Gridinsoft Logo
File Icon

The comctl32.dll (User Experience Controls Library) File Analysis

Technical Analysis

File Name comctl32.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.231.174
Database Version 2026-01-04 16:00:37 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
2,715,536
File Size (bytes)
2026-01-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5883349b51a873e40854977285cf7318
SHA1
547e9b056063d439d1c45cce921bf3be190a1eb4
SHA256
4f3c45946d2e04915691d93b0606bdea1ebf60d89b884a42cbe226e65a03ea56
SHA512
3769a5524ba6ad0a706f7be80aea9ca15e145222369386218ea594962a4368341a5c519e3b4d81cce333cba813fb5a881108811fd231b746e0dbdc2a56cf553b
ImpHash
dd2553a6ed84bb03d6981b813c11cf97

PE Analysis

Basic Information

Icon
Hash: 077d5d1a4e20caf3b0e9c7da0382bf45
Fuzzy: 36296b49c7afb5d13f6e14fc32820b6a
dHash: 2c5e3c0c02040000
Image Base 0x171a00000
Entry Point 0x171a9a450
Compilation Time 2028-09-18 12:01:07
Checksum 0x002a09d2 (Actual: 0x002a09d2)
OS Version 10.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path comctl32.pdb
Digital Signature OK
Imports 46 libraries
Exports 218 functions
Resources 109 Resources
Sections 7 Sections

Version Information

CompanyName Microsoft Corporation
FileDescription User Experience Controls Library
FileVersion 6.10 (WinBuild.160101.0800)
InternalName comctl32
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename comctl32.DLL
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.6456
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,981,016 bytes 1,981,440 bytes 6.37 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3739FC35531F8097F0E0BC7A3A0E47A2
.rdata 0x001e5000 296,912 bytes 296,960 bytes 5.13 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B32E875E13ED58F591B30E30AD34E19C
.data 0x0022e000 15,104 bytes 3,584 bytes 1.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE ECD542D6F8A6F41957AA06C3DFDEF4E5
.pdata 0x00232000 98,892 bytes 99,328 bytes 6.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FDEB60CBE0674EA92E7FAD31594E66DB
.didat 0x0024b000 1,824 bytes 2,048 bytes 3.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2504D106A3CDB7B9B36FB2BADAA2EBB2
.rsrc 0x0024c000 297,912 bytes 297,984 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 67149F362F16296044CE08C5068E2866
.reloc 0x00295000 23,048 bytes 23,552 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2553B53CF3F8FF8D9D0F601EC13136AD

Resource Analysis

Total Resources: 109 (292,131 bytes)
Resource Type Count Total Size Percentage
MUI 1 240 bytes
0.1%
UIFILE 2 22,329 bytes
7.6%
RT_CURSOR 33 36,660 bytes
12.5%
RT_BITMAP 22 159,508 bytes
54.6%
RT_ICON 28 71,488 bytes
24.5%
RT_GROUP_CURSOR 18 570 bytes
0.2%
RT_GROUP_ICON 4 416 bytes
0.1%
RT_VERSION 1 920 bytes
0.3%

Certificate Chain Analysis

Certificate Information
Product Microsoft® Windows® Operating System
Description User Experience Controls Library
File Version 6.10 (WinBuild.160101.0800)
Original Name comctl32.DLL
Signing Date 05:19 PM 10/10/2025 (93 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Internal Name comctl32
Copyright © Microsoft Corporation. All rights reserved.
Certificate Chain Summary
Microsoft Windows #1 Primary
Validity Period: 2025-06-19 18:11:43 → 2026-06-17 18:11:43
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 05 18 41 84 19 AD CB AD 29 4F 00 00 00 00 05 18
Microsoft Windows Production PCA 2011 #2 Chain
Validity Period: 2011-10-19 18:41:42 → 2026-10-19 18:51:42
Signature Algorithm: sha256RSA
Serial Number: 61 07 76 56 00 00 00 00 00 08
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2025-01-30 19:42:49 → 2026-04-22 19:42:49
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 02 05 3C 75 6C 82 44 87 CD FE 00 01 00 00 02 05
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware