Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

15.0.4623.1000 0.29%
15.0.4623.1000 0.10%
15.0.4615.1000 1.05%
15.0.4615.1000 0.86%
15.0.4615.1000 0.29%
15.0.4551.1011 0.10%
15.0.4551.1004 0.19%
15.0.4551.1004 0.10%
15.0.4551.1004 0.10%
15.0.4535.1508 0.48%
15.0.4535.1006 0.48%
15.0.4535.1006 0.19%
15.0.4535.1004 0.19%
15.0.4517.1509 0.10%
15.0.4517.1509 0.10%
15.0.4517.1003 0.19%
15.0.4505.1510 0.57%
15.0.4505.1002 0.10%
15.0.4505.1002 0.19%
15.0.4505.1002 0.19%
15.0.4481.1508 1.05%
15.0.4481.1508 0.10%
15.0.4481.1003 0.95%
15.0.4454.1511 0.10%
15.0.4420.1017 0.10%
View more

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
CryptAcquireContextA, ImpersonateSelf, OpenThreadToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RevertToSelf, CredReadW, RegisterEventSourceA, OpenProcessToken, GetTokenInformation, ConvertSidToStringSidW, OpenSCManagerA, OpenServiceW, QueryServiceConfigW, CloseServiceHandle, RegQueryInfoKeyW, RegEnumKeyW, RegQueryValueW, RegDeleteKeyW, CryptGenRandom, RegQueryValueA, IsTextUnicode, RegEnumValueW, RegSetValueExW, RegEnumKeyExA, RegDeleteKeyA, RegEnumKeyA, GetUserNameA, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegCreateKeyExW, RegDeleteValueW, AllocateAndInitializeSid, FreeSid, RegOpenKeyExW, RegQueryValueExW, RegEnumKeyExW, CryptAcquireContextW, CryptGetProvParam, CryptReleaseContext, RegQueryInfoKeyA, RegEnumValueA, RegCreateKeyExA, RegSetValueExA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, StartTraceW, EnableTrace, StopTraceW, CredFree, UnregisterTraceGuids, TraceEvent, RegisterTraceGuidsA, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, CryptDestroyHash, CryptGetHashParam, CryptHashData, CryptCreateHash
credui.dll
CredUIConfirmCredentialsW, CredUIPromptForCredentialsW
gdi32.dll
GetBitmapBits, DeleteMetaFile, PlayEnhMetaFile, CreateEnhMetaFileA, CloseEnhMetaFile, DeleteEnhMetaFile, StartDocW, CreateDCW, CreateICW, ExtCreatePen, EndDoc, EndPage, StartPage, StartDocA, GetViewportExtEx, GetWindowExtEx, GetViewportOrgEx, SetMetaFileBitsEx, GetTextMetricsW, GetClipRgn, GetRgnBox, SetMapMode, DPtoLP, GdiFlush, FillRgn, CreateDIBSection, EnumFontFamiliesExA, CreateICA, GetClipBox, EnumFontFamiliesExW, GetTextAlign, Polygon, SetViewportOrgEx, IntersectClipRect, GetPaletteEntries, CreatePatternBrush, CreateDCA, SelectClipRgn, Escape, RectVisible, PtVisible, GetPixel, GetBitmapDimensionEx, SetBitmapDimensionEx, StretchDIBits, GetDIBits, SetDIBits, SetBrushOrgEx, GetObjectType, LPtoDP, GetCurrentObject, PatBlt, GetBkMode, CombineRgn, CreateRectRgnIndirect, CreateRectRgn, GetTextExtentPointA, TextOutA, GetBkColor, SetStretchBltMode, GetDIBColorTable, CreatePalette, CreateCompatibleBitmap, StretchBlt, GetTextExtentPoint32A, SaveDC, RestoreDC, GetTextColor, GetTextFaceW, Polyline, ExtTextOutW, GetTextMetricsA, GetTextExtentPoint32W, SetWindowOrgEx, SetTextAlign, ExcludeClipRect, SetDCPenColor, CreateBrushIndirect, GetStockObject, Rectangle, GetObjectA, DeleteDC, BitBlt, CreateBitmap, CreateCompatibleDC, GetDeviceCaps, CreatePen, MoveToEx, LineTo, GetObjectW, CreateFontIndirectW, SelectPalette, RealizePalette, SetBkMode, EnumMetaFile, GetMetaFileBitsEx, CloseMetaFile, CreateMetaFileA, SetLayout, RoundRect, GetTextExtentPointW, GetTextExtentExPointW, GetWindowOrgEx, RectInRegion, CreateRoundRectRgn, FrameRgn, CreateHatchBrush, CreateDIBitmap, CopyMetaFileA, TextOutW, SetPolyFillMode, SetROP2, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowExtEx, SetAbortProc, ScaleWindowExtEx, GetCurrentPositionEx, PlayMetaFileRecord, PlayMetaFile, GetMapMode, GetNearestColor, GetPolyFillMode, GetROP2, GetStretchBltMode, GetTextFaceA, GetCharWidthA, UnrealizeObject, DeleteObject, SelectObject, ExtTextOutA, SetBkColor, CreateSolidBrush, CreateFontIndirectA, SetTextColor, GetLayout, OffsetRgn, Ellipse
imm32.dll
ImmNotifyIME, ImmReleaseContext, ImmGetContext
kernel32.dll
DllMain
msvcp90.dll
DllMain
msvcr80.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
ReadClassStm, DoDragDrop, OleGetClipboard, OleDuplicateData, CoRegisterMessageFilter, OleFlushClipboard, OleIsCurrentClipboard, StringFromIID, CoFileTimeNow, OleCreateDefaultHandler, CLSIDFromString, CreateDataAdviseHolder, CreateOleAdviseHolder, CoRevokeClassObject, CoRegisterClassObject, GetRunningObjectTable, WriteClassStm, ProgIDFromCLSID, OleCreateLink, OleLoad, ReadFmtUserTypeStg, OleConvertOLESTREAMToIStorage, OleConvertIStorageToOLESTREAM, OleMetafilePictFromIconAndLabel, OleRegGetUserType, OleRegEnumVerbs, CreateFileMoniker, BindMoniker, StgIsStorageFile, ReadClassStg, CoGetMalloc, CreateDataCache, IIDFromString, CoAllowSetForegroundWindow, CoGetInterfaceAndReleaseStream, IsAccelerator, CoCreateInstance, GetClassFile, OleSetClipboard, StgOpenStorageOnILockBytes, CoFreeUnusedLibraries, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, RevokeDragDrop, RegisterDragDrop, CoLockObjectExternal, CoCreateGuid, StringFromGUID2, OleInitialize, OleUninitialize, OleRun, PropVariantClear, CLSIDFromProgID, CoDisconnectObject, OleCreateEmbeddingHelper, CreateBindCtx, StringFromCLSID, CoSuspendClassObjects, GetHGlobalFromStream, ReleaseStgMedium, CoInitialize, CoUninitialize, OleSetMenuDescriptor, CoTaskMemRealloc, CreateStreamOnHGlobal, CoTaskMemAlloc, CoTaskMemFree, OleDraw, WriteClassStg, WriteFmtUserTypeStg, CoGetClassObject, CoInitializeEx
user32.dll
DllMain
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
Export table
_GetAllocCounters@0
CleanupAddressComponents
CleanupAddressComponents@4
CleanupNameComponents
CleanupNameComponents@4
DllCanUnloadNow
DllGetClassObject
dwIsLoggingEnabled
dwIsLoggingEnabled@0
FAllowStoreToSend
FAllowStoreToSend@0
FDisplayBucketedString
FDisplayBucketedString@16
FDisplayCountedBucketedString
FDisplayCountedBucketedString@24
FEnableAMapProgress
FEnableAMapProgress@4
FFolderSupportsUnicode
FFolderSupportsUnicode@4
FIsOutlookBooting
FIsOutlookBooting@0
FIsSpecialFolderName
FIsSpecialFolderName@8
FOutlookIsBooting
FOutlookIsBooting@0
FOutlookIsDeepSyncing
