home

user32.dll

Multi-User Windows USER API Client DLL

Microsoft Corporation

The USER32 library provide API function for applications to create and manipulate the standard elements of the Windows user interface, such as the desktop, windows, and menus to perform operations such as creating and managing windows, receiving window messages, displaying text in a window, and displaying message boxes. It is installed with Windows 7.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Multi-User Windows USER API Client DLL

 
Part of the Windows 7 (with Service Pack 1) Operating System

Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)

MD5:
5e0db2d8b2750543cd2ebb9ea8e6cdd3

SHA-1:
8b997b38e179cd03c0a2e87bddbc1ebca39a8630

SHA-256:
01eb95fa3943cf3c6b1a21e473a5c3cb9fcbce46913b15c96cac14e4f04075b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/20/2024 7:15:53 AM UTC  (today)

File size:
813.5 KB (833,024 bytes)

Product version:
6.1.7601.17514

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
user32

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\windows\syswow64\user32.dll

File PE Metadata
Compilation timestamp:
11/20/2010 7:08:57 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:rxlCaNt6z7RgnhVzQnaNoroE+KktJImrR1YNt35L+s5ENOeQiV1Li/kc:r6DlghyaNvXjYNPLeYeXV1i/k

Entry address:
0x1B6ED

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 0D, FF, 75, 10, 6A, 01, FF, 75, 08, E8, B7, 17, 00, 00, 5D, 90, 90, 90, 90, 90, 8B, FF, 55, 8B, EC, 81, EC, A4, 06, 00, 00, A1, 20, 07, CD, 7D, 33, C5, 89, 45, FC, 83, 7D, 0C, 01, 8B, 45, 08, 53, 56, 57, 89, 85, DC, FB, FF, FF, 0F, 85, 35, E9, FF, FF, 64, 8B, 0D, 18, 00, 00, 00, C7, 85, E0, FB, FF, FF, 40, 02, 00, 00, 8B, 49, 30, 8B, 99, D4, 01, 00, 00, 50, FF, 15, 68, 04, C6, 7D, 8B, 35, AC, 00, C6, 7D, 68, E0, 02, CD, 7D, FF, D6, 68, 20, 03, CD, 7D, 8B, F8, FF, D6...
 
[+]

Entropy:
6.3275

Code size:
435 KB (445,440 bytes)

The file user32.dll has been seen being distributed by the following 2 URLs.

ftp://ftp2.tecnicon.com.br/darlan/.../user32.dll

http://originaldll.com/.../11402.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.