calc.exe
by Microsoft
Operating System
Summary
Windows Calculator (legacy) - pre-UWP calculator application in older Windows versions.
calc.exe is the 665th most commonly executed Windows program in EchoTrail's dataset, observed 6,237 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by explorer.exe.
665th
most commonly executed Windows program
6,237
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System3286.04%
- C:\Windows\SysWOW6413.96%
Top Hashes (SHA256)
- 9bc9cba71d8c9948056e8198c486931ef547a7efa9b1362511f00e81878d605650.29%
- 0a6e788fdbcbf925112f9cf57124f68ccaa30f3ac1f10904ce46ffe54e930f119.03%
- 58189cbd4e6dc0c7d8e66b6a6f75652fc9f4afc7ce0eba7d67d8c3feb0d5381f6.45%
- c27fa17c7e6cf32925d3ebdf093d2be6087335a524702d2859ee875aaf9b2a446.14%
- 5543a258a819524b477dac619efa82b7f42822e3f446c9709fadc25fdff942266.01%
- c0f9cc1663b74a106c5c3356988ffa42d64f9c941ef9cb46aabf16ce8a213baf5.43%
- 284674a806bcbe692c76761baaf21327638de0c7135bfb06953648be7d661fbd5.18%
- c6a91cba00bf87cdb064c49adaac82255cbec6fdd48fd21f9b3b96abf019916b5.1%
- ed369187681a62247e38d930320f1cd771756d0b7b67072d8ec655ef99e14aeb2.14%
- a103a57d50b32469c5811e2808f021adf9d9220093b540b8a9c83b5c821d370e1.27%
Process Ancestry
Top Grandparents
- userinit.exe76.64%
- explorer.exe5.45%
- WerFault.exe0.58%
- winlogon.exe0.41%
- mshta.exe0.17%
- EXCEL.EXE0.12%
- cmd.exe0.06%
- taskhostw.exe0.06%
- smss.exe0.04%
- setup.exe0.02%
Top Parents
- explorer.exe80.95%
- SetPoint.exe4.52%
- powershell.exe0.26%
- cmd.exe0.18%
- Launchy.exe0.06%
- regsvr32.exe0.05%
- forfiles.exe0.03%
- winlogon.exe0.03%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about calc.exe
Rocky answers questions about calc.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.