General

  • Target
    32fd7d18f22fdbe8e99c5bd1e6ac50f74b81cd146e7b45f80776e799edb89c83
  • Size 4.4MB
  • Sample260910-22gl8axcjf
  • SHA256 32fd7d18f22fdbe8e99c5bd1e6ac50f74b81cd146e7b45f80776e799edb89c83
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    http://127.0.0.1/1.exe

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.microsoft.com/en-us/download/details.aspx?id=103391

  • exe.dropper

    https://download\.microsoft\.com/download/[^"'\s>]+/GetHelpCmd_[0-9]+\.zip

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://login.microsoftonline.com/common/oauth2/nativeclient

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://login.microsoftonline.com/common/oauth2/nativeclient

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    http://officecdn.microsoft.com/pr/55336b82-a18d-4dd6-b5f6-9e5095c314a6

  • exe.dropper

    http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60

  • exe.dropper

    http://officecdn.microsoft.com/pr/7ffbc6bf-bc32-4f92-8982-f9dd17fd3114

  • exe.dropper

    http://officecdn.microsoft.com/pr/b8f9b850-328d-4355-9145-c59439a0c4cf

  • exe.dropper

    https://docs.microsoft.com/en-us/officeupdates/update-history-office365-proplus-by-date

Signatures

  • Codesign digest Mismatch 225 IoCs

    File was altered after it was signed.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 32fd7d18f22fdbe8e99c5bd1e6ac50f74b81cd146e7b45f80776e799edb89c83
    .exe 4.4MB
  • $PLUGINSDIR/RMTTInstallerCheckVersion.ps1
    .ps1 433KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • Agent/RMTT.Agent.Windows-new.exe
    .exe 9.4MB
  • TestRestore/TestRestoreFile.txt
    3KB
  • Tools/24H2Disable.ps1
    .ps1 12KB
  • Tools/24H2Enable.ps1
    .ps1 13KB
  • Tools/365PCAuditLoggingScanner.ps1
    .ps1 13KB
  • Tools/365PCDirectSendScanner.ps1
    .ps1 13KB
  • Tools/365PCExternalForwardsScanner.ps1
    .ps1 13KB
  • Tools/365PCGdapScanner.ps1
    .ps1 13KB
  • Tools/365PCMFAScanner.ps1
    .ps1 13KB
  • Tools/365PCMailboxQuotaScanner.ps1
    .ps1 13KB
  • Tools/365PCOneDriveRetentionScanner.ps1
    .ps1 13KB
  • Tools/365PCPasswordlessLoginScanner.ps1
    .ps1 13KB
  • Tools/365PCSecurityDefaultsScanner.ps1
    .ps1 13KB
  • Tools/365PCTemporaryAccessPasswordScanner.ps1
    .ps1 13KB
  • Tools/365PCUnassignedLicensesScanner.ps1
    .ps1 13KB
  • Tools/365PCWhitelistRMTTScanner.ps1
    .ps1 13KB
  • Tools/7zip-Install.ps1
    .ps1 12KB
  • Tools/ADRemoveRejoinDomain.ps1
    .ps1 18KB
  • Tools/AcronisAgentOutOfDate.ps1
    .ps1 13KB
  • Tools/AcronisArchiveNoUpdate.ps1
    .ps1 13KB
  • Tools/AcronisBackupPlanVerificationScanner.ps1
    .ps1 13KB
  • Tools/AcronisCloudTestRestore.ps1
    .ps1 22KB
  • Tools/AcronisImmutableStorageScanner.ps1
    .ps1 13KB
  • Tools/AcronisLastSuccesfulBackup.ps1
    .ps1 17KB
  • Tools/AcronisNoBackupXDaysScanner.ps1
    .ps1 13KB
  • Tools/AcronisNonHydratedBackupScanner.ps1
