platform_experience_helper.exe

by Google LLC

Sources: observed in the EchoTrail lab on Windows 11.

Summary

Google Chrome (Google Chrome, Google LLC)

platform_experience_helper.exe is not in the 2025 snapshot. It was observed in EchoTrail's behavior lab on Windows 11 24H2 on 2026-09-11 installed from winget package Google.Chrome.

Get this in your tools

The same record for platform_experience_helper.exe, by REST or as an MCP tool. Free key, no card.

Get a free key
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/platform_experience_helper.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

n/a
most commonly executed Windows program
n/a
observed endpoint executions

Behavior

Top Paths

  • C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper
  • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping5320_1543983799
  • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping2860_202936454
  • C:\Windows\SystemTemp\GoogleUpdater_chrome_Unpacker_BeginUnzipping10512_1690547915

Top Hashes (SHA256)

  • 4fc509e392d0093d4ab7450d5ea0d6f883e0beafce4c9f95f33f1979d36524c0

Code Signing

Signers by share of executions

  • Google LLCValid
    Embedded signature · 1 hash
    100%
    Chain
    1. Google LLC
    2. DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
    3. DigiCert Trusted Root G4
    Valid
    • Apr 8, 2024 to Apr 10, 2027
    Hashes
    • 4fc509e392d0093d4ab7450d5ea0d6f883e0beafce4c9f95f33f1979d36524c0100% of executions, first seen Sep 10, 2026

Full certificate detail on Team.

Process Ancestry

Top Grandparents

Top Parents

Lab record

Installed from
winget Google.Chrome 153.0.8010.37
Publisher
Google LLC
Persistence
none
Network
none
Command lines
2 patterns (6 launches)
DLL loads
36 patterns (201 loads)
Registry writes
10 patterns (30 writes)
File writes
3 patterns (9 writes)
HTTP requests
0 patterns (0 requests)
TLS connections
0 patterns (0 handshakes)
Named pipes
0 patterns (0 events)
Process access
0 patterns (0 events)
Driver loads
0 patterns (0 loads)
PowerShell blocks
0 patterns (0 blocks)
Remote threads
0 patterns (0 events)
Audit events
1 pattern (2 events)

Full record on Team.

Ask Rocky about platform_experience_helper.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for platform_experience_helper.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.