wshext.dll
Microsoft Shell Extension for Windows Script Host file version info
Library on Windows 2 known copies with hashes
Is it the real wshext.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Script Host, Microsoft Corporation
DescriptionMicrosoft Shell Extension for Windows Script Host
2 known copies
5.812.10240.16384 · C:\Windows\system32\wshext.dll · signed by Microsoft Windows
8b037fc1f5ca9321e583ffa65df6fa3269eeca1bee95483b90780eceb2199ced5.812.10240.16384 · C:\Windows\SysWOW64\wshext.dll · signed by Microsoft Windows
cc8c7631f489f95c2302d20faece43cefb343dda958dc5c345a59bbd2674096cFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.