FOutlookIsDeepSyncing@0
FOutlookIsResuming
FOutlookIsResuming@0
FPersonaStatusOn
FPersonaStatusOn@0
FreeWSRetryState
FreeWSRetryState@4
FStoreSupportsUnicode
FStoreSupportsUnicode@4
GetAssociatedMessageForAcct
GetAssociatedMessageForAcct@8
GetAssociatedMessageForFolder
GetAssociatedMessageForFolder@24
GetCentralObject@8
GetCurrentDate@4
GetFBPublishingInterval
GetFBPublishingInterval@12
GetFBPublishingInterval@8
GetMsoInst
GetMsoInst@4
GetOutlookSafeModeState
GetOutlookSafeModeState@0
HrAttachModelessDialogFrame@8
HrClearViewList
HrClearViewList@0
HrCollectSectionFDMTableData
HrCollectSectionFDMTableData@8
HrCreateOsmSyncShareTask
HrCreateOsmSyncShareTask@16
HrDisplayFolderPickerForOutlookToday@0
HrDoOneOffDialog@12
HrEnableFBPublishing
HrEnableFBPublishing@4
HrEnableFBPublishing@8
HrEnsureIMManager
HrEnsureIMManager@4
HrExternalSyncAccount
HrExternalSyncAccount@16
HrFindAContact@4
HrFlushSpamFilterLists
HrFlushSpamFilterLists@4
HrGetAMapProgressObject
HrGetAMapProgressObject@8
HrGetCacheSetupProgressObject
HrGetCacheSetupProgressObject@4
HrGetFileAsString
HrGetFileAsString@24
HrGetGlobalOfflineState
HrGetGlobalOfflineState@4
HrGetOABURL
HrGetOABURL@20
HrGetOABURL@24
HrGetRemoveOnNuke
HrGetRemoveOnNuke@12
HrGetRulesMachineID
HrGetRulesMachineID@12
HrGetSharedBackgroundSession
HrGetSharedBackgroundSession@4
HrGetTCRebuildProgressObject
HrGetTCRebuildProgressObject@8
HrImportRules
HrImportRules@20
HrLaunchFBPublishingDialog
HrLaunchFBPublishingDialog@4
HrMessagesMovedBySpam
HrMessagesMovedBySpam@8
HrMsgDownloadedNotification
HrMsgDownloadedNotification@4
HrNukeSpamMessage
HrNukeSpamMessage@28
HrParseFullAddress
HrParseFullAddress@8
HrParseFullName
HrParseFullName@8
HrPostSubmitProcessing
HrPostSubmitProcessing@4
HrProcessConvActionForSentItem
HrProcessConvActionForSentItem@16
HrRebuildFullAddress
HrRebuildFullAddress@8
HrRebuildFullName
HrRebuildFullName@8
HrRegisterForms
HrRegisterForms@8
HrSendAllPendingMail
HrSendAllPendingMail@0
HrSetOutlookSpecialFolderEntryID
HrShowPubCalWizard
HrShowPubCalWizard@4
HrShowRenFFDialog2
HrShowRenFFDialog2@40
HrWaitForTransports
HrWaitForTransports@0
MAPIMHeapAlloc
MAPIMHeapAlloc@4
MAPIMHeapCreate
MAPIMHeapCreate@16
MAPIMHeapDestroy
MAPIMHeapDestroy@0
MAPIMHeapFree
MAPIMHeapFree@4
MAPIMHeapReAlloc
MAPIMHeapReAlloc@8
MAPIMHeapSize
MAPIMHeapSize@4
OlkFUseUSHeaders
OlkFUseUSHeaders@4
OlkGetCharSet
OlkGetCharSet@0
OlkGetCodepageUI
OlkGetCodepageUI@0
OlkGetResourceHandle
OlkGetResourceHandle@0
OlkGetUIlangID
OlkGetUIlangID@0
OlkLoadPrivateMAPI
OlkLoadPrivateMAPI@4
OutlookSyncEventOccurred
OutlookSyncEventOccurred@4
OutlookSyncEventOccurredEx
OutlookSyncEventOccurredEx@8
PushSavedKeyToCicero
PushSavedKeyToCicero@0
RefreshOutlookETWLoggingState
RefreshOutlookETWLoggingState@0
ReleaseResObjStreams
ReleaseResObjStreams@4
ShowFailedOSRepairDlg
ShowFailedOSRepairDlg@0
ShowOSRepairDlg
ShowOSRepairDlg@0
SmoothScroll
SmoothScroll@4
StdCoCreateInstance@20
UpdateContactTracker
UpdateContactTracker@0
XGetExplorerStoragePath@16

