platform-setuputils-plugin.exe
Summary
Platform setup utilities plugin - handles installation and configuration tasks for the platform agent.
platform-setuputils-plugin.exe is the 239th most commonly executed Windows program in EchoTrail's dataset, observed 56,217 times across enterprise environments. It typically runs from C:\Program Files (x86)\ITSPlatform\plugin\setuputils and it is most often launched by platform-agent-core.exe.
Behavior
Top Paths
- C:\Program Files (x86)\ITSPlatform\plugin\setuputils100%
Top Hashes (SHA256)
- fb44f1fdc51dff59df981fc57b2347141e08fcf15a32217de2e357958c5bc41335.6%
- fe83a04f650cbe06c33d5d7f9504cf7b9db3918fd769dadf435344e7acaabecd29.04%
- 168330cc94ca1af13be04e4e9619d37ca485ba5ba6a0dd8df01e8e627a6d986916.21%
- ed445a9ab77c3ade1ddbe34f714cdcb2d6f8d1f0f9324310f35a74089588ed1e9.82%
- fa0c88bce0b7992c31029ac201a103646ca71abcca1fe626ea6106fb952f14d61.69%
- 21dcf3760774f670429bde9a84e9c2176d34a8412e822bb558657bf77cabae9c1.2%
- f9b28b42ec46cef3b8fd65d35672486bafe84e401bd583213f21942dafab7c1b0.93%
- 45400054b8fbab46517977ecb1e27877bf37dae867f387713fd2392d6c53a6400.83%
- ff4d09d81a2da31c1fbb244ab2a3a0399e544c596384d798b4d2654bf46c99de0.8%
- 2e1fa9f05b66816c39736492c346dc65e0b1c7a90adfd73da8f36e1a55f2b5320.6%
Process Ancestry
Top Parents
- platform-agent-core.exe92.85%
Top Children
- conhost.exe99.21%
- regsvr32.exe0.45%
- DMPHelpDesk.exe0.03%
- SAAZScheduler.exe0.03%
- SAAZServerPlus.exe0.03%
- SAAZWatchDog.exe0.03%
- vcredist_x64.exe0.03%
- zWpCheck.exe0.03%
- taskkill.exe0.01%
- SAAZKill.exe0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Security Analysis
What does platform-setuputils-plugin.exe normally do?
Plugin component of an endpoint management or unified endpoint security platform.
When is platform-setuputils-plugin.exe suspicious?
Running on unmanaged systems.
False positive notes
Normal in managed endpoint environments.
Ask Rocky about platform-setuputils-plugin.exe
Rocky answers questions about platform-setuputils-plugin.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.