Netskope Threat Labs

WinexeSvc

ATP Sandbox Adv. HeuristicsAV

WinexeSvc is a detection for the Winexe service component that cyberattackers can abuse for lateral movement and remote code execution.

First seen
June 2022
Last seen
October 2026
Alert Name
Application.WinexeSvc.A
Gen:Application.WinexeSvc.1
Linux.Malware.WinexeSvc
Linux.Trojan.WinexeSvc
Package.Malware.WinexeSvc
Win32.Infostealer.WinexeSvc
Win32.Malware.WinexeSvc
Win32.Trojan.WinexeSvc
Win64.Malware.WinexeSvc
Win64.Trojan.WinexeSvc