openvpn-nordvpn.exe
Sources: 300M+ executions observed in the wild.
Summary
NordVPN OpenVPN connector process
openvpn-nordvpn.exe is the 2420th most commonly executed Windows program in EchoTrail's dataset, observed 183 times across enterprise environments. It typically runs from C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit and it is most often launched by openvpn-nordvpn.exe.
Get this in your tools
The same record for openvpn-nordvpn.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/openvpn-nordvpn.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Program Files (x86)\NordVPN\Resources\Binaries\64bit91.8%
- C:\Program Files\NordVPN\6.31.5.0\Resources\Binaries\64bit8.2%
Top Hashes (SHA256)
- 17cc5656ab23ddf6c94d4678e2a902019cb7920d927d5f02ce1b7cac9ad85dc235.52%
- 8204d06565e523e10023c1c6264bf90e107d22ec4f24c4ba81a20cefc801bd9918.58%
- 64d1e85e8cc8beb31d8017d8812f16e3a88ca638604d0529af23afc78373c1ee9.29%
- 32fc93b579f56e4d4f31f41be3efe5f5f0760827473d5436d92dcb4ebf4ccce18.2%
- af2e61dbeb0d607f691d8a827b8a7057488db33602316653e568db0532bbf4e77.1%
- 7feba623da3c9801176afe5b9fec8e7960d6d5434757f0e4d928fa220335fd8b6.56%
- 87f1cf2afcedf909f464294db244724ca655f701e8cec2b24c902cd3f864ffd64.92%
- 665bde1ac9eb577b335f65164b9b23da85b898464e88baa21e13076b85cb17844.37%
- 50008e0bcf2f9e9de999136811f48cc54a6fed68aeb17d9b334bd3260599090c2.73%
- 1cb439271bccfa06ca852700f340be2e34b8ab125ace99b32248d8fc7061ffab2.19%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- openvpn-nordvpn.exe67.76%
Top Children
- ipconfig.exe49.4%
- openvpn-nordvpn.exe24.7%
- ROUTE.EXE13.55%
- conhost.exe11.95%
- netsh.exe0.4%
Ask Rocky about openvpn-nordvpn.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for openvpn-nordvpn.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.