platform-eventlog-plugin.exe
Summary
Platform Eventlog Plugin - plugin component of an endpoint management platform.
platform-eventlog-plugin.exe is the 745th most commonly executed Windows program in EchoTrail's dataset, observed 4,553 times across enterprise environments. It typically runs from C:\Program Files (x86)\ITSPlatform\plugin\eventlog and it is most often launched by platform-version-plugin.exe.
Behavior
Top Paths
- C:\Program Files (x86)\ITSPlatform\plugin\eventlog100%
Top Hashes (SHA256)
- 55b62d72307202d3c4583b38987efbdd88d9cc15c48e682c684190284d7fa50426.49%
- 53adc1cf0e11effdb44fb0b4d4fd879a08b5b498ad42d8895501d8d85d906c5a25.98%
- fde8d3f93bb08db5920f2a02e011c84ff86d4843c72f83fe5a7f7bc3ff0fe59223.65%
- 617ee92d5d9e2b7cf7752f6d404cba411d07b6fb4f3eb52aad4ded924ec3e66114.36%
- 7e0fda411ae6ae6e735965b3aa02402d7431bd5e03f521da1bdb295cfe4bf7868.54%
- ed1c27148654d47a90f72a9f21a7ea5821d04de91c85572deb7f79e8e7f950810.97%
Process Ancestry
Top Parents
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about platform-eventlog-plugin.exe
Rocky answers questions about platform-eventlog-plugin.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.