shell32.dll
Windows Shell Common Dll by Microsoft Corporation (Signed)
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
There are 116 versions of shell32.dll in the wild, the latest version being 6.3.9600.17031 (winblue_gdr.140221-1952). shell32.dll is run as a standard windows process with the logged in user's account privileges. It is integrated as a plugin to Internet Explorer and will load for each instance of IE. It adds a context menu to the Window's shell named Open With. The average file size is about 13.9 MB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. The programs RocketDock 1.3.5, Webplayer Toolbar and Grand Theft Auto V have been observed as installing specific variations of shell32.dll. During the process's lifecycle, the typical CPU resource utilization is about 0.0065% including both foreground and background operations, the average private memory consumption is about 3.08 MB with the maximum memory reaching around 7.85 MB. Addionally, typically read and write I/O disk operations is about 182 Bytes per minute for reads and 2 Bytes per minute for writes.
What is shell32.dll?
The Windows common shell DLL files (such as Shell32) are operating system (OS) files that contain vital information about the OS and your PC's hardware configuration. The Windows shell is the main graphical user interface in Microsoft Windows, today hosted by Windows Explorer. The Windows shell includes well-known Windows components such as the Taskbar and the Start menu.
About shell32.dll (from Microsoft Corporation)
“The Windows shell desktop is an array of icons, rendered behind all open windows and taking up the space left by the taskbar.”
 Details
|
| File name: | shell32.dll |
| Publisher: | Microsoft Corporation |
| Product name: | Windows Shell Common Dll |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\shell32.dll |
| Original name: | SHELL32.DLL.MUI |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
Programs installed in
(Note, the programs listed below are for all versions of Windows Shell Common Dll.)
Webplayer Toolbar is a 'Community Toolbar' from Conduit, that plugs into the various web browsers such as IE, Chrome and Firefox. The toolbar is an advertising-supported program that is designed to di...
“Anki is a program which makes remembering things easy. Because it's a lot more efficient than traditional study methods, you can either greatly decrease your time spent studying, or greatly increase t...”
Total Commander is an Orthodox File Manager (OFM) for Windows that features include a built-in FTP client, tabbed interface, file compare, archive file navigation, and a versatile multi-rename tool wi...
Webplayer is an adware program that integrates into the user's web browsers (IE, Chrome, Firefox) and will perform a number of functions mostly designed to generate advertising supported or affiliate...
|
MicroVideo Software Corp. |
|
“With Micro Video Capture, you can record video and image from webcam, TV tuner card, digital camera and other capture devices in real time, and all captured video files can be saved as AVI format by u...”
RocketDock is an application launcher developed by PolyVector and Skunkie of Punk Labs that provides a dock similar to that of the Mac OS X Aqua GUI. It is freely available under a Creative Commons li...
|
Rockwell Automation, Inc. |
|
“Through the convergence of control and information systems, Integrated Architecture delivers plantwide optimization, machine builder performance, and sustainable production and serves as a foundation....”
Behaviors
(Note, the behaviors below are for all versions of shell32.dll, select a unique version for details.)
Internet Explorer web browsers
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser'
- CLSID: {0E5CBF21-D15F-11D0-8301-00AA005B4383}
Shell execute hooks
- {AEB6717E-7E19-11d0-97EE-00C04FD91972}
Shell service object delay loads
Shell open commands
PROTOCOLS filters
Context menu handlers
Located in '*\shellex\ContextMenuHandlers'
- Name: 'Move to'
- Name: 'Copy to'
- CLSID: {645FF040-5081-101B-9F08-00AA002F954E}
- Name: 'Empty Recycle Bin'
- Name: 'Moveto'
- CLSID: {90AA3A4E-1CBA-4233-B8BB-535773D48449}
- Name: 'New'
- CLSID: {a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
- Name: 'Open With EncryptionMenu'
- Name: 'Open With'
Copy hook handlers
Safe for scripting controls
Marked as a safe ActiveX control for Internet Explorer (digitally signed with script execution permission)
- Implemented as 'CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}'
- Implemented as 'CLSID\{8FC07178-B74A-D932-F194-B99F41697888}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}'
- Implemented as 'CLSID\{72267F6A-A6F9-11D0-BC94-00C04FB67863}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}'
- Implemented as 'CLSID\{1820FED0-473E-11D0-A96C-00C04FD705A2}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}'
Safe for initializing controls
- {459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
- {8FC07178-B74A-D932-F194-B99F41697888}
- {72267F6A-A6F9-11D0-BC94-00C04FB67863}
- {1820FED0-473E-11D0-A96C-00C04FD705A2}
Internet Explorer bars
- CLSID: {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}
Search handlers
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'MSCDBurningOnArrival'
Approved shell extensions
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
- 'Window TXT Preview Handler' with CLSID {1531d583-8375-4d3f-b5fb-d23bbd169f22}
- 'Microsoft Windows RTF Preview Handler' with CLSID {a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}
- 'Client application shell extension' with CLSID {25585dc7-4da0-438d-ad04-e42c8d2d64b9}
- 'Control Panel' with CLSID {21ec2020-3aea-1069-a2dd-08002b30309d}
- 'Programs Folder and Fast Items' with CLSID {865e5e76-ad83-4dca-a109-50dc2113ce9a}
- '.cpl, .dll, .exe, .ocx, .rll or .sys files' with CLSID {66742402-F9B9-11D1-A202-0000F81FEDEE}
- '.fon, .otf, .ttc or .ttf files' with CLSID {0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}
- 'Shortcut' with CLSID {00021401-0000-0000-C000-000000000046}
- 'Layout Folder' with CLSID {328B0346-7EAF-4BBE-A479-7CB88A095F5B}
- 'Command Folder' with CLSID {437ff9c0-a07f-4fa0-af80-84b6c6440a16}
- 'Search Folders' with CLSID {b2952b16-0e07-4e5a-b993-58c52cb94cae}
- 'Explorer Browser' with CLSID {71f96385-ddd6-48d3-a0c1-ae06e8b055fb}
- 'Tree property value folder' with CLSID {708e1662-b832-42a8-bbe1-0a77121e3908}
- 'Summary Info Thumbnail handler (DOCFILES)' with CLSID {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
- 'Alphabetical Categorizer' with CLSID {3c2654c6-7372-4f6b-b310-55d6128f49d2}
Internet Explorer shell browsers
- CLSID: {0E5CBF21-D15F-11D0-8301-00AA005B4383}
All file variations of shell32.dll
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 |
42.50% |
|
| Windows 8.1 Pro |
28.50% |
|
| Windows 8.1 Single Language |
10.00% |
|
| Windows 7 Ultimate |
9.00% |
|
| Windows 8.1 Pro with Media Center |
5.00% |
|
| Windows 8.1 N |
2.50% |
|
| Windows 8.1 Enterprise Evaluation |
2.50% |
|
Distribution by country
United States installs about 45.00% of Windows Shell Common Dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
30.83% |
|
| Dell |
19.27% |
|
| Lenovo |
15.41% |
|
| Acer |
15.22% |
|
| Hewlett-Packard |
9.63% |
|
| Toshiba |
7.71% |
|
| Alienware |
1.93% |
|
