platform-performance-plugin.exe
Summary
Platform Performance Plugin is a component of an endpoint management or monitoring platform. It collects system performance metrics including CPU, memory, disk, and network utilization.
platform-performance-plugin.exe is the 20th most commonly executed Windows program in EchoTrail's dataset, observed 3,160,754 times across enterprise environments. It typically runs from C:\Program Files (x86)\ITSPlatform\plugin\performance and it is most often launched by platform-agent-core.exe.
Behavior
Top Paths
- C:\Program Files (x86)\ITSPlatform\plugin\performance100%
Top Hashes (SHA256)
- e0f81d827ef23e6da59dfaece1ad8867b1d6173934c1d7b6c79865a5a64873fe22.39%
- 320cd171a445e49d32c88c29a9d113e27c09d7d3908ebec66b4725d6296e0e5e17.36%
- 16bb3552ec9526442ada610b94f4e0919fcc55cb9759d29c1f1a3dee5be6b8c711.14%
- 204d2e6123801fa7cfcbdc72b359bd02bce443d5e95a7d360337244950d9a2a19.71%
- 3dea5184d14a0ba2373e9719dd104966ac2169ab8e140124de64a11694346d307.45%
- e04bb611839bd92d65ab5f139689196580486ac19d0fafdf716e4e4d77fe587f7.41%
- 8eac1da45b881007c03e80fdc1cfd6bd43846ac0af84934668ca253043caaa9d6.23%
- 839aa6106649fe996d67d99dfbee1da328dc404b6456edcf47dbc5d75d54a3005.04%
- 05b6ffdc2a06dcf4b2c98fdb4a331dad006b974dce1695932ad0eb31b2ba375d4.77%
- 2231c054666285a130fb767ee8314fb1057d6ab6679565627b714b6abfa599944.65%
Process Ancestry
Top Parents
- platform-agent-core.exe99.87%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Security Analysis
What does platform-performance-plugin.exe normally do?
Part of an endpoint management agent. Spawns conhost.exe. Runs continuously for performance data collection.
When is platform-performance-plugin.exe suspicious?
Running from unexpected paths.
How do attackers abuse platform-performance-plugin.exe?
Not a target for direct abuse.
Detection guidance
No detection needed.
False positive notes
High execution count reflects continuous monitoring operation.
Related Processes
Ask Rocky about platform-performance-plugin.exe
Rocky answers questions about platform-performance-plugin.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.