• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Solved Windows Calculator App = numbers.exe process?


Pharos233

New Member
Posts
3
#1
Hi all,

New here, so I'm not sure if this is the correct forum to post this(if it isn't, admins please move it to the correct forum, thanks!). I'm currently running Windows 8.1 and recently I took a look at my Resource Monitor and noticed a process called numbers.exe with the description "Numbers". It showed it as running in the background but in a suspended state.

As I've never seen that process before, I decided to search it up and it came up with some results related to a trojan/rootkit. But this trojan/rootkit was namely referred to as <random numbers>.exe (for example: 123456789.exe); nothing indicating specifically the process "numbers.exe". I did a bit of digging in the associated handles and noticed that some of the files were related to the default Windows Calculator App, which I have currently pinned to my Start. When I unpinned it from the Start the process was gone.....so I'm assuming it is the process for the calculator. But because of a trojan incident I had a few years back, I'm a bit paranoid based of the searches that popped up for numbers.exe.

So I was wondering if anyone knows if this "numbers.exe" is a legitimate process? Does anyone else who also has the default calculator pinned to their start have this process running as "suspended"?

Anyone help would be appreciated! Thanks in advance!
 

My Computer

System One

  • OS
    Windows 8.1

oboedad55

Member
Member
Posts
42
#2
I just fired up Windows 8.1 Calculator. The only things I see listed are Windows Calculator under processes and calc.exe under Details. No numbers.exe. I hope this helps.
 

My Computer

System One

  • OS
    Windows 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom
    CPU
    Intel Pentium E5700 @ 3.00GHz Wolfdale 45nm Technology
    Motherboard
    ASRock G31M-S. (CPUSocket
    Memory
    4.00GB Dual-Channel DDR2 @ 332MHz
    Graphics Card(s)
    1024MB NVIDIA GeForce GT 430 (EVGA)
    Sound Card
    RealTek
    Monitor(s) Displays
    Dell 2007 FP 22" LCD
    Screen Resolution
    1600x1200
    Hard Drives
    Western Digital WDC WD1002FAEX-00Z3A0

    Western Digital WDC WD1001FALS-00Y6A0
    PSU
    cheap generic
    Case
    cheap
    Keyboard
    Kensington Multimedia
    Mouse
    cheap Logitech
    Internet Speed
    slow
    Browser
    Waterfox (64-bit Firefox)
    Antivirus
    Defender
Posts
1,883
#3
heh heh almost anything you search for like that shows trojan this trojan that scan now for malware!!!!

I wouldn't worry, based on what you said about unpinning.

Numbers.exe is definitely a Windows 8 native file: https://superuser.com/questions/667...rms-weather-just-a-few-crash-immediately-when

If in doubt, just scan with Malwarebytes.

I just fired up Windows 8.1 Calculator. The only things I see listed are Windows Calculator under processes and calc.exe under Details. No numbers.exe. I hope this helps.
Ok, but do you have it pinned like the OP?
 

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus

Pharos233

New Member
Posts
3
#4
heh heh almost anything you search for like that shows trojan this trojan that scan now for malware!!!!

I wouldn't worry, based on what you said about unpinning.

Numbers.exe is definitely a Windows 8 native file: https://superuser.com/questions/667...rms-weather-just-a-few-crash-immediately-when

If in doubt, just scan with Malwarebytes.
That is true haha. But given my experience with previous trojan incident, you get a bit paranoid especially if its a process that the web doesn't have a lot of information on. Based off the unpinning and pinning, it looks like it is the process for it....wished Microsoft had just made it a bit clearer as to what the process was instead the vague description of "numbers".

I do have Malwarebytes running on my comp. and I do scans every 2-3 weeks and it has found nothing so far.

Since there isn't any clear information about this process, I thought I would ask others on Windows 8/8.1 to see if they see that process also in the same situation.

Thanks for your quick replies!
 

My Computer

System One

  • OS
    Windows 8.1

ARC1020

New Member
Power User
Posts
446
#5
Numbers.exe is a legitimate Windows process. It's the store app calculator (rather than the desktop calc application).

What you can do as a first point of call to quickly check unknown running processes (such as this one) is to use Process Explorer. Download Process Explorer v16.01 from Sysinternals and check the process through Virus Total, which will check the hash sum of the process against known hashes.

Untitled-1.jpg


Untitled-2.jpg
 
Last edited:

My Computer

System One

  • OS
    Win 8 64-bit