- Feb 8, 2019
- 1
Hello,
I have a question for you, this is after I looked at a triage using RedLine on my machine. I wanted to know what the following commands are doing:
“C:\WINDOWS\system32\cscript.exe //E:vbscript //Nologo C:\WINDOWS\TEMP\m_a7F83.tmp,”
“C:\WINDOWS\System32\netsh.exe wlan show interfaces,”
“\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1,”
“C:\WINDOWS\System32\netsh.exe wlan show drivers,”
“C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvc”
Is this normal behavior?
I have a question for you, this is after I looked at a triage using RedLine on my machine. I wanted to know what the following commands are doing:
“C:\WINDOWS\system32\cscript.exe //E:vbscript //Nologo C:\WINDOWS\TEMP\m_a7F83.tmp,”
“C:\WINDOWS\System32\netsh.exe wlan show interfaces,”
“\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1,”
“C:\WINDOWS\System32\netsh.exe wlan show drivers,”
“C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvc”
Is this normal behavior?