igfxEM.exe
by Intel
Driver/Hardware
Summary
Intel Graphics Main Module - core Intel HD/UHD Graphics control panel and management module.
igfxEM.exe is the 391st most commonly executed Windows program in EchoTrail's dataset, observed 19,625 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by cmd.exe.
391st
most commonly executed Windows program
19,625
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System3237.34%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce13.05%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_57f66a4f0a97f1a37.11%
- C:\Windows\System32\DriverStore\FileRepository\ki124299.inf_amd64_cda808e1cf7811be2.41%
- C:\Windows\System32\DriverStore\FileRepository\k120836.inf_amd64_ccaf7e7e1e972b782.08%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_587befb80671fb382.06%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_2cec8fd58a80e6ea1.83%
- C:\Windows\System32\DriverStore\FileRepository\ki125044.inf_amd64_651cd87a593f43cb1.63%
- C:\Windows\System32\DriverStore\FileRepository\ki127171.inf_amd64_368f8c73372140251.48%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ce1af3c67f44ff6b1.47%
Top Hashes (SHA256)
- a33107967b47099df195e2edbd6e51d1180defe2b3c2852458e19f9d3645e0f012.48%
- 1b7ea955f43bb39501221d734e0c5be830c4a0e7662fcee132c6098ce2352c4a7.45%
- bfea57c60f3f9d4c306c214482f9a91b39412d97ce50a449c9f789edcb2182504.9%
- 261355029d9492339bc9b6cadff6ea87fa1aa080a3bb429770d9cb0643fb24544.06%
- 1a710b2e7613baa62c2b8ba0963eb1ba3458b5d9242909b6690293d42e0e64e13.8%
- 3bb969fc608e44ea038fe1809d65093ab24d6229594868a4d5e38ea1aa0259b73.42%
- 7f8bf110510393aad6ae7b3f94ae0e84ca819467f6076f33411b329a97b666043.4%
- be392816b094d2ce2d6e37031417f25ec83f7d42ac9c3be579e1be859fe522862.53%
- 132b4aa0c5daf28d263d90b7ed44b37939e3f9b709ddb0c84adbc2cf66b6d4512.52%
- 8a89c2a592a4148ee69a907e3ef0ae8388f283901493901f707d16b75ab5387d2.18%
Process Ancestry
Top Grandparents
- igfxCUIService.exe95.54%
- services.exe4.43%
- svchost.exe0.02%
- wlanext.exe0.01%
Top Parents
- cmd.exe75.78%
- igfxCUIService.exe20.85%
- svchost.exe3.01%
- OfficeC2RClient.exe0.01%
- ALsvc.exe0.01%
- conhost.exe0.01%
- dxgiadaptercache.exe0.01%
- msoia.exe0.01%
- OfficeClickToRun.exe0.01%
- PylumLoader.exe0.01%
Top Children
- igfxTray.exe73.6%
- GfxDownloadWrapper.exe26.19%
- WerFault.exe0.13%
- GfxUIEx.exe0.06%
- igfxHK.exe0.02%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about igfxEM.exe
Rocky answers questions about igfxEM.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.