Outlook.exe

Microsoft Office Outlook by Microsoft Corporation (Signed)

Remove Outlook.exe
Version:   14.0.6117.5001
MD5:   391dda05d6299f09ff41b4339fb963ec
SHA1:   e5af97cb09a478da34dbeeb4be5454906d8faa0c
SHA256:   2c7ba34da84834dc98225cfcbbc2a3c45d52fc8f30ee437547f973fb85983aa3

What is Outlook.exe?

Microsoft Outlook is a personal information manager that can be used as a stand-alone application, or can work with Microsoft Exchange Server and Microsoft SharePoint Server for multiple users in an organization, such as shared mailboxes and calendars, Exchange public folders, SharePoint lists and meeting schedules.

Overview

outlook.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including Microsoft Office Professional Plus 2010 published by Microsoft Corporation, Microsoft Office Standard 2010 from Microsoft Corporation and Microsoft Office Standard 2010 by Microsoft Corporation.

DetailsDetails

File name:outlook.exe
Publisher:Microsoft Corporation
Product name:Microsoft Office Outlook
Typical file path:C:\Program Files\microsoft office\office12\outlook.exe
File version:14.0.6117.5001
Size:15.22 MB (15,963,936 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Friday, January 11, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Microsoft Office Professional Plus 2010
 Microsoft Corporation
1% remove
The main features of Office 2010 include the backstage file menu, new collaboration tools, a customizable ribbon, protected view and a navigation panel. Microsoft Office is an office suite of desktop applications, servers and services for the Microsoft Windows and Mac OS X operating systems.
Microsoft Office Standard 2010
 Microsoft Corporation
9% remove
“Microsoft Office Standard 2010 goes everywhere you do so you can manage business from a PC, phone, or browser. The Conversation View, Clean Up, and Ignore features in Outlook 2010 remove duplicate information and act like a "mute button" for your inbox. Excel 2010 provides tools for improved data visualization, which can give you key insights into business processes and tailor messaging and products to best meet customer needs. OneNote ...”
Microsoft Office Home and Business 2010
 Microsoft Corporation
6% remove
“Microsoft Office Home and Business 2010 brings together the roles of managing a business, running a household and helping with homework. Get the benefits of all the programs you need to be productive including Microsoft Outlook 2010--so you can tackle your busy day efficiently with powerful email, scheduling and social networking tools to keep your life and work in sync.”
Microsoft Visio Premium 2010
 Microsoft Corporation
1% remove
“Microsoft Visio Premium 2010 takes diagramming to a bold new level with dynamic, data-driven visualization tools and templates, powerful process-management features, and advanced sharing capabilities through the Web. Bring the big-picture and real-time data from multiple sources, including Microsoft Excel 2010 and Microsoft SQL Server, together in one powerful diagram with vibrant graphics such as icons, colors, and data bars. Manage yo...”
Microsoft Office Home and Student 2010
 Microsoft Corporation
11% remove
Microsoft Office Home and Student 2010 is an office suite of desktop applications, servers and services. The Home and Student only contain Word, Excel, PowerPoint and OneNote. Office 2010 marks the debut of free online versions of Word, Excel, PowerPoint, and OneNote, which work in the web browsers Internet Explorer, Firefox, Chrome and Safari, but not Opera. Office 2010 is more "role-based" than previous versions. There are features ta...
Microsoft Office Professional 2010
 Microsoft Corporation
3% remove
“Organize projects, manage finances and build a better way to do business with tools from Microsoft Office Professional 2010. Exchange ideas with customers and business partners remotely with Web Apps--it's another way you can stay connected to your business wherever you are. Plus, build professional databases and marketing materials with dynamic do-it-yourself tools in Access 2010 and Publisher 2010 available ONLY with Office Profession...”
Microsoft SharePoint Designer 2010
 Microsoft Corporation
2% remove
“Using SharePoint Designer, you can rapidly create SharePoint solutions in response to business needs. Compose no-code solutions that encompass a variety of common scenarios, from collaborative sites and web publishing to Line-Of-Business data integration, business intelligence solutions, and human workflows, all leveraging the building blocks available in SharePoint in an easy to use environment. Developers can use SharePoint Designer 2...”

BehaviorsBehaviors

Shell open commands
  • vcffile
  • msgfile
  • mailto
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Programas\Microsoft Office\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
  • Firewall exception for 'C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE'
Scheduled tasks
  • The task '{D755A752-2736-437A-8856-96F70114AD2C}' runs on registration in the path '\{D755A752-2736-437A-8856-96F70114AD2C}'
  • The task '{4F18088F-79E8-459D-B915-FC54A9DCB3D9}' runs on registration in the path '\{4F18088F-79E8-459D-B915-FC54A9DCB3D9}'
  • Entry path '\{F75C2CB4-A214-429C-B241-7D78CF1DAC07}'
  • Entry path '\{50C269B6-78D9-496E-BF6A-08192DACD341}'
  • Entry path '\{4D2A71B1-1939-4C82-A772-2076D77AB91F}'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Microsoft Office Outlook' → C:\PROGRAM FILES (X86)\MICROSOFT OFFICE\Office12\OUTLOOK.EXE
Network connections
Access through an approved Windows firewall exception
  • [TCP] exchange.simplyms.com (88.151.129.12:443)
  • [UDP] listens on port 52554

