explorer.exe
Windows Explorer by Microsoft Corporation (Signed)
| Version: | 6.0.6000.16386 (vista_rtm.061101-2205) |
| MD5: | 37440d09deae0b672a04dccf7abf06be |
| SHA1: | 28cec32abf5a85e3ba4a83b2b300d129b79db160 |
| SHA256: | c8ecd4bd0c167fe28e73219b6c366b2386472c78858d3b8448c5126df72aac45 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is explorer.exe?
Windows Explorer also known as File Explorer, is a file manager application and also a navigation tool that is included with releases of the Microsoft Windows operating system. It provides a graphical user interface for accessing the file systems. It is also the component of the operating system that presents many user interface items on the monitor such as the taskbar and desktop. Located in the C:\Windows directory, it is sometimes referred to as the Windows shell, explorer.exe.
Overview
explorer.exe executes as a process with the local user's privileges typically within the context of its parent
winlogon.exe (Windows Logon Application by Microsoft). It configures an autoplay handler withing explorer.exe named MSOpenFolder that will launch the program automatically. The file is digitally signed by Microsoft Corporation. This version is designed to run on Windows Vista and is compiled as a 32 bit program.
Details
| File name: | explorer.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Windows Explorer |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\windows\explorer.exe |
| Original name: | EXPLORER.EXE.MUI |
| File version: | 6.0.6000.16386 (vista_rtm.061101-2205) |
| Product version: | 6.0.6000.16386 |
| Size: | 2.79 MB (2,923,520 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| Entropy: | 5.934229 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Shell open commands
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'MSOpenFolderBackup'
- Handler name 'MSOpenFolder'
Scheduled tasks
- The task '{AD36F1D3-E56E-44BA-A569-280718EB8C51}' runs on registration in the path '\{AD36F1D3-E56E-44BA-A569-280718EB8C51}'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00800080% | |
| Kernel CPU: | 0.00603915% | |
| User CPU: | 0.00196165% | |
| Kernel CPU time: | 87,354,076 ms/min | |
| CPU cycles: | 8,628,762/sec | |
| Memory |
| Private memory: | 39.56 MB | |
| Private (maximum): | 47.46 MB | |
| Private (minimum): | 13.12 MB | |
| Non-paged memory: | 39.56 MB | |
| Virtual memory: | 205.44 MB | |
| Virtual memory (peak): | 270.12 MB | |
| Working set: | 23.39 MB | |
| Working set (peak): | 52.65 MB | |
| Page faults: | 1,243,325/min | |
| I/O |
| I/O read transfer: | 324.88 KB/sec | |
| I/O read operations: | 23/sec | |
| I/O write transfer: | 158.24 KB/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 30.43 KB/sec | |
| I/O other operations: | 214/sec | |
| Resource allocations |
| Threads: | 30 | |
| Handles: | 841 | |
| GUI GDI count: | 429 | |
| GUI USER count: | 258 | |
Process properties
Threads
Averages
| browseui.dll (Shell Browser UI Library by Microsoft) |
| Total CPU: | 0.18126446% | |
| Kernel CPU: | 0.12225156% | |
| User CPU: | 0.05901291% | |
| CPU cycles: | 3,968,726/sec | |
| Memory: | 1.27 MB | |
| ntdll.dll |
| Total CPU: | 0.15999583% | |
| Kernel CPU: | 0.15174806% | |
| User CPU: | 0.00824777% | |
| CPU cycles: | 3,832,561/sec | |
| Memory: | 1.12 MB | |
| SHLWAPI.dll |
| Total CPU: | 0.05061830% | |
| Kernel CPU: | 0.03497236% | |
| User CPU: | 0.01564593% | |
| CPU cycles: | 1,989,081/sec | |
| Memory: | 340 KB | |
| Explorer.EXE (main module) |
| Total CPU: | 0.04957943% | |
| Kernel CPU: | 0.02753461% | |
| User CPU: | 0.02204483% | |
| CPU cycles: | 1,170,934/sec | |
| Context switches: | 1/sec | |
| Memory: | 2.8 MB | |
| RPCRT4.dll |
| Total CPU: | 0.01464553% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.01464553% | |
| CPU cycles: | 81,326/sec | |
| Memory: | 780 KB | |
| stobject.dll |
| Total CPU: | 0.00500238% | |
| Kernel CPU: | 0.00366379% | |
| User CPU: | 0.00133858% | |
| CPU cycles: | 122,754/sec | |
| Memory: | 584 KB | |
| Wlanapi.dll |
| Total CPU: | 0.00210427% | |
| Kernel CPU: | 0.00114778% | |
| User CPU: | 0.00095649% | |
| CPU cycles: | 42,022/sec | |
| Memory: | 56 KB | |
| WINMM.dll |
| Total CPU: | 0.00103083% | |
| Kernel CPU: | 0.00102500% | |
| User CPU: | 0.00000583% | |
| CPU cycles: | 3,413/sec | |
| Memory: | 204 KB | |
| NetworkItemFactory.dll |
| Total CPU: | 0.00066368% | |
| Kernel CPU: | 0.00066368% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 22,340/sec | |
| Memory: | 52 KB | |
| ole32.dll |
| Total CPU: | 0.00030910% | |
| Kernel CPU: | 0.00030664% | |
| User CPU: | 0.00000245% | |
| CPU cycles: | 9,941/sec | |
| Memory: | 1.27 MB | |
| gdiplus.dll |
| Total CPU: | 0.00023370% | |
| Kernel CPU: | 0.00022784% | |
| User CPU: | 0.00000586% | |
| CPU cycles: | 3,358/sec | |
| Memory: | 1.66 MB | |
| wdmaud.drv |
| Total CPU: | 0.00018539% | |
| Kernel CPU: | 0.00017513% | |
| User CPU: | 0.00001026% | |
| CPU cycles: | 3,652/sec | |
| Memory: | 192 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
36.00% |
|
| Windows 8.1 Pro |
14.00% |
|
| Windows 7 Ultimate |
12.00% |
|
| Windows 8.1 |
10.50% |
|
| Windows 7 Professional |
6.50% |
|
| Windows 8 |
6.50% |
|
| Windows 8.1 Single Language |
6.00% |
|
| Windows 8.1 N |
4.00% |
|
| Windows 8 Single Language |
2.50% |
|
| Windows 8.1 Pro with Media Center |
2.00% |
|
Distribution by country
United States installs about 51.50% of Windows Explorer.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
23.75% |
|
| ASUS |
23.33% |
|
| Dell |
14.17% |
|
| Toshiba |
13.33% |
|
| Acer |
12.08% |
|
| Lenovo |
6.67% |
|
| Alienware |
3.33% |
|
| Samsung |
3.33% |
|
