home

wscript.exe

Microsoft Windows Script Host

Microsoft Corporation

Publisher:
Microsoft Corporation

Product:
Microsoft (R) Windows Script Host

Description:
Microsoft (R) Windows Based Script Host

 
Part of the Windows Operating System

Version:
5.7.0.18066

MD5:
cea8f7e45b7b098f5fb085bb6a6a4432

SHA-1:
36632da9b915460f45ffdf040c459bc4ab9cb05a

SHA-256:
2f68aef4c0396fbd6591295465a00bb101471ffa720e55bf0d63f65d3aef69b1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/5/2024 3:34:03 PM UTC  (today)

File size:
152 KB (155,648 bytes)

Product version:
5.7.0.18066

Copyright:
Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved

Original file name:
wscript.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\wscript.exe

File PE Metadata
Compilation timestamp:
5/3/2008 4:13:58 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
3072:cCW3zWV6TUhD7rbfUKExe4oNkq0xTacgBTxt/i:rW36RPb3Exe4OkqMkT

Entry address:
0x2EBA

Entry point:
8B, FF, 55, 8B, EC, 83, EC, 44, 56, E8, F3, 0D, 00, 00, 68, 50, 2F, 00, 01, B8, 4C, 2F, 00, 01, E8, 92, 00, 00, 00, B8, 44, 2F, 00, 01, C7, 04, 24, 48, 2F, 00, 01, E8, 81, 00, 00, 00, 59, 8D, 45, BC, 33, F6, 50, 89, 75, E8, FF, 15, A8, 11, 00, 01, F6, 45, E8, 01, 0F, 84, 1B, 2E, 00, 00, 0F, B7, 45, EC, 50, 56, 56, 56, FF, 15, A4, 11, 00, 01, 50, E8, 77, 00, 00, 00, 8B, F0, 68, 58, 2F, 00, 01, B8, 54, 2F, 00, 01, E8, 42, 00, 00, 00, B8, 5C, 2F, 00, 01, C7, 04, 24, 60, 2F, 00, 01, E8, 31, 00, 00, 00, 59, 56...
 
[+]

Entropy:
5.5887

Code size:
96 KB (98,304 bytes)

The file wscript.exe has been seen being distributed by the following 2 URLs.

https://senaintro.blackboard.com/courses/1/P521213_F1131166_R1130238_RG41_C9527/db/.../wscript.exe

http://dd2.pc6.com/.../wscript.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.