op=369642 0x0
  2451. ***** 03:22:53.792 Stop Op=369644 0x0
  2452. ***** 03:22:53.849 Stop Op=370437 0x0
  2453. ***** 03:22:53.849 Stop Op=370439 0x0
  2454. ***** 03:22:53.930 Stop Op=369783 0x0
  2455. ***** 03:22:53.930 Stop Op=369785 0x0
  2456. ***** 03:22:54.102 Stop Op=370485 0x0
  2457. ***** 03:22:54.102 Stop Op=370487 0x0
  2458. ***** 03:22:54.318 Stop Op=369803 0x0
  2459. ***** 03:22:54.318 Stop Op=369806 0x0
  2460. ***** 03:22:54.420 Stop Op=370450 0x0
  2461. ***** 03:22:54.420 Stop Op=370455 0x0
  2462. ***** 03:22:54.528 Grp=370552 _ClientProcessId=1277260 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2463. IWbemServices::Connect
  2464. ***** 03:22:54.532 Grp=370553 Op=370554 _ClientProcessId=1277260 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2465. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2466. ***** 03:22:54.532 Grp=370555 _ClientProcessId=1262280 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2467. IWbemServices::Connect
  2468. ***** 03:22:54.532 Grp=370556 _ClientProcessId=1275448 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2469. IWbemServices::Connect
  2470. ***** 03:22:54.536 Grp=370557 Op=370558 _ClientProcessId=1275448 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2471. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2472. ***** 03:22:54.536 Grp=370559 Op=370560 _ClientProcessId=1262280 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2473. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2474. ***** 03:22:54.552 Grp=370564 _ClientProcessId=1270432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2475. IWbemServices::Connect
  2476. ***** 03:22:54.555 Grp=370566 Op=370567 _ClientProcessId=1270432 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2477. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2478. ***** 03:22:54.555 Grp=370565 _ClientProcessId=1276796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2479. IWbemServices::Connect
  2480. ***** 03:22:54.561 Grp=370569 Op=370570 _ClientProcessId=1276796 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2481. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2482. ***** 03:22:54.646 Grp=370572 _ClientProcessId=1254556 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2483. IWbemServices::Connect
  2484. ***** 03:22:54.654 Grp=370573 Op=370574 _ClientProcessId=1254556 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2485. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2486. ***** 03:22:54.655 Grp=370575 _ClientProcessId=1277956 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2487. IWbemServices::Connect
  2488. ***** 03:22:54.658 Grp=370576 _ClientProcessId=1277964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2489. IWbemServices::Connect
  2490. ***** 03:22:54.669 Grp=370578 Op=370579 _ClientProcessId=1277956 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2491. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2492. ***** 03:22:54.669 Grp=370580 Op=370581 _ClientProcessId=1277964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2493. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2494. ***** 03:22:55.471 Grp=370584 _ClientProcessId=1248320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2495. IWbemServices::Connect
  2496. ***** 03:22:55.493 Grp=370585 Op=370586 _ClientProcessId=1248320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2497. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2498. ***** 03:22:57.813 Stop Op=370477 0x0
  2499. ***** 03:22:57.813 Stop Op=370479 0x0
  2500. ***** 03:22:57.960 Stop Op=370429 0x0
  2501. ***** 03:22:57.960 Stop Op=370431 0x0
  2502. ***** 03:22:58.155 Grp=370588 _ClientProcessId=1277800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2503. IWbemServices::Connect
  2504. ***** 03:22:58.157 Grp=370589 Op=370590 _ClientProcessId=1277800 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2505. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2506. ***** 03:22:58.238 Grp=370592 _ClientProcessId=1278228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2507. IWbemServices::Connect
  2508. ***** 03:22:58.242 Grp=370593 Op=370594 _ClientProcessId=1278228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2509. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2510. ***** 03:22:58.244 Grp=370596 _ClientProcessId=1278184 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2511. IWbemServices::Connect
  2512. ***** 03:22:58.247 Grp=370597 Op=370598 _ClientProcessId=1278184 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2513. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2514. ***** 03:22:58.291 Grp=370600 _ClientProcessId=1278220 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2515. IWbemServices::Connect
  2516. ***** 03:22:58.294 Grp=370601 Op=370602 _ClientProcessId=1278220 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2517. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2518. ***** 03:22:58.339 Stop Op=370501 0x0
