ielowutil.exe
Summary
Internet Explorer Low-Rights Utility - helper process for IE Protected Mode, runs in low-integrity context for sandboxing.
ielowutil.exe is the 234th most commonly executed Windows program in EchoTrail's dataset, observed 57,714 times across enterprise environments. It typically runs from C:\Program Files\internet explorer and it is most often launched by msfeedssync.exe.
Behavior
Top Paths
- C:\Program Files\internet explorer98.52%
- C:\Program Files (x86)\Internet Explorer1.48%
Top Hashes (SHA256)
- 56539f97e76efbec68867911eb91a2fa44b33d0d9bea8a12e7b222891cfb3afc20.21%
- 546b9c27ab8149676af1f8a1211cdd9f0835ced2cb6ccd0d3399094d1f6c896a18.92%
- 3099b6cf67191b1a7e4d8463576fe85835e8df2296dba3470b0cd42babd336c813.64%
- 3c9443f37df8bcd01e34a97083ba1eb8851ed82ad149da7fc6de4aca1ad7912713.29%
- 52db8ab3cc0409441274600342c51e60f963136ef5373e7d0ce66e0c1bdaee659.61%
- eccc8ef5bf2f351609cf8e9548fef558bdff0c81ee293924ad0b58f3082fb2c46.69%
- 1e282d582202f3603986a880b8986945eefb0c0ae020b6c865d4826ef7c206455.2%
- a52b302aaa40a678bc61653f1271debda2d6b1cec6cc13972120d63a25d0cb125.03%
- 4ff47e1f07ca6a28a83dfa3ef162fe5bfbaced722d82e91980bb3896782912c24.24%
- 2e84212887931204a2a131bb4d1045808d083c92e7f4db85ef04b05e3e19c5eb1.13%
Process Ancestry
Top Grandparents
- svchost.exe98.14%
- services.exe1.66%
- explorer.exe0.18%
- msiexec.exe0.01%
Top Parents
- msfeedssync.exe98.52%
- svchost.exe1.35%
- Skype.exe0.13%
- backgroundTaskHost.exe<0.01%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about ielowutil.exe
Rocky answers questions about ielowutil.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.