List of software behaviors discovered with static code analysis.
category ALL
Info
Count
Category
Accesses credentials from the Windows Credential Manager.4
steal
Prevalence in PowerShell Gallery community
Behavior commonly used by malicious software (Important)
Behavior often found in this community (Common)
5 packages
found in
Top 100
72 packages
found in
Top 1k
111 packages
found in
Top 10k
218 packages
in community
Retrieves the name of the user associated with the process.23
search
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
12 packages
found in
Top 100
172 packages
found in
Top 1k
803 packages
found in
Top 10k
1281 packages
in community
Loads additional snap-ins or modules to the current session.1
payload
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
90 packages
found in
Top 100
509 packages
found in
Top 1k
3113 packages
found in
Top 10k
5185 packages
in community
Interacts with Microsoft .NET Framework code, types and assemblies.2
execution
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
100 packages
found in
Top 100
804 packages
found in
Top 1k
6518 packages
found in
Top 10k
11726 packages
in community
Deletes credentials from the Windows Credential Manager.4
settings
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
5 packages
found in
Top 100
71 packages
found in
Top 1k
79 packages
found in
Top 10k
182 packages
in community
Retrieves the local computer name.8
search
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
2 packages
found in
Top 100
45 packages
found in
Top 1k
170 packages
found in
Top 10k
301 packages
in community
Encodes data using the Base64 algorithm.39
packer
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
74 packages
found in
Top 100
404 packages
found in
Top 1k
2154 packages
found in
Top 10k
3540 packages
in community
Decodes data using the Base64 algorithm.29
packer
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
68 packages
found in
Top 100
371 packages
found in
Top 1k
1732 packages
found in
Top 10k
2838 packages
in community
Opens a TCP connection to a remote server.2
network
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
6 packages
found in
Top 100
53 packages
found in
Top 1k
515 packages
found in
Top 10k
740 packages
in community
Executes a file.5
execution
Prevalence in PowerShell Gallery community
Behavior often found in this community (Common)
17 packages
found in
Top 100
283 packages
found in
Top 1k
1860 packages
found in
Top 10k
3073 packages
in community
10