McPltCmd.exe
Summary
McAfee Platform Command - command-line management tool for McAfee endpoint platform.
McPltCmd.exe is the 870th most commonly executed Windows program in EchoTrail's dataset, observed 3,135 times across enterprise environments. It typically runs from C:\Program Files\Common Files\McAfee\platform and it is most often launched by McInst.exe.
Behavior
Top Paths
- C:\Program Files\Common Files\McAfee\platform100%
Top Hashes (SHA256)
- fce3bd93763b1af250b3f373d5c1bfe90a351914427115e2fae992080b6138b779.67%
- ca8fa85a44841eb4b9baf5ecded9c659ea7f0841f397f15231d48297398a6b2316.83%
- 702358aa371ce1495ff29a4857aa87b8cc1fe5331e79cc88c49cbe1aeb9a97683.32%
- ba4f380d216eff30bf2d4035b13f71d137f0c11470a7e1b20afff936c04c29490.11%
- c6ea25e4bb2b6813cd0f8d8f74fa046b3aacc84841e5f8a26bd80eb93eb4a3f40.07%
Process Ancestry
Top Grandparents
- services.exe98.29%
- MCUPDA~1.EXE0.98%
Top Parents
- McInst.exe0.45%
Top Children
- McSmtFwk.exe49.84%
- McUICnt.exe49.84%
- McInst.exe0.32%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about McPltCmd.exe
Rocky answers questions about McPltCmd.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.