Report - git.activated.win/massgrave/Microsoft-Activation-Scripts/archive/master.zip

Report Overview

Visitedpublic

2024-12-26 16:56:20

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
git.activated.win	unknown	2024-05-15	2024-10-08	2024-12-24	529 B	328 kB	172.67.219.75

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

git.activated.win/massgrave/Microsoft-Activation-Scripts/archive/master.zip

IP / ASN

172.67.219.75

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size326 kB (325883 bytes)

MD53a96fe420f3baf0e36918ea64e952488

SHA1bb34c9c658b6eceaa743708646f17cb42a0fb286

SHA25671e5399b8d89075eaf90b26ae9710b1a1876f7624f4bba98c68ddefef37bb9d0

Archive (14)

Modified	Filename	Size	MD5	File type
2024-12-21 11:18	LICENSE	35 kB	1ebbd3e34237af26da5dc08a4e440464	ASCII text
2024-12-21 11:18	MAS_AIO.cmd	446 kB	798dee79bd7ce7886c6c538350ba458a	ASCII text, with very long lines (348), with CRLF line terminators
2024-12-21 11:18	HWID_Activation.cmd	75 kB	a2700e8cc7fb92d1ff091a980b666c97	DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators
2024-12-21 11:18	KMS38_Activation.cmd	77 kB	1438e795af24f388ecf5c2f354de7545	DOS batch file, ASCII text, with very long lines (500), with CRLF line terminators
2024-12-21 11:18	Ohook_Activation_AIO.cmd	135 kB	b65642bb5540fbf3d4bbcebe8310aa47	DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators
2024-12-21 11:18	Online_KMS_Activation.cmd	157 kB	02e3b320ce0caceaa115aaf461196ac0	DOS batch file, ASCII text, with very long lines (452), with CRLF line terminators
2024-12-21 11:18	ReadMe.txt	758 B	b7fa33165116723bc2f83676fd62cc69	ASCII text, with CRLF line terminators
2024-12-21 11:18	Change_Office_Edition.cmd	48 kB	290c76b9670b73656b391460ca474f2c	DOS batch file, ASCII text, with very long lines (453), with CRLF line terminators
2024-12-21 11:18	Change_Windows_Edition.cmd	47 kB	93e119fb5d66b055598c6d6f66ad5bfb	DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators
2024-12-21 11:18	Check_Activation_Status.cmd	36 kB	1ebf95a85eec40bab2045bd26658a345	DOS batch file, ASCII text, with CRLF line terminators
2024-12-21 11:18	Extract_OEM_Folder.cmd	24 kB	25f2fd7aba9a280e36ba9c9922a4f32c	DOS batch file, ASCII text, with very long lines (348), with CRLF line terminators
2024-12-21 11:18	Troubleshoot.cmd	50 kB	110045def80f5f8f736e2c9dc131e01a	DOS batch file, ASCII text, with very long lines (376), with CRLF line terminators
2024-12-21 11:18	_ReadMe.html	84 B	574e18c1f9b32a47f988ac91588901ba	HTML document, ASCII text, with CRLF line terminators
2024-12-21 11:18	README.md	3.4 kB	c7dd061882cdd8dbcd20aab202877d16	Unicode text, UTF-8 text

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

git.activated.win/massgrave/Microsoft-Activation-Scripts/archive/master.zip

172.67.219.75

200 OK

326 kB

URL

git.activated.win/massgrave/Microsoft-Activation-Scripts/archive/master.zip

IP / ASN

172.67.219.75

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v1.0 to extract, compression method=store

First Seen2024-12-24

Last Seen2025-02-08

Times Seen7

Size326 kB (325883 bytes)

MD53a96fe420f3baf0e36918ea64e952488

SHA1bb34c9c658b6eceaa743708646f17cb42a0fb286

SHA25671e5399b8d89075eaf90b26ae9710b1a1876f7624f4bba98c68ddefef37bb9d0

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/65

HTTP Headers

GET /massgrave/Microsoft-Activation-Scripts/archive/master.zip HTTP/1.1
Host: git.activated.win
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 26 Dec 2024 16:55:55 GMT
content-type: application/octet-stream
content-length: 325883
access-control-expose-headers: Content-Disposition
cache-control: private, max-age=300
content-disposition: attachment; filename="Microsoft-Activation-Scripts-master.zip"; filename*=UTF-8''Microsoft-Activation-Scripts-master.zip
last-modified: Tue, 24 Dec 2024 23:00:01 GMT
link: <https://git.activated.win/api/v1/repos/massgrave/Microsoft-Activation-Scripts/archive/37ec96504a2983a5801c43e975ab78c8f9315d2a.tar.gz?rev=37ec96504a2983a5801c43e975ab78c8f9315d2a>; rel="immutable"
no-gzip-compression: 1
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: BYPASS
set-cookie: i_like_gitea=09f9ba7b4ab6d8db; Path=/; HttpOnly; Secure; SameSite=Lax
_csrf=2zxRwtwri77RGFhqK4JThzpR3so6MTczNTIzMjE1NTczOTczMzM1Mg; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZyD56Xg4VMCLzrSuJAnUTyWB3yAURaEdXmC%2FNYT5lm4w%2FTBGADKENQv5ipPj9w4jVFckucTNRvasih0jFksZIFP7SrosuukdSBUhBpYXi8MwupfUfJXBOeAi2g7dolM%2B%2F0QWPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8f8299ece8cd0b49-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6892&min_rtt=504&rtt_var=12524&sent=9&recv=12&lost=0&retrans=1&sent_bytes=3294&recv_bytes=1208&delivery_rate=7276381&cwnd=256&unsent_bytes=0&cid=b245a3ba0f20fe1c&ts=125&x=0"
X-Firefox-Spdy: h2