{"report_id":"fe57c589-938a-42f7-92ca-ef1840d05de4","version":6,"status":"done","tags":[],"date":"2024-12-05T09:22:28Z","url":{"schema":"http","addr":"github.com/massgravel/Microsoft-Activation-Scripts/archive/refs/heads/master.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.113.4","port":0,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-02-13T09:22:28Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"github.com","ip":{"addr":"140.82.112.3","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"domain_registered":"2007-10-09","domain_rank":1423,"first_seen":"2016-07-13T12:28:22Z","last_seen":"2024-12-04T02:00:34.676305Z","alert_count":0,"request_count":1,"received_data":3924,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"codeload.github.com","ip":{"addr":"140.82.114.9","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"domain_registered":"2007-10-09","domain_rank":62359,"first_seen":"2013-04-18T11:49:11Z","last_seen":"2024-12-04T03:35:16.61348Z","alert_count":1,"request_count":1,"received_data":326433,"sent_data":535,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"bf0f1add95ef479d38db30554a4aede0","sha1":"e05b44aee0a9df0edaa7de4ad24fa18ad407075f","sha256":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","sha512":"2f4b4d50844db1064de7ac918738ab21621f7245434aeb74de2fd2baf0c4367ad4057e5c9ef810f09e5c374ac4e3ea8ab85d960d3549f72b763dccb2d37e8925","magic":"Zip archive data, at least v1.0 to extract, compression method=store","size":325721,"url":{"schema":"https","addr":"codeload.github.com/massgravel/Microsoft-Activation-Scripts/zip/refs/heads/master","fqdn":"codeload.github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.114.9","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"archive":[{"path":"Microsoft-Activation-Scripts-master/LICENSE","filename":"LICENSE","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text","size":35149,"md5":"1ebbd3e34237af26da5dc08a4e440464","sha1":"31a3d460bb3c7d98845187c716a30db81c44b615","sha256":"3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986","sha512":"d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/All-In-One-Version-KL/MAS_AIO.cmd","filename":"MAS_AIO.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text, with very long lines (348), with CRLF line terminators","size":445469,"md5":"4b888d91eff0c5f1c811ee82cbe07c06","sha1":"dcb7a702e0f2a3b17af78d858af01b736fad7c31","sha256":"2a0a5f9675ba93d11df5eb531810f8097d1c13ce3a723fc2235a85127e86e172","sha512":"911e843b24eb5a7e826cccb9b8e8a11df078fea43ed8bdc6980d476076b2e2875a513a5ecbc74e518724ba0cbf63bdf018f55aaf660c7d5951195c953d65c5a0","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd","filename":"HWID_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators","size":74403,"md5":"7f4de013319c6b007ac9c8d99270d78e","sha1":"6a31b7ec1928e98f6c03ccf87a58a91be58d9186","sha256":"a18a316e8c38306d4020dbc2dff0f0f9af79306ad4d57cc7d4d185e8b904f6ba","sha512":"1121fb4954cb1a08fd4dc82e7cdea2b451bc5c2d04b001ad4f48f2e446596daef2ff289ccd5d61bcb9ed83f861c94c0e8abc8a35996b3ebf106a609f8fb7a330","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd","filename":"KMS38_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (500), with CRLF line terminators","size":76614,"md5":"c1717aa61f60eed6d710281505d221a2","sha1":"53b016e9102b73cb8a84815f1964e08ef8054339","sha256":"8e2ab4de229d9b7b6b3ae598e08d2d5194a972a38d260d11b898f592b0d717b7","sha512":"d033890c85b370f185cbaabb17de3e7891b57244d431af75b4cf525498b2ad00851e6236e9516ef3029e548f8f07bcb26a5f8bea93190de59b6ed03316604ca6","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd","filename":"Ohook_Activation_AIO.