msp-agent-core.exe
Summary
N-able/SolarWinds MSP Agent Core - central agent process for N-able RMM (Remote Monitoring and Management).
msp-agent-core.exe is the 295th most commonly executed Windows program in EchoTrail's dataset, observed 35,012 times across enterprise environments. It typically runs from C:\Program Files (x86)\Msp Agent and it is most often launched by winagent.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Msp Agent100%
Top Hashes (SHA256)
- 79e5a1d07d0c7894c7db9e3bd6bb11f3e1a52dcdd4477b645e4c36eb1846c6fc16.43%
- 0dfdf1759978c166a5fb4bee852f83e982dd7c331c6ee244ddc737c192e5ac9316.03%
- d7d3e7fb1a3fc4b1a27fbe422f8aabd1598701fb1a1d06f8a086afa2afc66ccc13.81%
- 69c75035155affadefa719030f2b41409d99e262b5f63cb4eaf9e8e532ed8dd012.23%
- 3dc7eee4b89c69b33bd23dfadf6373633977c90c7fc9fa35b6ce1a50653baa2e9.95%
- 98817b6eb24852756e6f924a80f600a2decbe23e8a245747d99607cae76ad1aa9.93%
- 847acf89459625a62ab55d243cf807e8b641a21c974c5b9610bfd50bba9b641c8.35%
- 9aea7d2309bd9e66306096d9caf6a1a25d05839b81766dc74c3b2c5f3f1953c36.58%
- 8825c481d1def5ed7087a18f12fca0d00682c1427cd97f6d9eb2999fce7a5a785.8%
- a1177b71db945fb5ed34c6b3b7d5a4a8a5ded34b2bff258687f66fb08a6719700.75%
Process Ancestry
Top Parents
- winagent.exe99.39%
- services.exe0.09%
- msiexec.exe<0.01%
Top Children
- conhost.exe18.58%
- software-scanner.exe2.62%
- log-collector.exe2.41%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about msp-agent-core.exe
Rocky answers questions about msp-agent-core.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.