  2519. ***** 03:22:58.339 Stop Op=370503 0x0
  2520. ***** 03:22:58.410 Stop Op=370510 0x0
  2521. ***** 03:22:58.410 Stop Op=370515 0x0
  2522. ***** 03:22:58.735 Grp=370604 _ClientProcessId=1265708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2523. IWbemServices::Connect
  2524. ***** 03:22:58.735 Grp=370605 _ClientProcessId=1277316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2525. IWbemServices::Connect
  2526. ***** 03:22:58.739 Grp=370606 Op=370607 _ClientProcessId=1265708 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2527. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2528. ***** 03:22:58.758 Grp=370609 Op=370610 _ClientProcessId=1277316 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2529. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2530. ***** 03:22:58.930 Stop Op=370445 0x0
  2531. ***** 03:22:58.930 Stop Op=370447 0x0
  2532. ***** 03:22:58.946 Stop Op=370473 0x0
  2533. ***** 03:22:58.946 Stop Op=370475 0x0
  2534. ***** 03:22:58.949 Stop Op=370449 0x0
  2535. ***** 03:22:58.949 Stop Op=370452 0x0
  2536. ***** 03:22:59.745 Grp=370612 _ClientProcessId=1278416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2537. IWbemServices::Connect
  2538. ***** 03:22:59.748 Grp=370613 Op=370614 _ClientProcessId=1278416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2539. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2540. ***** 03:22:59.768 Stop Op=370509 0x0
  2541. ***** 03:22:59.768 Stop Op=370512 0x0
  2542. ***** 03:23:00.135 Stop Op=370489 0x0
  2543. ***** 03:23:00.135 Stop Op=370491 0x0
  2544. ***** 03:23:00.581 Grp=370616 _ClientProcessId=1278608 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2545. IWbemServices::Connect
  2546. ***** 03:23:00.585 Grp=370617 Op=370618 _ClientProcessId=1278608 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2547. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2548. ***** 03:23:00.601 Grp=370620 _ClientProcessId=1278720 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2549. IWbemServices::Connect
  2550. ***** 03:23:00.604 Grp=370621 Op=370622 _ClientProcessId=1278720 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2551. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2552. ***** 03:23:00.835 Stop Op=370462 0x0
  2553. ***** 03:23:00.835 Stop Op=370467 0x0
  2554. ***** 03:23:00.989 Stop Op=370481 0x0
  2555. ***** 03:23:00.989 Stop Op=370483 0x0
  2556. ***** 03:23:01.172 Grp=370624 _ClientProcessId=1278704 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2557. IWbemServices::Connect
  2558. ***** 03:23:01.172 Grp=370625 _ClientProcessId=1278772 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2559. IWbemServices::Connect
  2560. ***** 03:23:01.173 Grp=370626 _ClientProcessId=1278636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2561. IWbemServices::Connect
  2562. ***** 03:23:01.176 Grp=370627 Op=370628 _ClientProcessId=1278772 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2563. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2564. ***** 03:23:01.179 Grp=370629 Op=370630 _ClientProcessId=1278704 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2565. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2566. ***** 03:23:01.180 Grp=370631 Op=370632 _ClientProcessId=1278636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2567. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2568. ***** 03:23:01.485 Grp=370636 _ClientProcessId=1278916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2569. IWbemServices::Connect
  2570. ***** 03:23:01.487 Grp=370637 Op=370638 _ClientProcessId=1278916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2571. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2572. ***** 03:23:02.875 Grp=370640 _ClientProcessId=1278936 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2573. IWbemServices::Connect
  2574. ***** 03:23:02.882 Grp=370641 Op=370642 _ClientProcessId=1278936 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2575. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2576. ***** 03:23:05.886 Stop Op=370461 0x0
  2577. ***** 03:23:05.886 Stop Op=370464 0x0
  2578. ***** 03:23:07.181 Stop Op=370497 0x0
  2579. ***** 03:23:07.181 Stop Op=370499 0x0
  2580. ***** 03:23:07.376 Stop Op=369875 0x0
  2581. ***** 03:23:07.376 Stop Op=369877 0x0
  2582. ***** 03:23:07.386 Stop Op=370493 0x0
  2583. ***** 03:23:07.386 Stop Op=370495 0x0
  2584. ***** 03:23:07.414 Grp=370644 _ClientProcessId=1275568 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2585. IWbemServices::Connect
  2586. ***** 03:23:07.417 Grp=370645 Op=370646 _ClientProcessId=1275568 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2587. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2588. ***** 03:23:07.423 Stop Op=370517 0x0
  2589. ***** 03:23:07.423 Stop Op=370519 0x0
  2590. ***** 03:23:07.438 Stop Op=370521 0x0