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators","size":135371,"md5":"1007b8d5559eb72788d5b5f4757ab916","sha1":"ee2dcc864075810db1ee1d67b69092c3e61a23aa","sha256":"e44ed8d3dbc49a9b7b4492389bc3a8c8a4970a790e7436b6d2c8a1900205ed1d","sha512":"b9822860f3301d0935efa2797b29901c5af892082f212831fde1bcd9d1a49d3939d09bc6da638ac6b107aff90c43f221895d860f9fa174acf5eeee47f04af70a","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd","filename":"Online_KMS_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators","size":156893,"md5":"3f026e268817d22d0bf9fdb5e2ba87d5","sha1":"ef92fec0fe72d1ff7a261672d4957ae762439d2e","sha256":"144acde1456503a66714de7759c4d17c2c13a80e58073a7b22062bec83dc3d7b","sha512":"5c6fc6e70d2ddba0befe7154f0182ca0ce01628044a415e8d6e3fb55de5e810f7b38f03a6925a023eee9ffe069e73185d91cb5fd3b2c3adf9143ee6fb099fdf1","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/ReadMe.txt","filename":"ReadMe.txt","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text, with CRLF line terminators","size":758,"md5":"b7fa33165116723bc2f83676fd62cc69","sha1":"cc6b94408734056697807b93adf2d3ed3dc04ab6","sha256":"b0218b2723a32157a094ee3b852159b339ec3e01ce25aa05e19b28f55a0e9528","sha512":"3c84170f52c33c5fbdef0a4553b765756e8906da9a98bac91930fb820d667afc378c80dbf85040f004f8a72c92e7193bb247d8242d47c26569e0a0fc12fdfc2a","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Change_Office_Edition.cmd","filename":"Change_Office_Edition.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (453), with CRLF line terminators","size":47945,"md5":"5db8fc9d571c1e8e7890d2829f74884d","sha1":"cfdb702c0c11350e66cfe17fe751f28193a8d9c6","sha256":"a4ad70218fc3fcda33b8429b078d62aa57cc7bf5280a4d4c67febc7b6bcd0484","sha512":"17258a1ec0f882a0e2192ced7041057786e72932cf48b78b645e7359ea829ed9688699068d96401012c8f5d3303e4f48f484dfe3adc8d7cd844d597eb865c78c","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Change_Windows_Edition.cmd","filename":"Change_Windows_Edition.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators","size":46859,"md5":"a064240fd239d0feff23701b64c72c76","sha1":"6d8f68f86345f7c8b0092fd6bcf34b29d0e9b354","sha256":"cb26888e76a8f7f3419d3da28d4c08459b5598283b6f5d19ee1d3d727697baed","sha512":"d74f309ab0bafb779533faac5bae02c345e5de458cc7cf1e21c13ceb81b5807dbb7578e94641bc57881bb2a390a4819bc31b834c88e2c1e4dda1928e111c9bac","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Check_Activation_Status.cmd","filename":"Check_Activation_Status.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with CRLF line terminators","size":35487,"md5":"1ebf95a85eec40bab2045bd26658a345","sha1":"335da7f4bddf73d3f6c454db0b737fc75d9cd6e4","sha256":"997c19c8ac529e7f2b20e094897cf4fe1a4e03c26ac9e0e5724aa4011a7bb262","sha512":"01bf89c65d255938c4665e22289e4dd79826ab2d86b91cda16cf0b01574304c980758554a835dce89331d3fcd7b81762f7b756805fb2b496e86b31a284b5e3f5","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd","filename":"Extract_OEM_Folder.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators","size":24058,"md5":"289b8a5cf999c446998f6dcfa0e99b78","sha1":"341508ae6acde0550314520b2a1e0ec7bc02997b","sha256":"761120f7f7fcade4617fe3c41738e0509bb16c02a808122ea829dc63342ed7f3","sha512":"d153cb3fcb84bcb141e88d50d1012080548bdde18812c1d00927105dcbba5a5f4d986acf34b035b68a435c84001051157d3b4049c2fc1c705ede65d7c4115a83","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Troubleshoot.cmd","filename":"Troubleshoot.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators","size":50485,"md5":"cbb9db94307416d2731530fb8e949ac2","sha1":"f2656aa87e9a03c8418f35f5e8eb6eb7fcdb9941","sha256":"92b41d5210ffdd341d796631bbed1d57c12863ec4564e2122e056f39f42f491e","sha512":"979cf4adfe1b2013fa7f6c91beebaeefd6f6b3d59def5e755f8e410c395bcf4ddca9de44b5897999c4c8ce9da79ba259a6d8e6f16b5a062b3f07d1f7fba873f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/_ReadMe.html","filename":"_ReadMe.html","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"HTML document, ASCII text, with CRLF line terminators","size":84,"md5":"574e18c1f9b32a47f988ac91588901ba","sha1":"4c0827e3deeb84cf442e0356dfc1883bcb131fbb","sha256":"8932bacd828c0716b136af6aa15011aed0015e7838006f2cff7a64954a5696b0","sha512":"4c480c530af4218e5ac276228a372fcd799912eb183685f805b6c47b5d6971be42a4dca2baa016425dc2499367624cb70de12d280ddcb7b613001460dbf820f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/README.md","filename":"README.md","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"Unicode text, UTF-8 