There are a handful of file types that Windows will process with WSH and disabling this defends the computer from some attacks.
One of the many Defensive Computing tweaks I make to a new PC, is to disable a rarely used OS feature, the Windows Scripting Host (aka WSH), which has been abused by malicious email attachments. Once upon a time, I was setting up a new Windows 10 computer running Service Pack 1903. TLDR: Microsoft makes miserable software.
