Searching for a Massgrave download throws up dozens of copycat sites. This guide shows the only sources worth trusting, how to verify what you downloaded, and what to do on first run.

Why the source matters more than the file

Microsoft Activation Scripts (MAS) is an open-source batch project. Because the code is plain text, anyone can copy it, insert a few extra lines, and re-host it as their own "massgrave" download. Those extra lines are where miners, info-stealers and adware live. The script itself has never shipped malware — repackaged clones have.

That means your safety check is not "does my antivirus like it" but "did I get it from a source that publishes the unmodified code".

The two sources that matter

The PowerShell one-liner. irm https://get.activated.win | iex pulls the current release straight into memory. Nothing is written to disk before you pick a menu option, so there is no repackaged archive in the chain at all.
The signed archive. Download the ZIP, extract it, and open MAS_AIO.cmd in Notepad. Every command in it is readable. If a "download" is an EXE, an installer, or a password-locked archive with an unfamiliar password, it is not MAS.

Verify before you run

Open PowerShell in the folder and run:

Get-FileHash .\MAS_AIO.cmd -Algorithm SHA256

Compare the value with the hash published alongside the release. A mismatch means the file was altered in transit or by the host. Also confirm the file size is in the expected range — a genuine AIO script is a few hundred kilobytes of text, not a 30 MB binary.

Antivirus false positives are normal

Defender flags MAS as HackTool:Win32/AutoKMS. That detection name is literal: it identifies activation tooling, not malicious behaviour. Ohook in particular writes a small library next to Office, which is exactly the pattern heuristics look for.

If you accept that, add an exclusion for the extraction folder before you extract — Defender can delete files mid-extract and leave you with a half-working script that fails with confusing errors.

First run, step by step

Extract the archive to a short path such as C:\MAS. Long paths with spaces and non-Latin characters break batch scripts.
Right-click MAS_AIO.cmd → Run as administrator. Without elevation the licensing service calls fail immediately.
Pick your method: 1 HWID for Windows, 2 Ohook for Office, 3 TSforge for offline or unsupported editions, 4 KMS38 for a 2038 expiry.
Wait for the green success line, then verify with slmgr /xpr.

If the download itself fails

Some ISPs and school networks block activation-related domains at DNS level. Switch to 1.1.1.1 or 8.8.8.8, or use the PowerShell one-liner which resolves a different host. On metered corporate machines, an admin policy may block script execution entirely — that is a group policy issue, not a MAS one.

Get the script

Open Terminal (Admin) or PowerShell (Admin) and run:

irm https://get.activated.win | iex

Prefer offline? Grab the archive from the download page and run MAS_AIO.cmd as administrator. More help: troubleshooting guide · error decoder · all guides.

Massgrave Download 2026: The Complete, Safe Way to Get MAS