EMSAddonInstaller.exe

by Microsoft
Endpoint Management

Summary

EMS Add-on Installer - installs Enterprise Mobility + Security add-ons for Configuration Manager.

EMSAddonInstaller.exe is the 270th most commonly executed Windows program in EchoTrail's dataset, observed 44,076 times across enterprise environments. It typically runs from C:\Program Files (x86)\ManageEngine\UEMS_Agent\bin and it is most often launched by dcconfig.exe.

270th
most commonly executed Windows program
44,076
observed executions
medium
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\ManageEngine\UEMS_Agent\bin100%

Top Hashes (SHA256)

  • f7becdfead0b47a11a7ed55490bba1154a20b401454901053e40f1589d7db2bd100%

Process Ancestry

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about EMSAddonInstaller.exe

Rocky answers questions about EMSAddonInstaller.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.