qwinsta

Tool

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 11, 2025

Last Seen

November 11, 2025

qwinsta (Query Session) is a Windows command-line utility that lists active and disconnected user sessions on a local or remote host.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Articles (1)

How a CPU spike led to uncovering a RansomHub ransomware attack

Bleepingcomputer·Nov 11

Related Entities

Ransomware Microsoft Azure SocGhoulish Active Directory Azure Storage Microsoft Office Ransomhub AzCopy netsh.exe Nltest ping quser