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00010974%
    0.028634%
    Kernel CPU:0.00008268%
    0.013761%
    User CPU:0.00002706%
    0.014873%
    Kernel CPU time:402,389 ms/min
    100,923,805ms/min
    Memory
    Private memory:177.93 MB
    21.59 MB
    Private (maximum):234.38 MB
    Private (minimum):110.23 MB
    Non-paged memory:177.93 MB
    21.59 MB
    Virtual memory:776.1 MB
    140.96 MB
    Virtual memory (peak):830.64 MB
    169.69 MB
    Working set:215.09 MB
    18.61 MB
    Working set (peak):236.34 MB
    37.95 MB
    Resource allocations
    Threads:40
    12
    Handles:6124
    600
    GUI GDI count:1441
    103
    GUI GDI peak:1625
    142
    GUI USER count:1788
    49
    GUI USER peak:2131
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:32-bit
    Command line:"C:\Program Files\microsoft office\office14\outlook.exe"
    Owner:User
    Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

    ResourcesThreads

    Averages
     
    OUTLOOK.EXE (main module)
    Total CPU:0.07441784%
    0.272967%
    Kernel CPU:0.02489016%
    0.107585%
    User CPU:0.04952769%
    0.165382%
    CPU cycles:9,532,312/sec
    5,741,424/sec
    Context switches:115/sec
    79/sec
    Memory:15.23 MB
    1.16 MB
    MSPST32.DLL
    Total CPU:0.03107293%
    Kernel CPU:0.03024981%
    User CPU:0.00082312%
    CPU cycles:1,193,858/sec
    Context switches:4/sec
    Memory:1.23 MB
    mswsock.dll
    Total CPU:0.00635119%
    Kernel CPU:0.00000000%
    User CPU:0.00635119%
    CPU cycles:13,007/sec
    Memory:240 KB
    mso.dll
    Total CPU:0.00338469%
    Kernel CPU:0.00023509%
    User CPU:0.00314959%
    CPU cycles:186,153/sec
    Memory:17.77 MB
    wwlib.dll
    Total CPU:0.00128848%
    Kernel CPU:0.00007990%
    User CPU:0.00120858%
    CPU cycles:27,894/sec
    Memory:18.5 MB
    ntdll.dll
    Total CPU:0.00104423%
    Kernel CPU:0.00044441%
    User CPU:0.00059983%
    CPU cycles:88,412/sec
    Memory:1.23 MB
    msvcrt.dll
    Total CPU:0.00028943%
    Kernel CPU:0.00007319%
    User CPU:0.00021624%
    CPU cycles:5,752/sec
    Memory:688 KB
    ole32.dll
    Total CPU:0.00021274%
    Kernel CPU:0.00017950%
    User CPU:0.00003324%
    CPU cycles:9,096/sec
    Memory:1.36 MB
    WININET.dll
    Total CPU:0.00008649%
    Kernel CPU:0.00004657%
    User CPU:0.00003992%
    CPU cycles:24,944/sec
    Memory:1.11 MB
    WINMM.dll
    Total CPU:0.00001331%
    Kernel CPU:0.00001331%
    User CPU:0.00000000%
    CPU cycles:416/sec
    Memory:200 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 22.50%
    Microsoft Windows XP 19.50%
    Windows 7 Ultimate 18.50%
    Windows 8.1 10.50%
    Windows 8.1 Pro 6.00%
    Windows 7 Professional 6.00%
    Windows 8 Pro 5.00%
    Windows 8 4.00%
    Windows 8.1 Single Language 2.00%
    Windows Vista Home Premium 1.50%
    Windows 8 Single Language 1.00%
    Windows 8 Enterprise 1.00%
    Windows 8.1 Pro Preview 1.00%
    Windows 7 Home Basic 1.00%
    Windows 8.1 Enterprise Evaluation 0.50%

    Distribution by countryDistribution by country

    United States installs about 27.41% of Microsoft Office Outlook.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 16.36%
    ASUS 14.13%
    Hewlett-Packard 13.75%
    Lenovo 12.64%
    Toshiba 9.67%
    Compaq 8.18%
    Acer 7.43%
    Sony 4.46%
    Intel 3.72%
    American Megatrends 3.35%
    GIGABYTE 2.97%
    Sahara 1.86%
    Samsung 1.12%
    Alienware 0.37%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE