Evade AV's detection - 7

misc: changed Twitter Logo to 𝕏

MAS/All-In-One-Version/MAS_AIO.cmd

@@ -2,7 +2,7 @@
 @setlocal DisableDelayedExpansion
 @echo off
 
-
+::
 ::  For command line switches, check mass grave[.]dev/command_line_switches.html
 ::  If you want to better understand script, read from MAS separate files version. 
 
@@ -8329,7 +8329,7 @@ if defined DiscoveredKeyManagementServiceMachineIpAddress echo.    KMS machine I
 echo.    KMS machine extended PID: %KeyManagementServiceProductKeyID%
 echo.    Activation interval: %VLActivationInterval% minutes
 echo.    Renewal interval: %VLRenewalInterval% minutes
-echo.    KMS host caching: %KeyManagementServiceHostCaching%
+echo.    K.M.S host caching: %KeyManagementServiceHostCaching%
 if defined KeyManagementServiceLookupDomain echo.    KMS SRV record lookup domain: %KeyManagementServiceLookupDomain%
 if defined ExpireMsg echo.&echo.    %ExpireMsg%
 exit /b

MAS/Separate-Files-Version/Activators/HWID_Activation.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::============================================================================
 ::
 ::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.

MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::============================================================================
 ::
 ::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.

MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd

@@ -2,17 +2,8 @@
 @setlocal DisableDelayedExpansion
 @echo off
 
-
-
-::============================================================================
 ::
-::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.
-::
-::   Homepage: mass grave[.]dev
-::      Email: windowsaddict@protonmail.com
-::
-::============================================================================
-
+::========================================================================================================================================
 
 
 ::  To activate Office with Ohook activation, run the script with "/Ohook" parameter or change 0 to 1 in below line
@@ -24,7 +15,6 @@ set _rem=0
 ::  If value is changed in above lines or parameter is used then script will run in unattended mode
 
 
-
 ::========================================================================================================================================
 
 ::  Set Path variable, it helps if it is misconfigured in the system
@@ -559,7 +549,7 @@ echo Adding Reg Keys To Skip License Check   [Successful]
 
 ::========================================================================================================================================
 
-::  mass grave[.]dev/office-license-is-not-genuine.html
+::  mass[]grave[.]dev/office-license-is-not-genuine.html
 ::  Add registry keys for volume products so that 'non-genuine' banner won't appear 
 ::  Script already is using MAK instead of GVLK so it won't appear anyway, but registry keys are added incase Office installs default GVLK grace key for volume products
 
@@ -1526,8 +1516,8 @@ exit /b
 
 :oh_extractdll
 
-set b=
-%psc% "$f=[io.file]::ReadAllText('!_batp!') -split ':%_hook%\:.*';$bytes = [Con%b%vert]::FromBas%b%e64String($f[1]); $PePath='%1'; $offset='%2'; $m=[io.file]::ReadAllText('!_batp!') -split ':hexedit\:.*';iex ($m[1]);" %nul2% | find /i "Error found" %nul1% && set hasherror=1
+set _blank=
+%psc% "$f=[io.file]::ReadAllText('!_batp!') -split ':%_hook%\:.*';$bytes = [Con%_blank%vert]::FromBas%_blank%e64String($f[1]); $PePath='%1'; $offset='%2'; $m=[io.file]::ReadAllText('!_batp!') -split ':hexedit\:.*';iex ($m[1]);" %nul2% | find /i "Error found" %nul1% && set hasherror=1
 exit /b
 
 :hexedit:
@@ -1610,13 +1600,13 @@ $MemoryStream.Close()
 ::
 ::  The files are encoded in base64 to make MAS AIO version.
 ::
-::  mass grave[.]dev/ohook
+::  mass[]grave[.]dev/ohook
 ::  Here you can find the files source code and info on how to rebuild the identical sppc.dll files
 ::
 ::  stackoverflow.com/a/35335273
 ::  Here you can check how to extract sppc.dll files from base64
 ::
-::  For any further question, feel free to contact us on mass grave[.]dev/contactus
+::  For any further question, feel free to contact us on mass[]grave[.]dev/contactus
 ::
 ::========================================================================================================================================
 

MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::=================================================================================================
 ::
 ::  Online KMS Script is a fork of @abbodi1406's KMS_VL_ALL  forums.mydigitallife.net/posts/838808

MAS/Separate-Files-Version/Change_Edition.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::============================================================================
 ::
 ::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.

MAS/Separate-Files-Version/Check-Activation-Status-vbs.cmd

@@ -4,7 +4,7 @@
 
 
 
-::  Check-Activation-Status-vbs.cmd
+::  Check-Activation-Status
 ::  Written by @abbodi1406
 ::  forums.mydigitallife.net/posts/838808
 

MAS/Separate-Files-Version/Check-Activation-Status-wmi.cmd

@@ -4,7 +4,7 @@
 
 
 
-::  Check-Activation-Status-wmi.cmd
+::  Check-Activation-Status
 ::  Written by @abbodi1406
 ::  forums.mydigitallife.net/posts/838808
 
@@ -363,7 +363,7 @@ if defined DiscoveredKeyManagementServiceMachineIpAddress echo.    KMS machine I
 echo.    KMS machine extended PID: %KeyManagementServiceProductKeyID%
 echo.    Activation interval: %VLActivationInterval% minutes
 echo.    Renewal interval: %VLRenewalInterval% minutes
-echo.    KMS host caching: %KeyManagementServiceHostCaching%
+echo.    K.M.S host caching: %KeyManagementServiceHostCaching%
 if defined KeyManagementServiceLookupDomain echo.    KMS SRV record lookup domain: %KeyManagementServiceLookupDomain%
 if defined ExpireMsg echo.&echo.    %ExpireMsg%
 exit /b

MAS/Separate-Files-Version/Extract_OEM_Folder.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::============================================================================
 ::
 ::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.

MAS/Separate-Files-Version/Troubleshoot.cmd

@@ -3,7 +3,7 @@
 @echo off
 
 
-
+::
 ::============================================================================
 ::
 ::   This script is a part of 'Microsoft_Activation_Scripts' (MAS) project.

README.md

@@ -45,7 +45,7 @@ Release date: 21-Oct-2023
 
 [1.1]: https://lookimg.com/images/2023/03/21/QTvjcD.png (Chat with us without signup)
 [1.2]: https://lookimg.com/images/2023/03/21/QTvLyd.png (Chat with us)
-[1.3]: https://lookimg.com/images/2023/03/21/QTvXBJ.png (Follow on twitter)
+[1.3]: https://lookimg.com/images/2023/10/29/QiBot9.png (Follow on 𝕏/Twitter)
 [1.4]: https://lookimg.com/images/2023/05/17/Q0iZ2U.png (Reddit)
 
 [1]: https://discord.gg/gjJEfq7ux8