esif_uf.exe
by Intel
Driver/Hardware
Summary
Intel ESIF Upper Framework - Intel Dynamic Platform and Thermal Framework user-mode.
esif_uf.exe is the 1028th most commonly executed Windows program in EchoTrail's dataset, observed 1,912 times across enterprise environments. It typically runs from C:\Windows\SysWOW64 and it is most often launched by services.exe.
1028th
most commonly executed Windows program
1,912
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\SysWOW6465.32%
- C:\Windows\System32\Intel\DPTF28.61%
- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_fa6b3fb2c05394c23.29%
- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb71.36%
- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_eede4da71d9331220.89%
- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_e3868713e3d137ef0.31%
- C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d60.21%
Top Hashes (SHA256)
- e6f34423cb37f7b8304d7619d2a20a3cec726d330cbb50f58dec94afc8016e4e30.16%
- d834cd05d759b0a0ccfdacf56819c3a6a51e8b61cf2b355472a43b87e31cd9fd19.65%
- 4c85cb86ee49b4834345abb720ff84bc158967dafe8dce8e06693e46ebc16e5213.7%
- 93f9a177d5eca6ddde4b9288e3b5e0905ceb797b4fe4ca36a4127b60ef3dda0210.18%
- 62706fe7d356ea0bae163f698934949d4efd659afced60e1028129b6e635cdf09.63%
- 230c6ec832bad899826391270efcaa08961e8748614a021719fd2769e0533e2e3.47%
- 91a9b7b72754f0338eb297bed331e011580f8bfa0b4f8da4495a189ab8a238943.19%
- 6fbea782a67931b864ca214b497ffcfd8205082d3a0ec53dc386d443a1f6025a2.97%
- c024bea2ba0e409fd89a09bd803c4569a87deaab072969b6b0f999fb4919911e1.93%
- f0a01a96cde938854249e2e5de13d9cc59801753e08b0e5acf8d432f1dd2d7a71.43%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- esif_assist_64.exe99.96%
- dptf_helper.exe0.04%
- regsvr32.exe<0.01%
- lpksetup.exe<0.01%
- net1.exe<0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about esif_uf.exe
Rocky answers questions about esif_uf.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.