NetFlowService.exe

by SolarWinds/Various
Monitoring

Summary

NetFlow Service - collects and processes NetFlow network traffic data.

NetFlowService.exe is the 755th most commonly executed Windows program in EchoTrail's dataset, observed 4,469 times across enterprise environments. It typically runs from D:\Program Files (x86)\SolarWinds\Orion and it is most often launched by services.exe.

755th
most commonly executed Windows program
4,469
observed executions
low
statistical confidence

Behavior

Top Paths

  • D:\Program Files (x86)\SolarWinds\Orion99.91%
  • C:\Program Files (x86)\SolarWinds\Orion0.09%

Top Hashes (SHA256)

  • 1bad431c98e6a46fe7a905befde98fc3bb8f5828f6691f1bc5567ba4fc3b5a52100%

Process Ancestry

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about NetFlowService.exe

Rocky answers questions about NetFlowService.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.