LTTray.exe
Summary
ConnectWise Automate (LabTech) system tray agent - provides user-facing interface for the ConnectWise Automate RMM agent.
LTTray.exe is the 517th most commonly executed Windows program in EchoTrail's dataset, observed 10,886 times across enterprise environments. It typically runs from C:\Windows\LTSvc and it is most often launched by LTSvcMon.exe.
Behavior
Top Paths
- C:\Windows\LTSvc100%
Top Hashes (SHA256)
- 890e313754176d2be3a68f6f23b5bebf3d0f30fff341a187faa847208a9239b336.96%
- 1f8e4f53253d0e9069c52d8e4278b7f5440c16f195a1358b0f2a29ea1f76967620.94%
- ead13e39686bd1a748aa49e650915e1fb3033dbcf32e5344edee02f1a7cc758c19.13%
- 96860ef45a3da78fcec14821133c1373e19c3a7a08ada52596cd058ba32415ce3.3%
- 255d6eb0324d3eeddf43481e12c11cc118ae27eafafcf722eecaed7efaa3579c2.54%
- 7fe2775ea7ec502c5b4a4a7355d4273b1dd007f9fd89b820d17f5f38ca7f59bd2.24%
- b7cc9678ff0573a88ff1739bafbdd59877d017f01bcb2135cecc740185090e301.95%
- af975c6c18456ab56fd93ce60c36c3e658d876332cc6997ce688aeab4fa9c4ba1.6%
- 55aca54029f4283603ffe3f91463439a9787e0d73968a7b22ff9775cb1a5f3d41.5%
- aaeb80de96eb7c37c62f51aa3b69b17b3a9b8e7c18c90534441f6fbf2302e4d11.26%
Process Ancestry
Top Grandparents
- services.exe73.24%
- userinit.exe26.74%
- winlogon.exe0.02%
Top Parents
- LTSvcMon.exe57.53%
- explorer.exe22.21%
- LTSVC.exe20.26%
Top Children
- cleanmgr.exe90.91%
- chrome.exe6.06%
- firefox.exe3.03%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about LTTray.exe
Rocky answers questions about LTTray.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.