openvpn.exe
Summary
OpenVPN client - open-source VPN client for secure network tunneling.
openvpn.exe is the 845th most commonly executed Windows program in EchoTrail's dataset, observed 3,423 times across enterprise environments. It typically runs from C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin and it is most often launched by openvpn-gui.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin85.13%
- C:\Program Files\OpenVPN\bin5.32%
- C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL5.26%
- C:\Users\...2.86%
- D:\Program Files\OpenVPN\bin0.88%
- C:\Program Files (x86)\ibVPN_2.x\OpenVPN\bin0.35%
- C:\...0.06%
- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core0.06%
- C:\Program Files (x86)\Proton Technologies\ProtonVPN\Resources\64-bit0.06%
- C:\Program Files (x86)\ExpressVPN\services0.03%
Top Hashes (SHA256)
- 4b6dd6ab18e58077c3d06506c744c55fddf284656fdc40fa304482ee3fa5a03043.72%
- 5f2c1b63bdeb09e497c9e69f134b2e10c2bf2476bdd401bbe5027b061029d6fa17.44%
- c7e84550c6e51d94720acd8b0039348e2b676a752b8a8f377157ab37f014248115.62%
- a8bfb4a352861e8daf02b2813fdcd36e83490d5171d06d5091f6e384a1dc2e854.73%
- 0ca45b83fa1039b4ad4c0ab0ff25fd8345b819c9192d945ddac87ba2568a70ac2.91%
- 267c0bc942ef287bff765758c5e2450f4773c9ec77138e7242212029c085e6cb2.11%
- 61a0c4ba912fc5e2a29085dee9311edb051e9f58589d73a46bdb42fca69ad59b2.11%
- 42d03e40598ff0ea5e3482495fa3c08d8600d5544eb286c7d60cfd145f621e021.97%
- d2f88595223e0fa79f15b9c029729b5691e3073f5658e83fee3a0b6ed20852901.44%
- 65c6bf9a122bc64eb9721d22279d104038a74bd397b5aa0127c3da146388c8aa1.41%
Process Ancestry
Top Grandparents
- runonce.exe72.67%
- services.exe17.82%
- explorer.exe9.17%
- openvpn-gui.exe0.11%
- RuntimeBroker.exe0.11%
- userinit.exe0.07%
Top Parents
- openvpn-gui.exe69.94%
- openvpnserv.exe21.3%
- wgsslvpnsrc.exe5.26%
- openvpn.exe0.12%
- explorer.exe0.06%
Top Children
- conhost.exe88.46%
- ROUTE.EXE11.08%
- ipconfig.exe0.23%
- openvpn.exe0.11%
- cmd.exe0.06%
- net.exe0.06%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about openvpn.exe
Rocky answers questions about openvpn.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.