Detects the creation of the default output filename used by the wmiexec tool
Read the full analysis on IntelFusions