AddInUtil.exe
Sources: 300M+ executions observed in the wild.
Summary
.NET Add-In Utility - manages .NET Framework add-in pipeline discovery and registration.
AddInUtil.exe is the 398th most commonly executed Windows program in EchoTrail's dataset, observed 19,009 times across enterprise environments. It typically runs from C:\Windows\Microsoft.NET\Framework\v3.5 and it is most often launched by msiexec.exe.
Get this in your tools
The same record for addinutil.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/addinutil.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
Behavior
Top Paths
- C:\Windows\Microsoft.NET\Framework\v3.561.35%
- C:\Windows\Microsoft.NET\Framework64\v3.538.65%
Top Hashes (SHA256)
- efa0afbea009590f38e0ac0aff104ceae59a53ff7516aee4d96111d78192ca8c24.99%
- a8f94f2c1725391bc936e33dc472d60444e3dc0d88c09098f9ad7c71485c65ac21.03%
- fac3fe097a8f38d12ccec4fa024e46d7972630387e0f38dd620a9e5f1d8e15f08.02%
- 35a05f01c5829f3aaa0a6b7dc3973f8e744bb9e2eda9c25d729e1341e10786617.8%
- d449434d64dae77740cf9c4ae8f2b38d9acba3eba012f4f0317277eebc10cbf95.84%
- 33509761c49ffd05546ca9657dddf77daec1f430c4fbb2751549683936abfb475.65%
- c05de4d4d3168b7ff8df192410d277ae20b11644a7f3ddb04148be3c01a1f8305.55%
- aed95082467501b6feb1f8003092f10daac7f5e69f9d00131de636f8cf5190d34.38%
- f501e669aac04b949394cfe741cc93aabf9e08f6e519f839c82e8ea8f01735692.98%
- f0e574691b50dbc11dc794e7b737a9a65a49fc77c65486b0a8d387638989b8d92.58%
Process Ancestry
Top Grandparents
- msiexec.exe99.99%
- svchost.exe0.01%
Top Parents
- msiexec.exe99.99%
Top Children
- conhost.exe100%
Ask Rocky about AddInUtil.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for AddInUtil.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.