VersionsVersions

6.3.9600.17031 (winblue_gdr.140221-1952) 3.58%
6.3.9600.16384 (winblue_rtm.130821-1623) 1.02%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.02%
6.3.9600.16384 (winblue_rtm.130821-1623) 1.20%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.02%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.08%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.30%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.02%
6.2.9200.16384 (win8_rtm.120725-1247) 4.65%
6.2.9200.16384 (win8_rtm.120725-1247) 0.21%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.07%
6.1.7600.16385 (win7_rtm.090713-1255) 0.91%
6.1.7600.16385 (win7_rtm.090713-1255) 2.31%
6.1.7600.16385 (win7_rtm.090713-1255) 51.59%
6.1.7600.16385 (win7_rtm.090713-1255) 2.46%
6.1.7600.16385 (win7_rtm.090713-1255) 2.97%
6.1.7600.16385 (win7_rtm.090713-1255) 4.69%
6.1.7600.16385 (win7_rtm.090713-1255) 14.54%
6.1.7600.16385 (win7_rtm.090713-1255) 0.02%
6.00.2900.5634 (xpsp_sp3_qfe.080703-1303) 0.02%
6.00.2900.5512 (xpsp.080413-2105) 0.02%
6.00.2900.5512 (xpsp.080413-2105) 0.02%
6.00.2900.5512 (xpsp.080413-2105) 0.48%
6.00.2900.5512 (xpsp.080413-2105) 0.08%
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) 0.08%
6.0.6000.16386 (vista_rtm.061101-2205) 6.37%
6.0.6000.16386 (vista_rtm.061101-2205) 0.02%
6.0.6000.16386 (vista_rtm.061101-2205) 0.02%
6.0.6000.16386 (vista_rtm.061101-2205) 1.90%
6.0.6000.16386 (vista_rtm.061101-2205) 0.36%

Relationships

explorer.exe

Windows Explorer by Microsoft Corporation (Signed)

Remove explorer.exe
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Warning 4 antivirus scanners has detected malware in various versions of explorer.exe.

Overview

explorer.exe has 30 known versions, the most recent one is 6.3.9600.17031 (winblue_gdr.140221-1952). explorer.exe is run as a standard windows process with the logged in user's account privileges. It also provides a graphical interface (GUI) for the user to interact with it and contains an icon in the Windows notifictaion system tray (near the clock). The average file size is about 2.2 MB. It is an authenticode code-signed executable issued to Microsoft Corporation by the certification authority Microsoft Corporation. Some variations of the file have been seen to be installed with the program Java 7 Update 60 from Oracle Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0059% including both foreground and background operations, the average private memory consumption is about 60.79 MB with the maximum memory reaching around 109.15 MB. Addionally, typically read and write I/O disk operations is about 469.91 KB per minute for reads and 317.04 KB per minute for writes.

What is explorer.exe?

Windows Explorer also known as File Explorer, is a file manager application and also a navigation tool that is included with releases of the Microsoft Windows operating system. It provides a graphical user interface for accessing the file systems. It is also the component of the operating system that presents many user interface items on the monitor such as the taskbar and desktop. Located in the C:\Windows directory, it is sometimes referred to as the Windows shell, explorer.exe.

DetailsDetails

File name:explorer.exe
Publisher:Microsoft Corporation
Product name:Windows Explorer
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\explorer.exe
Original name:EXPLORER.EXE.MUI
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of Windows Explorer.)

BehaviorsBehaviors

(Note, the behaviors below are for all versions of explorer.exe, select a unique version for details.)
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'MSOpenFolder'
  • Handler name 'MSCDBurningOnArrival'
Shell open commands
  • SHCmdFile

MalwareMalware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
McAfee 5.400.1158 Artemis!BD03715E11F4 6.00.2900.5512 (xpsp.080413-2105)
McAfee Gateway Anti-Malware v2012.1-dat Heuristic.BehavesLike.Win32.Suspicious-BAY.K 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
McAfee Gateway Anti-Malware v2012.1-dat Artemis!BD03715E11F4 6.00.2900.5512 (xpsp.080413-2105)
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1001 6.00.2900.5512 (xpsp.080413-2105)