  2591. ***** 03:23:07.438 Stop Op=370523 0x0
  2592. ***** 03:23:07.527 Stop Op=369831 0x0
  2593. ***** 03:23:07.528 Stop Op=369833 0x0
  2594. ***** 03:23:07.535 Grp=370648 _ClientProcessId=1274272 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2595. IWbemServices::Connect
  2596. ***** 03:23:07.539 Grp=370649 Op=370650 _ClientProcessId=1274272 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2597. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2598. ***** 03:23:07.637 Grp=370652 _ClientProcessId=1274744 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2599. IWbemServices::Connect
  2600. ***** 03:23:07.640 Grp=370653 Op=370654 _ClientProcessId=1274744 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2601. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2602. ***** 03:23:07.688 Stop Op=370538 0x0
  2603. ***** 03:23:07.688 Stop Op=370542 0x0
  2604. ***** 03:23:08.512 Stop Op=370457 0x0
  2605. ***** 03:23:08.512 Stop Op=370459 0x0
  2606. ***** 03:23:08.699 Grp=370656 _ClientProcessId=1277916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2607. IWbemServices::Connect
  2608. ***** 03:23:08.702 Grp=370657 Op=370658 _ClientProcessId=1277916 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2609. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2610. ***** 03:23:08.718 Stop Op=370555 0x0
  2611. ***** 03:23:08.718 Stop Op=370560 0x0
  2612. ***** 03:23:08.746 Grp=370660 _ClientProcessId=1273908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2613. IWbemServices::Connect
  2614. ***** 03:23:08.749 Grp=370661 Op=370662 _ClientProcessId=1273908 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2615. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2616. ***** 03:23:09.326 Grp=370664 _ClientProcessId=1269564 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2617. IWbemServices::Connect
  2618. ***** 03:23:09.331 Grp=370665 Op=370666 _ClientProcessId=1269564 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2619. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2620. ***** 03:23:09.561 Grp=370668 _ClientProcessId=1275928 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2621. IWbemServices::Connect
  2622. ***** 03:23:09.564 Grp=370669 Op=370670 _ClientProcessId=1275928 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2623. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2624. ***** 03:23:11.467 Grp=370672 _ClientProcessId=1266768 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2625. IWbemServices::Connect
  2626. ***** 03:23:11.472 Grp=370673 Op=370674 _ClientProcessId=1266768 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2627. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2628. ***** 03:23:11.518 Stop Op=370544 0x0
  2629. ***** 03:23:11.518 Stop Op=370547 0x0
  2630. ***** 03:23:11.687 Stop Op=370545 0x0
  2631. ***** 03:23:11.687 Stop Op=370550 0x0
  2632. ***** 03:23:11.740 Stop Op=370524 0x0
  2633. ***** 03:23:11.740 Stop Op=370527 0x0
  2634. ***** 03:23:12.038 Grp=370676 _ClientProcessId=1276588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2635. IWbemServices::Connect
  2636. ***** 03:23:12.041 Grp=370677 Op=370678 _ClientProcessId=1276588 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2637. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2638. ***** 03:23:12.764 Stop Op=370556 0x0
  2639. ***** 03:23:12.764 Stop Op=370558 0x0
  2640. ***** 03:23:12.915 Grp=370680 _ClientProcessId=1277112 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2641. IWbemServices::Connect
  2642. ***** 03:23:12.918 Grp=370681 Op=370682 _ClientProcessId=1277112 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2643. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2644. ***** 03:23:12.974 Grp=370684 _ClientProcessId=1276940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2645. IWbemServices::Connect
  2646. ***** 03:23:12.977 Grp=370685 _ClientProcessId=1273368 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2647. IWbemServices::Connect
  2648. ***** 03:23:12.980 Grp=370686 Op=370687 _ClientProcessId=1276940 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2649. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2650. ***** 03:23:13.312 Grp=370689 Op=370690 _ClientProcessId=1273368 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2651. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2652. ***** 03:23:13.548 Stop Op=370572 0x0
  2653. ***** 03:23:13.548 Stop Op=370574 0x0
  2654. ***** 03:23:14.575 Grp=370692 _ClientProcessId=1272964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2655. IWbemServices::Connect
  2656. ***** 03:23:14.578 Grp=370693 Op=370694 _ClientProcessId=1272964 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2657. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2658. ***** 03:23:14.845 Stop Op=369929 0x0
  2659. ***** 03:23:14.845 Stop Op=369931 0x0
