hkcmd.exe

by Intel
Driver/Hardware

Summary

Intel Graphics Hotkey command module

hkcmd.exe is the 1367th most commonly executed Windows program in EchoTrail's dataset, observed 915 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by explorer.exe.

1367th
most commonly executed Windows program
915
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Windows\System32100%

Top Hashes (SHA256)

  • 57aab030eef6e1cafd304969d762890c779822f8d9660d44829e86fb7a75cc2130.25%
  • ba8fa7dcfad8396c7a2db583ff6118361f959040837215fd5198d8d0a4d7e9b622.37%
  • 94193898bc2c150c375a2d0be51d5704c75ad58487eb5fa4e5a638aa657f54c919.29%
  • 80a8c6a376c61658aad52502b939e12e2b375fd52850582f059f826c58a8d1e918.72%
  • 765d94dacfbf11a303e15bf96396546f76b04f673b6bb987a5c45104459e82cd2.85%
  • 17183695d4c06015d68e26199ff0fcb3aefb0b5be80b08f9158fed4f3ff4f8fa2.17%
  • ab258e60f45545afc175fcc03f9c559c0ae33f491d2c23675d13b614860709ed1.83%
  • a17d7a56627ecbe7d23e634a9e726ba2e3682a7eb75659ae68a426ff2954c7171.48%
  • f9a55421e1f2b3690d9e42df3c34250bde889a98c3c6ed200109c0ba9e9421f70.57%
  • ecc60baa7d21ef97cda17f45277fbfe52b2169155ddb157e34a7ae2ec1bec1850.23%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about hkcmd.exe

Rocky answers questions about hkcmd.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.