    .ps1 18KB
  • Tools/AcronisNonHydratedBackupScannerCreateScheduledTask.ps1
    13KB
  • Tools/AcronisOnsiteTestRestore.ps1
    .ps1 11KB
  • Tools/AcronisOpportunityScanner.ps1
    .ps1 13KB
  • Tools/AcronisPlanActiveProtectEnabled.ps1
    .ps1 13KB
  • Tools/AcronisPlanMaxDaysWithoutBackup.ps1
    .ps1 13KB
  • Tools/AcronisPlanReplicationEnabled.ps1
    .ps1 13KB
  • Tools/AcronisPlanScheduleScanner.ps1
    .ps1 13KB
  • Tools/AcronisPlansWithoutEncryption.ps1
    .ps1 13KB
  • Tools/ActiveDirectoryAdminScanner.ps1
    .ps1 16KB
  • Tools/ActiveDirectoryAdminUsernameScanner.ps1
    .ps1 13KB
  • Tools/ActiveDirectoryInactiveUserScanner.ps1
    .ps1 15KB
  • Tools/ActiveDirectoryScanner.ps1
    .ps1 14KB
  • Tools/AdministrativeSharesEnable.ps1
    12KB
  • Tools/Adobe-Reader-Install.ps1
    12KB
  • Tools/Advanced-IP-Scanner-Install.ps1
    12KB
  • Tools/AntiLockoutScanner.ps1
    .ps1 13KB
  • Tools/AntivirusHealthScanner.ps1
    .ps1 28KB
  • Tools/AntivirusHealthScannerCreateScheduledTask.ps1
    12KB
  • Tools/AppendToPath.ps1
    .ps1 12KB
  • Tools/AuditLoggingGPOCreator.ps1
    .ps1 14KB
  • Tools/AuditLoggingGPOScanner.ps1
    .ps1 13KB
  • Tools/AuditLogonLogoffEnable.ps1
    12KB
  • Tools/AutomatedRMV-AdditionalServer.ps1
    11KB
  • Tools/AutomatedRMV-ClientWide.ps1
    11KB
  • Tools/AutomatedRMV-Device.ps1
    .ps1 12KB
  • Tools/AutomatedRMV-HyperV.ps1
    11KB
  • Tools/AutomatedRMV-Remote.ps1
    11KB
  • Tools/AutomatedRMV-Workstation.ps1
    11KB
  • Tools/AutomatedRMV.ps1
    .ps1 49KB
  • Tools/AzureMFANPSExtensionConfigure.ps1
    12KB
  • Tools/BackupAlertsCreateScheduledTaskFailure19.ps1
    13KB
  • Tools/BackupAlertsCreateScheduledTaskFailure49.ps1
    13KB
  • Tools/BackupAlertsCreateScheduledTaskFailure5.ps1
    13KB
  • Tools/BackupAlertsCreateScheduledTaskSuccess4.ps1
    13KB
  • Tools/BackupAlertsSendFailureAlert.ps1
    .ps1 13KB
  • Tools/BackupAlertsSendSuccessAlert.ps1
    .ps1 12KB
  • Tools/BatteryBackupScanner.ps1
    .ps1 25KB
  • Tools/BatteryBackupScannerCreateScheduledTask.ps1
    12KB
  • Tools/BatteryScanner.ps1
    .ps1 17KB
  • Tools/BitLockerDisableOnAllDrives.ps1
    .ps1 16KB
  • Tools/BitLockerEnableOnAllDrives.ps1
    .ps1 39KB
  • Tools/BitLockerScanner.ps1
    .ps1 41KB
  • Tools/BitLockerScannerCreateScheduledTask.ps1
    13KB
  • Tools/BootTime.ps1
    11KB
  • Tools/Carestream-Slow-Fix.ps1
    14KB
  • Tools/ChocoRunUpgrades.ps1
    .ps1 27KB
  • Tools/Chrome-Install.ps1
    12KB
  • Tools/ClockDriftScanner.ps1
    .ps1 25KB
  • Tools/ClockDriftScannerCreateScheduledTask.ps1
    12KB
  • Tools/ControlContactMissingInfoScanner.ps1
    .ps1 14KB
  • Tools/ControlNonStandardConfigurationScanner.ps1
    .ps1 14KB
  • Tools/ControlProfile.ps1
    .ps1 73KB
  • Tools/ControlProfileCreateScheduledTask.ps1
    14KB
  • Tools/ControlProfileJSONScanner.ps1
    .ps1 12KB
  • Tools/CortanaDisable.ps1
