90d519a81f59590742362461a730a67fa032806fcc53ee387b840ff04d056791
Author: Microsoft
Source: Wild
Summary
takeown.exe is the 42229th most commonly executed Windows program. It typically runs from the path C:\Windows\System32, and is most often launched by powershell.exe. It has been observed executing on 50.6% of computers in the wild. The typical filename is takeown.exe.
EchoTrail Prevalence Score (EPS)
52.65
Rank Analysis
Host Prevalence
50.6%
Execution Rank
42,229th
Behavioral Analysis
Top Filenames
Top Paths
C:\Windows\System32
98.35 %
loading...
Top Network Ports
No results found.
Ancestry Analysis
Top GrandParents
Top Parents
Top Children
Security Analysis
Intel
Want to contribute intel? Contact us about becoming an Intel Contributor.