vmware-remotemks.exe
Sources: 300M+ executions observed in the wild.
Summary
VMware Remote MKS - remote console connection handler for VMware vSphere virtual machine consoles.
vmware-remotemks.exe is the 1271st most commonly executed Windows program in EchoTrail's dataset, observed 1,113 times across enterprise environments. It typically runs from C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Internet Explorer and it is most often launched by vmware-vmrc.exe.
Get this in your tools
The same record for vmware-remotemks.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/vmware-remotemks.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.5\Internet Explorer36.21%
- C:\Program Files (x86)\VMware\VMware Workstation36.03%
- C:\Program Files (x86)\VMware\VMware Remote Console17.52%
- C:\Program Files (x86)\VMware\VMware Horizon View Client\x644.85%
- C:\Program Files (x86)\Common Files\VMware\VMware Remote Console Plug-in 5.1\Internet Explorer3.68%
- C:\Program Files (x86)\VMware\VMware Player1.08%
- C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plug-in\Internet Explorer0.63%
Top Hashes (SHA256)
- ca5e4cbbc0f747370e3e5f35d03ffe4a2e26b3720714e70665a6603044922c0826.93%
- b1866ade47b4e2f1fed02b26c20fb6e7a08a0eda3af1f1e1b332235a2f026d6e25.37%
- 72161ff42e8ca412101124c7907f21c039ff2368b0750d04785b974c219cccc412.14%
- 0dfdcb9ea91672a63bca552aa7d6bf8fe676e83d4dfcadf8f485dc81d3dcdd5f8.72%
- 987ef579c563d0d9e3f1cbaa18f93b41dc779eeca183841c059719fc0d58e7205.09%
- 723157ef37b00f700f047bf486a6d40fcaebdca3ff5545a80cd57c37668209534.9%
- d444069ee78300de9357ea488792058f3392feb26df4264c75956d5ffc15b1244.02%
- 0fbd1225737dbc101ba5687ec633a5cdd5d3ef59ab2ef774dec17bd0c7771bc42.55%
- cf8a9be601c41cefa60a941d85cf05e1af4aa2301652c86e1ee9249f10e847b52.35%
- 3562c775f5434f97540a2580e0b5f8f6f0643c4693f087abeb598e0fe785c14e1.76%
Process Ancestry
Top Grandparents
- VpxClient.exe42.82%
- explorer.exe31.82%
- chrome.exe16.1%
- iexplore.exe6.94%
- firefox.exe1.25%
- RuntimeBroker.exe0.68%
- vmware.exe0.39%
Top Parents
- vmware-vmrc.exe40.52%
- vmware.exe35.76%
- vmrc.exe17.52%
- vmplayer.exe1.08%
- vmware-remotemks.exe0.27%
Top Children
- rundll32.exe84.38%
- WerFault.exe10.94%
- vmware-remotemks.exe4.69%
Ask Rocky about vmware-remotemks.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for vmware-remotemks.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.