Overview

overview

10

Static

static

6

2003/OffScrub03.vbs

windows7_x64

1

2003/OffScrub03.vbs

windows10_x64

1

2007/OffScrub07.vbs

windows7_x64

1

2007/OffScrub07.vbs

windows10_x64

1

2010/OffScrub10.vbs

windows7_x64

1

2010/OffScrub10.vbs

windows10_x64

1

2013/OffSc...si.vbs

windows7_x64

1

2013/OffSc...si.vbs

windows10_x64

1

2016/OffSc...si.vbs

windows7_x64

1

2016/OffSc...si.vbs

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

3

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...07.vbs

windows7_x64

1

MicrosoftF...07.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...VR.ps1

windows7_x64

1

MicrosoftF...VR.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

9

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

3

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...03.vbs

windows7_x64

1

MicrosoftF...03.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

3

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

9

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...10.vbs

windows7_x64

1

MicrosoftF...10.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

10

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

3

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

Native‘Script.cmd

windows7_x64

1

Native‘Script.cmd

windows10_x64

1

CL_OfficeU...ll.ps1

windows7_x64

1

CL_OfficeU...ll.ps1

windows10_x64

1

CL_RemoveNoOffice.ps1

windows7_x64

1

CL_RemoveNoOffice.ps1

windows10_x64

1

CL_RemoveO...03.ps1

windows7_x64

1

CL_RemoveO...03.ps1

windows10_x64

1

CL_RemoveO...07.ps1

windows7_x64

1

CL_RemoveO...07.ps1

windows10_x64

1

CL_RemoveO...10.ps1

windows7_x64

1

CL_RemoveO...10.ps1

windows10_x64

1

CL_RemoveO...13.ps1

windows7_x64

1

CL_RemoveO...13.ps1

windows10_x64

1

CL_RemoveO...16.ps1

windows7_x64

1

CL_RemoveO...16.ps1

windows10_x64

1

DiagPackage.dll

windows7_x64

1

DiagPackage.dll

windows10_x64

1

RC_MultipleOffice.ps1

windows7_x64

1

RC_MultipleOffice.ps1

windows10_x64

1

RC_NoOffice.ps1

windows7_x64

1

RC_NoOffice.ps1

windows10_x64

1

RC_SingleOffice.ps1

windows7_x64

1

RC_SingleOffice.ps1

windows10_x64

1

RS_MultipleOffice.ps1

windows7_x64

1

RS_MultipleOffice.ps1

windows10_x64

1

RS_NoOffice.ps1

windows7_x64

1

RS_NoOffice.ps1

windows10_x64

1

RS_SingleOffice.ps1

windows7_x64

1

RS_SingleOffice.ps1

windows10_x64

1

TS_Main.ps1

windows7_x64

1

TS_Main.ps1

windows10_x64

1

VF_MultipleOffice.ps1

windows7_x64

1

VF_MultipleOffice.ps1

windows10_x64

1

VF_NoOffice.ps1

windows7_x64

1

VF_NoOffice.ps1

windows10_x64

1

VF_SingleOffice.ps1

windows7_x64

1

VF_SingleOffice.ps1

windows10_x64

1

O365/OffScrubC2R.vbs

windows7_x64

8

O365/OffScrubC2R.vbs

windows10_x64

8

Analysis

  • max time kernel
    68s
  • max time network
    134s
  • platform
    windows10_x64
  • resource
    win10v200722
  • submitted
    22-10-2020 07:40

General

  • Target

    MoreOption/Win8RC.TS.ps1

  • Size

    10KB

  • MD5

    9a71209914cf8447adb6a58604520eab

  • SHA1

    23709fbf7314235d3a9eec2acb2514b963bca418

  • SHA256

    7b98f9e1b4af442fb337f7059aeabfb27441da41d18822e7e2022220f5731d2e

  • SHA512

    3407ab7a5f5a22df0c948f5da7d5b181fcd73efb953b9a835bcd626deb36a4095a6f1b82c4ddc6e28ce93a26452c926bfcc1346895addb84171f3b6d7c3cb891

Score
8/10

Malware Config

Signatures

  • Blacklisted process makes network request 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\MoreOption\Win8RC.TS.ps1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:796
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -executionpolicy unrestricted -command C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\ProcessLTSReport.ps1
      2⤵
      • Blacklisted process makes network request
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3424
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\LTSCleanup.ps1
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

    MD5

    ea6243fdb2bfcca2211884b0a21a0afc

    SHA1

    2eee5232ca6acc33c3e7de03900e890f4adf0f2f

    SHA256

    5bc7d9831ea72687c5458cae6ae4eb7ab92975334861e08065242e689c1a1ba8

    SHA512

    189db6779483e5be80331b2b64e17b328ead5e750482086f3fe4baae315d47d207d88082b323a6eb777f2f47e29cac40f37dda1400462322255849cbcc973940

