upfc.exe
by Microsoft
Operating System
Summary
Windows Update Power and Frequency Control - manages power state transitions during Windows Update operations.
upfc.exe is the 262nd most commonly executed Windows program in EchoTrail's dataset, observed 48,381 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by services.exe.
262nd
most commonly executed Windows program
48,381
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- ee44fe14df89c4e5eaf8398f8fb4823fd910c5a94d913653d6b9e831254f6cc232.04%
- ae4b0e81c601521da974d53e44295c98331ced7c9cc2f260434e6bc0c475dda322.17%
- e8cd4661b393a1a66e02257672f2940de10a6ee8c06f9121a8787bffc49ad43021.57%
- 67cab3e7451698160556a2211632cb3272e14ebaf641b7a644a7821b88c45bca15.69%
- 1a20f7a7bbaf5b7d4435471a2cf3ec96787b068f1a63caa5dedc52b8faaa60c86.21%
- f3ddb62776b6bcd8a94c4d9f1ef0ff50096f6f9be66a40e29597841f00e18bf11.31%
- fa7e9c28c7482b8201e1917c82f8f2c62cfc126237878f7b613fac29a0edfdde0.82%
- a672aaf91982a2b84e05ab159d8bdd8eb1162061fa86e0ed33d9678da373f9730.18%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- SIHClient.exe99.99%
- conhost.exe<0.01%
- csrss.exe<0.01%
- winlogon.exe<0.01%
- WMIADAP.exe<0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about upfc.exe
Rocky answers questions about upfc.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.