VersionsAll file variations of explorer.exe

MD5SHA-1File size
81394c91b7b5a7c799e249ae82491f13 566d18d628ed2122c3ecb5eb70b5ff4a367c58a1 2.26 MB
c1400519d76a364e974e47bba62b95b0 0c8de34d4d7b4d9fa2a9fad2e0ece95595fb5978 2.22 MB
712b0d2ade5297563168c997ddc2dd13 f2dffe7ab1502c2366b646cf1b21656cfe26f8c1 1.97 MB
63dc38c3e4564b2405d562855643aba2 cdf235fa4a238d5f82cfe7e0dc47af97ed562543 2.22 MB
1a0bc9598e4a58fc84570fff5a108e58 c00e4f306475798dd20f31eea5fa2ff962375f02 1.97 MB
8479dc46e9a09015c0777a16bc22a15d 69a663e65333f5f2b5f4f66e2bd33c61d008a2e6 2.22 MB
2cf1204e913aea5a492d89c153f3345e ef3937461e715b4d5a886c7ccb43b8e8b40eb738 2.15 MB
253252bbc9e61728986cb54261f8aecd f1e6acff5f10397182c1ef922fe1403ab8175834 1.92 MB
0e8e6463f81c80afbed533e0f1f8895d eda500ac5c5134f32f1db3a248fcf3009b536867 2.28 MB
eafe46b0292d2bd2467835e2acf717cc 9033be345aded283e0590aac5cb9f6f472ece96a 2.01 MB
5bf26a2d94232cd98db92cfbe07e5470 18b4db307f2d0cac339690a5946877f66b0b954b 2.77 MB
2626fc9755be22f805d3cfa0ce3ee727 d76db4dcd710be9c3314cff94824933847565372 2.49 MB
15bc38a7492befe831966adb477cf76f ea97227d34b8526055a543ade7d18587a927f6a3 2.49 MB
332feab1435662fc6c672e25beb37be3 5a49d7390ee87519b9d69d3e4aa66ca066cc8255 2.74 MB
2af58d15edc06ec6fdacce1f19482bbf e2f906421e49c72e10d9589c39ebf69d02e84583 2.49 MB
ac4c51eb24aa95b77f705ab159189e24 4583daf9442880204730fb2c8a060430640494b1 2.74 MB
40d777b7a95e00593eb1568c68514493 89a175a12bc20104770d0ef83e553f8b0e06274b 2.5 MB
8b88ebbb05a0e56b7dcc708498c02b3e cea0890d4b99bae3f635a16dae71f69d137027b9 2.5 MB
0fb9c74046656d1579a64660ad67b746 0b802d169757431bb61ce1129ee12b2cc8f90998 2.5 MB
86e4c8828bb36503c52e611ba0c69671 a4eae66853a1bddb25ed694890629c604da3b57b 1.63 MB
bd03715e11f47a1b88316dd231659ef2 8c187894c1b6cd7cba1a7e9be4e0fa48474312ac 1.19 MB
b5beb5ea56b3d7c65223aac49e02e7e6 3942f88f4bf8f32927f2610cbe8c5e7361385bba 1.47 MB
7522f548a84abad8fa516de5ab3931ef 78f905f135771dec9646f6f753195adf5e7bf7c9 1012 KB
73bf5036a2aba403db078c65b1a29a99 e15c60726cd041dc7b06a43d0d20fb17936a7cc3 1011.5 KB
89c8dd146ceaf482d82822766437d93f c9514578219fed59868d6cb495c310437e878af4 1010.5 KB
d07d4c3038f3578ffce1c0237f2a1253 4b3bd605b63749ff255e048ca6f27aff95aec24a 2.79 MB
bbd8e74f23d7605cb0cdb57a1b25d826 d84af003a6a9dcf6ca9bd68bb66f2b96dcd1fce8 2.94 MB
6d06cd98d954fe87fb2db8108793b399 481a5c2e04f183b7b2e6dc2c53501cac7c7c5454 2.79 MB
6b08e54a451b3f95e4109dba7e594270 4a4ffbeb8c559f25b2ff7fdaa63c021610f8fa52 2.94 MB
37440d09deae0b672a04dccf7abf06be 28cec32abf5a85e3ba4a83b2b300d129b79db160 2.79 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 36.00%
Windows 8.1 16.25%
Windows 7 Ultimate 10.75%
Windows 8.1 Pro 10.25%
Windows 7 Professional 8.25%
Windows 8 4.25%
Windows 8.1 Single Language 4.00%
Windows 8 Single Language 2.25%
Windows 8.1 Pro with Media Center 2.00%
Windows 8.1 N 2.00%
Windows 7 Home Basic 1.00%
Windows 8.1 Enterprise Evaluation 1.00%
Windows 8 Pro 1.00%
Windows Vista Home Premium 1.00%

Distribution by countryDistribution by country

United States installs about 56.75% of Windows Explorer.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 26.39%
Hewlett-Packard 18.36%
ASUS 16.83%
Toshiba 12.24%
Acer 10.13%
Lenovo 7.65%
Sony 3.06%
Alienware 2.29%
Samsung 2.29%
GIGABYTE 0.76%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE