msgrunner.exe
Summary
Message Runner - executes message-based tasks for management platforms.
msgrunner.exe is the 807th most commonly executed Windows program in EchoTrail's dataset, observed 3,835 times across enterprise environments. It typically runs from C:\Program Files\Common Files\McAfee\msgsdk and it is most often launched by McCSPServiceHost.exe.
Behavior
Top Paths
- C:\Program Files\Common Files\McAfee\msgsdk99.97%
- C:\Program Files (x86)\McAfee\Temp\...0.03%
Top Hashes (SHA256)
- 7d445316c49195a699b161bdab76ab5a367a65fe3caee50a5e9c8f1e1217cd0759.1%
- 371976a90f61722018dfe838c7174e04a7d7100152ca5df10da4b2e5d0aa60cc22.2%
- 633e256b7792390ce864ea1f9f0cb62e7b01662a5fcf381bbe3f731d549050f117.15%
- e7037ba5b4e0a91932e90cea77d0a5a7bfdb8c7908dcc0f4716461b8415a82cb1.52%
- bcff766f8faff65e6b7039808cdb1a9d4cf0de684fdad47d0b0c58c29fcc4ed50.03%
Process Ancestry
Top Grandparents
- services.exe99.71%
Top Parents
- McCSPServiceHost.exe0.16%
- McInst.exe0.08%
Top Children
- userenvstate.exe99.93%
- conhost.exe0.05%
- ngen.exe0.02%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about msgrunner.exe
Rocky answers questions about msgrunner.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.