pmfexe.exe
Summary
Performance Monitor Framework Executor - executes performance monitoring collection tasks.
pmfexe.exe is the 400th most commonly executed Windows program in EchoTrail's dataset, observed 18,682 times across enterprise environments. It typically runs from C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 2\568 and it is most often launched by MonitoringHost.exe.
Behavior
Top Paths
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 2\56818.14%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 8\4510.79%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\4510.78%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 2\3786.88%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 5\3786.88%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 7\3786.63%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 1\3825.41%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 7\454.74%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 9\454.12%
- C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 7\5453.74%
Top Hashes (SHA256)
- 238707b1c57d8bf2eea57bb5781abeca024f8ddbc370da70ebe2a1f894e3f36691.56%
- 0a8a6e29f43fbbfc2e36672bbcd41b9baf03ab4890cea844a4f4ec33ac1754fd8.44%
Process Ancestry
Top Grandparents
- svchost.exe100%
Top Parents
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about pmfexe.exe
Rocky answers questions about pmfexe.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.