This script contains malicious content and has been blocked by your antivirus software.

[simpleetech]

Hey!

Loving the script, but I have started getting the error below when trying to run it.
I suspect Windows Defender doesn't like the base64 encoded EWS DLL binary that is inline.

Has anyone else seen this?

Suggestions for verifying the script is still safe?

[simpleetech]

This is what Defender recognised it as.

Trojan:PowerShell/Mailsniper.B

[JBines]

@dafthack I'm seeing this as well can you explain more why this would be expected?

[dafthack]

This is a known issue. Many antivirus vendors alert on offensive-focused open source tools like this one as they get used by both InfoSec professionals and actual threat actors.