cscript.exe
Microsoft Windows Script Host by Microsoft
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
cscript.exe has 11 known versions, the most recent one is 5.8.9600.16384. The process utilizes the Windows Task Scheduler to automatically launch the file as a process when a user logs into Windows. The average file size is about 133.77 KB. Numerous variations of cscript.exe have been installed with both SecureVue Agent and WifiDisabler.
 Details
|
| File name: | cscript.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft ® Windows Script Host |
| Description: | Microsoft ® Console Based Script Host |
| Typical file path: | C:\windows\syswow64\cscript.exe |
| Original name: | cscript.exe.mui |
Programs installed in
(Note, the programs listed below are for all versions of Microsoft ® Windows Script Host.)
Behaviors
(Note, the behaviors below are for all versions of cscript.exe, select a unique version for details.)
Shell open commands
- vbefile
- VBSFile
- jsefile
- JSFile
Scheduled tasks
- The job '060184C3-9766-46a0-B258-F4518A0B2633' runs on logon in the path '\060184C3-9766-46a0-B258-F4518A0B2633'
- Entry path '\Microsoft\Windows\Server Manager\CleanupOldPerfLogs'
Startup files (user) run once
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'Ignite' → C:\Windows\System32\cscript.exe "C:\users\user\appdata\Local\Temp\kill_Ignite_runonce.vbs"
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\060184C3-9766-46a0-B258-F4518A0B2633'
All file variations of cscript.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
38.78% |
|
| Windows 7 Home Premium |
28.57% |
|
| Windows 8 Pro with Media Center |
10.20% |
|
| Windows 8 |
8.16% |
|
| Windows 8.1 |
6.12% |
|
| Windows 8 Single Language |
2.04% |
|
| Windows 8.1 Pro |
2.04% |
|
| Windows 8.1 Single Language |
2.04% |
|
| Windows Server 2012 Standard Evaluation |
2.04% |
|
Distribution by country
Ireland installs about 17.78% of Microsoft ® Windows Script Host.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
39.47% |
|
| GIGABYTE |
21.05% |
|
| Hewlett-Packard |
15.79% |
|
| Lenovo |
10.53% |
|
| Medion |
5.26% |
|
| Sony |
5.26% |
|
| Samsung |
2.63% |
|