text","size":2957,"md5":"91bd4543a129decbf70584309252ac8d","sha1":"d73f4ac7e9b7796bab24fcb0619f283d00a4202f","sha256":"2004873122494a2065951b2379c9b4406820b3a7064ab6287cf039a972bb286a","sha512":"50b543e6f6c32d07ef50b7996992ac7839acc733f45eba9fd063dffc3db8fa171fadf56a747800850bda7528e0e58537ba85a02caf8544120737f6571b59651d","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-05","alert":"Scan result 1/64","trigger":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","verdict":"suspicious","severity":"","comment":"suspicious - 1/64","link":"https://www.virustotal.com/gui/file/f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"bf0f1add95ef479d38db30554a4aede0","sha1":"e05b44aee0a9df0edaa7de4ad24fa18ad407075f","sha256":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","sha512":"2f4b4d50844db1064de7ac918738ab21621f7245434aeb74de2fd2baf0c4367ad4057e5c9ef810f09e5c374ac4e3ea8ab85d960d3549f72b763dccb2d37e8925","magic":"Zip archive data, at least v1.0 to extract, compression method=store","size":325721,"url":{"schema":"https","addr":"codeload.github.com/massgravel/Microsoft-Activation-Scripts/zip/refs/heads/master","fqdn":"codeload.github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.114.9","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"archive":[{"path":"Microsoft-Activation-Scripts-master/LICENSE","filename":"LICENSE","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text","size":35149,"md5":"1ebbd3e34237af26da5dc08a4e440464","sha1":"31a3d460bb3c7d98845187c716a30db81c44b615","sha256":"3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986","sha512":"d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/All-In-One-Version-KL/MAS_AIO.cmd","filename":"MAS_AIO.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text, with very long lines (348), with CRLF line terminators","size":445469,"md5":"4b888d91eff0c5f1c811ee82cbe07c06","sha1":"dcb7a702e0f2a3b17af78d858af01b736fad7c31","sha256":"2a0a5f9675ba93d11df5eb531810f8097d1c13ce3a723fc2235a85127e86e172","sha512":"911e843b24eb5a7e826cccb9b8e8a11df078fea43ed8bdc6980d476076b2e2875a513a5ecbc74e518724ba0cbf63bdf018f55aaf660c7d5951195c953d65c5a0","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd","filename":"HWID_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators","size":74403,"md5":"7f4de013319c6b007ac9c8d99270d78e","sha1":"6a31b7ec1928e98f6c03ccf87a58a91be58d9186","sha256":"a18a316e8c38306d4020dbc2dff0f0f9af79306ad4d57cc7d4d185e8b904f6ba","sha512":"1121fb4954cb1a08fd4dc82e7cdea2b451bc5c2d04b001ad4f48f2e446596daef2ff289ccd5d61bcb9ed83f861c94c0e8abc8a35996b3ebf106a609f8fb7a330","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd","filename":"KMS38_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (500), with CRLF line terminators","size":76614,"md5":"c1717aa61f60eed6d710281505d221a2","sha1":"53b016e9102b73cb8a84815f1964e08ef8054339","sha256":"8e2ab4de229d9b7b6b3ae598e08d2d5194a972a38d260d11b898f592b0d717b7","sha512":"d033890c85b370f185cbaabb17de3e7891b57244d431af75b4cf525498b2ad00851e6236e9516ef3029e548f8f07bcb26a5f8bea93190de59b6ed03316604ca6","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd","filename":"Ohook_Activation_AIO.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators","size":135371,"md5":"1007b8d5559eb72788d5b5f4757ab916","sha1":"ee2dcc864075810db1ee1d67b69092c3e61a23aa","sha256":"e44ed8d3dbc49a9b7b4492389bc3a8c8a4970a790e7436b6d2c8a1900205ed1d","sha512":"b9822860f3301d0935efa2797b29901c5af892082f212831fde1bcd9d1a49d3939d09bc6da638ac6b107aff90c43f221895d860f9fa174acf5eeee47f04af70a","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd","filename":"Online_KMS_Activation.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators","size":156893,"md5":"3f026e268817d22d0bf9fdb5e2ba87d5","sha1":"ef92fec0fe72d1ff7a261672d4957ae762439d2e","sha256":"144acde1456503a66714de7759c4d17c2c13a80e58073a7b22062bec83dc3d7b","sha512":"5c6fc6e70d2ddba0befe7154f0182ca0ce01628044a415e8d6e3fb55de5e810f7b38f03a6925a023eee9ffe069e73185d91cb5fd3b2c3adf9143ee6fb099fdf1","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Activators/ReadMe.txt","filename":"ReadMe.txt","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"ASCII text, with CRLF line terminators","size":758,"md5":"b7fa33165116723bc2f83676fd62cc69","sha1":"cc6b94408734056697807b93adf2d3ed3dc04ab6","sha256":"b0218b2723a32157a094ee3b852159b339ec3e01ce25aa05e19b28f55a0e9528","sha512":"3c84170f52c33c5fbdef0a4553b765756e8906da9a98bac91930fb820d667afc378c80dbf85040f004f8a72c92e7193bb247d8242d47c26569e0a0fc12fdfc2a","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Change_Office_Edition.cmd","filename":"Change_Office_Edition.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (453), with CRLF line terminators","size":47945,"md5":"5db8fc9d571c1e8e7890d2829f74884d","sha1":"cfdb702c0c11350e66cfe17fe751f28193a8d9c6","sha256":"a4ad70218fc3fcda33b8429b078d62aa57cc7bf5280a4d4c67febc7b6bcd0484","sha512":"17258a1ec0f882a0e2192ced7041057786e72932cf48b78b645e7359ea829ed9688699068d96401012c8f5d3303e4f48f484dfe3adc8d7cd844d597eb865c78c","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Change_Windows_Edition.cmd","filename":"Change_Windows_Edition.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators","size":46859,"md5":"a064240fd239d0feff23701b64c72c76","sha1":"6d8f68f86345f7c8b0092fd6bcf34b29d0e9b354","sha256":"cb26888e76a8f7f3419d3da28d4c08459b5598283b6f5d19ee1d3d727697baed","sha512":"d74f309ab0bafb779533faac5bae02c345e5de458cc7cf1e21c13ceb81b5807dbb7578e94641bc57881bb2a390a4819bc31b834c88e2c1e4dda1928e111c9bac","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Check_Activation_Status.cmd","filename":"Check_Activation_Status.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with CRLF line terminators","size":35487,"md5":"1ebf95a85eec40bab2045bd26658a345","sha1":"335da7f4bddf73d3f6c454db0b737fc75d9cd6e4","sha256":"997c19c8ac529e7f2b20e094897cf4fe1a4e03c26ac9e0e5724aa4011a7bb262","sha512":"01bf89c65d255938c4665e22289e4dd79826ab2d86b91cda16cf0b01574304c980758554a835dce89331d3fcd7b81762f7b756805fb2b496e86b31a284b5e3f5","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd","filename":"Extract_OEM_Folder.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators","size":24058,"md5":"289b8a5cf999c446998f6dcfa0e99b78","sha1":"341508ae6acde0550314520b2a1e0ec7bc02997b","sha256":"761120f7f7fcade4617fe3c41738e0509bb16c02a808122ea829dc63342ed7f3","sha512":"d153cb3fcb84bcb141e88d50d1012080548bdde18812c1d00927105dcbba5a5f4d986acf34b035b68a435c84001051157d3b4049c2fc1c705ede65d7c4115a83","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/Troubleshoot.cmd","filename":"Troubleshoot.cmd","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators","size":50485,"md5":"cbb9db94307416d2731530fb8e949ac2","sha1":"f2656aa87e9a03c8418f35f5e8eb6eb7fcdb9941","sha256":"92b41d5210ffdd341d796631bbed1d57c12863ec4564e2122e056f39f42f491e","sha512":"979cf4adfe1b2013fa7f6c91beebaeefd6f6b3d59def5e755f8e410c395bcf4ddca9de44b5897999c4c8ce9da79ba259a6d8e6f16b5a062b3f07d1f7fba873f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/MAS/Separate-Files-Version/_ReadMe.html","filename":"_ReadMe.html","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"HTML document, ASCII text, with CRLF line terminators","size":84,"md5":"574e18c1f9b32a47f988ac91588901ba","sha1":"4c0827e3deeb84cf442e0356dfc1883bcb131fbb","sha256":"8932bacd828c0716b136af6aa15011aed0015e7838006f2cff7a64954a5696b0","sha512":"4c480c530af4218e5ac276228a372fcd799912eb183685f805b6c47b5d6971be42a4dca2baa016425dc2499367624cb70de12d280ddcb7b613001460dbf820f8","alerts":{"urlquery":null,"analyzer":null}},{"path":"Microsoft-Activation-Scripts-master/README.md","filename":"README.md","modified":"","Modified":"2024-11-11T00:58:28-08:00","magic":"Unicode text, UTF-8 text","size":2957,"md5":"91bd4543a129decbf70584309252ac8d","sha1":"d73f4ac7e9b7796bab24fcb0619f283d00a4202f","sha256":"2004873122494a2065951b2379c9b4406820b3a7064ab6287cf039a972bb286a","sha512":"50b543e6f6c32d07ef50b7996992ac7839acc733f45eba9fd063dffc3db8fa171fadf56a747800850bda7528e0e58537ba85a02caf8544120737f6571b59651d","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-05","alert":"Scan result 1/64","trigger":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","verdict":"suspicious","severity":"","comment":"suspicious - 1/64","link":"https://www.virustotal.com/gui/file/f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"github.com/massgravel/Microsoft-Activation-Scripts/archive/refs/heads/master.zip","fqdn":"github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.112.3","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-05T09:22:03.154Z","timestamp":1733390523154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0","sha256":"FD:6E:9B:0E:F3:98:BC:D9:04:C3:B2:EC:16:7A:7B:0F:DA:72:01:C9:03:C5:3A:6A:6A:E5:D0:41:43:63:EF:65"}}},"request":{"raw":"GET /massgravel/Microsoft-Activation-Scripts/archive/refs/heads/master.zip HTTP/1.1\r\nHost: github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: GitHub.com\r\ndate: Thu, 05 Dec 2024 09:22:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With\r\nlocation: https://codeload.github.com/massgravel/Microsoft-Activation-Scripts/zip/refs/heads/master\r\ncache-control: max-age=0, private\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/\r\ncontent-length: 0\r\nx-github-request-id: 3800:1AF121:16F1B:1D7F4:675170BB\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/zip","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T18:23:10.63695Z","times_seen":13870738,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":260,"dns":2,"connect":93,"send":0,"wait":152,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"codeload.github.com/massgravel/Microsoft-Activation-Scripts/zip/refs/heads/master","fqdn":"codeload.github.com","domain":"github.com","tld":"com"},"ip":{"addr":"140.82.114.9","port":443,"asn":36459,"as":"GITHUB","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-05T09:22:03.572Z","timestamp":1733390523572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Mar 2024 00:00:00 GMT","end":"Fri, 07 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"0D:F6:EC:50:FA:ED:AE:6E:13:AF:82:94:52:F7:11:1B:0A:CF:7C:20","sha256":"4D:47:6A:EF:60:3F:1C:32:FB:EF:92:CE:03:B6:EE:F3:33:CF:72:F9:BD:B0:A2:96:0C:FC:CC:02:23:33:5D:9E"}}},"request":{"raw":"GET /massgravel/Microsoft-Activation-Scripts/zip/refs/heads/master HTTP/1.1\r\nHost: codeload.github.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://render.githubusercontent.com\r\ncontent-disposition: attachment; filename=Microsoft-Activation-Scripts-master.zip\r\ncontent-length: 325721\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: application/zip\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"17c81a180a1ba5ba0af84787c60add06a4abf8979e894de0ab30e63a8dc118cb\"\r\nstrict-transport-security: max-age=31536000\r\nvary: Authorization,Accept-Encoding,Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\ndate: Thu, 05 Dec 2024 09:22:03 GMT\r\nx-github-request-id: DD20:D4899:534585:6C06D4:675170BB\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325721,"size_decoded":325721,"mime_type":"application/zip","magic":"Zip archive data, at least v1.0 to extract, compression method=store","md5":"bf0f1add95ef479d38db30554a4aede0","sha1":"e05b44aee0a9df0edaa7de4ad24fa18ad407075f","sha256":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","sha512":"2f4b4d50844db1064de7ac918738ab21621f7245434aeb74de2fd2baf0c4367ad4057e5c9ef810f09e5c374ac4e3ea8ab85d960d3549f72b763dccb2d37e8925","ssdeep":"6144:FKM7+Q2fyktqunxP3EOV/QBnYcjysX79M6eC2Bvm5Fyuaj2Dv6FmF:FRaQcybUvEJBGsrY5UDyFyDv64F","tlshash":"136413615b41ed2bce5334ba5553cf43d436878b204ead4634913a3bcb2b37ac67a88d","first_seen":"2024-12-05T09:22:29.602781Z","last_seen":"2025-01-30T07:43:31.887849Z","times_seen":4,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":231,"dns":1,"connect":92,"send":0,"wait":92,"receive":379,"ssl":134},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-12-05","alert":"Scan result 1/64","trigger":"f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","verdict":"suspicious","severity":"","comment":"suspicious - 1/64","link":"https://www.virustotal.com/gui/file/f798b0790fd6e62fb0ff0195c06f7c655ae0a55e1b3c9d6b4c28b7d5483ce6f6","meta":null}],"urlquery":null}}]}