OUTLOOK.EXE
Summary
Microsoft Outlook - email, calendar, and contacts application in the Microsoft Office suite.
OUTLOOK.EXE is the 571st most commonly executed Windows program in EchoTrail's dataset, observed 8,642 times across enterprise environments. It typically runs from C:\Program Files (x86)\Microsoft Office\root\Office16 and it is most often launched by explorer.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Microsoft Office\root\Office1679.88%
- C:\Program Files\Microsoft Office\root\Office1619.47%
- C:\Program Files\Microsoft Office 15\root\office150.61%
- C:\Program Files (x86)\Microsoft Office\Updates\Download\PackageFiles\12F2D3A0-3F86-4381-BF00-78042A32DD4D\root\Office160.03%
Top Hashes (SHA256)
- 74d4010d0ddb6a62c27c7740010a6e468d51879e8a508d3577cbdfb1a3f800ab4.11%
- 36bf0676098ab921939893a13a0960d265cb0b249f865d826c1628834d7114b83.84%
- 81c81d8b02e79c2feec18a131b6a28faf58cd55cb47a8d7ca93ab2f391dde8933.6%
- cf6e8bca69ba6537d64a6006e25f0057490f02831cea3af5cd8141134c3bfa7b3.36%
- f129177902d5af558ae8d2ffa0a91072888fdce4c2d29903e60d2208aac2908c3.14%
- df81194fc0c558cd1e11bbb5b1cc71e1f3abd14f894236349a5a2162154598383.01%
- 2c7cf0ce404f657859c6d781e10064f9ed8f2a51e5c972f7a5ef4194556627a62.75%
- 655dcd89635078e509a711fe7b525f1dbb2b5f52beb41db0a271d9d42f424afa2.35%
- c0f26ac01321957fa63adee4b731472fc9345e943df238259c7a4801b3ce72b32.2%
- 184921b34b25385dc8b212402186b5045999ead578a29332096674d4e3bc7c1b1.95%
Process Ancestry
Top Grandparents
- userinit.exe54.17%
- explorer.exe12.5%
- svchost.exe12.5%
- OUTLOOK.EXE10.42%
- services.exe10.42%
Top Parents
- explorer.exe83.45%
- svchost.exe7.73%
- OUTLOOK.EXE2.38%
- chrome.exe1.16%
- Acrobat Elements.exe1.13%
- EXCEL.EXE1.02%
- cmd.exe0.78%
- OpenWith.exe0.32%
- SysTray.exe0.32%
- Acrobat.exe0.24%
Top Children
- msoadfsb.exe34.43%
- msedge.exe19.13%
- msedgewebview2.exe14.41%
- Acrobat.exe7.53%
- ai.exe7.23%
- WINWORD.EXE3.14%
- EXCEL.EXE2.48%
- acrotray.exe1.58%
- chrome.exe1.34%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about OUTLOOK.EXE
Rocky answers questions about OUTLOOK.EXE grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.