Detects Wscript/Cscript executing a file with an uncommon (i.e. non-script) extension
Read the full analysis on IntelFusions