Overview
overview
10Static
static
10Win-Debloa...re.cmd
windows7-x64
1Win-Debloa...re.cmd
windows10-2004-x64
1Win-Debloa...ls.ps1
windows7-x64
3Win-Debloa...ls.ps1
windows10-2004-x64
3Win-Debloa...fo.ps1
windows7-x64
3Win-Debloa...fo.ps1
windows10-2004-x64
3Win-Debloa...r.psm1
windows7-x64
1Win-Debloa...r.psm1
windows10-2004-x64
1Win-Debloa...nt.ps1
windows7-x64
3Win-Debloa...nt.ps1
windows10-2004-x64
3Win-Debloa...ut.ps1
windows7-x64
3Win-Debloa...ut.ps1
windows10-2004-x64
3Win-Debloa...le.ps1
windows7-x64
3Win-Debloa...le.ps1
windows10-2004-x64
3Win-Debloa...ad.ps1
windows7-x64
3Win-Debloa...ad.ps1
windows10-2004-x64
3Win-Debloa...le.ps1
windows7-x64
6Win-Debloa...le.ps1
windows10-2004-x64
6Win-Debloa...us.ps1
windows7-x64
6Win-Debloa...us.ps1
windows10-2004-x64
6Win-Debloa...ng.ps1
windows7-x64
3Win-Debloa...ng.ps1
windows10-2004-x64
3Win-Debloa...es.ps1
windows7-x64
3Win-Debloa...es.ps1
windows10-2004-x64
3Win-Debloa...an.ps1
windows7-x64
3Win-Debloa...an.ps1
windows10-2004-x64
3Win-Debloa...ed.ps1
windows7-x64
3Win-Debloa...ed.ps1
windows10-2004-x64
3Win-Debloa...pp.ps1
windows7-x64
3Win-Debloa...pp.ps1
windows10-2004-x64
3Win-Debloa...te.ps1
windows7-x64
6Win-Debloa...te.ps1
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
Win-Debloat-Tools-main/OpenTerminalHere.cmd
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Win-Debloat-Tools-main/OpenTerminalHere.cmd
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Win-Debloat-Tools-main/WinDebloatTools.ps1
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Win-Debloat-Tools-main/WinDebloatTools.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Win-Debloat-Tools-main/src/lib/Get-HardwareInfo.ps1
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Win-Debloat-Tools-main/src/lib/Get-HardwareInfo.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Win-Debloat-Tools-main/src/lib/Get-TempScriptFolder.psm1
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Win-Debloat-Tools-main/src/lib/Get-TempScriptFolder.psm1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Win-Debloat-Tools-main/src/lib/Install-Font.ps1
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Win-Debloat-Tools-main/src/lib/Install-Font.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Win-Debloat-Tools-main/src/lib/New-Shortcut.ps1
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Win-Debloat-Tools-main/src/lib/New-Shortcut.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Win-Debloat-Tools-main/src/lib/Open-File.ps1
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Win-Debloat-Tools-main/src/lib/Open-File.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Win-Debloat-Tools-main/src/lib/Request-FileDownload.ps1
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Win-Debloat-Tools-main/src/lib/Request-FileDownload.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Win-Debloat-Tools-main/src/lib/Set-ConsoleStyle.ps1
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Win-Debloat-Tools-main/src/lib/Set-ConsoleStyle.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Win-Debloat-Tools-main/src/lib/Set-RevertStatus.ps1
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Win-Debloat-Tools-main/src/lib/Set-RevertStatus.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Win-Debloat-Tools-main/src/lib/Start-Logging.ps1
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Win-Debloat-Tools-main/src/lib/Start-Logging.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Win-Debloat-Tools-main/src/lib/Title-Templates.ps1
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
Win-Debloat-Tools-main/src/lib/Title-Templates.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Win-Debloat-Tools-main/src/lib/Unregister-DuplicatedPowerPlan.ps1
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Win-Debloat-Tools-main/src/lib/Unregister-DuplicatedPowerPlan.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-ItemVerified.ps1
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-ItemVerified.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-UWPApp.ps1
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-UWPApp.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-CapabilityState.ps1
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-CapabilityState.ps1
Resource
win10v2004-20240802-en
General
-
Target
009cac4ebdd20813914a17ac8f7dd5c104bd0c8835bee4e5d66a3174c91bef9c
-
Size
591KB
-
MD5
fec01d7eceab526a9d07db7c1a3bc4d0
-
SHA1
0fe5e62848176e7b76601ec8824a47812bc3d8ce
-
SHA256
009cac4ebdd20813914a17ac8f7dd5c104bd0c8835bee4e5d66a3174c91bef9c
-
SHA512
a5267f0d833e3ff8775428fce94965e01b50d22a98c98fbb6576400802d3d5ac7b89a3a9ce4a89431f5f42ea12082567752d115c6d39221cfb1278d3801acd5f
-
SSDEEP
12288:V4zSbmhF8Q4U1X0asOsE0zGbPXpBFhnH4gWhJ19jcz1ALYhda9u0jn8Ri:V4zMJU10nzGbPXNVChJ19jcOchyuk8A
Malware Config
Extracted
https://chocolatey.org/install.ps1
Extracted
https://downloads.malwarebytes.com/file/adwcleaner
https://dl5.oo-software.com/files/ooshutup10/OOSU10.exe
Extracted
https://github.com/romkatv/powerlevel10k-media/raw/master
Signatures
Files
-
009cac4ebdd20813914a17ac8f7dd5c104bd0c8835bee4e5d66a3174c91bef9c.zip
-
Win-Debloat-Tools-main/.github/FUNDING.yml
-
Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/bug_report.yaml
-
Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/config.yml
-
Win-Debloat-Tools-main/.github/ISSUE_TEMPLATE/feature_request.yaml
-
Win-Debloat-Tools-main/.github/dependabot.yml