  2660. ***** 03:23:14.871 Grp=370696 _ClientProcessId=1272016 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2661. IWbemServices::Connect
  2662. ***** 03:23:14.877 Grp=370697 Op=370698 _ClientProcessId=1272016 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2663. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2664. ***** 03:23:15.722 Stop Op=370584 0x0
  2665. ***** 03:23:15.722 Stop Op=370586 0x0
  2666. ***** 03:23:15.732 Grp=370700 _ClientProcessId=1273132 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2667. IWbemServices::Connect
  2668. ***** 03:23:15.735 Grp=370701 Op=370702 _ClientProcessId=1273132 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2669. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2670. ***** 03:23:16.535 Grp=370704 _ClientProcessId=1275948 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2671. IWbemServices::Connect
  2672. ***** 03:23:16.557 Grp=370705 Op=370706 _ClientProcessId=1275948 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2673. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2674. ***** 03:23:16.743 Grp=370708 _ClientProcessId=1267700 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2675. IWbemServices::Connect
  2676. ***** 03:23:16.788 Grp=370709 Op=370710 _ClientProcessId=1267700 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2677. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2678. ***** 03:23:18.695 Stop Op=370192 0x0
  2679. ***** 03:23:18.695 Stop Op=370194 0x0
  2680. ***** 03:23:18.722 Stop Op=370564 0x0
  2681. ***** 03:23:18.722 Stop Op=370567 0x0
  2682. ***** 03:23:18.775 Stop Op=370600 0x0
  2683. ***** 03:23:18.775 Stop Op=370602 0x0
  2684. ***** 03:23:18.836 Grp=370712 _ClientProcessId=1274920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2685. IWbemServices::Connect
  2686. ***** 03:23:18.837 Stop Op=370605 0x0
  2687. ***** 03:23:18.837 Stop Op=370610 0x0
  2688. ***** 03:23:18.839 Grp=370713 Op=370714 _ClientProcessId=1274920 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2689. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2690. ***** 03:23:18.988 Stop Op=370625 0x0
  2691. ***** 03:23:18.988 Stop Op=370628 0x0
  2692. ***** 03:23:19.057 Stop Op=370596 0x0
  2693. ***** 03:23:19.057 Stop Op=370598 0x0
  2694. ***** 03:23:19.073 Grp=370716 _ClientProcessId=1272776 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2695. IWbemServices::Connect
  2696. ***** 03:23:19.073 Grp=370717 _ClientProcessId=1276044 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2697. IWbemServices::Connect
  2698. ***** 03:23:19.076 Grp=370718 Op=370719 _ClientProcessId=1272776 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2699. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2700. ***** 03:23:19.077 Grp=370720 Op=370721 _ClientProcessId=1276044 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2701. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2702. ***** 03:23:19.192 Grp=370724 _ClientProcessId=1277880 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2703. IWbemServices::Connect
  2704. ***** 03:23:19.195 Grp=370725 Op=370726 _ClientProcessId=1277880 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2705. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2706. ***** 03:23:19.308 Grp=370728 _ClientProcessId=1274204 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2707. IWbemServices::Connect
  2708. ***** 03:23:19.311 Grp=370729 Op=370730 _ClientProcessId=1274204 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2709. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2710. ***** 03:23:19.376 Grp=370732 _ClientProcessId=1277444 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2711. IWbemServices::Connect
  2712. ***** 03:23:19.378 Grp=370733 Op=370734 _ClientProcessId=1277444 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2713. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2714. ***** 03:23:19.408 Grp=370736 _ClientProcessId=1278864 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2715. IWbemServices::Connect
  2716. ***** 03:23:19.411 Grp=370737 Op=370738 _ClientProcessId=1278864 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2717. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2718. ***** 03:23:19.471 Grp=370740 _ClientProcessId=1277236 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2719. IWbemServices::Connect
  2720. ***** 03:23:19.493 Grp=370741 Op=370742 _ClientProcessId=1277236 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2721. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2722. ***** 03:23:21.828 Grp=370744 _ClientProcessId=1198684 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2723. IWbemServices::Connect
  2724. ***** 03:23:21.839 Grp=370745 Op=370746 _ClientProcessId=1198684 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2725. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2726. ***** 03:23:22.534 Stop Op=370626 0x0
  2727. ***** 03:23:22.534 Stop Op=370632 0x0
