platform-performance-plugin.exe
Sources: 300M+ executions observed in the wild.
Summary
Platform Performance Plugin is a component of an endpoint management or monitoring platform. It collects system performance metrics including CPU, memory, disk, and network utilization.
platform-performance-plugin.exe is the 20th most commonly executed Windows program in EchoTrail's dataset, observed 3,160,754 times across enterprise environments. It typically runs from C:\Program Files (x86)\ITSPlatform\plugin\performance and it is most often launched by platform-agent-core.exe.
Get this in your tools
The same record for platform-performance-plugin.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/platform-performance-plugin.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Program Files (x86)\ITSPlatform\plugin\performance100%
Top Hashes (SHA256)
- e0f81d827ef23e6da59dfaece1ad8867b1d6173934c1d7b6c79865a5a64873fe22.39%
- 320cd171a445e49d32c88c29a9d113e27c09d7d3908ebec66b4725d6296e0e5e17.36%
- 16bb3552ec9526442ada610b94f4e0919fcc55cb9759d29c1f1a3dee5be6b8c711.14%
- 204d2e6123801fa7cfcbdc72b359bd02bce443d5e95a7d360337244950d9a2a19.71%
- 3dea5184d14a0ba2373e9719dd104966ac2169ab8e140124de64a11694346d307.45%
- e04bb611839bd92d65ab5f139689196580486ac19d0fafdf716e4e4d77fe587f7.41%
- 8eac1da45b881007c03e80fdc1cfd6bd43846ac0af84934668ca253043caaa9d6.23%
- 839aa6106649fe996d67d99dfbee1da328dc404b6456edcf47dbc5d75d54a3005.04%
- 05b6ffdc2a06dcf4b2c98fdb4a331dad006b974dce1695932ad0eb31b2ba375d4.77%
- 2231c054666285a130fb767ee8314fb1057d6ab6679565627b714b6abfa599944.65%
Process Ancestry
Top Parents
- platform-agent-core.exe99.87%
Top Children
- conhost.exe100%
Security Analysis
What does platform-performance-plugin.exe normally do?
Part of an endpoint management agent. Spawns conhost.exe. Runs continuously for performance data collection.
When is platform-performance-plugin.exe suspicious?
Running from unexpected paths.
How do attackers abuse platform-performance-plugin.exe?
Not a target for direct abuse.
Detection guidance
No detection needed.
False positive notes
High execution count reflects continuous monitoring operation.
Related Processes
Ask Rocky about platform-performance-plugin.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for platform-performance-plugin.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.