    12KB
  • Tools/CustomScripts.ps1
    .ps1 13KB
  • Tools/CustomScriptsCreateScheduledTask.ps1
    12KB
  • Tools/DCC-Install.ps1
    12KB
  • Tools/DCU-Install.ps1
    12KB
  • Tools/DCUScanner.ps1
    .ps1 49KB
  • Tools/DCUScannerCreateScheduledTask.ps1
    .ps1 15KB
  • Tools/DFSRAlertsCreateScheduledTask.ps1
    15KB
  • Tools/DFSRAlertsSendFailureAlert.ps1
    .ps1 15KB
  • Tools/DNSHealth.psm1
    .ps1 105KB
  • Tools/DNSScavengingDefaultsScanner.ps1
    .ps1 21KB
  • Tools/DSU-Install.ps1
    12KB
  • Tools/DSUScanner.ps1
    .ps1 21KB
  • Tools/DSUScannerCreateScheduledTask.ps1
    13KB
  • Tools/DcdiagScanner.ps1
    .ps1 14KB
  • Tools/DefenderForBusinessDetectionTest.ps1
    .ps1 1KB
  • Tools/DefenderForBusinessInstall.ps1
    .ps1 15KB
  • Tools/DefenderFullScan.ps1
    11KB
  • Tools/DefenderQuickScan.ps1
    11KB
  • Tools/DefenderRemoveOldAVProductFromList.ps1
    .ps1 14KB
  • Tools/DefenderRepairProductState.ps1
    12KB
  • Tools/DefenderSetProfile.ps1
    .ps1 13KB
  • Tools/DefenderSetProfileCreateScheduledTask.ps1
    12KB
  • Tools/DefenderSetReputationBasedSettings.ps1
    12KB
  • Tools/DefenderUpdateSignatures.ps1
    11KB
  • Tools/DefenderVirusActionTakenAlert.ps1
    .ps1 14KB
  • Tools/DefenderVirusActionTakenCreateScheduledTask.ps1
    13KB
  • Tools/DefenderVirusDetectedAlert.ps1
    .ps1 14KB
  • Tools/DefenderVirusDetectionCreateScheduledTask.ps1
    13KB
  • Tools/DellDecrapify.ps1
    .ps1 20KB
  • Tools/DellSupportAssistRemover.ps1
    .ps1 13KB
  • Tools/DellSupportAssistRemoverCreateScheduledTask.ps1
    13KB
  • Tools/DentalInstallerScanner.ps1
    .ps1 14KB
  • Tools/DeviceNameScanner.ps1
    .ps1 34KB
  • Tools/DeviceRetirementScanner.ps1
    .ps1 13KB
  • Tools/DisablePINAzureAD.ps1
    .ps1 12KB
  • Tools/DiskFreeSpaceCreator.ps1
    .ps1 39KB
  • Tools/DiskFreeSpaceScanner.ps1
    .ps1 22KB
  • Tools/DiskFreeSpaceScannerCreateScheduledTask.ps1
    12KB
  • Tools/DmarcComplianceScanner.ps1
    .ps1 13KB
  • Tools/DomainRegistrationExpirationScanner.ps1
    .ps1 13KB
  • Tools/DomainTransferLockScanner.ps1
    .ps1 13KB
  • Tools/DomainsVerifyScanner.ps1
    .ps1 14KB
  • Tools/DriveHealthScanner.ps1
    .ps1 24KB
  • Tools/DriveHealthScannerCreateScheduledTask.ps1
    12KB
  • Tools/DriveMediaTypeScanner.ps1
    .ps1 16KB
  • Tools/DriveMediaTypeScannerCreateScheduledTask.ps1
    13KB
  • Tools/EventLogExportRecentEvents.ps1
    .ps1 13KB
  • Tools/ExecutionPolicySetRemoteSigned.ps1
    11KB
  • Tools/FailedLogonAttemptScanner.ps1
    .ps1 15KB
  • Tools/FailedLogonAttemptScannerCreateScheduledTask.ps1
    13KB
  • Tools/FailoverClusterSharedVolumeFreeSpaceScanner.ps1
    .ps1 14KB
  • Tools/FailoverClusterSharedVolumeFreeSpaceScannerCreateScheduledTask.ps1
    13KB
  • Tools/Firefox-Install.ps1
    12KB
  • Tools/FirewallEnableAprima.ps1
    12KB
  • Tools/FirewallEnableBioPak.ps1
    .ps1 12KB
