Netskope Threat Labs

PSImage

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies malicious PowerShell scripts that embed hidden payloads within image files for evasion.

First seen
March 2022
Last seen
October 2026
Alert Name
DeepScan:Generic.PwShell.PSImage.A.FFFFFFFE
Dump:Generic.PwShell.PSImage.A.FFFFFFFE
Email-MSG.Malware.PSImage
Generic.PwShell.PSImage.A.00001FF9
Generic.PwShell.PSImage.A.000B1C46
Generic.PwShell.PSImage.A.001F7227
Generic.PwShell.PSImage.A.00346346
Generic.PwShell.PSImage.A.0034AC2D
Generic.PwShell.PSImage.A.0043BD88
Generic.PwShell.PSImage.A.005219EA