General

  • Target

    Win-Debloat-Tools-main.zip

  • Size

    598KB

  • MD5

    3e5d740493be7097865d42972d6b7456

  • SHA1

    cc70858ea4e26c3f72d0f1e75380cb4121ec4bf0

  • SHA256

    f5f8a2e16611d95c7429809cace7c5791532b3060dfddb8d008202727ed26a7b

  • SHA512

    b968185102c35dad62076047c3325b00d26f000c378c737380a3e47a6515b7acb3daa8861a4f6e98ce45905cd0cb0944e3564e4d615c134e764a62c9fceedd72

  • SSDEEP

    12288:hR6mhF8Q4U1X0asOsE0zGbKSGvDIOBF8nP4gWhJ19jcz1ALYhdzjLe:XmJU10nzGbKSwDD6ChJ19jcOchJjLe

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://chocolatey.org/install.ps1

Extracted

Language
ps1
Source
URLs
exe.dropper

https://downloads.malwarebytes.com/file/adwcleaner

exe.dropper

https://dl5.oo-software.com/files/ooshutup10/OOSU10.exe

Extracted

Language
ps1
Source
URLs
exe.dropper

https://github.com/romkatv/powerlevel10k-media/raw/master

Signatures

Files

  • Win-Debloat-Tools-main.zip
    .zip

    Password: infected

  • Win-Debloat-Tools-main/.github/FUNDING.yml
  • Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/bug_report.yaml
  • Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/config.yml
  • Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/feature_request.yaml
  • Win-Debloat-Tools-main/.github/dependabot.yml
  • Win-Debloat-Tools-main/.github/workflows/powershell.yaml
  • Win-Debloat-Tools-main/.gitignore
  • Win-Debloat-Tools-main/CONTRIBUTING.md
  • Win-Debloat-Tools-main/LICENSE.txt
  • Win-Debloat-Tools-main/OpenTerminalHere.cmd
    .cmd .vbs
  • Win-Debloat-Tools-main/README.md
  • Win-Debloat-Tools-main/ROADMAP.md
  • Win-Debloat-Tools-main/WinDebloatTools.ps1
    .ps1
  • Win-Debloat-Tools-main/src/assets/peepo-leaving.gif
    .gif
  • Win-Debloat-Tools-main/src/assets/powershell-icon.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-gui.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-icon-32px.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-icon.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-image.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-image2.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/assets/script-logo.png
    .png

    Password: infected

  • Win-Debloat-Tools-main/src/configs/shutup10/ooshutup10-default.cfg
  • Win-Debloat-Tools-main/src/configs/shutup10/ooshutup10.cfg
  • Win-Debloat-Tools-main/src/lib/Get-HardwareInfo.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Get-TempScriptFolder.psm1
  • Win-Debloat-Tools-main/src/lib/Install-Font.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/New-Shortcut.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Open-File.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Request-FileDownload.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Set-ConsoleStyle.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Set-RevertStatus.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Start-Logging.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Title-Templates.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/Unregister-DuplicatedPowerPlan.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-ItemPropertyVerified.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-ItemVerified.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-UWPApp.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Set-CapabilityState.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ItemPropertyVerified.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Set-OptionalFeatureState.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ScheduledTaskState.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ServiceStartup.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Install-PackageManager.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Manage-Chocolatey.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Manage-DailyUpgradeJob.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Manage-Software.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Manage-Winget.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/package-managers/Update-AllPackage.psm1
  • Win-Debloat-Tools-main/src/lib/ui/Get-CurrentResolution.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/ui/Get-DefaultColor.psm1
  • Win-Debloat-Tools-main/src/lib/ui/New-LayoutPage.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/ui/Select-Folder.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/ui/Show-MessageDialog.psm1
    .ps1
  • Win-Debloat-Tools-main/src/lib/ui/Ui-Helper.psm1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Backup-System.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Install-DefaultAppsList.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Invoke-DebloatSoftware.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-Performance.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-Privacy.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-Security.ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-ServicesRunning.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-TaskScheduler.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Optimize-WindowsFeaturesList.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Register-PersonalTweaksList.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-BloatwareAppsList.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-CapabilitiesList.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-MSEdge.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-OneDrive.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-TemporaryFiles.ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-WindowsOld.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Remove-Xbox.ps1
  • Win-Debloat-Tools-main/src/scripts/Repair-WindowsSystem.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/Start-DiskCleanUp.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/Git-GnupgSshKeysSetup.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/Install-ArchWSL.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/Install-NerdFont.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/Install-WSL.ps1
    .ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/New-SystemColor.ps1
  • Win-Debloat-Tools-main/src/scripts/other-scripts/Show-DebloatInfo.ps1
    .ps1
  • Win-Debloat-Tools-main/src/utils/DIY/Optimize-SSD.ps1
  • Win-Debloat-Tools-main/src/utils/DIY/Restart-AdvancedMode.ps1
  • Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-(THROW-FILE-HERE).bat
  • Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-context-menu-remove.reg
  • Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-context-menu.reg
  • Win-Debloat-Tools-main/src/utils/DIY/windows keys.txt
  • Win-Debloat-Tools-main/src/utils/Individual-Tweaks.psm1
    .ps1
  • Win-Debloat-Tools-main/src/utils/Install-Individual-System-Apps.psm1
    .ps1
  • Win-Debloat-Tools-main/src/utils/disable-photo-viewer.reg
  • Win-Debloat-Tools-main/src/utils/disable-take-ownership-context-menu.reg
  • Win-Debloat-Tools-main/src/utils/enable-photo-viewer.reg
  • Win-Debloat-Tools-main/src/utils/enable-take-ownership-context-menu.reg
  • Win-Debloat-Tools-main/src/utils/fix-url-association.reg