@@ -30,41 +30,41 @@ def ScanWMI():
3030 lActiveScriptEventConsumer = []
3131 try :
3232 leventFilter = oWMI .__eventFilter ()
33- except :
33+ except Exception :
3434 logger .log ("WARNING" , "WMIScan" , 'Error retrieving __eventFilter' )
3535 try :
3636 lFilterToConsumerBinding = oWMI .__FilterToConsumerBinding ()
37- except :
37+ except Exception :
3838 logger .log ("WARNING" , "WMIScan" , 'Error retrieving __FilterToConsumerBinding' )
3939 try :
4040 lCommandLineEventConsumer = oWMI .CommandLineEventConsumer ()
41- except :
41+ except Exception :
4242 logger .log ("WARNING" , "WMIScan" , 'Error retrieving CommandLineEventConsumer' )
4343 try :
4444 lActiveScriptEventConsumer = oWMI .ActiveScriptEventConsumer ()
45- except :
45+ except Exception :
4646 logger .log ("WARNING" , "WMIScan" , 'Error retrieving ActiveScriptEventConsumer' )
4747
4848 for eventFilter in leventFilter :
4949 try :
5050 hashEntry = hashlib .md5 (str (eventFilter )).hexdigest ()
5151 if hashEntry not in knownHashes :
5252 logger .log ("WARNING" , "WMIScan" , 'CLASS: __eventFilter MD5: %s NAME: %s QUERY: %s' % (hashEntry , eventFilter .wmi_property ('Name' ).value , eventFilter .wmi_property ('Query' ).value ))
53- except :
53+ except Exception :
5454 logger .log ("INFO" , "WMIScan" , repr (str (eventFilter )))
5555 for FilterToConsumerBinding in lFilterToConsumerBinding :
5656 try :
5757 hashEntry = hashlib .md5 (str (FilterToConsumerBinding )).hexdigest ()
5858 if hashEntry not in knownHashes :
5959 logger .log ("WARNING" , "WMIScan" , 'CLASS: __FilterToConsumerBinding MD5: %s CONSUMER: %s FILTER: %s' % (hashEntry , FilterToConsumerBinding .wmi_property ('Consumer' ).value , FilterToConsumerBinding .wmi_property ('Filter' ).value ))
60- except :
60+ except Exception :
6161 logger .log ("INFO" , "WMIScan" , repr (str (FilterToConsumerBinding )))
6262 for CommandLineEventConsumer in lCommandLineEventConsumer :
6363 try :
6464 hashEntry = hashlib .md5 (str (CommandLineEventConsumer )).hexdigest ()
6565 if hashEntry not in knownHashes :
6666 logger .log ("WARNING" , "WMIScan" , 'CLASS: CommandLineEventConsumer MD5: %s NAME: %s COMMANDLINETEMPLATE: %s' % (hashEntry , CommandLineEventConsumer .wmi_property ('Name' ).value , CommandLineEventConsumer .wmi_property ('CommandLineTemplate' ).value ))
67- except :
67+ except Exception :
6868 logger .log ("INFO" , "WMIScan" , repr (str (CommandLineEventConsumer )))
6969 for ActiveScriptEventConsumer in lActiveScriptEventConsumer :
7070 logger .log ("INFO" , "WMIScan" , repr (str (ActiveScriptEventConsumer )))
0 commit comments