SocketHeciServer.exe
by Intel
Driver/Hardware
Summary
Intel Socket HECI server
SocketHeciServer.exe is the 2065th most commonly executed Windows program in EchoTrail's dataset, observed 289 times across enterprise environments. It typically runs from C:\Program Files\Intel\iCLS Client and it is most often launched by services.exe.
2065th
most commonly executed Windows program
289
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Intel\iCLS Client94.46%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib1.73%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib1.38%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_7e148e9c120d86df\lib1.04%
- C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_dec9bbf83f76d9e5\lib1.04%
- C:\Windows\System32\Intel\iCLS Client\lib0.35%
Top Hashes (SHA256)
- 3a9b70f0929d5f8f90e07d5dead6bd7f6ba15e8ce39430ae98fe0ad0c1374aab69.2%
- 07a29a91630319fd75d3bfe7a8f71a4f5e1746b23ad5181c98332ddc99a57c9420.76%
- 37e9043babb5895bfd2b59afb60c438b992c6eaa1b5fde5b3445314343f4c4061.73%
- fc5b58ec68cfde4fec6d98f143f70964783b54846ca30a8b299ccd1366e72d211.73%
- 1b1c46182b3829bb96800f833f932ab19a3c8515770549443aa3872d6c9c4c281.38%
- e71e6da36fe5e4a0561fbde84241ce58f810591ecdced6bc7e247a4456c834921.38%
- 2e2cb2e7192c5731086c38d28c27dfba75eee1038fe1f009a451f2843ebe22be1.04%
- 4b09a70a763b6b48539f578329b76570ae1b77f45d2a5131e91e7e6db5c364811.04%
- eacbaee7a038060f2635e0d7d6472308d635e6357d882d4a878c657af4a849671.04%
- 6cabc7852446e56613954abbbcfd0503133f389413896a862badc27f4d4821f70.35%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- WerFault.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about SocketHeciServer.exe
Rocky answers questions about SocketHeciServer.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.