  2728. ***** 03:23:23.457 Stop Op=370565 0x0
  2729. ***** 03:23:23.457 Stop Op=370570 0x0
  2730. ***** 03:23:23.506 Stop Op=370552 0x0
  2731. ***** 03:23:23.506 Stop Op=370554 0x0
  2732. ***** 03:23:23.592 Grp=370748 _ClientProcessId=1270600 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2733. IWbemServices::Connect
  2734. ***** 03:23:23.595 Grp=370749 Op=370750 _ClientProcessId=1270600 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2735. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2736. ***** 03:23:23.601 Grp=370751 _ClientProcessId=1271440 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2737. IWbemServices::Connect
  2738. ***** 03:23:23.618 Stop Op=370592 0x0
  2739. ***** 03:23:23.619 Stop Op=370594 0x0
  2740. ***** 03:23:23.697 Grp=370753 _ClientProcessId=1257864 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2741. IWbemServices::Connect
  2742. ***** 03:23:23.700 Grp=370754 Op=370755 _ClientProcessId=1257864 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2743. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2744. ***** 03:23:23.935 Stop Op=370640 0x0
  2745. ***** 03:23:23.935 Stop Op=370642 0x0
  2746. ***** 03:23:24.788 Stop Op=370208 0x0
  2747. ***** 03:23:24.788 Stop Op=370210 0x0
  2748. ***** 03:23:24.839 Grp=370757 _ClientProcessId=1259320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2749. IWbemServices::Connect
  2750. ***** 03:23:24.844 Grp=370758 Op=370759 _ClientProcessId=1259320 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2751. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2752. ***** 03:23:24.867 Stop Op=370221 0x0
  2753. ***** 03:23:24.867 Stop Op=370225 0x0
  2754. ***** 03:23:24.912 Stop Op=370188 0x0
  2755. ***** 03:23:24.912 Stop Op=370190 0x0
  2756. ***** 03:23:24.993 Grp=370761 _ClientProcessId=1262636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2757. IWbemServices::Connect
  2758. ***** 03:23:24.998 Grp=370762 Op=370763 _ClientProcessId=1262636 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2759. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2760. ***** 03:23:26.151 Stop Op=370660 0x0
  2761. ***** 03:23:26.151 Stop Op=370662 0x0
  2762. ***** 03:23:26.279 Stop Op=370604 0x0
  2763. ***** 03:23:26.279 Stop Op=370607 0x0
  2764. ***** 03:23:26.653 Stop Op=370644 0x0
  2765. ***** 03:23:26.653 Stop Op=370646 0x0
  2766. ***** 03:23:26.877 Stop Op=370656 0x0
  2767. ***** 03:23:26.877 Stop Op=370658 0x0
  2768. ***** 03:23:26.891 Grp=370765 _ClientProcessId=1262728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2769. IWbemServices::Connect
  2770. ***** 03:23:26.895 Grp=370766 Op=370767 _ClientProcessId=1262728 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2771. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2772. ***** 03:23:26.936 Stop Op=370624 0x0
  2773. ***** 03:23:26.936 Stop Op=370630 0x0
  2774. ***** 03:23:27.150 Grp=370769 _ClientProcessId=1261680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2775. IWbemServices::Connect
  2776. ***** 03:23:27.155 Grp=370770 Op=370771 _ClientProcessId=1261680 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2777. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2778. ***** 03:23:27.334 Stop Op=370636 0x0
  2779. ***** 03:23:27.334 Stop Op=370638 0x0
  2780. ***** 03:23:27.425 Grp=370773 _ClientProcessId=1261768 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2781. IWbemServices::Connect
  2782. ***** 03:23:27.430 Grp=370774 Op=370775 _ClientProcessId=1261768 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2783. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2784. ***** 03:23:27.511 Stop Op=370672 0x0
  2785. ***** 03:23:27.511 Stop Op=370674 0x0
  2786. ***** 03:23:27.733 Grp=370777 _ClientProcessId=1275052 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2787. IWbemServices::Connect
  2788. ***** 03:23:27.736 Grp=370778 Op=370779 _ClientProcessId=1275052 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2789. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2790. ***** 03:23:27.819 Stop Op=370576 0x0
  2791. ***** 03:23:27.819 Stop Op=370581 0x0
  2792. ***** 03:23:28.700 Stop Op=370620 0x0
  2793. ***** 03:23:28.700 Stop Op=370622 0x0
  2794. ***** 03:23:28.728 Stop Op=370616 0x0
  2795. ***** 03:23:28.728 Stop Op=370618 0x0
  2796. ***** 03:23:28.848 Grp=370781 _ClientProcessId=1271500 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2797. IWbemServices::Connect
  2798. ***** 03:23:28.869 Grp=370782 Op=370783 _ClientProcessId=1271500 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2799. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2800. ***** 03:23:28.938 Grp=370785 _ClientProcessId=1243240 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2801. IWbemServices::Connect
  2802. ***** 03:23:28.949 Grp=370786 Op=370787 _ClientProcessId=1243240 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2803. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2804. ***** 03:23:29.544 Stop Op=370588 0x0
