Malware Detection?

[kckenterprises]

Getting multiple detections when installing this PS module.

Is this to be expected?

[weyCC81]

Microsoft Defender is also flagging the following files during the Installation for me:

• AADInternals.png = Trojan:Win32/Malgent!MSR
• Win32Ntv.dll = Backdoor:MSIL/SuspAdsyncBin.D

Install-Module AADInternals
# PackageManagement\Install-Package : Package 'AADInternals' failed to be installed because: Operation did not complete successfully because the file contains a virus or potentially unwanted software.

Would it be possible to move the into a separated module?

Install-Module AADInternals.Beta
Install-Module AADInternals.Experimental

[Mike-Crowley]

The version info table (https://aadinternals.com/aadinternals) mentions:

Removed PTASpy to prevent antivirus blocking AADInternals installation on non-PTA computers.

So, I suspect other alerts are just more of the same - this entire package can be used maliciously, but it would be helpful to get an official confirmation from @NestoriSyynimaa

Related:

• https://github.com/Gerenios/AADInternals/issues/90
• https://github.com/Gerenios/AADInternals/commit/6c802d9edcb8681055546d787059b7915786e54d#commitcomment-147759886

[NestoriSyynimaa]

https://x.com/DrAzureAD/status/1838527114632401382

[Mike-Crowley]

Thanks! I suspected as much, but thank you for confirming they are legitimate and not dangerous to users of the PowerShell module.