82cc2d61e6d1742880417144a02a51ed71eb28f2fe9d14379605da09732eba11
Author: Microsoft
Source: Wild
Summary
recoverydrive.exe is the 38034th most commonly executed Windows program. It typically runs from the path C:\Windows\System32, and is most often launched by cmd.exe. It has been observed executing on 1.2% of computers in the wild. The typical filename is recoverydrive.exe.
EchoTrail Prevalence Score (EPS)
19.33
Rank Analysis
Host Prevalence
1.2%
Execution Rank
38,034th
Behavioral Analysis
Top Filenames
Top Paths
C:\Windows\System32
100.00 %
loading...
Top Network Ports
No results found.
Ancestry Analysis
Top GrandParents
Top Parents
loading...
Top Children
No results found.
Security Analysis
Intel
Want to contribute intel? Contact us about becoming an Intel Contributor.