  • Tools/FirewallEnableCitrixDesktopPrinting.ps1
    .ps1 12KB
  • Tools/FirewallEnableDentrix.ps1
    .ps1 12KB
  • Tools/FirewallEnableDexis.ps1
    .ps1 15KB
  • Tools/FirewallEnableEaglesoft.ps1
    .ps1 12KB
  • Tools/FirewallEnableLDAP.ps1
    12KB
  • Tools/FirewallEnableLytec.ps1
    .ps1 15KB
  • Tools/FirewallEnableMSSQL.ps1
    .ps1 15KB
  • Tools/FirewallEnableOpenDental.ps1
    12KB
  • Tools/FirewallEnablePattersonImaging.ps1
    .ps1 14KB
  • Tools/FirewallEnableProgram.ps1
    .ps1 12KB
  • Tools/FirewallEnableQBDesktop.ps1
    .ps1 13KB
  • Tools/FirewallEnableQBPOS.ps1
    .ps1 12KB
  • Tools/FirewallEnableRADIUS.ps1
    12KB
  • Tools/FirewallEnableRDP.ps1
    12KB
  • Tools/FirewallEnableRomexis.ps1
    .ps1 14KB
  • Tools/FirewallEnableSidexis.ps1
    .ps1 13KB
  • Tools/FirewallEnableSoftDent.ps1
    .ps1 15KB
  • Tools/FirewallEnableTimeslips.ps1
    12KB
  • Tools/FirewallEnableWaveOrtho.ps1
    .ps1 12KB
  • Tools/FirewallLoggingDisable.ps1
    11KB
  • Tools/FirewallLoggingEnable.ps1
    12KB
  • Tools/FirewallLoggingFindListeningPorts.ps1
    .ps1 12KB
  • Tools/FirewallProfileChangeCurrentNetwork.ps1
    12KB
  • Tools/FirewallProfileDisableAll.ps1
    .ps1 12KB
  • Tools/FirewallProfileEnableAll.ps1
    11KB
  • Tools/FirewallProfileSetNLADependOnDNS.ps1
    .ps1 16KB
  • Tools/FoxitReader-install.ps1
    12KB
  • Tools/GPOErrorScanner.ps1
    .ps1 13KB
  • Tools/GetHelpCmd-Install.ps1
    .ps1 16KB
  • Tools/GodMode.ps1
    11KB
  • Tools/GodModeCreateShortcut.ps1
    .ps1 12KB
  • Tools/GoogleDrive-Install.ps1
    12KB
  • Tools/GroupPolicyRemovePriorITVendorGPOs.ps1
    .ps1 12KB
  • Tools/HuntressEDR-Install.ps1
    .ps1 15KB
  • Tools/HuntressIncidentEscalationScanner.ps1
    .ps1 13KB
  • Tools/HuntressMissingContactEmail.ps1
    .ps1 13KB
  • Tools/HuntressOpportunityScanner.ps1
    .ps1 13KB
  • Tools/HuntressUnresponsiveAgentScanner.ps1
    .ps1 13KB
  • Tools/HyperVAcronisScanner.ps1
    .ps1 14KB
  • Tools/HyperVAcronisScannerCreateScheduledTask.ps1
    13KB
  • Tools/HyperVAlertsCreateScheduledTask.ps1
    18KB
  • Tools/HyperVAlertsSendFailureAlert.ps1
    .ps1 12KB
  • Tools/HyperVCheckpointScanner.ps1
    .ps1 13KB
  • Tools/HyperVCheckpointScannerCreateScheduledTask.ps1
    12KB
  • Tools/IISCryptoCli.exe
    .exe 261KB
  • Tools/IPv6-Disable.ps1
    .ps1 12KB
  • Tools/IPv6-Enable.ps1
    .ps1 12KB
  • Tools/IntunePublishRMTTInstallerApp.ps1
    .ps1 23KB
  • Tools/IntunePublishRMTTProactiveApp.ps1
    .ps1 23KB
  • Tools/IntuneRMTTInstaller.intunewin
    .zip 91KB
  • IntuneWinPackage/Contents/IntunePackage.intunewin
    89KB
  • IntuneWinPackage/Metadata/Detection.xml
    869B
  • Tools/IntuneRMTTProactive.intunewin
    .zip 64KB
  • IntuneWinPackage/Contents/IntunePackage.intunewin
    63KB
  • IntuneWinPackage/Metadata/Detection.xml
    869B
  • Tools/LocalAdministratorHealthScanner.ps1
    .ps1 25KB
  • Tools/LocalAdministratorHealthScannerCreateScheduledTask.ps1
    13KB
  • Tools/LocalUsersCreateAdministratorUser.ps1
    14KB
  • Tools/LocalUsersEnableUser.ps1
    11KB
  • Tools/LocalUsersResetPassword.ps1
    14KB
  • Tools/Log4jScanner.ps1
    .ps1 38KB
  • Tools/Log4jScannerCreateScheduledTask.ps1
    12KB
  • Tools/LogonLogoffDetailedMessages.ps1
    12KB
  • Tools/LogonScriptDisableDelay.ps1
    12KB
  • Tools/MailProviders.zip
    .zip 6KB
  • AppRiver.json
    432B
  • BarracudaESS.json
    536B
  • GoDaddy.json
    159B
  • Google.json
    346B
  • Intermedia.json
    294B
  • MS365.json
    631B
  • Microsoft365.json
    641B
  • Mimecast.json
    567B
  • Null.json
    237B
  • Proofpoint.json
    558B
  • Reflexion.json
    424B
  • Sophos.json
    565B
  • SpamTitan.json
    232B
  • _template.json
    221B
  • Tools/MailProvidersExtractor.ps1
    .ps1 12KB
  • Tools/MailSecurityScanner.ps1
    .ps1 13KB
  • Tools/MappedDrivesScanner.ps1
    .ps1 21KB
  • Tools/MappedPrinterScanner.ps1
    .ps1 20KB
  • Tools/MicrosoftOffice-Install.ps1
    12KB
  • Tools/Multicast-Disable.ps1
    12KB
  • Tools/NAPS2-Install.ps1
    12KB
  • Tools/NAS-NTLMv2-Fix.ps1
    12KB
  • Tools/Name.bat
    184B
  • Tools/NcentralLicenseScanner.ps1
    .ps1 13KB
  • Tools/NetworkDeviceScanner.ps1
    .ps1 17KB
  • Tools/NewOutlookDisable.ps1
    .ps1 12KB
  • Tools/NewOutlookEnable.ps1
    .ps1 12KB
  • Tools/NicSpeedScanner.ps1
    .ps1 15KB
  • Tools/NicSpeedScannerCreateScheduledTask.ps1
    13KB
  • Tools/NiniteScanner.ps1
    .ps1 12KB
  • Tools/NiniteScannerCreateScheduledTask.ps1
    16KB
  • Tools/Notepad++-install.ps1
    12KB
  • Tools/OMSAAlert.ps1
    .ps1 13KB
  • Tools/OMSAConfig.ps1
    13KB
  • Tools/OMSAEmailEncFailEvent.bat
    173B
  • Tools/OMSAEmailEncWarnEvent.bat
    173B
  • Tools/OMSAEmailFanFailEvent.bat
    161B
  • Tools/OMSAEmailMemFailEvent.bat
    164B
  • Tools/OMSAEmailMemPreFailEvent.bat
    173B
  • Tools/OMSAEmailPSEvent.bat
    178B
  • Tools/OMSAEmailPSWarnEvent.bat
    186B
  • Tools/OMSAEmailPdiskFailEvent.bat
    169B
  • Tools/OMSAEmailProcFailEvent.bat
    179B
  • Tools/OMSAEmailProcWarnEvent.bat
    179B
  • Tools/OMSAEmailRedunDegradEvent.bat
    233B
  • Tools/OMSAEmailRedunLostEvent.bat
    269B
  • Tools/OMSAEmailStoBattFailEvent.bat
    208B
  • Tools/OMSAEmailStoCtrlrFailEvent.bat
    186B
  • Tools/OMSAEmailStoSysFailEvent.bat
    180B
  • Tools/OMSAEmailTempFailEvent.bat
    171B
  • Tools/OMSAEmailTempWarnEvent.bat
    171B
  • Tools/OMSAEmailVdiskFailEvent.bat
    168B
  • Tools/OMSAScanner.ps1
    .ps1 13KB
  • Tools/OMSATest.ps1
    .ps1 20KB
  • Tools/OfficeDecrapify.ps1
    .ps1 15KB
  • Tools/OfficeDisableAutomaticUpdates.ps1
    12KB
  • Tools/OfficeEnableAutomaticUpdates.ps1
    12KB
  • Tools/OfficeEndOfLifeScanner.ps1
    .ps1 15KB
  • Tools/OfficeEndOfLifeScannerCreateScheduledTask.ps1
    13KB
  • Tools/OfficePatchScanner.ps1
