Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

16.4.3508.0205 4.25%
16.4.3505.0912 21.23%
15.4.3555.0308 39.15%
15.4.3538.0513 2.36%
15.4.3508.1109 0.47%
15.4.3502.0922 0.47%
14.0.8117.0416 22.64%
14.0.8117.0416 0.94%
14.0.8117.0416 4.25%
14.0.8117.0416 0.47%
14.0.8117.0416 0.47%
14.0.8117.0416 0.47%
14.0.8089.0726 1.89%
14.0.8050.1202 0.47%
12.0.1606 0.47%

Relationships

Parent process
Child processes
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, TraceEvent
kernel32.dll
SetEnvironmentVariableW, GetEnvironmentVariableW, GetFileAttributesW, GetFileAttributesA, LoadLibraryA, lstrlenW, WaitForSingleObject, CreateMutexW, SetDllDirectoryW, ReleaseMutex, SetConsoleCtrlHandler, SetLastError, RaiseException, LocalAlloc, IsDebuggerPresent, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetTickCount, QueryPerformanceCounter, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedCompareExchange, Sleep, InterlockedExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, GetLastError, GetModuleHandleW, GetProcAddress, GetCurrentThreadId, CloseHandle, FreeLibrary, HeapSetInformation, LoadLibraryExA, IsProcessorFeaturePresent, DecodePointer, GetTickCount64, EncodePointer
mailrt2.dll
CreateLogFile
msvcr110.dll
DllMain
msvcr90.dll
DllMain
shell32.dll
SHGetKnownFolderPath
user32.dll
SetForegroundWindow, FindWindowW, GetWindowThreadProcessId, AllowSetForegroundWindow, SendMessageTimeoutW, MessageBoxW, GetParent, GetPropW, UnhookWindowsHookEx, IsChild, GetGUIThreadInfo, IsDialogMessageW, SetPropW, GetLastActivePopup, SendMessageW, CallNextHookEx, SetWindowsHookExW

wlmail.exe

Windows Live Mail by Microsoft Corporation (Signed)

Remove wlmail.exe
Version:   15.4.3555.0308
MD5:   77bd0166102f3b9bb9499b2952c3bcfa
SHA1:   b837475aaa11f6a49060e629f67ca9758b0d8e5d
SHA256:   972a539d79e492b1ee4fbf6f8e8daa9d468e2a0d32683d67c8004926dcf9749e

What is wlmail.exe?

Windows Live Mail is a free of charge email client from Microsoft. It is the successor to Outlook Express on Windows XP and Windows Mail on Windows Vista. The application is available for download via the Windows Essentials suite.

Overview

wlmail.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including Windows Live Essentials published by Microsoft Corporation, Windows Live from Microsoft Corporation and Windows Live by Microsoft Corporation. The file is digitally signed by Microsoft Corporation.

DetailsDetails

File name:wlmail.exe
Publisher:Microsoft Corporation
Product name:Windows Live Mail
Typical file path:C:\Program Files\windows live\mail\wlmail.exe
File version:15.4.3555.0308
Size:89.87 KB (92,024 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Monday, February 21, 2011
Expiration date:Monday, May 21, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Windows Live Essentials
 Microsoft Corporation
10% remove
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services. Essentials programs are designed to integrate well with each other, with Microsoft Windows, and with other Microsoft web-based services such as SkyDrive and Outlook.com, so that they operate as a seamless whole.
Windows Live
 Microsoft Corporation
9% remove
Windows Live "is a way to extend the Windows user experience". Windows Vista provides a link in its user interface to download Windows Live Messenger, and Windows 7 saw the removal of applications such as Windows Mail, Windows Photo Gallery and Windows Movie Maker and replaced with the Windows Essentials suite, a software package that allows the downloading and installation of similar offerings from Windows Live. Windows Live offers int...
Podstawowe programy Windows Live
 Microsoft Corporation
8% remove
“Windows Live is the former collective brand name for a set of services and software products from Microsoft; part of their software plus services platform. A majority of these services are Web applications, accessible from a browser, but there are also client-side binary applications that require installation. There are three ways in which Windows Live services are offered: Windows Essentials applications, web services, and mobile servi...”
Windows Live Mail
 Microsoft Corporation
3% remove
Windows Live Mail is a free of charge email client from Microsoft. It is the successor to Outlook Express on Windows XP and Windows Mail on Windows Vista. The application is available for download via the Windows Essentials suite.

