5d86853fdd0a604bdda0ee803e938b5975b7b7336733b788af5c29aa236793ea
Source: Wild
Summary
pwsh.exe is the 20375th most commonly executed Windows program. It typically runs from the path C:\Program Files\PowerShell\7, and is most often launched by WindowsTerminal.exe. It has been observed executing on 1.3% of computers in the wild. The typical filename is pwsh.exe.
EchoTrail Prevalence Score (EPS)
24.74
Rank Analysis
Host Prevalence
1.3%
Execution Rank
20,375th
Behavioral Analysis
Top Filenames
Top Paths
C:\Program Files\PowerShell\7
95.16 %
loading...
Top Network Ports
No results found.
Ancestry Analysis
Top GrandParents
No results found.
Top Parents
Top Children
loading...
Security Analysis
Intel
Want to contribute intel? Contact us about becoming an Intel Contributor.