965328c982f264890c29ab284fc8225106bf1971988ca0ee4fe4d3af0cf16f4e
Author: Microsoft
Source: Wild
Summary
DiskSnapshot.exe is the 1460th most commonly executed Windows program. It typically runs from the path C:\Windows\System32, and is most often launched by svchost.exe. It has been observed executing on 78.5% of computers in the wild. The typical filename is disksnapshot.exe.
EchoTrail Prevalence Score (EPS)
84.51
Rank Analysis
Host Prevalence
78.5%
Execution Rank
1,460th
Behavioral Analysis
Top Filenames
Top Paths
C:\Windows\System32
99.91 %
loading...
Top Network Ports
443
100.00 %
loading...
Ancestry Analysis
Top GrandParents
Top Parents
Top Children
Security Analysis
Intel
Want to contribute intel? Contact us about becoming an Intel Contributor.