AggregatorHost.exe
by Microsoft
Operating System
Summary
Windows Aggregator Host — system telemetry and data aggregation service
AggregatorHost.exe is the 1348th most commonly executed Windows program in EchoTrail's dataset, observed 956 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
1348th
most commonly executed Windows program
956
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 68bd0981c0a0faf4ffb8c47d1d36ae70a621f4414094dac08ee48528cbe5052b39.44%
- 6eef95d5885e5163541cf9bccfe77753772fb9946bc9322425d8d653b1a744ba30.86%
- eea98faad130bc115316045cded19f3ae90be91f24161ff4251ce9f4b4e2b82d17.36%
- e0de0de9d8dd73bb81e9ac6f14eb97f77382e4147d0c96ef9775d97d7ebd89685.54%
- 04b0e13b688a2695e190c6ea85776e24b5ab546211ce23cd120c1953e82f31112.51%
- d84d30f2f377b3e0629e1601c670a9658f6f950339e9efa6bfc0d006efab15462.2%
- 4237fdb6291197bd8b02dc8a05b4b0c9026bc2cb51169840601368314dbcb17b1.78%
- 1c6edd79b90445702d7996081adbd5ae0bf804d839c535d28b5e609f10f810520.21%
- 60b048b1e7edbd61798f2518cf6207035a6ad3595ac214eb7bd0d1df1e9f4ba80.1%
Process Ancestry
Top Parents
- svchost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about AggregatorHost.exe
Rocky answers questions about AggregatorHost.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.