  2805. ***** 03:23:29.544 Stop Op=370590 0x0
  2806. ***** 03:23:29.568 Stop Op=370680 0x0
  2807. ***** 03:23:29.568 Stop Op=370682 0x0
  2808. ***** 03:23:30.475 Stop Op=370676 0x0
  2809. ***** 03:23:30.475 Stop Op=370678 0x0
  2810. ***** 03:23:31.006 Grp=370789 Op=370790 _ClientProcessId=1271440 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2811. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2812. ***** 03:23:31.020 Stop Op=370664 0x0
  2813. ***** 03:23:31.020 Stop Op=370666 0x0
  2814. ***** 03:23:31.089 Stop Op=370684 0x0
  2815. ***** 03:23:31.089 Stop Op=370687 0x0
  2816. ***** 03:23:31.269 Grp=370792 _ClientProcessId=1262228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2817. IWbemServices::Connect
  2818. ***** 03:23:31.269 Grp=370793 _ClientProcessId=1259116 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2819. IWbemServices::Connect
  2820. ***** 03:23:31.272 Grp=370794 Op=370795 _ClientProcessId=1262228 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2821. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2822. ***** 03:23:31.273 Grp=370797 Op=370798 _ClientProcessId=1259116 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2823. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2824. ***** 03:23:31.858 Stop Op=370266 0x0
  2825. ***** 03:23:31.858 Stop Op=370268 0x0
  2826. ***** 03:23:32.111 Stop Op=370256 0x0
  2827. ***** 03:23:32.111 Stop Op=370258 0x0
  2828. ***** 03:23:32.191 Stop Op=370692 0x0
  2829. ***** 03:23:32.191 Stop Op=370694 0x0
  2830. ***** 03:23:32.691 Grp=370800 _ClientProcessId=1278472 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2831. IWbemServices::Connect
  2832. ***** 03:23:32.694 Grp=370801 Op=370802 _ClientProcessId=1278472 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2833. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2834. ***** 03:23:32.711 Grp=370804 _ClientProcessId=1275896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2835. IWbemServices::Connect
  2836. ***** 03:23:32.713 Grp=370805 Op=370806 _ClientProcessId=1275896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2837. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2838. ***** 03:23:32.716 Grp=370807 _ClientProcessId=1262384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2839. IWbemServices::Connect
  2840. ***** 03:23:32.719 Grp=370809 Op=370810 _ClientProcessId=1262384 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2841. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2842. ***** 03:23:32.770 Grp=370812 _ClientProcessId=1278900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2843. IWbemServices::Connect
  2844. ***** 03:23:32.773 Grp=370813 Op=370814 _ClientProcessId=1278900 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2845. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2846. ***** 03:23:32.797 Grp=370815 _ClientProcessId=1262824 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2847. IWbemServices::Connect
  2848. ***** 03:23:32.800 Grp=370816 Op=370817 _ClientProcessId=1262824 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2849. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2850. ***** 03:23:33.145 Grp=370820 _ClientProcessId=1278760 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2851. IWbemServices::Connect
  2852. ***** 03:23:33.148 Grp=370821 _ClientProcessId=1277764 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2853. IWbemServices::Connect
  2854. ***** 03:23:33.149 Grp=370822 _ClientProcessId=1258040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2855. IWbemServices::Connect
  2856. ***** 03:23:33.149 Grp=370823 Op=370824 _ClientProcessId=1278760 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2857. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2858. ***** 03:23:33.151 Grp=370826 Op=370827 _ClientProcessId=1277764 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2859. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2860. ***** 03:23:33.152 Grp=370828 Op=370829 _ClientProcessId=1258040 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2861. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2862. ***** 03:23:33.166 Grp=370832 _ClientProcessId=1262100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2863. IWbemServices::Connect
  2864. ***** 03:23:33.169 Grp=370833 Op=370834 _ClientProcessId=1262100 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2865. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2866. ***** 03:23:34.123 Grp=370836 _ClientProcessId=1272896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2867. IWbemServices::Connect
  2868. ***** 03:23:34.128 Grp=370837 Op=370838 _ClientProcessId=1272896 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2869. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2870. ***** 03:23:35.243 Stop Op=370728 0x0
  2871. ***** 03:23:35.243 Stop Op=370730 0x0
