This is a Windows system installed file with Windows File Protection (WFP) enabled.
There are 55 versions of explorer.exe in the wild, the latest version being 6.3.9600.17031 (winblue_gdr.140221-1952). explorer.exe is run as a standard windows process with the logged in user's account privileges. The process displays a GUI (graphical user interface) which allows the user to interact with it as well as displays a notification icon in the taskbar. The average file size is about 2.23 MB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. Some variations of the file have been seen to be installed with the program Java 7 Update 60 from Oracle Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0059% including both foreground and background operations, the average private memory consumption is about 61.09 MB with the maximum memory reaching around 109.37 MB. Addionally, typically read and write I/O disk operations is about 470.24 KB per minute for reads and 316.98 KB per minute for writes.
Windows Explorer also known as File Explorer, is a file manager application and also a navigation tool that is included with releases of the Microsoft Windows operating system. It provides a graphical user interface for accessing the file systems. It is also the component of the operating system that presents many user interface items on the monitor such as the taskbar and desktop. Located in the C:\Windows directory, it is sometimes referred to as the Windows shell, explorer.exe.
(Note, the behaviors below are for all versions of explorer.exe, select a unique version for details.)
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
United States installs about 56.75% of Windows Explorer.