wlrmdr.exe
by Microsoft
Operating System
Summary
Windows Live Reminder - notification and reminder process for Windows Live services.
wlrmdr.exe is the 550th most commonly executed Windows program in EchoTrail's dataset, observed 9,389 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by winlogon.exe.
550th
most commonly executed Windows program
9,389
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 2fda95aafb2e9284c730bf912b93f60a75b151941adc14445ed1e056140325b124.57%
- d84548fc392a38ae14b5747c94c59b7904f0311c4d755a196b9fbccc5f71433813.66%
- 45b8c7ae8c3ea35aa2fabe4655b6cc8f91b369c19bd9dbea247e56ce411fbe4c11.58%
- afd7a491842a8c8685d6b07a7ab915c3dcf9b6c157485c143ed0d0ec81c71c5810.54%
- 6b695ceb635f11d33ac0e4f1481de11eb31e03027a9a40f0a969de12b7c354589.35%
- 60e3c4f341ad8575cbc9c86d9041786d9b3b116c1cfa418283fc46bf15302d627.4%
- 876e04f2c6f953c80edf173dfb2eb950257aabe5603abc2ea43eac0229a553a35.17%
- 580e19f512321b437f82de12c09641d8572fd3d065d5c7faeafc13cfce4fc3fe4.53%
- b43fc043a61bdbcf290929666a62959c8ad2c8c121c7a3f36436d61bbd011c9d2.6%
- c27ccb3657d83e9e0cb329807c1ab66d02e49a90230ef711d8348562b6f2486d2.54%
Process Ancestry
Top Grandparents
- smss.exe99.68%
- nvwmi64.exe0.16%
- fontdrvhost.exe0.05%
- nvvsvc.exe0.05%
- WUDFHost.exe0.05%
Top Parents
- winlogon.exe97.38%
- smss.exe0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about wlrmdr.exe
Rocky answers questions about wlrmdr.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.