Should I block it?

40%
40% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

6, 6, 0, 5267 7.14%
6, 3, 9, 5260 7.14%
6, 3, 9, 5254 7.14%
6, 3, 9, 5245 7.14%
6, 2, 9, 5229 64.29%
6, 2, 9, 5203 7.14%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegLoadKeyW, RegUnLoadKeyW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges
gdiplus.dll
GdiplusShutdown, GdiplusStartup
imutilsu.dll
DllMain
kernel32.dll
GetCommandLineW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, LeaveCriticalSection, EnterCriticalSection, GetModuleFileNameW, SetFileAttributesW, GetTempPathW, CreateDirectoryW, MoveFileW, GetCurrentProcessId, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, DeleteFileW, GetCurrentProcess, CloseHandle, CopyFileW, GetLastError, DeleteCriticalSection, InitializeCriticalSection, RaiseException, lstrlenW, GetCurrentThreadId, LocalFree, LocalAlloc, InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, GetModuleHandleW
mfc80u.dll
DllMain
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoRegisterClassObject, CoTaskMemFree, CoCreateInstance, CoRevokeClassObject, PropVariantClear, ProgIDFromCLSID, StringFromCLSID, CoTaskMemRealloc, CoTaskMemAlloc, OleUninitialize, StringFromGUID2
shell32.dll
ShellExecuteW
shlwapi.dll
SHStrDupW
user32.dll
GetKeyState, GetClassNameW, PostMessageW, FindWindowW, DestroyWindow, GetParent, IsChild, SendMessageW, CharNextW, RegisterWindowMessageW, IsWindow, MessageBoxW, SetCursor, UnregisterClassA, SetFocus, LoadAcceleratorsW, GetActiveWindow, TranslateAcceleratorW, WindowFromPoint, GetWindowThreadProcessId, GetFocus, GetDesktopWindow

INCMAIL.exe

IncrediMail by Perion Network Ltd. (Signed)

Remove INCMAIL.exe
Version:   6, 6, 0, 5267
MD5:   f8d952c5d4839c03cbdd2933fe411d7b
SHA1:   4d1c29ebd5c0a6108c99d9cd54917b354cc940d4
SHA256:   ff11bbc559b8f6a1b76aa4b0b0eb20691cf148ced9d88451a71c0f2624108136

What is INCMAIL.exe?

IncrediMail Application - IncrediMail is an advertising-supported email client that offers the ability to add e-mail backgrounds, emoticons, ecards, sounds, animations, and 3D effects from directly within the client. It is compatible with Hotmail, Gmail, Yahoo! and AOL, and supports POP3 and IMAP mail protocols. The program also includes animated notifications, advanced message filtering, an automatic spell-checker, and font style preferences.

About INCMAIL.exe (from Perion Network Ltd.)

“Upgrade your online experience by searching the Internet from our convenient toolbar. In addition, you can listen to radio stations worldwide, access leading news and weather sites, and enjoy IncrediM”

DetailsDetails

File name:incmail.exe
Publisher:IncrediMail, Ltd.
Product name:IncrediMail
Description:IncrediMail Application
Typical file path:C:\Program Files\incredimail\bin\incmail.exe
File version:6, 6, 0, 5267
Size:434.41 KB (444,840 bytes)
Build date:6/18/2013 8:58 AM
Certificate
Issued to:Perion Network Ltd.
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'IncrediMail' → C:\Program Files\IncrediMail\bin\IncMail.exe /c
Network connections
  • [UDP] listens on port 1449

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00012496%
    0.028634%
    Kernel CPU:0.00002846%
    0.013761%
    User CPU:0.00009650%
    0.014873%
    Kernel CPU time:469,297 ms/min
    100,923,805ms/min
    Context switches:627/sec
    284/sec
    Memory
    Private memory:60.51 MB
    21.59 MB
    Private (maximum):27.01 MB
    Private (minimum):3.29 MB
    Non-paged memory:60.51 MB
    21.59 MB
    Virtual memory:189.03 MB
    140.96 MB
    Virtual memory (peak):198.98 MB
    169.69 MB
    Working set:17.04 MB
    18.61 MB
    Working set (peak):69.22 MB
    37.95 MB
    Page faults:6,218,854/min
    2,039/min
    I/O
    I/O read transfer:187.84 KB/sec
    1.02 MB/min
    I/O read operations:50/sec
    343/min
    I/O write transfer:171 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:493.52 KB/sec
    448.09 KB/min
    I/O other operations:80,518/sec
    1,671/min
    Resource allocations
    Threads:17
    12
    Handles:688
    600
    GUI GDI count:655
    103
    GUI USER count:236
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\incredimail\bin\incmail.exe" /c
    Owner:User
    Parent process:imapp.exe (IncrediMail by Perion Network Ltd.)

    ResourcesThreads

    Averages
     
    IncMail.exe (main module)
    Total CPU:1.02876441%
    0.272967%
    Kernel CPU:0.67250796%
    0.107585%
    User CPU:0.35625645%
    0.165382%
    Context switches:618/sec
    79/sec
    Memory:428 KB
    1.16 MB
    flash32_11_8_800_94.ocx (Shockwave Flash by Adobe Systems)
    Total CPU:0.00088912%
    Kernel CPU:0.00043489%
    User CPU:0.00045422%
    Context switches:4/sec
    Memory:16.46 MB
    ntdll.dll
    Total CPU:0.00030932%
    Kernel CPU:0.00005800%
    User CPU:0.00025132%
    Memory:712 KB
    imfeatru.dll (IncrediFeaturesRes Dynamic Link Library by IncrediMail, Ltd)
    Total CPU:0.00007731%
    Kernel CPU:0.00005154%
    User CPU:0.00002577%
    Memory:668 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate 64.29%
    Windows 7 Home Premium 14.29%
    Windows Se7en Titan 7.14%
    Microsoft Windows XP 7.14%
    Windows Vista Home Premium 7.14%

    Distribution by countryDistribution by country

    Australia installs about 20.00% of IncrediMail.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 50.00%
    Hewlett-Packard 25.00%
    Acer 25.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE