vmware-authd.exe
by VMware / Broadcom
Virtualization
Summary
VMware Authorization daemon
vmware-authd.exe is the 1601st most commonly executed Windows program in EchoTrail's dataset, observed 574 times across enterprise environments. It typically runs from C:\Program Files (x86)\VMware\VMware Player and it is most often launched by services.exe.
1601st
most commonly executed Windows program
574
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\VMware\VMware Player51.92%
- C:\Program Files (x86)\VMware\VMware Workstation48.08%
Top Hashes (SHA256)
- bfd5bb7cb1f8e6e0b4271f1bff0567386f79ec63993797334b01f67cd1b8bca425.93%
- cfa982d7b0d45976fce8604d8bb38b76c18f848b52e9aee0dc13536204d7981418.93%
- 2765f9b15a517367721995f34df5f1464cc635049110b6ec1ddb2147b5e448e416.46%
- e788ab5039762c7234ae324cdb4e3a1d1617c78e2b2e20b77e006cc1b640a30812.96%
- 70545ac966a3302e1eeb655b990489a8d730403f8f1ab36eec4aeba454ffc8688.64%
- 84dcd1d2ed0cc2a52774558b96c9e9a5f9ff4c74530b4a1be8a8bf4cac6b8efd4.73%
- 45564408f7b927153d34f77a7144dd62e9ebadfce5fd371f302cd9aa7354f7f13.7%
- 2adc7aeeac540d9ded381d10c24f35a428eaa1298829262f11d1b0bb7ab0f24b2.88%
- 0926f13bcddecbbdd6dc3ab5a8099a9e343cde05bcec5fbebebda857d57de87b1.85%
- 5d73bcb0033440a6deff2947166fab04f1fb5f1049f14b8b4b575ed4914d91b91.23%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- vmware-vmx.exe99.6%
- regsvr32.exe0.2%
- WerFault.exe0.2%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about vmware-authd.exe
Rocky answers questions about vmware-authd.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.