home

user32.dll

Multi-User Windows USER API Client DLL

Microsoft Corporation

The USER32 library provide API function for applications to create and manipulate the standard elements of the Windows user interface, such as the desktop, windows, and menus to perform operations such as creating and managing windows, receiving window messages, displaying text in a window, and displaying message boxes. It is installed with Windows 7. The file has been seen being downloaded from decibel.ni.com.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Multi-User Windows USER API Client DLL

 
Part of the Windows 7 (with Service Pack 1) Operating System

Version:
6.1.7601.17514 (win7sp1_rtm.101119-1850)

MD5:
f1dd3acaee5e6b4bbc69bc6df75cef66

SHA-1:
2b7fd5ff48bd4cb70192503c43adbb1ef5cb5b2a

SHA-256:
6ccad926934eacbe92fdfa1ae46da6101d78a0b44ae38594e3a88febb35d230f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
1/13/2025 8:19:30 AM UTC  (today)

File size:
792.5 KB (811,520 bytes)

Product version:
6.1.7601.17514

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
user32

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\user32.dll

File PE Metadata
Compilation timestamp:
11/20/2010 4:08:06 AM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:uWvcsSHPUCdmtBeBCvxg1AcqY+4w5sZLZWp9VR3kb5L+s5ENOeQiV1Li/kN:dumtBqaJG7qRGLeYeXV1i/k

Entry address:
0x1D711

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 0D, FF, 75, 10, 6A, 01, FF, 75, 08, E8, 25, 01, 00, 00, 5D, E9, 4A, FB, FF, FF, 90, 90, 90, 90, 90, 8B, FF, 55, 8B, EC, 64, A1, 18, 00, 00, 00, 83, 78, 40, 00, 0F, 84, EA, 3E, FE, FF, 0F, B7, 4D, 08, 64, A1, 18, 00, 00, 00, 3B, 88, D4, 06, 00, 00, 0F, 82, 0D, 11, 00, 00, 64, A1, 18, 00, 00, 00, 8B, 80, DC, 06, 00, 00, 5D, C2, 04, 00, 90, 5C, 00, 57, 00, 69, 00, 6E, 00, 64, 00, 6F, 00, 77, 00, 73, 00, 00, 00, 90, 90, 90, 90, 90, B8, 66, 06, D2, 77, A3, 60, 96, D7, 77...
 
[+]

Entropy:
6.3307

Code size:
414 KB (423,936 bytes)

The file user32.dll has been seen being distributed by the following URL.

https://decibel.ni.com/content/servlet/JiveServlet/download/.../user32.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.