MFASweep icon indicating copy to clipboard operation
MFASweep copied to clipboard
verified publisher icon dafthack

This script contains malicious content and has been blocked by your antivirus software.

Open simpleetech opened this issue 2 years ago • 3 comments

Hey!

Loving the script, but I have started getting the error below when trying to run it. I suspect Windows Defender doesn't like the base64 encoded EWS DLL binary that is inline.

image

Has anyone else seen this?

Suggestions for verifying the script is still safe?

simpleetech avatar Nov 07 '23 09:11 simpleetech

image

This is what Defender recognised it as.

Trojan:PowerShell/Mailsniper.B

simpleetech avatar Nov 08 '23 10:11 simpleetech

@dafthack I'm seeing this as well can you explain more why this would be expected?

JBines avatar May 23 '24 08:05 JBines