BehaviorsBehaviors

Shell open commands
  • snews
  • nntp
  • news
  • mailto
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Windows Live Mail' → C:\Program Files\Windows Live\Mail\wlmail.exe
Scheduled tasks
  • The job '{8E8A0A9E-6B3E-468D-ABF1-A2F245F9B403}' runs on registration in the path '\{8E8A0A9E-6B3E-468D-ABF1-A2F245F9B403}'
  • The task '{488930AF-2100-439C-8177-8B4FDA606467}' runs on registration in the path '\{488930AF-2100-439C-8177-8B4FDA606467}'
  • The job '{29F827DA-D5CA-4045-97E1-77B3129A1AB2}' runs on registration in the path '\{29F827DA-D5CA-4045-97E1-77B3129A1AB2}'
  • The task '{1A7601CE-752B-42A2-8129-BCAA54D19329}' runs on registration in the path '\{1A7601CE-752B-42A2-8129-BCAA54D19329}'
  • The task '{0687F5D5-BD6F-47E6-9E30-4241B8B5BD16}' runs on registration in the path '\{0687F5D5-BD6F-47E6-9E30-4241B8B5BD16}'
  • Entry path '\{CF71FA47-D432-4462-9A5E-8992622CB2A0}'
  • Entry path '\{9C677B34-88A5-43AC-8ADF-838CB5C8BC2E}'
Network connections
  • [TCP] 174.36.23.251-static.reverse.softlayer.com (174.36.23.251:80)
  • [TCP] 209.8.115.86:80
  • [TCP] imap.svc.telusplanet.net (199.185.220.247:143)
  • [UDP] listens on port 60209
  • [UDP] listens on port 53740
  • [UDP] listens on port 56597
  • [UDP] listens on port 50201
  • [UDP] listens on port 55795
  • [UDP] listens on port 56647
  • [UDP] listens on port 60501
  • [UDP] listens on port 61685
  • [UDP] listens on port 63753

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.02616871%
    0.028634%
    Kernel CPU:0.02053386%
    0.013761%
    User CPU:0.00563486%
    0.014873%
    Kernel CPU time:35,123,493 ms/min
    100,923,805ms/min
    CPU cycles:4,413,775/sec
    17,470,203/sec
    Context switches:114/sec
    284/sec
    Memory
    Private memory:176.23 MB
    21.59 MB
    Private (maximum):181.07 MB
    Private (minimum):86.04 MB
    Non-paged memory:176.23 MB
    21.59 MB
    Virtual memory:595.56 MB
    140.96 MB
    Virtual memory (peak):634.88 MB
    169.69 MB
    Working set:125.11 MB
    18.61 MB
    Working set (peak):203.1 MB
    37.95 MB
    Page faults:972,062/min
    2,039/min
    I/O
    I/O read transfer:151.42 KB/sec
    1.02 MB/min
    I/O read operations:18/sec
    343/min
    I/O write transfer:77.52 KB/sec
    274.99 KB/min
    I/O write operations:57/sec
    227/min
    I/O other transfer:11.55 KB/sec
    448.09 KB/min
    I/O other operations:208/sec
    1,671/min
    Resource allocations
    Threads:49
    12
    Handles:1421
    600
    GUI GDI count:518
    103
    GUI GDI peak:722
    142
    GUI USER count:217
    49
    GUI USER peak:268
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:64-bit
    Command lines:
    • "C:\Program Files\windows live\mail\wlmail.exe"
    • "C:\Program Files\windows live\mail\wlmail.exe" /mailurC:mailtC:?body=http%3a%2f%2fwww.blogtalkradio.com%2fwgag-radio%2f2012%2f12%2f28%2ftonight-on-the-don-nicoleone-show-etherium-gold%23.un0ggieeh2g.mailto&subject=tonight%20on%20the%20don%20nicoleone%20show%3a%20etherium%20gold%2012%2f27%20by%20don%20nicoleone%20%7c%20blog%20talk%20radio
    Owner:User
    Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

    ResourcesThreads

    Averages
     
    wlmail.exe (main module)
    Total CPU:0.08863587%
    0.272967%
    Kernel CPU:0.04961705%
    0.107585%
    User CPU:0.03901882%
    0.165382%
    CPU cycles:1,880,886/sec
    5,741,424/sec
    Context switches:2/sec
    79/sec
    Memory:100 KB
    1.16 MB
    mailcomm.dll (Windows Live Mail by Microsoft)
    Total CPU:0.08107506%
    Kernel CPU:0.07787586%
    User CPU:0.00319919%
    CPU cycles:1,744,036/sec
    Memory:728 KB
    MSMAIL.DLL
    Total CPU:0.04220692%
    Kernel CPU:0.00456946%
    User CPU:0.03763747%
    CPU cycles:1,061,581/sec
    Context switches:2/sec
    Memory:2.55 MB
    ntdll.dll
    Total CPU:0.01712227%
    Kernel CPU:0.00777847%
    User CPU:0.00934380%
    CPU cycles:537,625/sec
    Context switches:1/sec
    Memory:1.66 MB
    UXCore.dll
    Total CPU:0.00466176%
    Kernel CPU:0.00204355%
    User CPU:0.00261821%
    CPU cycles:119,217/sec
    Memory:2.4 MB
    wow64.dll (Win32 Emulation on NT64 by Microsoft)
    Total CPU:0.00263297%
    Kernel CPU:0.00004530%
    User CPU:0.00258767%
    CPU cycles:61,819/sec
    Memory:252 KB
    ESENT.dll
    Total CPU:0.00120788%
    Kernel CPU:0.00100398%
    User CPU:0.00020390%
    CPU cycles:24,044/sec
    Memory:1.64 MB
    mswsock.dll
    Total CPU:0.00071481%
    Kernel CPU:0.00050037%
    User CPU:0.00021444%
    CPU cycles:19,122/sec
    Memory:240 KB
    LivePlatform.dll
    Total CPU:0.00043322%
    Kernel CPU:0.00028881%
    User CPU:0.00014441%
    CPU cycles:48,040/sec
    Memory:1024 KB
    WINMM.dll
    Total CPU:0.00016720%
    Kernel CPU:0.00003715%
    User CPU:0.00013004%
    CPU cycles:5,370/sec
    Memory:200 KB
    MSVCR90.dll
    Total CPU:0.00015776%
    Kernel CPU:0.00001599%
    User CPU:0.00014177%
    CPU cycles:4,136/sec
    Memory:652 KB
    WININET.dll
    Total CPU:0.00015444%
    Kernel CPU:0.00009267%
    User CPU:0.00006178%
    CPU cycles:30,922/sec
    Memory:980 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 50.50%
    Microsoft Windows XP 25.50%
    Windows Vista Home Premium 9.50%
    Windows 7 Ultimate 5.50%
    Windows 8 Pro 4.00%
    Windows 7 Professional 3.00%
    Windows Vista Home Basic 2.00%

    Distribution by countryDistribution by country

    United States installs about 62.00% of Windows Live Mail.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Hewlett-Packard 30.37%
    Dell 23.04%
    Toshiba 20.94%
    Intel 4.19%
    ASUS 4.19%
    Gateway 4.19%
    Compaq 3.14%
    Acer 3.14%
    Samsung 2.09%
    Sahara 2.09%
    American Megatrends 1.57%
    Sony 1.05%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE