A driver that wasn't a driver: dissecting a steganographic PowerShell beaconA 3.7 MB log-line file in System32\drivers\, a tiny PowerShell read-decode-execute, and an HTTP beacon that pulls its capability live. May 23, 2026 Malware Analysis