IA.exe
by Various
Endpoint Management
Summary
IA utility - inventory agent or management process.
IA.exe is the 1122nd most commonly executed Windows program in EchoTrail's dataset, observed 1,569 times across enterprise environments. It typically runs from C:\Program Files (x86)\Lenovo\System Update\egather and it is most often launched by Tvsukernel.exe.
1122nd
most commonly executed Windows program
1,569
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Lenovo\System Update\egather100%
Top Hashes (SHA256)
- 80643f3e6c50c4d00c055373f18d4a868bf6b2f171193bc93d723fb8556760bf82.6%
- 923632151798fb1c3b939e882427d12c3b2a40a5e67e234b0a686a60310dc2d05.67%
- 6df87ed4ba2448b68df664ddacfbe437fcce5e322909116af90e0eb00c9414795.16%
- 520cefafaea779a2e1f4b42e4963f3fda96c9bdb46e9dcbe1081350dc5b692244.02%
- e32833f652c36c939dd813dcecc097e7ad53418f3f475c15803007c0bf49e5c22.55%
Process Ancestry
Top Grandparents
- UACSdk.exe94.83%
- Tvsukernel.exe5.17%
Top Parents
- Tvsukernel.exe100%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about IA.exe
Rocky answers questions about IA.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.