Intune-App-Sandbox
Intune-App-Sandbox is a testing utility for PowerShell-based installers packaged with the Win32 Content Prep Tool for Intune deployments. It creates a sandbox workspace (C:\SandboxEnvironment), and adds context-menu options to pack with IntunewinUtil or run tests in a Safe sandbox. It also supports a detection-based test flow and a reusable template script to accelerate building and validating packaging for Win32 apps in Intune.
Screenshots
1 / 2Swipe to see more
Security Analysis
10 files scanned on Aug 16, 2026
The Intune-App-Sandbox code appears aligned with legitimate Intune Win32 testing workflows (decoding .intunewin packages, running installers in Windows Sandbox, signing and mapping resources). However, there are notable areas to scrutinize: an obfuscated/garbled manifest file, a local decoding/execution pipeline with bypassed execution policy, and a SYSTEM-level scheduled task workflow that could be leveraged for persistence if packages are tampered with. No evidence of credential theft or external data exfiltration was found in the provided snippets. Recommend enforcing package signing and integrity checks, verifying the obfuscated manifest’s provenance, and applying strict auditing and least-privilege controls around Sandbox operations.
You might also like
Wintuner
WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.
Stephan van RooijIntuneWinAppUtil GUI
IntuneWinAppUtil GUI is a PowerShell-based WPF wrapper for Microsoft's IntuneWinAppUtil.exe. It streamlines packaging Win32 apps for Intune with auto-download of the latest tool, input validation, path-length checks, and configuration persistence across launches. It also detects PSAppDeployToolkit usage to suggest names and sanitizes invalid filename characters.
Giovanni SoloneIntuneWin32App
A PowerShell module for managing the complete lifecycle of Win32 applications in Microsoft Intune. Features 40+ functions for packaging, publishing, detection rules, requirement rules, assignments, dependencies, and supersedence with support for x64, x86, and ARM64 architectures.
Nickolaj Andersenwin32-toolkit
win32-toolkit delivers end-to-end Intune Win32 packaging: point at a winget package or any installer, scaffold a PSAppDeployToolkit v4 project, and capture real installs in a disposable Windows Sandbox or Hyper-V VM. It derives detection and uninstall logic, validates install/update paths, packages a .intunewin, and publishes to Intune with dependencies, branding, and requirements.
Maxime Guillemin