MAS creating a folder with the LIGHTSHOT program

[Nanzozi]

Hello, today I decided to activate my Windows 10 using the MAS tool. When activating, a folder magically appeared in my appdata called "dff6b1f4", inside it there was the LIGHTSHOT program from SkillBrains. What would that be? I went to MalwareBytes and it reported it as a Trojan. Is the MAS code not secure?

[thecatontheceiling]

this is unrelated to mas. please check source code first before making issues like this, thanks

[Nanzozi]

No, my pc was recently assembled, there were no other systems installed before. The date the folder was created is identical to the time I activated Windows.
irm https://massgrave.dev/get | iex
I used this code, other users have already reported the problem, I even discovered it by being informed of this folder.

I already solved it, apparently it was from the link where the code was hosted.

[ave9858]

This is not related to MAS. please check source code first before making issues like this or provide some other evidence

[thecatontheceiling]

please review the code.
here's get.ps1

you can clearly see the only thing it's doing is download the script from GitHub and running it.