NetCfgNotifyObjectHost.exe
Summary
Windows Network Config Notify Host - hosts network configuration change notification objects.
NetCfgNotifyObjectHost.exe is the 909th most commonly executed Windows program in EchoTrail's dataset, observed 2,707 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- b2cc9b5e542429297b7bc4bd02f2a175838751da38c235c6ca546b1bfccd646669.84%
- 2eb3f941db011b6e059b30c7857e1ea22f0d8e9019627379648da22017d1e95a16.52%
- 4d6b7289ef09b840f1ea2a3a6cd587364b1f72f84541061aebf873009d52311b4.27%
- 15988943e95011a6298441d31de8e6c85fb714791981412e9e0744e3e8452a094.08%
- 30b805bc02cfc6b25306d5e557ec5e855a2ba379aeb96fd0781df7700019bd0f2.17%
- 87c9f1299bc80cf310f42f5639236101a42e2892c542ad43e86bb8c93a4b27b61.31%
- 93355dd688fec264d3abfe5fc9178fcf14a7b25768bb84b208522d120fb481050.56%
- 9521687c6c6a0dd8b479a8f22734bd2a5582681fc239d9d67318a233fe5bb55e0.56%
- de7666dd03bc9f632a40d37955e0ff8ae5ee38e34ad6116970f1a1cc8441c4e90.56%
- 2c0838f7a0df1a055ed4a48a6423c083256eac17e262c4ed84623254b2ba2dad0.07%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe99.89%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about NetCfgNotifyObjectHost.exe
Rocky answers questions about NetCfgNotifyObjectHost.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.