vds.exe
by Microsoft
Operating System
Summary
Virtual Disk Service - provides a management interface for disk and volume operations.
vds.exe is the 195th most commonly executed Windows program in EchoTrail's dataset, observed 76,303 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by services.exe.
195th
most commonly executed Windows program
76,303
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 0e8a90b2a228cee94dbd193e7c6775a64c8bbef70e318f2ece935b6ed5b2663846.31%
- e4e20d8737d281ea4bf811354450c0972e2b58877ca18db8ba682d646e882b9a33.73%
- 63c07312adb6f8a8bde93361c30ac63dab4de1141af54630eef11e54b0bf983d11.48%
- 09727093c5f7b258867c16d41f7f9835bf549cc339288bfe01a8f34ac7e93e231.68%
- d4aa468eb45e3aacb09f0b969466c83b9130d1276a14fbf3458b08c5cc150a011.65%
- 76759a1538c017785b6fef7335f4883ec31477dfd97a5667da89f3d5bdf96d291.62%
- 2aceac6d51e610f85f35175c3a511f59d5b080d95453662e58c9d578ded42a890.78%
- 9707255c9778f9a8135baa4f1a16fac9ebf2991fd6af937b232d5fa52d14ac330.73%
- 963bfd563b5a79f0ae81eb9708e85901a545545d4f25fcf37a17295ee9eda5140.65%
- dce728cc358cc39c777c8b820d614ea10f833f3f576975d6acc186cf7fa1f04b0.58%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- WerFault.exe66.67%
- regsvr32.exe33.33%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about vds.exe
Rocky answers questions about vds.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.