msp-agent-core.exe
Sources: 300M+ executions observed in the wild.
Summary
N-able/SolarWinds MSP Agent Core - central agent process for N-able RMM (Remote Monitoring and Management).
msp-agent-core.exe is the 295th most commonly executed Windows program in EchoTrail's dataset, observed 35,012 times across enterprise environments. It typically runs from C:\Program Files (x86)\Msp Agent and it is most often launched by winagent.exe.
Get this in your tools
The same record for msp-agent-core.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/msp-agent-core.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Program Files (x86)\Msp Agent100%
Top Hashes (SHA256)
- 79e5a1d07d0c7894c7db9e3bd6bb11f3e1a52dcdd4477b645e4c36eb1846c6fc16.43%
- 0dfdf1759978c166a5fb4bee852f83e982dd7c331c6ee244ddc737c192e5ac9316.03%
- d7d3e7fb1a3fc4b1a27fbe422f8aabd1598701fb1a1d06f8a086afa2afc66ccc13.81%
- 69c75035155affadefa719030f2b41409d99e262b5f63cb4eaf9e8e532ed8dd012.23%
- 3dc7eee4b89c69b33bd23dfadf6373633977c90c7fc9fa35b6ce1a50653baa2e9.95%
- 98817b6eb24852756e6f924a80f600a2decbe23e8a245747d99607cae76ad1aa9.93%
- 847acf89459625a62ab55d243cf807e8b641a21c974c5b9610bfd50bba9b641c8.35%
- 9aea7d2309bd9e66306096d9caf6a1a25d05839b81766dc74c3b2c5f3f1953c36.58%
- 8825c481d1def5ed7087a18f12fca0d00682c1427cd97f6d9eb2999fce7a5a785.8%
- a1177b71db945fb5ed34c6b3b7d5a4a8a5ded34b2bff258687f66fb08a6719700.75%
Process Ancestry
Top Parents
- winagent.exe99.39%
- services.exe0.09%
- msiexec.exe<0.01%
Top Children
- conhost.exe18.58%
- software-scanner.exe2.62%
- log-collector.exe2.41%
Ask Rocky about msp-agent-core.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for msp-agent-core.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.