This is a Windows system installed file with Windows File Protection (WFP) enabled.
There are 65 versions of wscript.exe in the wild, the latest version being 5.8.9600.16384. wscript.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. In addition the the run registry key, it also creates a scheduled job to be executed by the Windows Task Scheduler up user login, this is typically done in order to bypass a User Account Control (UAC) prompt. The average file size is about 187.86 KB. Numerous variations of wscript.exe have been installed with both Location Saisonniere and EVViewer. During the process's lifecycle, the typical CPU resource utilization is about 0.0016% including both foreground and background operations, the average private memory consumption is about 6.66 MB with the maximum memory reaching around 11.85 MB. Addionally, typically read and write I/O disk operations is about 12.83 KB per minute for reads and 20.18 KB per minute for writes.
The Microsoft Windows Script Host (WSH) is an automation technology for Microsoft Windows that provides scripting abilities comparable to batch files, but with a wider range of supported features. It was originally called Windows Scripting Host, but was renamed for the second release.
(Note, the programs listed below are for all versions of Microsoft ® Windows Script Host.)
(Note, the behaviors below are for all versions of wscript.exe, select a unique version for details.)
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
United States installs about 54.00% of Microsoft ® Windows Script Host.