search

massgravel / Microsoft-Activation-Scripts

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.
https://massgrave.dev
GNU General Public License v3.0
85.61k stars 8.36k forks source link

[Question] Why is the letter A/a in base64 escaped? #445

Closed SpriteOvO closed 1 month ago

SpriteOvO commented 1 month ago

https://github.com/massgravel/Microsoft-Activation-Scripts/blob/9556ad2cbe87c222a28214cbce7d71b1470be764/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd#L1795

I noticed that comment and all letter A/a in base64 are escaped with -/_.

Just curious about the reason for this. Is it to avoid false positives from anti-virus?

WindowsAddict commented 1 month ago

@SpriteOvO Yes, some antivirus's can detect base64 text. and flag the script based on that. Changes are made to avoid the detection.

SpriteOvO commented 1 month ago

Thanks for your explanation.