Evade detection

This commit is contained in:
2025-07-23 17:58:38 +05:30
parent d78e262f5b
commit 2dd41cc2c5
10 changed files with 122 additions and 122 deletions

View File

@@ -5,7 +5,7 @@
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================
@@ -1747,7 +1747,7 @@ exit /b
:: 2nd column = Generic Retail/OEM/MAK Key
:: 3rd column = SKU ID
:: 4th column = Key part number
:: 5th column = Ticket signature value. It's as it is, it's not encoded. (Check mass grave[.]dev/hwid#manual-activation to see how it's generated)
:: 5th column = Ticket signature value. It's as it is, it's not encoded. (Check mass<>grave<.>dev/hwid#manual-activation to see how it's generated)
:: 6th column = 1 = activation is not working (at the time of writing this), 0 = activation is working
:: 7th column = Key Type
:: 8th column = WMI Edition ID (For reference only)

View File

@@ -5,7 +5,7 @@
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================

View File

@@ -5,7 +5,7 @@
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================
@@ -701,7 +701,7 @@ call :dk_color %Gray% "Checking Old Office With Sub License [Found. Update Of
::========================================================================================================================================
:: mass grave[.]dev/office-license-is-not-genuine
:: mass<>grave<.>dev/office-license-is-not-genuine
:: Add registry keys for volume products so that 'non-genuine' banner won't appear
:: Script already is using MAK instead of GVLK so it won't appear anyway, but registry keys are added incase Office installs default GVLK grace key for volume products
@@ -2988,13 +2988,13 @@ $MemoryStream.Close()
::
:: The files are encoded in base64 to make AIO version.
::
:: mass grave[.]dev/ohook
:: mass<>grave<.>dev/ohook
:: Here you can find the files source code and info on how to rebuild the identical sppc.dll files
::
:: stackoverflow.com/a/35335273
:: Here you can check how to extract sppc.dll files from base64
::
:: For any further question, feel free to contact us on mass grave[.]dev/contactus
:: For any further question, feel free to contact us on mass<>grave<.>dev/contactus
::
::========================================================================================================================================
::

View File

@@ -5,7 +5,7 @@
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================
@@ -1004,7 +1004,7 @@ if %winbuild% GEQ 9200 (
for /f "skip=2 tokens=2*" %%a in ('"reg query HKLM\SOFTWARE\Microsoft\Office\ClickToRun /v InstallPath" %nul6%') do if exist "%%b\root\Licenses16\ProPlus*.xrm-ms" set "_C16R=1"
for /f "skip=2 tokens=2*" %%a in ('"reg query HKLM\SOFTWARE\Microsoft\Office\ClickToRun /v InstallPath /reg:32" %nul6%') do if exist "%%b\root\Licenses16\ProPlus*.xrm-ms" set "_C16R=1"
if defined _C16R (
REM mass grave[.]dev/office-license-is-not-genuine
REM mass<>grave<.>dev/office-license-is-not-genuine
set _server=10.0.0.10
call :_taskregserv
echo Keeping the non-existent IP address 10.0.0.10 as %KS% Server.
@@ -1673,7 +1673,7 @@ exit /b
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================
@@ -2282,7 +2282,7 @@ echo ___________________________________________________________________________
echo:
echo This Script is a part of MAS project.
echo:
echo Homepage: mass grave[.]dev
echo Homepage: mass%w%grave%w%.dev
echo Email: mas.help@outlook.com
)>"%_dest%\Info.txt"
exit /b

View File

@@ -5,7 +5,7 @@
::============================================================================
::
:: Homepage: mass grave[.]dev
:: Homepage: mass<>grave<.>dev
:: Email: mas.help@outlook.com
::
::============================================================================
@@ -1443,7 +1443,7 @@ call :ts_process
::========================================================================================================================================
:: mass grave[.]dev/office-license-is-not-genuine
:: mass<>grave<.>dev/office-license-is-not-genuine
:: Add registry keys for volume products so that 'non-genuine' banner won't appear
set "kmskey=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\0ff1ce15-a989-479d-af46-f275c6370663"