shell32.dll
Windows Shell Common Dll by Microsoft Corporation (Signed)
| Version: | 6.2.9200.16496 (win8_gdr.130108-1504) |
| MD5: | 65572d70eb8839462278989e25a37c98 |
| SHA1: | 1f1f3cf8e4f559a77540550d265b49e57afbe4f7 |
| SHA256: | befd146f43bad7ef3271bb90b0233292858e4381f9e417c288949a2d8f7e869b |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
What is shell32.dll?
The Windows common shell DLL files (such as Shell32) are operating system (OS) files that contain vital information about the OS and your PC's hardware configuration. The Windows shell is the main graphical user interface in Microsoft Windows, today hosted by Windows Explorer. The Windows shell includes well-known Windows components such as the Taskbar and the Start menu.
About shell32.dll (from Microsoft Corporation)
“The Windows shell desktop is an array of icons, rendered behind all open windows and taking up the space left by the taskbar.”
Overview
shell32.dll executes as a process with the local user's privileges. It configures an autoplay handler withing explorer.exe named MSCDBurningOnArrival that will launch the program automatically. The file is digitally signed by Microsoft Corporation. This version is installed on Windows 8 and is compiled as a 64 bit program.
Details
| File name: | shell32.dll |
| Publisher: | Microsoft Corporation |
| Product name: | Windows Shell Common Dll |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\shell32.dll |
| Original name: | SHELL32.DLL.MUI |
| File version: | 6.2.9200.16496 (win8_gdr.130108-1504) |
| Product version: | 6.2.9200.16496 |
| Size: | 18.87 MB (19,791,360 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Expiration date: | Tuesday, July 9, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| Entropy: | 6.247305 |
| File packed: | No |
| Code language: | Microsoft Visual C++ |
| .NET CLR: | No |
More details
Behaviors
Shell open commands
Context menu handlers
Located in '*\shellex\ContextMenuHandlers'
- CLSID: {645FF040-5081-101B-9F08-00AA002F954E}
- Name: 'New'
- CLSID: {a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
- CLSID: {90AA3A4E-1CBA-4233-B8BB-535773D48449}
- Name: 'Open With EncryptionMenu'
- Name: 'Open With'
Search handlers
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
- Handler name 'MSCDBurningOnArrival'
Copy hook handlers
Approved shell extensions
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
- 'Window TXT Preview Handler' with CLSID {1531d583-8375-4d3f-b5fb-d23bbd169f22}
- 'Microsoft Windows RTF Preview Handler' with CLSID {a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}
- 'Client application shell extension' with CLSID {25585dc7-4da0-438d-ad04-e42c8d2d64b9}
- 'Control Panel' with CLSID {21ec2020-3aea-1069-a2dd-08002b30309d}
- 'Programs Folder and Fast Items' with CLSID {865e5e76-ad83-4dca-a109-50dc2113ce9a}
- '.cpl, .dll, .exe, .ocx, .rll or .sys files' with CLSID {66742402-F9B9-11D1-A202-0000F81FEDEE}
- '.fon, .otf, .ttc or .ttf files' with CLSID {0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}
- 'Shortcut' with CLSID {00021401-0000-0000-C000-000000000046}
- 'Layout Folder' with CLSID {328B0346-7EAF-4BBE-A479-7CB88A095F5B}
- 'Command Folder' with CLSID {437ff9c0-a07f-4fa0-af80-84b6c6440a16}
- 'Search Folders' with CLSID {b2952b16-0e07-4e5a-b993-58c52cb94cae}
- 'Explorer Browser' with CLSID {71f96385-ddd6-48d3-a0c1-ae06e8b055fb}
- 'Tree property value folder' with CLSID {708e1662-b832-42a8-bbe1-0a77121e3908}
- 'Summary Info Thumbnail handler (DOCFILES)' with CLSID {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
- 'Alphabetical Categorizer' with CLSID {3c2654c6-7372-4f6b-b310-55d6128f49d2}
Internet Explorer web browsers
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser'
- CLSID: {0E5CBF21-D15F-11D0-8301-00AA005B4383}
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00005618% | |
| Kernel CPU: | 0.00002899% | |
| User CPU: | 0.00002720% | |
| Kernel CPU time: | 3,968 ms/min | |
| CPU cycles: | 391,154/sec | |
| Memory |
| Private memory: | 1.97 MB | |
| Private (maximum): | 4.45 MB | |
| Private (minimum): | 3.05 MB | |
| Non-paged memory: | 1.97 MB | |
| Virtual memory: | 76.88 MB | |
| Virtual memory (peak): | 78.45 MB | |
| Working set: | 4.07 MB | |
| Working set (peak): | 7.74 MB | |
| Page faults: | 60,692/min | |
| I/O |
| I/O read transfer: | 0 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 0 Bytes/sec | |
| I/O other operations: | 1/sec | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 106 | |
| GUI GDI count: | 15 | |
| GUI GDI peak: | 16 | |
| GUI USER count: | 8 | |
| GUI USER peak: | 11 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command lines: |
- C:\Windows\System32\rundll32.exe shell32.dll,shcreatelocalserverrundll {9ba05972-f6a8-11cf-a442-00a0c90a8f39} -embedding
- C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,shcreatelocalserverrundll {995c996e-d918-4a8c-a302-45719a6f4ea7} -embedding
|
| Owner: | User |
| Parent process: | svchost.exe (by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 Pro |
35.00% |
|
| Windows 8.1 |
28.00% |
|
| Windows 8.1 Single Language |
15.00% |
|
| Windows 7 Ultimate |
12.00% |
|
| Windows 8.1 Pro with Media Center |
5.00% |
|
| Windows 8.1 N |
5.00% |
|
Distribution by country
United States installs about 33.00% of Windows Shell Common Dll.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
37.04% |
|
| Acer |
20.37% |
|
| Dell |
14.81% |
|
| Hewlett-Packard |
13.89% |
|
| Lenovo |
9.26% |
|
| Alienware |
4.63% |
|
