Outlook.exe
Microsoft Office Outlook by Microsoft Corporation (Signed)
| Version: | 14.0.6131.5000 |
| MD5: | 3073bff2de45bc5b5e6eda3deb81c3db |
| SHA1: | 9086c7b8efcff08713f9ee9e3e45345c26919904 |
| SHA256: | 6b51ec3d301389977e25ed2dcc0a9071f6460c0a020a38cc2c55f06624782eff |
What is Outlook.exe?
Microsoft Outlook is a personal information manager that can be used as a stand-alone application, or can work with Microsoft Exchange Server and Microsoft SharePoint Server for multiple users in an organization, such as shared mailboxes and calendars, Exchange public folders, SharePoint lists and meeting schedules.
Overview
outlook.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program Microsoft Office Personal 2010 published by Microsoft Corporation. The file is digitally signed by Microsoft Corporation.
Details
| File name: | outlook.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft Office Outlook |
| Typical file path: | C:\Program Files\microsoft office\office12\outlook.exe |
| File version: | 14.0.6131.5000 |
| Size: | 15.24 MB (15,976,512 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Friday, January 11, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Behaviors
Shell open commands
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Programas\Microsoft Office\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
- Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
Scheduled tasks
- The task '{D755A752-2736-437A-8856-96F70114AD2C}' runs on registration in the path '\{D755A752-2736-437A-8856-96F70114AD2C}'
- The task '{4F18088F-79E8-459D-B915-FC54A9DCB3D9}' runs on registration in the path '\{4F18088F-79E8-459D-B915-FC54A9DCB3D9}'
- Entry path '\{F75C2CB4-A214-429C-B241-7D78CF1DAC07}'
- Entry path '\{50C269B6-78D9-496E-BF6A-08192DACD341}'
- Entry path '\{4D2A71B1-1939-4C82-A772-2076D77AB91F}'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Microsoft Office Outlook' → C:\PROGRAM FILES (X86)\MICROSOFT OFFICE\Office12\OUTLOOK.EXE
Network connections
Access through an approved Windows firewall exception
[TCP] wi-in-f109.1e100.net (173.194.67.109:143)
[TCP] dfw06s27-in-f3.1e100.net (173.194.46.3:80)
[TCP] host-134-249.dc74.com (174.46.134.249:443)
[TCP] serverdata.net (64.78.56.105:443)
[UDP] listens on port 58289
[UDP] listens on port 61401
[UDP] listens on port 58758
[UDP] listens on port 64754
[UDP] listens on port 27171
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.07654339% | |
| Kernel CPU: | 0.03265169% | |
| User CPU: | 0.04389170% | |
| Kernel CPU time: | 16,743,428 ms/min | |
| CPU cycles: | 8,739,334/sec | |
| Context switches: | 373/sec | |
| Memory |
| Private memory: | 110.3 MB | |
| Private (maximum): | 169.04 MB | |
| Private (minimum): | 52.11 MB | |
| Non-paged memory: | 110.3 MB | |
| Virtual memory: | 649.24 MB | |
| Virtual memory (peak): | 688.05 MB | |
| Working set: | 143.17 MB | |
| Working set (peak): | 172.08 MB | |
| Page faults: | 2,478,733/min | |
| I/O |
| I/O read transfer: | 3.12 MB/sec | |
| I/O read operations: | 6,023/sec | |
| I/O write transfer: | 286.76 KB/sec | |
| I/O write operations: | 221/sec | |
| I/O other transfer: | 67.33 KB/sec | |
| I/O other operations: | 1,618/sec | |
