mongod.exe
Summary
MongoDB Database Server
mongod.exe is the 3717th most commonly executed Windows program in EchoTrail's dataset, observed 45 times across enterprise environments. It typically runs from C:\Program Files\Splunk\bin and it is most often launched by splunkd.exe.
3717th
most commonly executed Windows program
45
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Splunk\bin48.89%
- C:\Program Files\Microsoft Advanced Threat Analytics\Center\MongoDB\bin33.33%
- C:\Users\...11.11%
- C:\Program Files\MongoDB\Server\3.6\bin6.67%
Top Hashes (SHA256)
- 77fae587a8f6ea30153e2c2b08c2e656f2821d6aadcbc17011869184000fef4a65.22%
- 0147d557fcfddf90da284c9b5067588c6089e096eb3eea4ea3ce969eb5378c1f21.74%
- b056e20b0e21ca1575f0f11ffc17eb26e99d78d2eb761c5221d68420a8acc8d713.04%
Process Ancestry
Top Grandparents
- services.exe45%
- wininit.exe32.5%
- javaw.exe12.5%
- explorer.exe2.5%
- msiexec.exe2.5%
Top Parents
- splunkd.exe48.89%
- services.exe31.11%
- java.exe11.11%
- explorer.exe4.44%
- cmd.exe2.22%
- rundll32.exe2.22%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mongod.exe
Rocky answers questions about mongod.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.