splunk-perfmon.exe

Summary

Performance monitor

splunk-perfmon.exe is the 3784th most commonly executed Windows program in EchoTrail's dataset, observed 42 times across enterprise environments. It typically runs from C:\Program Files\Splunk\bin and it is most often launched by splunkd.exe.

3784th
most commonly executed Windows program
42
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files\Splunk\bin52.38%
  • C:\Program Files\SplunkUniversalForwarder\bin42.86%
  • C:\Program Files\SUFwd\bin4.76%

Top Hashes (SHA256)

  • b793038d45efb6026070a3d36604e905a1b086cd6c5c173873dfafe0174c07b190%
  • 5591b9faa675c97fd79a465ad0b47f5f58b90edfadf95b311211ef65a0311a4710%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about splunk-perfmon.exe

Rocky answers questions about splunk-perfmon.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.