IntelCpHeciSvc.exe
Summary
Intel Content Protection ECI Service - manages content protection services for Intel integrated graphics.
IntelCpHeciSvc.exe is the 782nd most commonly executed Windows program in EchoTrail's dataset, observed 4,123 times across enterprise environments. It typically runs from C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_57f66a4f0a97f1a3 and it is most often launched by services.exe.
Behavior
Top Paths
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_57f66a4f0a97f1a315.04%
- C:\Windows\SysWOW6414.19%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_ce1af3c67f44ff6b7.18%
- C:\Windows\System32\DriverStore\FileRepository\ki124802.inf_amd64_a1debebc513e6b7b4.81%
- C:\Windows\System32\DriverStore\FileRepository\ki125044.inf_amd64_651cd87a593f43cb4.45%
- C:\Windows\System32\DriverStore\FileRepository\ki124299.inf_amd64_cda808e1cf7811be3.75%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce2.9%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bc74e3bc8af7ada52.85%
- C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_88725e48ac7d53152.13%
- C:\Windows\System32\DriverStore\FileRepository\ki124455.inf_amd64_0f9ddfab4df0266d2.06%
Top Hashes (SHA256)
- 156c88db6d2ddba5469c39916b8c12da6c04e91a242cbda840b5a5fb802c1f9815.67%
- 8d9adb9f9f3b2444a3f357beb47707b91dd11c13724c2aef4b28e6e67f9f952b13.13%
- 4897eaaf4058231f7409fd4a1fb15390643a2868154fc93694c530dd304ba90f7.48%
- b0d6687a7d9e94cb245a7445289f014434996f963130bcc2405e9c34b641ac235.01%
- a34fde87dd3718137c061aa919beb3e2dc360c21fa80596bf1bae3b8813ca5564.64%
- 83644f1d87609ab717d76b3d14f53fa854d4d5ca8edbdd47de8ef8e3156872183.91%
- f38763474696ebfee614d2695d754057f9c3e13ee4a21851a617930e44bed0d63.02%
- 5b051ba062bb30a8071000e39ff9fc01e61a54efcf5d6f2f1b6f058198b2c0192.97%
- 4e050e0ed053d3f5f8a4dc170410bb2d58007bc305f97279a14f87f11d260c5d2.22%
- e2de5e769cf3aa235e6c1be69e3bcea7e0db6eabfbcdd18bcff0428e2369946f2.14%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- cacls.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about IntelCpHeciSvc.exe
Rocky answers questions about IntelCpHeciSvc.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.