EXCEL.EXE
by Microsoft
Productivity
Summary
Microsoft Excel - spreadsheet application in the Microsoft Office suite.
EXCEL.EXE is the 354th most commonly executed Windows program in EchoTrail's dataset, observed 24,492 times across enterprise environments. It typically runs from C:\Program Files\Microsoft Office\root\Office16 and it is most often launched by explorer.exe.
354th
most commonly executed Windows program
24,492
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Program Files\Microsoft Office\root\Office1651.49%
- C:\Program Files (x86)\Microsoft Office\root\Office1648.27%
- C:\Program Files\Microsoft Office 15\root\office150.16%
- C:\...0.07%
Top Hashes (SHA256)
- 562b337eb94f8ce2eac32eb80e980b378d00f803476a64da7abc537357b9dd054.21%
- 471ef7645dbd6990f94ecd9f3e7736ca04a3ef38c952e4305b0c02cfc01213eb3.44%
- a6e9b1a4aa76e699c5344d7ba32931bd94c3505997819dc61b9f28b9b28038a33.43%
- b095b67917ca7a9b96300ec03937d05c38990aef901850e354850c03ea66a2b42.98%
- 1be426e0befdbb3dfdb0559cc7da6b44ae1dc085a7c074f15d18bbe8ab236b3b2.84%
- 5413a576ea7a5cd35fb59d22d24ce1f8501365c7ee3226504ed862b42548888d2.84%
- 7c15fba2880c0f159f2e01c7c52745738b8447170aa020ceafe7c9b62b8e94db2.79%
- 005a582fa4f7b9174c10e9b096ffd625e03ea9fdc2ba868abec1bceb011dc0b22.47%
- 967caaea3e49f5c70297d5d612d2e377148e8e30c1601ca07a1900f2cd4a5b7a2.27%
- 18b0b8d531be7c62b97ee68a014f48137e283bc9d97b90725006b311fa2121f41.98%
Process Ancestry
Top Grandparents
- explorer.exe36.21%
- cmd.exe31.03%
- userinit.exe20.69%
- protocolhandler.exe3.45%
- svchost.exe3.45%
- firefox.exe1.72%
- OfficeClickToRun.exe1.72%
Top Parents
- explorer.exe47.23%
- EXCEL.EXE16.9%
- OUTLOOK.EXE16.57%
- chrome.exe11.26%
- svchost.exe3.52%
- RuntimeBroker.exe1.18%
- firefox.exe0.86%
- protocolhandler.exe0.39%
- iexplore.exe0.22%
- msedge.exe0.2%
Top Children
- EXCEL.EXE42.8%
- MSOSYNC.EXE32.86%
- splwow64.exe14.19%
- chrome.exe2.2%
- OUTLOOK.EXE1.67%
- crashpad_handler.exe1.11%
- AcroRd32.exe0.49%
- csc.exe0.46%
- firefox.exe0.37%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about EXCEL.EXE
Rocky answers questions about EXCEL.EXE grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.