    .ps1 15KB
  • Tools/OnboardingQuestionnaireGenerator.ps1
    19KB
  • Tools/OnlyOffice-install.ps1
    12KB
  • Tools/OpenVPN-Install.ps1
    12KB
  • Tools/OsEolScanner.ps1
    .ps1 41KB
  • Tools/OsEolScannerCreateScheduledTask.ps1
    12KB
  • Tools/PDFsam-Install.ps1
    12KB
  • Tools/PowerDisableHibernate.ps1
    11KB
  • Tools/PowerDisableSleep.ps1
    .ps1 12KB
  • Tools/Powershell7AsSYSTEM.ps1
    .ps1 13KB
  • Tools/PowershellAsSYSTEM.ps1
    .ps1 14KB
  • Tools/PowershellHealthScanner.ps1
    .ps1 17KB
  • Tools/PowershellModuleUpdaterCreateScheduledTask.ps1
    12KB
  • Tools/PrintersAndDevices.ps1
    11KB
  • Tools/ProactiveGPOCreator.ps1
    .ps1 12KB
  • Tools/ProactiveGPOScanner.ps1
    .ps1 63KB
  • Tools/ProactiveGPOUpdater.ps1
    .ps1 12KB
  • Tools/ProactiveHealthScanner.ps1
    .ps1 58KB
  • Tools/ProactiveHealthScannerCreateScheduledTask.ps1
    13KB
  • Tools/ProactiveInstall.ps1
    .ps1 17KB
  • Tools/ProactiveInstallRemoteComputer.ps1
    12KB
  • Tools/ProactiveUnresponsiveAgentScanner.ps1
    .ps1 13KB
  • Tools/ProofpointAutoRenewScanner.ps1
    .ps1 13KB
  • Tools/ProofpointIntegratedDeploymentScanner.ps1
    .ps1 13KB
  • Tools/ProofpointMigrateIntegratedDeployment.ps1
    .ps1 23KB
  • Tools/ProofpointWhitelistRmttScanner.ps1
    .ps1 13KB
  • Tools/Putty-Install.ps1
    12KB
  • Tools/QRCoder.dll
    .dll 123KB
  • Tools/RDSForceSingleSession.ps1
    12KB
  • Tools/RDSManualReboot.ps1
    .ps1 13KB
  • Tools/RDSManualRebootCreateShortcut.ps1
    .ps1 13KB
  • Tools/RMTT-Icon.png
    .png 71KB
  • Tools/RMTT-Tools.ps1
    .ps1 34KB
  • Tools/RMTT.PS/Newtonsoft.Json.dll
    .dll 695KB
  • Tools/RMTT.PS/RMTT.PS.dll
    .dll 15KB
  • Tools/RMTT.PS/RMTT.PS.psd1
    12KB
  • Tools/RMTT.PS/RMTT.PS.psm1
    .ps1 2.0MB
  • Tools/RMTT.PSModule-Add.ps1
    .ps1 444KB
  • Tools/RMTT.PSModule-CleanUp.ps1
    .ps1 14KB
  • Tools/RMTTAgentEnroll.ps1
    .ps1 25KB
  • Tools/RMTTAgentEnrollCreateScheduledTask.ps1
    13KB
  • Tools/RMTTAgentInstall.ps1
    .ps1 27KB
  • Tools/RMTTEnvironmentVariable-Add.ps1
    .ps1 13KB
  • Tools/RMTTEnvironmentVariable-Remove.ps1
    11KB
  • Tools/RMTTInstallerAutoUpdaterScheduledTask.ps1
    .ps1 21KB
  • Tools/RMTTInstallerCheckForUpdates.ps1
    .ps1 26KB
  • Tools/RMTTInstallerCleanUp.ps1
    .ps1 32KB
  • Tools/RMTTInstallerForceInstall.ps1
    .ps1 432KB
  • Tools/RMTTInstallerHealthScanner.ps1
    .ps1 13KB
  • Tools/RMTTMessageBox.ps1
    12KB
  • Tools/RMTTOOBE.ps1
    .ps1 16KB
  • Tools/RMTTSupportPINCreateShortcut.ps1
    .ps1 14KB
  • Tools/RMTTTrayApp-new.exe
    .exe 65KB
  • Tools/RMTTTrayAppInstall.ps1
    .ps1 21KB
  • Tools/RMTTTrayAppLaunchAtStartup.ps1
    15KB
  • Tools/RMTT_icon.ico
    361KB
  • Tools/RMVFrequencyScanner.ps1
    .ps1 13KB
  • Tools/RSAT-Install.ps1
    12KB
  • Tools/RaidConsistencyCheck.ps1
    .ps1 24KB
  • Tools/RebootRequiredAlertClear.ps1
