nxservice64.exe
by NoMachine
Remote Access
Summary
NoMachine NX service (64-bit)
nxservice64.exe is the 1910th most commonly executed Windows program in EchoTrail's dataset, observed 352 times across enterprise environments. It typically runs from C:\Program Files (x86)\NoMachine\bin and it is most often launched by nxserver.bin.
1910th
most commonly executed Windows program
352
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\NoMachine\bin100%
Top Hashes (SHA256)
- d6e088ab9d3ea51ec8a18a14f788657f0403cd4d40a56ea6a4df7a74a483319b40.34%
- 0d6936964c4fcf8526205c9386257a62380448db2f589075af2ec6bcfde9e12028.98%
- afba2228939addf64e74df1fe1be71be943fcbb62918a995771b29fcda3ae7ba21.59%
- 598529689c0049d626147a0c55fbc61c73cbed895d0033e1423ef48f19b9d8714.26%
- 00d7bfc4592ff7bcc4ca4b38d941a66084aa8cffbd2a0a618420e98195dd3e1f2.56%
- f2aebeb5ecd92ea877e599af75e39de4cbf2b9853b18d4246e98f4c44b937f612.27%
Process Ancestry
Top Grandparents
- unins000.exe62.97%
- lsass.exe18.37%
- wininit.exe13.7%
- nxserver.exe2.62%
- nxclient.bin0.58%
Top Parents
- nxserver.bin21.31%
- services.exe13.35%
- nxservice64.exe1.7%
Top Children
- conhost.exe47.3%
- nxnode.bin20.75%
- nxexec.exe14.52%
- nxservice64.exe1.24%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about nxservice64.exe
Rocky answers questions about nxservice64.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.