-
Win-Debloat-Tools-main/.github/workflows/powershell.yaml
-
Win-Debloat-Tools-main/.gitignore
-
Win-Debloat-Tools-main/CONTRIBUTING.md
-
Win-Debloat-Tools-main/LICENSE.txt
-
Win-Debloat-Tools-main/OpenTerminalHere.cmd.cmd .vbs
-
Win-Debloat-Tools-main/README.md
-
Win-Debloat-Tools-main/WinDebloatTools.ps1.ps1
-
Win-Debloat-Tools-main/src/assets/peepo-leaving.gif.gif
-
Win-Debloat-Tools-main/src/assets/powershell-icon.png.png
-
Win-Debloat-Tools-main/src/assets/script-gui.png.png
-
Win-Debloat-Tools-main/src/assets/script-icon-32px.png.png
-
Win-Debloat-Tools-main/src/assets/script-icon.png.png
-
Win-Debloat-Tools-main/src/assets/script-image.png.png
-
Win-Debloat-Tools-main/src/assets/script-image2.png.png
-
Win-Debloat-Tools-main/src/assets/script-logo.png.png
-
Win-Debloat-Tools-main/src/configs/shutup10/ooshutup10-default.cfg
-
Win-Debloat-Tools-main/src/configs/shutup10/ooshutup10.cfg
-
Win-Debloat-Tools-main/src/lib/Get-HardwareInfo.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Get-TempScriptFolder.psm1
-
Win-Debloat-Tools-main/src/lib/Install-Font.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/New-Shortcut.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Open-File.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Request-FileDownload.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Set-ConsoleStyle.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Set-RevertStatus.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Start-Logging.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Title-Templates.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/Unregister-DuplicatedPowerPlan.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-ItemVerified.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Remove-UWPApp.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-CapabilityState.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ItemPropertyVerified.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-OptionalFeatureState.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ScheduledTaskState.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/debloat-helper/Set-ServiceStartup.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Install-PackageManager.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Manage-Chocolatey.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Manage-DailyUpgradeJob.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Manage-Software.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Manage-Winget.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/package-managers/Update-AllPackage.psm1
-
Win-Debloat-Tools-main/src/lib/ui/Get-CurrentResolution.psm1
-
Win-Debloat-Tools-main/src/lib/ui/Get-DefaultColor.psm1
-
Win-Debloat-Tools-main/src/lib/ui/New-LayoutPage.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/ui/Select-Folder.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/ui/Show-MessageDialog.psm1.ps1
-
Win-Debloat-Tools-main/src/lib/ui/Ui-Helper.psm1.ps1
-
Win-Debloat-Tools-main/src/scripts/Backup-System.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Install-DefaultAppsList.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-Performance.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-Privacy.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-Security.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-ServicesRunning.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-TaskScheduler.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Optimize-WindowsFeaturesList.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Register-PersonalTweaksList.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Remove-BloatwareAppsList.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Remove-CapabilitiesList.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Remove-MSEdge.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Remove-OneDrive.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Remove-Xbox.ps1
-
Win-Debloat-Tools-main/src/scripts/Repair-WindowsSystem.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/Use-DebloatSoftware.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/Git-GnupgSshKeysSetup.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/Install-ArchWSL.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/Install-NerdFont.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/Install-WSL.ps1.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/New-SystemColor.ps1
-
Win-Debloat-Tools-main/src/scripts/other-scripts/Show-DebloatInfo.ps1.ps1
-
Win-Debloat-Tools-main/src/utils/DIY/Optimize-SSD.ps1
-
Win-Debloat-Tools-main/src/utils/DIY/Restart-AdvancedMode.ps1
-
Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-(THROW-FILE-HERE).bat
-
Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-context-menu-remove.reg
-
Win-Debloat-Tools-main/src/utils/DIY/run-as-invoker/run-as-invoker-context-menu.reg
-
Win-Debloat-Tools-main/src/utils/DIY/windows keys.txt
-
Win-Debloat-Tools-main/src/utils/Individual-Tweaks.psm1.ps1
-
Win-Debloat-Tools-main/src/utils/Install-Individual-System-Apps.psm1.ps1
-
Win-Debloat-Tools-main/src/utils/disable-photo-viewer.reg
-
Win-Debloat-Tools-main/src/utils/disable-take-ownership-context-menu.reg
-
Win-Debloat-Tools-main/src/utils/enable-photo-viewer.reg
-
Win-Debloat-Tools-main/src/utils/enable-take-ownership-context-menu.reg
-
Win-Debloat-Tools-main/src/utils/fix-url-association.reg