Gridinsoft Logo
File Icon

The wscript.exe (Microsoft ® Windows Based Script Host) File Analysis

Updated 1 year ago
Checked by Malware Check
wscript.exe

Technical Analysis

File Name wscript.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.143.174
Database Version 2023-10-24 08:02:05 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
168,960
File Size (bytes)
2023-10-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
045451fa238a75305cc26ac982472367
SHA1
2131cff0959d213cd9a5e8a8ac362d265d5b1316
SHA256
9c8a1b52a638ca87a5e7e60e635a3cbf89b04f5888995f55e2ad3d94ab009b97
SHA512
2dec7c46e5c84d3d3ea2a7bbd46e4563cad8380236cd937f23e8be85426736357fd2bea99a58c56cf5ed448412e7b189ca8820ea19697ce58e59d1991a66570a
ImpHash
7b5674bd1c2bbf9e981dad834013af2e

PE Analysis

Basic Information

▼
Icon
Hash: 3e9f37650d2738f57fdc6ba2dd9ad379
Fuzzy: cbeee02d129f2ded45884f420361d51b
dHash: 2c4c1068ac2c6c10
Image Base 0x100000000
Entry Point 0x100009734
Compilation Time 2013-10-12 01:33:26
Checksum 0x0002cc25 (Actual: 0x0002cc25)
OS Version 6.1
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path wscript.pdb
Digital Signature The PE file does not contain a certificate table.
Imports 7 libraries
ADVAPI32, KERNEL32, USER32, msvcrt, OLEAUT32, ole32, VERSION
Exports 1 functions
Resources 30 Resources
Sections 5 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft ® Windows Based Script Host
FileVersion 5.8.7601.18283
InternalName wscript.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename wscript.exe
ProductName Microsoft ® Windows Script Host
ProductVersion 5.8.7601.18283
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 120,712 bytes 120,832 bytes 5.92 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8C24EAAE8B5741EC789522CF9296D8C2
.data 0x0001f000 3,236 bytes 2,048 bytes 3.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 44E3F8F122FA670D99B06E3BCC01EBDC
.pdata 0x00020000 3,564 bytes 3,584 bytes 5.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D9B5266419853A5FF73ED9510F72FA52
.rsrc 0x00021000 38,072 bytes 38,400 bytes 4.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E6CAA1FEF2A718690150237532EC2E84
.reloc 0x0002b000 2,736 bytes 3,072 bytes 4.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 38CE0205AA97CD2D795BB2B74D34CF80

Resource Analysis

▼
Total Resources: 30 (36,378 bytes)
Resource Type Count Total Size Percentage
MUI 1 224 bytes
0.6%
TYPELIB 2 23,916 bytes
65.7%
RT_ICON 8 4,160 bytes
11.4%
RT_STRING 14 7,054 bytes
19.4%
RT_GROUP_ICON 4 136 bytes
0.4%
RT_VERSION 1 888 bytes
2.4%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft ® Windows Script Host
Description Microsoft ® Windows Based Script Host
File Version 5.8.7601.18283
Original Name wscript.exe
Internal Name wscript.exe
Copyright © Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware