Overview

overview

10

Static

static

6

2003/OffScrub03.vbs

windows7_x64

1

2003/OffScrub03.vbs

windows10_x64

1

2007/OffScrub07.vbs

windows7_x64

1

2007/OffScrub07.vbs

windows10_x64

1

2010/OffScrub10.vbs

windows7_x64

1

2010/OffScrub10.vbs

windows10_x64

1

2013/OffSc...si.vbs

windows7_x64

1

2013/OffSc...si.vbs

windows10_x64

1

2016/OffSc...si.vbs

windows7_x64

1

2016/OffSc...si.vbs

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

3

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...07.vbs

windows7_x64

1

MicrosoftF...07.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...VR.ps1

windows7_x64

1

MicrosoftF...VR.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

9

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

3

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...03.vbs

windows7_x64

1

MicrosoftF...03.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

3

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MicrosoftF...er.ps1

windows7_x64

1

MicrosoftF...er.ps1

windows10_x64

1

MicrosoftF...ge.dll

windows7_x64

1

MicrosoftF...ge.dll

windows10_x64

1

MicrosoftF...64.dll

windows7_x64

1

MicrosoftF...64.dll

windows10_x64

3

MicrosoftF...86.dll

windows7_x64

1

MicrosoftF...86.dll

windows10_x64

9

MicrosoftF...ot.dll

windows7_x64

1

MicrosoftF...ot.dll

windows10_x64

1

MicrosoftF...10.vbs

windows7_x64

1

MicrosoftF...10.vbs

windows10_x64

1

MicrosoftF...rt.ps1

windows7_x64

1

MicrosoftF...rt.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

10

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

1

MicrosoftF...TS.ps1

windows10_x64

1

MicrosoftF...or.ps1

windows7_x64

8

MicrosoftF...or.ps1

windows10_x64

8

MicrosoftF...ry.ps1

windows7_x64

1

MicrosoftF...ry.ps1

windows10_x64

1

MicrosoftF...RS.ps1

windows7_x64

1

MicrosoftF...RS.ps1

windows10_x64

1

MicrosoftF...TS.ps1

windows7_x64

8

MicrosoftF...TS.ps1

windows10_x64

8

MicrosoftF...VF.ps1

windows7_x64

1

MicrosoftF...VF.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...on.ps1

windows7_x64

1

MicrosoftF...on.ps1

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MicrosoftF...ui.dll

windows7_x64

1

MicrosoftF...ui.dll

windows10_x64

1

MoreOption...er.ps1

windows7_x64

1

MoreOption...er.ps1

windows10_x64

1

MoreOption...ge.dll

windows7_x64

1

MoreOption...ge.dll

windows10_x64

1

MoreOption...64.dll

windows7_x64

1

MoreOption...64.dll

windows10_x64

3

MoreOption...86.dll

windows7_x64

1

MoreOption...86.dll

windows10_x64

3

MoreOption...ot.dll

windows7_x64

1

MoreOption...ot.dll

windows10_x64

1

MoreOption...rt.ps1

windows7_x64

1

MoreOption...rt.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...in.ps1

windows7_x64

1

MoreOption...in.ps1

windows10_x64

1

MoreOption...or.ps1

windows7_x64

8

MoreOption...or.ps1

windows10_x64

8

MoreOption...ry.ps1

windows7_x64

1

MoreOption...ry.ps1

windows10_x64

1

MoreOption...RS.ps1

windows7_x64

1

MoreOption...RS.ps1

windows10_x64

1

MoreOption...TS.ps1

windows7_x64

8

MoreOption...TS.ps1

windows10_x64

8

MoreOption...VF.ps1

windows7_x64

1

MoreOption...VF.ps1

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

MoreOption...ui.dll

windows7_x64

1

MoreOption...ui.dll

windows10_x64

1

Native‘Script.cmd

windows7_x64

1

Native‘Script.cmd

windows10_x64

1

CL_OfficeU...ll.ps1

windows7_x64

1

CL_OfficeU...ll.ps1

windows10_x64

1

CL_RemoveNoOffice.ps1

windows7_x64

1

CL_RemoveNoOffice.ps1

windows10_x64

1

CL_RemoveO...03.ps1

windows7_x64

1

CL_RemoveO...03.ps1

windows10_x64

1

CL_RemoveO...07.ps1

windows7_x64

1