    .ps1 12KB
  • Tools/RemoteAccessSoftwareScanner.ps1
    .ps1 28KB
  • Tools/RemoteAccessSoftwareScannerCreateScheduledTask.ps1
    13KB
  • Tools/RemoteAssistanceDisable.ps1
    12KB
  • Tools/RemoteSoftwareAllowCtrlAltDel.ps1
    12KB
  • Tools/RemovableStorageDisable.ps1
    .ps1 15KB
  • Tools/RemovableStorageEnable.ps1
    .ps1 15KB
  • Tools/SFC-Repair.ps1
    .ps1 16KB
  • Tools/SMTPServersTest.ps1
    14KB
  • Tools/SPFRecordScanner.ps1
    .ps1 13KB
  • Tools/ScheduledTaskBadCredentialScanner.ps1
    .ps1 13KB
  • Tools/ScheduledTaskDeleteTaskAfterRunning.ps1
    .ps1 12KB
  • Tools/ScheduledTaskRunDelayedTask.ps1
    .ps1 13KB
  • Tools/ScreenConnect-Uninstall.ps1
    11KB
  • Tools/SecureBootCertificateGetUpdateProgress.ps1
    .ps1 20KB
  • Tools/SecureBootCertificateScanner.ps1
    .ps1 19KB
  • Tools/SecureBootCertificateScannerCreateScheduledTask.ps1
    12KB
  • Tools/SecureBootCertificateUpdateRemediation.ps1
    .ps1 25KB
  • Tools/ServicePasswordScanner.ps1
    .ps1 13KB
  • Tools/SimpleHelpInstallAccess.ps1
    .ps1 14KB
  • Tools/SimpleHelpInstallAccessRemoteComputer.ps1
    12KB
  • Tools/SimpleHelpLaunchRemoteHelp.ps1
    12KB
  • Tools/SnoozeExpectedScanner.ps1
    .ps1 13KB
  • Tools/Sysinternals-Install.ps1
    .ps1 12KB
  • Tools/SystemFailureDisableAutoReboot.ps1
    12KB
  • Tools/SystemReboot.ps1
    .ps1 12KB
  • Tools/SystemReboot8PM.ps1
    .ps1 12KB
  • Tools/SystemRebootAbort.bat
    121B
  • Tools/SystemRebootCreateScheduledTask.ps1
    13KB
  • Tools/SystemRebootDisableReboots.ps1
    .ps1 19KB
  • Tools/SystemRebootEnableReboots.ps1
    15KB
  • Tools/SystemRebootEnterSchedule.ps1
    .ps1 13KB
  • Tools/SystemRebootLastReason.ps1
    .ps1 13KB
  • Tools/SystemRebootScheduleDuringNextMaintWindow.ps1
    12KB
  • Tools/SystemRestoreScanner.ps1
    .ps1 20KB
  • Tools/SystemTrayShowAllIcons.ps1
    12KB
  • Tools/Teams-install.ps1
    12KB
  • Tools/TelnetEnable.ps1
    11KB
  • Tools/TimeZoneSetToMountain.ps1
    .ps1 12KB
  • Tools/TreeSizeFree-install.ps1
    12KB
  • Tools/UAC-Disable.ps1
    13KB
  • Tools/UnifiGuestWifiStandardScanner.ps1
    .ps1 13KB
  • Tools/UnifiOfflineDeviceScanner.ps1
    .ps1 13KB
  • Tools/UnifiOpenVPNCertificateScanner.ps1
    .ps1 13KB
  • Tools/UnifiUnsupportedDeviceScanner.ps1
    .ps1 13KB
  • Tools/UninstallRMTTInstaller.ps1
    .ps1 433KB
  • Tools/UninstallRMTTProactive.ps1
    12KB
  • Tools/UsbUncheckAllowComputerToTurnOff.ps1
    12KB
  • Tools/VLC-install.ps1
    12KB
  • Tools/VssEnabledScanner.ps1
    .ps1 16KB
  • Tools/WakeOnLANEnable.ps1
    .ps1 17KB
  • Tools/WakeOnLANWakeUpDevice.ps1
    12KB
  • Tools/WinDirStat-install.ps1
    12KB
  • Tools/WinSCP-Install.ps1
    12KB
  • Tools/Windows11IncompatibleHardwareScanner.ps1
    .ps1 15KB
  • Tools/Windows11IncompatibleHardwareScannerCreateScheduledTask.ps1
    13KB
  • Tools/Windows11PCHealthCheck.ps1
    11KB
  • Tools/WindowsDisableOSUpgrade.ps1
    .ps1 13KB
  • Tools/WindowsEnableOSUpgrade.ps1
    12KB
  • Tools/WindowsProfileNonSubtleExplorerDefaults.ps1
    14KB
  • Tools/WindowsProfileSubtleExplorerDefaults.ps1
    16KB
  • Tools/WindowsServer2025UpdateDisable.ps1
    .ps1 12KB
  • Tools/WindowsServer2025UpdateEnable.ps1
    .ps1 12KB
  • Tools/WindowsTipsAndAdsDisable.ps1
    16KB
  • Tools/WindowsUpdateDelayedStart.ps1
    12KB
  • Tools/WindowsUpdateFeatureUpdatesDefer.ps1
    .ps1 14KB
  • Tools/WindowsUpdateFeatureUpdatesRemoveDeferral.ps1
    .ps1 12KB
  • Tools/WindowsUpdatePrerequisites.ps1
    .ps1 19KB
  • Tools/WindowsUpdateQualityUpdatesDefer.ps1
    .ps1 14KB
  • Tools/WindowsUpdateQualityUpdatesDeferRemoveDeferral.ps1
    .ps1 12KB
  • Tools/WindowsUpdateScanner.ps1
    .ps1 47KB
  • Tools/WindowsUpdateScannerCreateScheduledTask.ps1
    13KB
  • Tools/WindowsUpdateSettingsScanner.ps1
    23KB
  • Tools/WindowsUpdateTroubleshootingScanner.ps1
    11KB
  • Tools/WindowsUpgradeRollbackExtender.ps1
    12KB
  • Tools/WindowsVersionUpdater.ps1
    .ps1 34KB
  • Tools/WindowsVersionUpdaterRemoveScheduledTask.ps1
    12KB
  • Tools/WindowsVersionUpdaterScheduledTask.ps1
    .ps1 16KB
  • Tools/WingetAutoUpdate.ps1
    .ps1 29KB
  • Tools/WingetAutoUpdateCreateScheduledTask.ps1
    14KB
  • Tools/WingetInstallApps.ps1
    .ps1 23KB
  • Tools/WingetInstallAppsCreateScheduledTask.ps1
    13KB
  • Tools/Wireguard-Install.ps1
    12KB
  • Tools/WorkgroupNameScanner.ps1
    12KB
  • Tools/XnViewClassic-install.ps1
    12KB
  • Tools/Zoom-Install.ps1
    12KB
  • Tools/idracConfigure.ps1
    .ps1 25KB
  • Tools/idracFactoryDefault.ps1
    12KB
  • Tools/idracScanner.ps1
    .ps1 30KB
  • Tools/krbTgtPasswordReset.ps1
    .ps1 427KB
  • Tools/krbTgtPasswordScanner.ps1
    .ps1 13KB
  • Tools/pfSenseBackup.exe
    .exe 25KB
  • Tools/pfSenseBackup.ps1
    .ps1 18KB
  • Tools/pfSenseBackupCreateScheduledTask.ps1
    .ps1 13KB
  • Tools/pfSenseBackupSetup.ps1
    .ps1 12KB
  • Tools/pfSensePortForwardScanner.ps1
    .ps1 18KB
  • Tools/pfSenseSpeedTest.ps1
    .ps1 29KB
  • Tools/pfSenseUpdateScanner.ps1
    .ps1 32KB
  • Tools/pfSenseUpdateScannerCreateScheduledTask.ps1
    .ps1 17KB
  • Tools/uptime.bat
    286B

32fd7d18f22fdbe8e99c5bd1e6ac50f74b81cd146e7b45f80776e799edb89c83

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 32fd7d18f22fdbe8e99c5bd1e6ac50f74b81cd146e7b45f80776e799edb89c83
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
53:68:89:dd:10:72:b7:cb:63:73:50:46:7d:05:68:58:4b:fc:1e:d4:5a:7c:1d:20:45:b1:2e:e7:8c:3a:5a:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=20041174925,CN=Hamilton Information Technology\, Inc.,O=Rocky Mountain Tech Team (Hamilton Information Technology\, Inc.),L=Boulder,ST=Colorado,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#1308436f6c6f7261646f,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths