Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.5.1302.1018 27.27%
8.5.1302.1018 9.09%
8.5.1302.1018 27.27%
8.1.0178.00 9.09%
8.1.0178.00 9.09%
8.0.0812.00 9.09%
6.1.0207 9.09%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegCloseKey, RegCreateKeyA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegQueryValueExA, RegDeleteValueA, RegQueryInfoKeyA, RegEnumKeyA, RegDeleteKeyA, FreeSid, RevertToSelf, AccessCheck, IsValidSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, AddAccessAllowedAce, InitializeAcl, GetLengthSid, InitializeSecurityDescriptor, AllocateAndInitializeSid, OpenProcessToken, OpenThreadToken, ImpersonateSelf, CryptReleaseContext, CryptDestroyHash, CryptCreateHash, CryptAcquireContextA, CryptHashData, CryptGetHashParam, RegOpenKeyA
gdi32.dll
Polygon, SetDIBitsToDevice, CreateCompatibleBitmap, FillRgn, CreatePolygonRgn, DPtoLP, SetStretchBltMode, SetBitmapBits, OffsetViewportOrgEx, SetDIBColorTable, SetDIBits, GetDIBits, SetViewportExtEx, GetCurrentObject, StretchDIBits, GetObjectType, GetPaletteEntries, CreatePalette, GetSystemPaletteEntries, Ellipse, GetNearestPaletteIndex, PatBlt, GetMapMode, GetViewportExtEx, GetWindowExtEx, DeleteMetaFile, SetBrushOrgEx, GetBrushOrgEx, GetEnhMetaFileHeader, GetObjectA, DeleteEnhMetaFile, SetTextAlign, CreatePatternBrush, PlayEnhMetaFile, OffsetRgn, CombineRgn, EqualRgn, CreateDIBPatternBrushPt, ExtTextOutA, CreateFontIndirectA, GetTextExtentPoint32A, GetTextExtentExPointA, GetWindowOrgEx, OffsetWindowOrgEx, CreateDCA, SetWorldTransform, SetGraphicsMode, SetRectRgn, Polyline, GetTextMetricsA, RectInRegion, GetRandomRgn, GetClipBox, CreateHalftonePalette, RealizePalette, SelectPalette, GetDIBColorTable, SetTextColor, SetBkMode, SetWindowExtEx, CloseMetaFile, GetClipRgn, CreateRectRgn, ExtSelectClipRgn, SelectClipRgn, SetBkColor, Rectangle, MoveToEx, LineTo, GetPixel, BitBlt, StretchBlt, CreateCompatibleDC, CreatePen, SelectObject, GetDeviceCaps, LPtoDP, SaveDC, SetMapMode, SetWindowOrgEx, SetViewportOrgEx, DeleteDC, RestoreDC, CreateRectRgnIndirect, CreateRoundRectRgn, GetStockObject, CreateDIBSection, CreateSolidBrush, DeleteObject
kernel32.dll
DllMain
ole32.dll
StgOpenStorageOnILockBytes, GetHGlobalFromILockBytes, OleLockRunning, CoTaskMemAlloc, CLSIDFromProgID, CoInitializeEx, CoFreeUnusedLibraries, ReleaseStgMedium, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, CoInitialize, CoUninitialize, IIDFromString, CoCreateGuid, StringFromGUID2, OleRun, RegisterDragDrop, RevokeDragDrop, DoDragDrop, CoCreateFreeThreadedMarshaler, OleSaveToStream, WriteClassStm, OleLoadFromStream, GetHGlobalFromStream, OleDuplicateData, CreateStreamOnHGlobal, CreateDataAdviseHolder, CreateOleAdviseHolder, OleRegGetMiscStatus, OleRegGetUserType, OleRegEnumVerbs, OleFlushClipboard, StringFromCLSID, CoTaskMemFree, CLSIDFromString, CoRevokeClassObject, CoCreateInstance, CoRegisterClassObject, OleUninitialize, OleInitialize, CoDisconnectObject
shell32.dll
DragQueryPoint, DragAcceptFiles, DragFinish, SHAppBarMessage, ShellExecuteExA, SHGetMalloc, Shell_NotifyIconA, ShellExecuteA
shlwapi.dll
PathFileExistsW, StrCpyNW, wnsprintfW, StrCatBuffA
user32.dll
DllMain
ws2_32.dll
WSAIoctl, WSAEnumNetworkEvents, WSAEventSelect, WSASocketA

msnmsgr.exe

Messenger by Microsoft Corporation (Signed)

