All Detections

Inflated Executable Created By Archive Utility

avatar
Daniel Jeremiah@daniyyell
updated Jun 19, 2026001

Targets an unusually large executable produced by 7-Zip, WinRAR, tar, or PowerShell extraction. The UDM rule retains principal and target context for correlation.

YARA-L