EXPTelem.exe
by Various
Application Support
Summary
Export Telemetry - exports collected telemetry data.
EXPTelem.exe is the 690th most commonly executed Windows program in EchoTrail's dataset, observed 5,725 times across enterprise environments. It typically runs from C:\Program Files (x86)\HitmanPro.Alert and it is most often launched by GatherTelem.exe.
690th
most commonly executed Windows program
5,725
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\HitmanPro.Alert100%
Top Hashes (SHA256)
- 3de2865b2bd2e458001cfda60f11414b83fb5c39d2c09ad0b85b0dafff8f968f26.1%
- cc032cb8e1f88cbe06120bbce94c5e918167eac0ba47ce40552dbaef725aa92c12.3%
- 255f9b890596de0b3edb99c70b161c69d2c5b3f8ea147fc28e29c0d5dae0206511.18%
- 1ff3a62fc52a693367c26214ff809dac424db22a28ce2ec2ed22d97d4370589c10.16%
- fb4018988ad264193f77f2865368c576a99cfe11024694df0114b687b9bc4ce48.19%
- c3a0024bebaa036a6464c3ab32ce2c158ab1a7f04181a1702f3aa047ec48baaf5.38%
- 76ab7bdd01d5fe79bf8f42b58fe6146178495c7f5ac74ed5635408ac0bb97acd5.15%
- 48964bfdd6be0f7f0e86b85133608a7685a4a74640f11220a7248336d6862e0f4.32%
- 08961cd84a8e2bec8afb5e6505189fdd678c22be02ea474b4772ece3afa9026f3.94%
- 07439029b1894a69e37b8c8daf781473db6163a32f9cf65908bf24d712fe65883.68%
Process Ancestry
Top Grandparents
- SophosUpdate.exe99.97%
- ALsvc.exe0.02%
- chrome.exe0.02%
Top Parents
- GatherTelem.exe100%
Top Children
- hmpalert.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about EXPTelem.exe
Rocky answers questions about EXPTelem.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.