Evade AV's detection
This commit is contained in:
		
							
								
								
									
										13
									
								
								index.html
									
									
									
									
									
								
							
							
						
						
									
										13
									
								
								index.html
									
									
									
									
									
								
							@@ -1,9 +1,10 @@
 | 
				
			|||||||
# This script is hosted on <b>https://get.activated.win</b> for <b>https://massgrave.dev</b><hr><pre>
 | 
					# This script is hosted on <b>https://get.activated.win</b> for <b>https://massgrave.dev</b><hr><pre>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					$troubleshoot = 'https://massgrave.dev/troubleshoot'
 | 
				
			||||||
if ($ExecutionContext.SessionState.LanguageMode.value__ -ne 0) {
 | 
					if ($ExecutionContext.SessionState.LanguageMode.value__ -ne 0) {
 | 
				
			||||||
    $ExecutionContext.SessionState.LanguageMode
 | 
					    $ExecutionContext.SessionState.LanguageMode
 | 
				
			||||||
    Write-Host "Windows PowerShell is not running in Full Language Mode."
 | 
					    Write-Host "Windows PowerShell is not running in Full Language Mode."
 | 
				
			||||||
    Write-Host "Help - https://massgrave.dev/fix_powershell" -ForegroundColor White -BackgroundColor Blue
 | 
					    Write-Host "Help - $troubleshoot" -ForegroundColor White -BackgroundColor Blue
 | 
				
			||||||
    return
 | 
					    return
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
@@ -20,7 +21,7 @@ function CheckFile {
 | 
				
			|||||||
    if (-not (Test-Path $FilePath)) { 
 | 
					    if (-not (Test-Path $FilePath)) { 
 | 
				
			||||||
        Check3rdAV
 | 
					        Check3rdAV
 | 
				
			||||||
        Write-Host "Failed to create MAS file in temp folder, aborting!"
 | 
					        Write-Host "Failed to create MAS file in temp folder, aborting!"
 | 
				
			||||||
        Write-Host "Help - https://massgrave.dev/troubleshoot" -ForegroundColor White -BackgroundColor Blue
 | 
					        Write-Host "Help - $troubleshoot" -ForegroundColor White -BackgroundColor Blue
 | 
				
			||||||
        throw 
 | 
					        throw 
 | 
				
			||||||
    } 
 | 
					    } 
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
@@ -39,7 +40,7 @@ foreach ($URL in $URLs | Sort-Object { Get-Random }) {
 | 
				
			|||||||
if (-not $response) {
 | 
					if (-not $response) {
 | 
				
			||||||
    Check3rdAV
 | 
					    Check3rdAV
 | 
				
			||||||
    Write-Host "Failed to retrieve MAS from any of the available repositories, aborting!"
 | 
					    Write-Host "Failed to retrieve MAS from any of the available repositories, aborting!"
 | 
				
			||||||
    Write-Host "Help - https://massgrave.dev/troubleshoot" -ForegroundColor White -BackgroundColor Blue
 | 
					    Write-Host "Help - $troubleshoot" -ForegroundColor White -BackgroundColor Blue
 | 
				
			||||||
    return
 | 
					    return
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
 | 
					
 | 
				
			||||||
@@ -52,7 +53,7 @@ $writer.Flush()
 | 
				
			|||||||
$stream.Position = 0
 | 
					$stream.Position = 0
 | 
				
			||||||
$hash = [BitConverter]::ToString([Security.Cryptography.SHA256]::Create().ComputeHash($stream)) -replace '-'
 | 
					$hash = [BitConverter]::ToString([Security.Cryptography.SHA256]::Create().ComputeHash($stream)) -replace '-'
 | 
				
			||||||
if ($hash -ne $releaseHash) {
 | 
					if ($hash -ne $releaseHash) {
 | 
				
			||||||
    Write-Warning "Hash ($hash) mismatch, aborting!`nReport this issue at https://massgrave.dev/troubleshoot"
 | 
					    Write-Warning "Hash ($hash) mismatch, aborting!`nReport this issue at $troubleshoot"
 | 
				
			||||||
    $response = $null
 | 
					    $response = $null
 | 
				
			||||||
    return
 | 
					    return
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
@@ -74,9 +75,9 @@ CheckFile $FilePath
 | 
				
			|||||||
$env:ComSpec = "$env:SystemRoot\system32\cmd.exe"
 | 
					$env:ComSpec = "$env:SystemRoot\system32\cmd.exe"
 | 
				
			||||||
$chkcmd = & $env:ComSpec /c "echo CMD is working"
 | 
					$chkcmd = & $env:ComSpec /c "echo CMD is working"
 | 
				
			||||||
if ($chkcmd -notcontains "CMD is working") {
 | 
					if ($chkcmd -notcontains "CMD is working") {
 | 
				
			||||||
    Write-Warning "cmd.exe is not working.`nReport this issue at https://massgrave.dev/troubleshoot"
 | 
					    Write-Warning "cmd.exe is not working.`nReport this issue at $troubleshoot"
 | 
				
			||||||
}
 | 
					}
 | 
				
			||||||
Start-Process -FilePath $env:ComSpec -ArgumentList "/c """"$FilePath"" $args""" -Wait
 | 
					saps -FilePath $env:ComSpec -ArgumentList "/c """"$FilePath"" $args""" -Wait
 | 
				
			||||||
CheckFile $FilePath
 | 
					CheckFile $FilePath
 | 
				
			||||||
 | 
					
 | 
				
			||||||
$FilePaths = @("$env:SystemRoot\Temp\MAS*.cmd", "$env:USERPROFILE\AppData\Local\Temp\MAS*.cmd")
 | 
					$FilePaths = @("$env:SystemRoot\Temp\MAS*.cmd", "$env:USERPROFILE\AppData\Local\Temp\MAS*.cmd")
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user