| Resource allocations |
| Threads: | 38 | |
| Handles: | 6470 | |
| GUI GDI count: | 649 | |
| GUI GDI peak: | 636 | |
| GUI USER count: | 406 | |
| GUI USER peak: | 461 | |
Process properties
Threads
Averages
| OUTLOOK.EXE (main module) |
| Total CPU: | 0.08699562% | |
| Kernel CPU: | 0.03695874% | |
| User CPU: | 0.05003687% | |
| CPU cycles: | 3,130,723/sec | |
| Context switches: | 28/sec | |
| Memory: | 15.25 MB | |
| MSPST32.DLL |
| Total CPU: | 0.04615577% | |
| Kernel CPU: | 0.04498263% | |
| User CPU: | 0.00117314% | |
| CPU cycles: | 1,654,440/sec | |
| Context switches: | 3/sec | |
| Memory: | 1.23 MB | |
| ntdll.dll |
| Total CPU: | 0.04224030% | |
| Kernel CPU: | 0.02458083% | |
| User CPU: | 0.01765947% | |
| CPU cycles: | 1,320,216/sec | |
| Context switches: | 4/sec | |
| Memory: | 1.23 MB | |
| mswsock.dll |
| Total CPU: | 0.03614458% | |
| Kernel CPU: | 0.02891567% | |
| User CPU: | 0.00722892% | |
| CPU cycles: | 967,422/sec | |
| Memory: | 240 KB | |
| mso.dll |
| Total CPU: | 0.03366562% | |
| Kernel CPU: | 0.01548655% | |
| User CPU: | 0.01817907% | |
| CPU cycles: | 1,177,169/sec | |
| Context switches: | 2/sec | |
| Memory: | 17.77 MB | |
| WinHttp.dll |
| Total CPU: | 0.00070699% | |
| Kernel CPU: | 0.00031422% | |
| User CPU: | 0.00039277% | |
| Memory: | 356 KB | |
| WINMM.DLL |
| Total CPU: | 0.00054948% | |
| Kernel CPU: | 0.00052331% | |
| User CPU: | 0.00002617% | |
| Memory: | 180 KB | |
| wwlib.dll |
| Total CPU: | 0.00041099% | |
| Kernel CPU: | 0.00004057% | |
| User CPU: | 0.00037042% | |
| CPU cycles: | 3,128/sec | |
| Memory: | 18.5 MB | |
| RPCRT4.dll |
| Total CPU: | 0.00026165% | |
| Kernel CPU: | 0.00002617% | |
| User CPU: | 0.00023549% | |
| Memory: | 588 KB | |
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.00020385% | |
| Kernel CPU: | 0.00015304% | |
| User CPU: | 0.00005081% | |
| CPU cycles: | 6,572/sec | |
| Memory: | 252 KB | |
| MSORES.DLL |
| Total CPU: | 0.00010467% | |
| Kernel CPU: | 0.00007850% | |
| User CPU: | 0.00002617% | |
| Memory: | 69.16 MB | |
| ole32.dll |
| Total CPU: | 0.00007376% | |
| Kernel CPU: | 0.00004974% | |
| User CPU: | 0.00002402% | |
| CPU cycles: | 3,246/sec | |
| Memory: | 1.36 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
22.50% |
|
| Microsoft Windows XP |
19.50% |
|
| Windows 7 Ultimate |
18.50% |
|
| Windows 8.1 |
10.50% |
|
| Windows 8.1 Pro |
6.00% |
|
| Windows 7 Professional |
6.00% |
|
| Windows 8 Pro |
5.00% |
|
| Windows 8 |
4.00% |
|
| Windows 8.1 Single Language |
2.00% |
|
| Windows Vista Home Premium |
1.50% |
|
| Windows 8 Single Language |
1.00% |
|
| Windows 8 Enterprise |
1.00% |
|
| Windows 8.1 Pro Preview |
1.00% |
|
| Windows 7 Home Basic |
1.00% |
|
| Windows 8.1 Enterprise Evaluation |
0.50% |
|
Distribution by country
United States installs about 27.41% of Microsoft Office Outlook.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
16.36% |
|
| ASUS |
14.13% |
|
| Hewlett-Packard |
13.75% |
|
| Lenovo |
12.64% |
|
| Toshiba |
9.67% |
|
| Compaq |
8.18% |
|
| Acer |
7.43% |
|
| Sony |
4.46% |
|
| Intel |
3.72% |
|
| American Megatrends |
3.35% |
|
| GIGABYTE |
2.97% |
|
| Sahara |
1.86% |
|
| Samsung |
1.12% |
|
| Alienware |
0.37% |
|
