EXTDRVRInv.exe
by Various
Endpoint Management
Summary
External Driver Inventory - inventories externally installed drivers.
EXTDRVRInv.exe is the 1257th most commonly executed Windows program in EchoTrail's dataset, observed 1,139 times across enterprise environments. It typically runs from C:\Windows\Temp\... and it is most often launched by invcol.exe.
1257th
most commonly executed Windows program
1,139
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\Temp\...100%
Top Hashes (SHA256)
- f981d09320b5b5f061d26dd411dcfd80c342b3d4fe59e59cf883dd2c1dab6e4942.23%
- 83e406170d434e375237932f47e1ba041a018c2b6619065d69de2880a466456a16.51%
- c01a9b1193fd4775b3c03005b92c3ecac18b88911e5b6881f14227d6d46bd84b14.57%
- c2e9d18deb6a0b560a5d60c1e927eab1f18362c72a79520c5aaf6ed7dac687456.06%
- d6653e1a3b519572cb3f31017c4a8f5223735cdb9e32f469a26eb119a5d82bef5.53%
- f563e310c0d8e9a4e91f871a50e80a3719a4a298432377bc6477986a3880a11c3.42%
- 9f5aa7e6e185999e78d9f26a4ce54a4340a3146e15533326bcbef7e757d2b0312.9%
- a98156be2962b11e3ec24abfee2fd68afc4995d2adf1c5d3f7a6b317220f44d61.76%
- 5da1c8a70e8f1ecbba4f7de93b3ff67803ac3dff4d9afc3cec72bde6286d26481.4%
- b0f4e55075666ed1183e33e18c17e1bdbfbf380af79ca4be3170b33c2d4d9e901.32%
Process Ancestry
Top Parents
- invcol.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about EXTDRVRInv.exe
Rocky answers questions about EXTDRVRInv.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.