SecureBootEncodeUEFI.exe
by Microsoft
Operating System
Summary
Windows Secure Boot UEFI Encoder - encodes Secure Boot UEFI policy data.
SecureBootEncodeUEFI.exe is the 818th most commonly executed Windows program in EchoTrail's dataset, observed 3,685 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
818th
most commonly executed Windows program
3,685
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- ae1f3e7c92e34c13aba275b3c66f5e7c8cfa69efd5492a803c451a89cd214ab183.47%
- e33d8e0e43755e2e61fa43a8070962af2821e33d5780706b13afa23fe789c2315.48%
- 6827a251c7adfe418b0f90fd2648af339cc78a4f1e2c4d1e036012ab52c251e03.28%
- 04fe289dd401b69fd9746be8a3de0cdbc30e4dfbed2e3739136992812cfa30952.69%
- 578ec9475c36789d691f6bff4585c7b583f040b1d97619c9e0fd56546450b5590.79%
- e8d5fda86e8e194c32e28825d2bc93c04cd5bb6f6922572ea5cbd0fa7ce29f760.68%
- 7e3287457740ed1b0c1d4e3eaee7cc7c68d59ca048bd5b918a19d3062d4af1ee0.6%
- 9cfbf2792366d9f061c4a8103ef2fa322f09ae19d8d96631ee7975e4a0d5428d0.52%
- 2be16dce51b02ef0043788006d203e780b7dc90e9d8d4aa81044cc10541c539f0.49%
- 7fb6d0f9f6cef583edcb36f00fae3df28626bbeec060014d6720f600018cd0840.38%
Process Ancestry
Top Parents
- svchost.exe87.82%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about SecureBootEncodeUEFI.exe
Rocky answers questions about SecureBootEncodeUEFI.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.