Netskope Threat Labs

JSLoader

AV

This generic detection identifies JavaScript loaders embedded in XML files that download and execute additional malware payloads.

First seen
May 2022
Last seen
October 2026
Alert Name
DeepScan:Generic.XML.JSLoader.1.FFFFFFFE
DeepScan:Generic.XML.JSLoader.2.FFFFFFFE
Dump:Generic.XML.JSLoader.1.FFFFFFFE
Dump:Generic.XML.JSLoader.2.FFFFFFFE
Generic.XML.JSLoader.1.03A6CDFE
Generic.XML.JSLoader.1.133AA772
Generic.XML.JSLoader.1.13C25F31
Generic.XML.JSLoader.1.2C7686F2
Generic.XML.JSLoader.1.3BB92204
Generic.XML.JSLoader.1.3BD7B269