Open-source atomic malware analysis

Analyze another

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/4/Windows/WinSxS/msil_microsoft.windows.a...commands.resources_31bf3856ad364e35_10.0.26100.6725_en-us_1f29166872821a0e/r

POWERSHELL
Verdict: HOSTILE
SHA256: 07039a9f26ed3b37e5c5cf7da93357e4ec92b7a679bc87b86375d3cf17b9352a · 92%
AI Corrupted binary masquerading as script
Mal-ecule
O(As)Md
Size 210 B download
First seen 11 days ago
Analyzed 4 days ago
Ecosystem windows
Source microsoft.com
Many single-character variables: Appx.psd1:0x0
Appx.psd1 powershell
1 ���PA31���ޱ�0 Many single-character variables
2 `} @�� !�P� h.!�-����>%��@��A�|���)<k�H"� W�!� G��[<�$#^�A�irG ��e�"��2����j
3 ���P������������J0����<Jv������������������������
4 뙑��y*�3��3/314 11:56 P30118�������…

Objectives

Metadata

Identity

SHA-256 07039a9f26ed3b37e5c5cf7da93357e4ec92b7a679bc87b86375d3cf17b9352a
Filename Appx.psd1
Package 11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/4/Windows/WinSxS/msil_microsoft.windows.a...commands.resources_31bf3856ad364e35_10.0.26100.6725_en-us_1f29166872821a0e/r

Origin

Source harvest
Feed osimage
Ecosystem windows
Domain microsoft.com

Timeline

First seen 3 Aug 2026 12:25 UTC
First analyzed 10 Aug 2026 10:31 UTC
Last analyzed 10 Aug 2026 10:31 UTC
Last updated 10 Aug 2026 10:31 UTC

Labeling

Label good
Label source harvest
Traits version 73866