osinv.exe
by Various
Endpoint Management
Summary
OS Inventory - collects operating system inventory data.
osinv.exe is the 983rd most commonly executed Windows program in EchoTrail's dataset, observed 2,159 times across enterprise environments. It typically runs from C:\Windows\Temp\... and it is most often launched by invcol.exe.
983rd
most commonly executed Windows program
2,159
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\Temp\...99.31%
- C:\Users\...0.42%
- C:\Temp\...0.28%
Top Hashes (SHA256)
- c9c02c4ecdfadac8efc63c846ca7092ec992b26675010d9b491737c23e3869769.59%
- 741b22d17e86a0a2e989dd2dfff94ff852744657db6f5eaa87b5dbff690752a59.1%
- 0bce96c06285ba173f0fa640ceb7578452ddc802d41eee8ed91e838d605b663d8.08%
- 50505a6f6836a6603f9d383744a164d57e9d12d79a317c17f7faa58f04b8668f3.5%
- 97686c06cc1bbb4d692e1740799142129b27eb18e1128f38fe4f45548e1db1c53.36%
- f4a46cee4b142954a02d4ad22854fa26815be0a9805d548afb0653e6bf7cdf7c3.07%
- 30da768527f8261a7a561de5232a59b9c26e359c232a6a28687236f97d791c622.68%
- a089d002a43a549bc55a83239865a7ceb45f473f05379c55588c6d6833ec41f72.63%
- e45db830aeacab45be852d6cd0d42455529f576bf164d84f47d131bb4fd3efc12.38%
- 8e9eec4a882a11adbea02c24af3b7d88cf4f56d31422f8e2726f345ff3b58c662.34%
Process Ancestry
Top Grandparents
- InvColPC.exe100%
Top Parents
- invcol.exe100%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about osinv.exe
Rocky answers questions about osinv.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.