Netskope Threat Labs

WMITask

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies malware that uses Windows Management Instrumentation (WMI) for persistence and task execution on infected systems.

First seen
March 2025
Last seen
September 2026
Alert Name
ByteCode-MSIL.Trojan.WMITask
Generic.JS.WMITask.A.28A9A8F5
Generic.JS.WMITask.A.795B650D
Generic.JS.WMITask.A.8114D40E
Generic.JS.WMITask.A.8AA3969A
Generic.JS.WMITask.A.E1CF76B4
Generic.JS.WMITask.A.FBD99171
Generic.JS.WMITask.B.BC4E9163
Generic.MSIL.WMITask.A.0FD05814
Generic.MSIL.WMITask.A.49539DC4