ThirdPartyPatch.exe

by Microsoft
Endpoint Management

Summary

SCCM Third-Party Patch - handles third-party application patching through Configuration Manager.

ThirdPartyPatch.exe is the 470th most commonly executed Windows program in EchoTrail's dataset, observed 13,209 times across enterprise environments. It typically runs from C:\Program Files (x86)\Advanced Monitoring Agent\patchman\ThirdPartyPatch and it is most often launched by SolarWinds.MSP.RpcServerService.exe.

470th
most commonly executed Windows program
13,209
observed executions
medium
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\Advanced Monitoring Agent\patchman\ThirdPartyPatch99.61%
  • C:\ProgramData\...0.39%

Top Hashes (SHA256)

  • 6aa6e397c47d1d420abffb761fbb82aae1e86e645ff993e6b946cc382ffb0d7d43.42%
  • 3c532a50c902b05e4cfd04201a1e72fb80942802e00058ab8913e515fc202e1f17.99%
  • a65c120f56cdf491b485620edfce34557364e223cce60426b73e02f57055a80012.37%
  • 05aa696f2a4aaaced1ec66b571bfc44fe8a77e10207a2bc05e06b150dc0bb5f811%
  • 23d62aa3b02e09c70043f79580d37bc13408f19a60598053b494ab109d3253589.09%
  • 31f8ef96b2a0714a7e7bb186f6ec1dd92748bbf3c9be22b9ccc11d1a97626b0a5.51%
  • e84769472e5f6612143f17e893d1f43040a88c0548402e71a11e1b8e5d513d590.34%
  • 40444f2868bb8e46d39ed44cf0974277e03e09d12a38d370ac34314c6675522b0.07%
  • 61d7c93e8abe1d7f99b9511906fbb6afb9408c321cec45d9facbfc090aa167450.07%
  • 88cf47916e212063358dd804a4d9e6d6acab50eac00b09d58996f40eec5287380.07%

Process Ancestry

Top Grandparents

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about ThirdPartyPatch.exe

Rocky answers questions about ThirdPartyPatch.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.