Solved Windows Calculator App = numbers.exe process?

Hi all,

New here, so I'm not sure if this is the correct forum to post this(if it isn't, admins please move it to the correct forum, thanks!). I'm currently running Windows 8.1 and recently I took a look at my Resource Monitor and noticed a process called numbers.exe with the description "Numbers". It showed it as running in the background but in a suspended state.

As I've never seen that process before, I decided to search it up and it came up with some results related to a trojan/rootkit. But this trojan/rootkit was namely referred to as <random numbers>.exe (for example: 123456789.exe); nothing indicating specifically the process "numbers.exe". I did a bit of digging in the associated handles and noticed that some of the files were related to the default Windows Calculator App, which I have currently pinned to my Start. When I unpinned it from the Start the process was gone.....so I'm assuming it is the process for the calculator. But because of a trojan incident I had a few years back, I'm a bit paranoid based of the searches that popped up for numbers.exe.

So I was wondering if anyone knows if this "numbers.exe" is a legitimate process? Does anyone else who also has the default calculator pinned to their start have this process running as "suspended"?

Anyone help would be appreciated! Thanks in advance!

I just fired up Windows 8.1 Calculator. The only things I see listed are Windows Calculator under processes and calc.exe under Details. No numbers.exe. I hope this helps.

heh heh almost anything you search for like that shows trojan this trojan that scan now for malware!!!!

I wouldn't worry, based on what you said about unpinning.

Numbers.exe is definitely a Windows 8 native file: https://superuser.com/questions/667...rms-weather-just-a-few-crash-immediately-when

If in doubt, just scan with Malwarebytes.

oboedad55 said:

I just fired up Windows 8.1 Calculator. The only things I see listed are Windows Calculator under processes and calc.exe under Details. No numbers.exe. I hope this helps.

Click to expand...

Ok, but do you have it pinned like the OP?

MasterChief said:

heh heh almost anything you search for like that shows trojan this trojan that scan now for malware!!!!

I wouldn't worry, based on what you said about unpinning.

Numbers.exe is definitely a Windows 8 native file: https://superuser.com/questions/667...rms-weather-just-a-few-crash-immediately-when

If in doubt, just scan with Malwarebytes.

Click to expand...

That is true haha. But given my experience with previous trojan incident, you get a bit paranoid especially if its a process that the web doesn't have a lot of information on. Based off the unpinning and pinning, it looks like it is the process for it....wished Microsoft had just made it a bit clearer as to what the process was instead the vague description of "numbers".

I do have Malwarebytes running on my comp. and I do scans every 2-3 weeks and it has found nothing so far.

Since there isn't any clear information about this process, I thought I would ask others on Windows 8/8.1 to see if they see that process also in the same situation.

Thanks for your quick replies!

Numbers.exe is a legitimate Windows process. It's the store app calculator (rather than the desktop calc application).

What you can do as a first point of call to quickly check unknown running processes (such as this one) is to use Process Explorer. Download Process Explorer v16.01 from Sysinternals and check the process through Virus Total, which will check the hash sum of the process against known hashes.

Cool! Thanks for confirming that it is a legit process and for the program recommendation!