NVMEHostmetadata.exe
by Various
Driver/Hardware
Summary
NVMe host metadata utility
NVMEHostmetadata.exe is the 1492nd most commonly executed Windows program in EchoTrail's dataset, observed 727 times across enterprise environments. It typically runs from C:\Windows\Temp\... and it is most often launched by invcol.exe.
1492nd
most commonly executed Windows program
727
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\Temp\...100%
Top Hashes (SHA256)
- 1ba74e8ac8438967a9d5e90634046061258ad74deeaefd1f1e5fe4c2dcdb010a25.86%
- 18eee35d0beafeaa4c17918a3ba040082ad50d787c744f2f63add6b33d89228322.83%
- e7e8e39ef5d86f4ce2e7a436cbd407b91f5976c578ac05b63ff1876746e74cc49.49%
- be9d681230e57119bec95234214fa12b7c2ae2955ac1a00ee175ae06d9ad1c4f8.67%
- c529fce8c223e2f5d3db3ff66623af27dd55e49450ee7b8a4da446e5761bd21f5.36%
- 8b96b5febf8794dc4bf0f3c67e551a713eb4925a03ce4162a77e216b68daca8b4.54%
- 280f9d2b9c2ac7863afc06db3041b7e165f0418d33dbeb5c04cc0eb4ff27712a2.75%
- ee2098dbd351f2819c71f2303299e2931e4cf833c748f80356fad2c90c62ed6a2.75%
- de1f039411c5150c4c97c0cdb56fd386a923738254dfbd0701d7f8b3f3402ebe2.34%
- bb0bb1da7deb0cfdac26c843b8a5c90a5fc1faae8fe7425cdda710a83331a5972.2%
Process Ancestry
Top Parents
- invcol.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about NVMEHostmetadata.exe
Rocky answers questions about NVMEHostmetadata.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.