Remove msnmsgr.exe
Version:   8.5.1302.1018
MD5:   a8972a2f9a744dd5ee0bfe429d767f1c
SHA1:   11c8f91dc2d2db195482b18d71bd33cd913a8259
SHA256:   a56fdcd9f3c7477889c0df04e09a888c1446e7c82c710b317ac8cbbb4ff97454

What is msnmsgr.exe?

Windows Messenger is a client by Microsoft that is included in Windows. It has a variety of features, such as instant messaging, presence awareness, support for Session Initiation Protocol (SIP), file transfer, application sharing and whiteboarding. The software integrates with Microsoft Exchange, Microsoft Outlook, Outlook Express, and the Remote Assistance feature of Windows XP.

Overview

MsnMsgr.Exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including Windows Live Messenger published by Microsoft Corporation, Windows Live Essentials from Microsoft Corporation and Windows Live Essentials by Microsoft Corporation.

DetailsDetails

File name:MsnMsgr.Exe
Publisher:Microsoft Corporation
Product name:Messenger
Typical file path:C:\Program Files\msn messenger\msnmsgr.exe
File version:8.5.1302.1018
Product version:8.5.1302
Size:5.46 MB (5,724,184 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Tuesday, April 4, 2006
Expiration date:Thursday, October 4, 2007
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Microsoft Corporation
2% remove
Windows Live Messenger is an instant messaging client connects to Microsoft Messenger service. Microsoft announced that Windows Live Messenger will be retired in favor of Skype. Windows Live Messenger's album viewer is based on Windows Photo Gallery and provides users a photo viewing experience for photo albums shared via SkyDrive and Facebook.
Microsoft Corporation
10% remove
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services. Essentials programs are designed to integrate well with each other, with Microsoft Windows, and with other Microsoft web-based services such as SkyDrive and Outlook.com, so that they operate as a seamless whole.
Microsoft Corporation
3% remove
To play Windows Media in Firefox, you need the Windows Media Player browser plugin installed. Even if you already have Windows Media Player installed, you may still be missing the plugin required to play back Windows Media audio and video embedded in Web Pages.

BehaviorsBehaviors

Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MsnMsgr' → "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Windows Live\Messenger\msnmsgr.exe'
  • Firewall exception for 'C:\Program Files\MSN Messenger\msnmsgr.exe'
  • Firewall exception for 'C:\Program Files\Windows Live\Messenger\msnmsgr.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00000273%
0.028634%
Kernel CPU:0.00000140%
0.013761%
User CPU:0.00000134%
0.014873%
Kernel CPU time:10,000 ms/min
100,923,805ms/min
Memory
Private memory:28.33 MB
21.59 MB
Private (maximum):39.97 MB
Private (minimum):39.97 MB
Non-paged memory:28.33 MB
21.59 MB
Virtual memory:162.79 MB
140.96 MB
Virtual memory (peak):215.95 MB
169.69 MB
Working set:39.96 MB
18.61 MB
Working set (peak):43.78 MB
37.95 MB
Resource allocations
Threads:13
12
Handles:574
600
GUI GDI count:200
103
GUI USER count:74
49

BehaviorsProcess properties

Tray notification:Yes
Platform:32-bit
Command line:"C:\Program Files\windows live\messenger\msnmsgr.exe" /background
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 81.82%
Windows XP Professional 9.09%
Windows Vista Ultimate 9.09%

Distribution by countryDistribution by country

Germany installs about 33.33% of Messenger.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 72.73%
Toshiba 18.18%
Sahara 9.09%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE