Netskope Threat Labs

PwShell

ATP Sandbox Adv. HeuristicsAV

PwShell is a detection name for malicious PowerShell scripts.

First seen
January 2022
Last seen
October 2026
PWShellPwshell
Alert Name
DeepScan:Generic.PwShell.Downloader.3.FFFFFFFE
DeepScan:Generic.PwShell.Downloader.5.FFFFFFFE
Document-Word.Trojan.PWShell
Dropped:Trojan.PwShell.Downloader.B
Dump:Generic.PwShell.Downloader.3.FFFFFFFE
Dump:Generic.PwShell.Downloader.5.FFFFFFFE
Generic.PwShell.Downloader.3.01361308
Generic.PwShell.Downloader.3.05977F4B
Generic.PwShell.Downloader.3.0A9BCAEE
Generic.PwShell.Downloader.3.0C77885C