IntelPTTEKRecertification.exe
Summary
Intel Platform Trust Technology EK Recertification - manages TPM endorsement key updates for Intel PTT.
IntelPTTEKRecertification.exe is the 624th most commonly executed Windows program in EchoTrail's dataset, observed 7,099 times across enterprise environments. It typically runs from C:\Program Files\Intel\iCLS Client and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files\Intel\iCLS Client83.79%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib5.71%
- C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS4.24%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib4.18%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_a93205b6238060e4\lib0.86%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_7e148e9c120d86df\lib0.62%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_dec9bbf83f76d9e5\lib0.46%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_34687bf44d0a152a\lib0.07%
- C:\Windows\System32\Intel\iCLS Client\lib0.04%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_1244e13de260a91d\lib0.01%
Top Hashes (SHA256)
- 62d1f40d090114e3b49971de2094f567e521ff8d21451091797faa89392a654250.78%
- 5695e4a610db2333454f356fa5dd2ab4a9bb14f5d6de9e5b46ac5b58eab0d49811.58%
- 559e1fcaabb34491c3eb4bb5bac87574bf66f26ec110c28f6349b7d7f2060e2a8.25%
- 6d319a297fbf17e3a19ebe63cd17c5dc818f388385377fabe7b06d545ef8a8625.82%
- c01dbe759c9625100d507d0e8669413abc7269b6c18ed3c94fea498868d5e62b5.77%
- ffedf59b0301e6fdd10e324353ee70353201ca389a9f17dbfe9ed321de545fa34.26%
- 6094209bf1d279bca5893845083eab2b9390b9c50a776bbe86b01818c259ed424.2%
- 0f5a1d7eb9824ed686b24362b932e48ff8412c33a92297344ae9c5494bdbeea51.36%
- 93aa9c1f18f6f11b6b1b8ca67c5aeebbf73943b227dcce4c7f3e30ab6cddadbb1.25%
- 19f31d1c4e82648332e49eb4618f58b74a675847c1dbe81a503e1a9b483331460.99%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe63.75%
Top Children
- conhost.exe99.98%
- WerFault.exe0.02%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about IntelPTTEKRecertification.exe
Rocky answers questions about IntelPTTEKRecertification.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.