ExecDotNet.exe

by Various
Endpoint Management

Summary

.NET Executor - executes .NET assemblies or scripts, likely part of a management or deployment framework.

ExecDotNet.exe is the 250th most commonly executed Windows program in EchoTrail's dataset, observed 51,319 times across enterprise environments. It typically runs from C:\Program Files (x86)\SAAZOD and it is most often launched by SAAZScheduler.exe.

250th
most commonly executed Windows program
51,319
observed executions
medium
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\SAAZOD100%

Top Hashes (SHA256)

  • cf56f3f513afb9a8fa530175165aa427e854bbc87f4ed333b4d65caef74d64b786.69%
  • 060316ba8a8aae7722c0a49d0aa7e3509f87c17d149521a4e13fa09ca8b47e5713.31%

Process Ancestry

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about ExecDotNet.exe

Rocky answers questions about ExecDotNet.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.