HxMail.exe
Summary
Windows Mail immersive app process
HxMail.exe is the 2711th most commonly executed Windows program in EchoTrail's dataset, observed 133 times across enterprise environments. It typically runs from C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8218.40507.0_x64__8wekyb3d8bbwe and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8218.40507.0_x64__8wekyb3d8bbwe82.71%
- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8126.42377.0_x64__8wekyb3d8bbwe11.28%
- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe3.01%
- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8008.42001.0_x64__8wekyb3d8bbwe1.5%
- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8119.42377.0_x64__8wekyb3d8bbwe1.5%
Top Hashes (SHA256)
- f5d832dac201495ce0ae92bf6d51bd3fa64bc6094be108a8b5de5b98ae3ab38482.71%
- eb3ec2fe2680bd608c411fa55945a66b8cb943c9a35fc26107bf331001b0b62311.28%
- d3b6f3b77032a8ced84adcef4831ab61f4f75e4bc0e88dcca71a3c67117ec1d53.01%
- 40d24194c29291c99ccac1ad1403c0632521d9ea4f3ba99d61271a39e968ccf91.5%
- 5a9a7d9a875e843b1dacd736992fee82de65e812288312c34cd52ff28d7954d21.5%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about HxMail.exe
Rocky answers questions about HxMail.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.