3e4c46ee38cb5a01edde1fa0b1a6f3fc114ff15e45fc55ab2c7d4e0c54d3ef44
Author: Microsoft
Source: Wild
Summary
eventcreate.exe is the 99143rd most commonly executed Windows program. It typically runs from the path C:\Windows\System32, and is most often launched by cmd.exe. It has been observed executing on 2.4% of computers in the wild. The typical filename is eventcreate.exe.
EchoTrail Prevalence Score (EPS)
1.68
Rank Analysis
Host Prevalence
2.4%
Execution Rank
99,143rd
Behavioral Analysis
Top Filenames
Top Paths
C:\Windows\System32
100.00 %
loading...
Top Network Ports
No results found.
Ancestry Analysis
Top GrandParents
Top Parents
loading...
Top Children
Security Analysis
Intel
Want to contribute intel? Contact us about becoming an Intel Contributor.