  2872. ***** 03:23:35.351 Grp=370840 _ClientProcessId=1277268 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2873. IWbemServices::Connect
  2874. ***** 03:23:35.422 Grp=370841 Op=370842 _ClientProcessId=1277268 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2875. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2876. ***** 03:23:37.093 Grp=370844 _ClientProcessId=1262856 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2877. IWbemServices::Connect
  2878. ***** 03:23:37.100 Grp=370845 Op=370846 _ClientProcessId=1262856 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2879. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2880. ***** 03:23:38.048 Stop Op=370668 0x0
  2881. ***** 03:23:38.048 Stop Op=370670 0x0
  2882. ***** 03:23:38.069 Stop Op=370704 0x0
  2883. ***** 03:23:38.069 Stop Op=370706 0x0
  2884. ***** 03:23:39.268 Grp=370848 _ClientProcessId=41748 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2885. IWbemServices::Connect
  2886. ***** 03:23:39.279 Grp=370849 Op=370850 _ClientProcessId=41748 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2887. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2888. ***** 03:23:39.688 Stop Op=370724 0x0
  2889. ***** 03:23:39.688 Stop Op=370726 0x0
  2890. ***** 03:23:39.827 Stop Op=370712 0x0
  2891. ***** 03:23:39.827 Stop Op=370714 0x0
  2892. ***** 03:23:40.257 Stop Op=370744 0x0
  2893. ***** 03:23:40.257 Stop Op=370746 0x0
  2894. ***** 03:23:40.510 Grp=370852 _ClientProcessId=1177088 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2895. IWbemServices::Connect
  2896. ***** 03:23:40.514 Grp=370853 Op=370854 _ClientProcessId=1177088 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2897. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2898. ***** 03:23:40.515 Grp=370855 _ClientProcessId=1258356 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2899. IWbemServices::Connect
  2900. ***** 03:23:40.516 Grp=370856 _ClientProcessId=1275416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2901. IWbemServices::Connect
  2902. ***** 03:23:40.518 Grp=370857 Op=370858 _ClientProcessId=1258356 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2903. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2904. ***** 03:23:40.521 Grp=370860 Op=370861 _ClientProcessId=1275416 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2905. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2906. ***** 03:23:40.595 Stop Op=370716 0x0
  2907. ***** 03:23:40.595 Stop Op=370719 0x0
  2908. ***** 03:23:40.991 Stop Op=370612 0x0
  2909. ***** 03:23:40.991 Stop Op=370614 0x0
  2910. ***** 03:23:41.048 Stop Op=370740 0x0
  2911. ***** 03:23:41.048 Stop Op=370742 0x0
  2912. ***** 03:23:41.150 Grp=370864 _ClientProcessId=1278804 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2913. IWbemServices::Connect
  2914. ***** 03:23:41.153 Grp=370865 Op=370866 _ClientProcessId=1278804 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2915. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2916. ***** 03:23:41.270 Stop Op=370748 0x0
  2917. ***** 03:23:41.270 Stop Op=370750 0x0
  2918. ***** 03:23:41.739 Grp=370868 _ClientProcessId=1269340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2919. IWbemServices::Connect
  2920. ***** 03:23:41.743 Grp=370869 Op=370870 _ClientProcessId=1269340 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2921. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2922. ***** 03:23:42.007 Stop Op=370753 0x0
  2923. ***** 03:23:42.007 Stop Op=370755 0x0
  2924. ***** 03:23:42.292 Grp=370872 _ClientProcessId=1273304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2925. IWbemServices::Connect
  2926. ***** 03:23:42.301 Grp=370873 Op=370874 _ClientProcessId=1273304 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2927. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2928. ***** 03:23:43.692 Stop Op=370736 0x0
  2929. ***** 03:23:43.692 Stop Op=370738 0x0
  2930. ***** 03:23:43.924 Grp=370876 _ClientProcessId=970740 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2931. IWbemServices::Connect
  2932. ***** 03:23:43.926 Grp=370877 Op=370878 _ClientProcessId=970740 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2933. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2934. ***** 03:23:44.042 Stop Op=370732 0x0
  2935. ***** 03:23:44.042 Stop Op=370734 0x0
  2936. ***** 03:23:44.100 Stop Op=370469 0x0
  2937. ***** 03:23:44.100 Stop Op=370471 0x0
  2938. ***** 03:23:44.266 Grp=370880 _ClientProcessId=1272736 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2939. IWbemServices::Connect
  2940. ***** 03:23:44.271 Grp=370881 Op=370882 _ClientProcessId=1272736 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2941. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2942. ***** 03:23:44.350 Stop Op=370533 0x0
  2943. ***** 03:23:44.350 Stop Op=370535 0x0
  2944. ***** 03:23:45.043 Grp=370884 _ClientProcessId=1276720 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2945. IWbemServices::Connect
  2946. ***** 03:23:45.095 Grp=370885 Op=370886 _ClientProcessId=1276720 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2947. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2948. ***** 03:23:45.505 Stop Op=370505 0x0
  2949. ***** 03:23:45.505 Stop Op=370507 0x0
  2950. ***** 03:23:45.619 Grp=370888 _ClientProcessId=1260732 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2951. IWbemServices::Connect
  2952. ***** 03:23:45.622 Grp=370889 Op=370890 _ClientProcessId=1260732 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2953. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2954. ***** 03:23:45.784 Grp=370892 _ClientProcessId=1277412 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2955. IWbemServices::Connect
  2956. ***** 03:23:45.787 Grp=370893 Op=370894 _ClientProcessId=1277412 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2957. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2958. ***** 03:23:46.373 Grp=370896 _ClientProcessId=1262324 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2959. IWbemServices::Connect
  2960. ***** 03:23:46.386 Grp=370897 Op=370898 _ClientProcessId=1262324 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2961. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2962. ***** 03:23:48.099 Stop Op=370685 0x0
  2963. ***** 03:23:48.099 Stop Op=370690 0x0
  2964. ***** 03:23:48.422 Stop Op=370765 0x0
  2965. ***** 03:23:48.422 Stop Op=370767 0x0
  2966. ***** 03:23:49.033 Stop Op=370785 0x0
  2967. ***** 03:23:49.033 Stop Op=370787 0x0
  2968. ***** 03:23:49.106 Stop Op=370793 0x0
  2969. ***** 03:23:49.106 Stop Op=370798 0x0
  2970. ***** 03:23:49.113 Stop Op=370812 0x0
  2971. ***** 03:23:49.113 Stop Op=370814 0x0
  2972. ***** 03:23:49.420 Stop Op=370800 0x0
  2973. ***** 03:23:49.420 Stop Op=370802 0x0
  2974. ***** 03:23:49.487 Grp=370900 _ClientProcessId=1278296 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2975. IWbemServices::Connect
  2976. ***** 03:23:49.490 Grp=370901 Op=370902 _ClientProcessId=1278296 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2977. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2978. ***** 03:23:49.964 Stop Op=370792 0x0
  2979. ***** 03:23:49.964 Stop Op=370795 0x0
  2980. ***** 03:23:50.709 Stop Op=370717 0x0
  2981. ***** 03:23:50.709 Stop Op=370721 0x0
  2982. ***** 03:23:50.808 Grp=370904 _ClientProcessId=1278252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2983. IWbemServices::Connect
  2984. ***** 03:23:50.811 Grp=370905 Op=370906 _ClientProcessId=1278252 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2985. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2986. ***** 03:23:50.832 Stop Op=370529 0x0
  2987. ***** 03:23:50.832 Stop Op=370531 0x0
  2988. ***** 03:23:50.872 Stop Op=370575 0x0
  2989. ***** 03:23:50.872 Stop Op=370579 0x0
  2990. ***** 03:23:50.947 Stop Op=370652 0x0
  2991. ***** 03:23:50.947 Stop Op=370654 0x0
  2992. ***** 03:23:50.985 Grp=370908 _ClientProcessId=915012 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2993. IWbemServices::Connect
  2994. ***** 03:23:50.988 Grp=370909 Op=370910 _ClientProcessId=915012 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2995. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  2996. ***** 03:23:51.081 Grp=370912 _ClientProcessId=1269624 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2997. IWbemServices::Connect
  2998. ***** 03:23:51.084 Grp=370913 Op=370914 _ClientProcessId=1269624 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  2999. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  3000. ***** 03:23:51.099 Stop Op=370820 0x0
  3001. ***** 03:23:51.099 Stop Op=370824 0x0
  3002. ***** 03:23:51.137 Stop Op=370648 0x0
  3003. ***** 03:23:51.137 Stop Op=370650 0x0
  3004. ***** 03:23:51.288 Grp=370916 _ClientProcessId=1278548 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  3005. IWbemServices::Connect
  3006. ***** 03:23:51.291 Grp=370917 Op=370918 _ClientProcessId=1278548 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  3007. Start IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
  3008. ***** 03:23:51.412 Stop Op=370832 0x0
  3009. ***** 03:23:51.412 Stop Op=370834 0x0
  3010. ***** 03:23:51.483 Stop Op=370769 0x0
  3011. ***** 03:23:51.483 Stop Op=370771 0x0
  3012. ***** 03:23:51.774 Stop Op=370751 0x0
  3013. ***** 03:23:51.774 Stop Op=370790 0x0
  3014. ***** 03:23:51.860 Stop Op=370836 0x0
  3015. ***** 03:23:51.860 Stop Op=370838 0x0
  3016. ***** 03:23:51.968 Stop Op=370773 0x0
  3017. ***** 03:23:51.968 Stop Op=370775 0x0
  3018. ***** 03:23:52.071 Stop Op=370696 0x0
  3019. ***** 03:23:52.071 Stop Op=370698 0x0
  3020. ***** 03:23:52.236 Grp=370920 _ClientProcessId=1272768 [tasklist.exe] DESKTOP-HCTVPUG DESKTOP-HCTVPUG\Gaurav Sood
  3021. IWbemServices::Connect
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!