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

    MD5

    67a71d34175cb6068cf5cfddf3bcd4d4

    SHA1

    373f8c1969ad7174e4844d6a524578fd312b57b9

    SHA256

    30b09da8366e32e70907fa807f7efc39c9c2cd6bd96a5196ea87c7e3c3ec1f1d

    SHA512

    208dd467bd7b2de4b5c21af2f4338a8e8cb27f060e0ad23f210ff19519061efb30939b94fba96b92ba6a579ca0f183265d2471abdfef782f1630fd77c154e24e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

    MD5

    67a71d34175cb6068cf5cfddf3bcd4d4

    SHA1

    373f8c1969ad7174e4844d6a524578fd312b57b9

    SHA256

    30b09da8366e32e70907fa807f7efc39c9c2cd6bd96a5196ea87c7e3c3ec1f1d

    SHA512

    208dd467bd7b2de4b5c21af2f4338a8e8cb27f060e0ad23f210ff19519061efb30939b94fba96b92ba6a579ca0f183265d2471abdfef782f1630fd77c154e24e

  • C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\LTSCleanup.ps1

    MD5

    fcfddb3ebe9574ad1dfa1839aec67232

    SHA1

    9b9b649bc0bc18f1228d4b46ea5137c02566b5e8

    SHA256

    71998ac10c3c273d512cd156904fba532a253058060b1bf6152985510c75817a

    SHA512

    0f5d4b637b54152e937f4772f77ceba2c6fab702fe042aad93850d4dd8b7963e99207dc7ec058312319f7e5a16dd16ed054ed98bbc6b93b06b0b11402c639922

  • C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\Lts_amd64.dll

    MD5

    0bb6bdf5c6b40b753520c9b9cb96747f

    SHA1

    64cd0cf38065757a614ac093f1e3a715a970fea6

    SHA256

    70ea558e5e169505c5fdfd8a9d58dcecb47a73784a3075089304aa0805074b84

    SHA512

    b3cc8e4fe06f12f6308d1ef71811c9955a02c605f4f1326eb2144dd3ba75997103104e314ac0acc949cc31710fdae3f9dbe1c72b2a8ef87025bb31709746e677

  • C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\Lts_x86.dll

    MD5

    b1cd3050f7241e4a238f1c08766df4c8

    SHA1

    b2590f4ad227a852da9a84e9095e74dc545b3bd1

    SHA256

    146047bd5e4680263060291694fb1ac74ba3565ecdfa65d92902a29f2d7bb16e

    SHA512

    198017aebbc2c095cb9783a73aa83991db7bec25b8c9094ea915d52fe5f9f3241e31f2f177887e9f8331fe4e88778e4c935651e50197f3bbcaa8d23e745dca54

  • C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\Microsoft.Support.Diagnostic.MiniPack.LtsBoot.dll

    MD5

    8dcf01cd0b2dac15e78394e60b296b57

    SHA1

    0699560bea68710a137fab2807c6007d28099151

    SHA256

    869d2b4998c31e5e07135b84334eb0c42518177ca6f20feb7fae6ba9c04ec5bf

    SHA512

    8221d06f090269378316cc123906fff51322403b68d7d62189319ab8550f8bf3f8ba28ad64627de2424ff7febf3ab757280e206c16d8681bce58d51eb877cead

  • C:\Users\Admin\AppData\Local\Temp\MinipackTEMP_10222020_095019\ProcessLTSReport.ps1

    MD5

    eba14689c700d5ff7ec65a0ada255cd5

    SHA1

    348def56a79f15c85e14f3b6055935a4a7e6a62b

    SHA256

    40822cbb111ebb5d35d8629ffd4ecc86ad43391103b08315d434710167863037

    SHA512

    9bac89873521cf4cff5c23ba42ca16e85af376015e5cf8fd9ae81d71bc0d1f7e3b653a3da6c60b715057c35d6dcad09acd92672e48b3838dd015b68a05bd90cc

  • memory/796-1-0x0000017EE05C0000-0x0000017EE05C1000-memory.dmp

    Filesize

    4KB

  • memory/796-2-0x0000017EE0770000-0x0000017EE0771000-memory.dmp

    Filesize

    4KB

  • memory/796-0-0x00007FFE435A0000-0x00007FFE43F8C000-memory.dmp

    Filesize

    9.9MB

  • memory/1452-11-0x0000000000000000-mapping.dmp

  • memory/1452-14-0x00007FFE435A0000-0x00007FFE43F8C000-memory.dmp

    Filesize

    9.9MB

  • memory/3424-9-0x0000012FCED90000-0x0000012FCED91000-memory.dmp

    Filesize

    4KB

  • memory/3424-4-0x00007FFE435A0000-0x00007FFE43F8C000-memory.dmp

    Filesize

    9.9MB

  • memory/3424-3-0x0000000000000000-mapping.dmp