nvwmi64.exe
by NVIDIA
Driver/Hardware
Summary
NVIDIA WMI provider (64-bit)
nvwmi64.exe is the 1463rd most commonly executed Windows program in EchoTrail's dataset, observed 778 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by nvwmi64.exe.
1463rd
most commonly executed Windows program
778
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System3299.61%
- C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_f840d03a202f8a32\NVWMI0.39%
Top Hashes (SHA256)
- 571af134995d852d2f83c926caa5040f80d6c9f8739636195ac98eb98a49198747.94%
- e37c12b31e04b3ade67f799e0667cc41b6b656db0c1361a2b7ae6481eb3ddc9826.48%
- 39b6665a89d1d01667b48b2d26b722790b6f377726c1ba43d4921079f5199e905.78%
- e6433959098f888929118bd04f5c425df34f25016d14607174dde0cf80153bd34.88%
- a161935a9173249a66c1753b8dac7a466747f45ad65961843c11a9dded9adca03.86%
- 3a695eb26b269aee904a08803c2a3241b888e88562cda470270a7eca1f87efdf3.08%
- 7b1377ee8f780a5d11c5e59d999b36ad6cb90bf2e412e559782f20883b04a6282.83%
- 5595829a21b46e33bc826147877be8899c802e149dbbe5ffec09d8cefb48855f2.7%
- 6bc73b8fc9a9c23698e5bb4a7ce4ad18552f74c4a4a49dc6f26c76e7d2defffb1.03%
- f50d9c2de563834bcd35e63f0e13a4de3683d267a3b51b75ed983c275524bb341.03%
Process Ancestry
Top Grandparents
- services.exe58.73%
- wininit.exe40.66%
- drvinst.exe0.21%
- SystemSettings.exe0.21%
Top Parents
- nvwmi64.exe74.04%
- services.exe25.58%
- setup.exe0.26%
- rundll32.exe0.13%
Top Children
- nvwmi64.exe97.63%
- csrss.exe1.02%
- winlogon.exe1.02%
- lodctr.exe0.34%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about nvwmi64.exe
Rocky answers questions about nvwmi64.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.