What is SRM.exe?

[fdarrigo]

Does anyone know what c:\program files\splunkuniversalforwarder\bin\srm.exe is?

Our AV has flagged the file as suspicious and I want to confirm it's a valid Splunk provided executable.

Frank

[richgalloway · Accepted solution]

Yes, it's a legitimate file.  It's included in the Splunk download and is signed by Splunk.

As for what it does, see this screenshot.