CL_RemoveO...07.ps1

windows10_x64

1

CL_RemoveO...10.ps1

windows7_x64

1

CL_RemoveO...10.ps1

windows10_x64

1

CL_RemoveO...13.ps1

windows7_x64

1

CL_RemoveO...13.ps1

windows10_x64

1

CL_RemoveO...16.ps1

windows7_x64

1

CL_RemoveO...16.ps1

windows10_x64

1

DiagPackage.dll

windows7_x64

1

DiagPackage.dll

windows10_x64

1

RC_MultipleOffice.ps1

windows7_x64

1

RC_MultipleOffice.ps1

windows10_x64

1

RC_NoOffice.ps1

windows7_x64

1

RC_NoOffice.ps1

windows10_x64

1

RC_SingleOffice.ps1

windows7_x64

1

RC_SingleOffice.ps1

windows10_x64

1

RS_MultipleOffice.ps1

windows7_x64

1

RS_MultipleOffice.ps1

windows10_x64

1

RS_NoOffice.ps1

windows7_x64

1

RS_NoOffice.ps1

windows10_x64

1

RS_SingleOffice.ps1

windows7_x64

1

RS_SingleOffice.ps1

windows10_x64

1

TS_Main.ps1

windows7_x64

1

TS_Main.ps1

windows10_x64

1

VF_MultipleOffice.ps1

windows7_x64

1

VF_MultipleOffice.ps1

windows10_x64

1

VF_NoOffice.ps1

windows7_x64

1

VF_NoOffice.ps1

windows10_x64

1

VF_SingleOffice.ps1

windows7_x64

1

VF_SingleOffice.ps1

windows10_x64

1

O365/OffScrubC2R.vbs

windows7_x64

8

O365/OffScrubC2R.vbs

windows10_x64

8

Analysis

  • max time kernel
    137s
  • max time network
    115s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    22-10-2020 07:40

General

  • Target

    O365/OffScrubC2R.vbs

  • Size

    284KB

  • MD5

    930dc88edcdde90f7449ca55aa616928

  • SHA1

    e3ae471e645efe2beb61c8d6febe8a1bebf9a2ad

  • SHA256

    570f82344ad7300dd4a2993ad6c3a1abe1987f37254bff708dba1801bfef392c

  • SHA512

    d3f1bcfd409988d366b06563c2c5d27a1c7cdabaf4fc47a6d13d0a54b13931dbf340b1eabf2eeffecd0e982cd563792f6d91d779826657becad989050019ed38

Score
8/10

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 12 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Modifies Control Panel 8 IoCs
  • Modifies registry class 36 IoCs
  • Suspicious use of AdjustPrivilegeToken 74 IoCs
  • Suspicious use of FindShellTrayWindow 57 IoCs
  • Suspicious use of SendNotifyMessage 34 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\O365\OffScrubC2R.vbs"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3588
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c C:\Windows\System32\cscript.exe //NOLOGO "C:\Users\Admin\AppData\Local\Temp\O365\OffScrubC2R.vbs" "/ChangedScriptHost"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:184
      • C:\Windows\System32\cscript.exe
        C:\Windows\System32\cscript.exe //NOLOGO "C:\Users\Admin\AppData\Local\Temp\O365\OffScrubC2R.vbs" "/ChangedScriptHost"
        3⤵
          PID:1788
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Enumerates connected drives
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1928
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3260
    • C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
      "C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
      1⤵
      • Modifies Control Panel
      • Suspicious use of SetWindowsHookEx
      PID:3004
    • C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
      1⤵
      • Enumerates system info in registry
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3456

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Persistence

    Registry Run Keys / Startup Folder

    1
    T1060

    Defense Evasion

    Modify Registry

    1
    T1112

    Discovery

    Query Registry

    3
    T1012

    Peripheral Device Discovery

    2
    T1120

    System Information Discovery

    3
    T1082

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/184-0-0x0000000000000000-mapping.dmp
    • memory/1788-1-0x0000000000000000-mapping.dmp