Glossary
ActiveScriptEventConsumer
The standard WMI consumer that runs VBScript or JScript, inline (ScriptText) or from a file (ScriptFilename), in scrcons.exe as SYSTEM.
ActiveScriptEventConsumer runs a script when its filter fires. ScriptingEngine is VBScript or JScript; the code is either inline in ScriptText or in a file named by ScriptFilename. The script runs in scrcons.exe as SYSTEM.
Few legitimate products use it, so any instance deserves a read of the script. Because the code can live entirely inside OBJECTS.DATA, it leaves no script file on disk.