vmware-csd.exe
by VMware / Broadcom
Virtualization
Summary
VMware Client Services daemon
vmware-csd.exe is the 2111th most commonly executed Windows program in EchoTrail's dataset, observed 273 times across enterprise environments. It typically runs from C:\Program Files (x86)\VMware\Enhanced Authentication Plug-in 6.5 and it is most often launched by vmware-cip-launcher.exe.
2111th
most commonly executed Windows program
273
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\VMware\Enhanced Authentication Plug-in 6.589.38%
- C:\Program Files (x86)\VMware\Client Integration Plug-in 6.010.62%
Top Hashes (SHA256)
- 4e19c5ad6f5695c2480b656386722c242631d864e4554c1b20e51108f24626ff64.84%
- 30840d7e408a9a1618a4f308ec40c7ad944e8d64d818bcb12e98633f2b8b7cfe23.44%
- 9a6b88377d73de9b1e4f5fe27c8464166ebf45b4f4f292dfd3732e2e029692c27.69%
- da739399f10955b9a133c303fbea666bd3a901593e36f9e0f924e850c8f4a1b42.56%
- 532198f336009bbc9770a4857809dbe3a085f625d822a895e0060a2b8201e6451.1%
- 94ce9b486330779ec020f0b3e2e272844afacb1efc1f774ea5c8865ff0fcd2010.37%
Process Ancestry
Top Grandparents
- chrome.exe78.91%
- explorer.exe9.09%
- firefox.exe4.73%
- services.exe2.18%
- OUTLOOK.EXE1.09%
Top Parents
- vmware-cip-launcher.exe83.52%
- chrome.exe10.26%
- vmware-csd.exe4.03%
- msiexec.exe2.2%
Top Children
- certutil.exe76.25%
- vmware-csd.exe13.75%
- icacls.exe10%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about vmware-csd.exe
Rocky answers questions about vmware-csd.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.