Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.17031 (winblue_gdr.140221-1952) 1.84%
6.3.9600.17031 (winblue_gdr.140221-1952) 0.31%
6.3.9600.17031 (winblue_gdr.140221-1952) 0.00%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.64%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.00%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.43%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.00%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.09%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.18%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.00%
6.2.9200.16496 (win8_gdr.130108-1504) 2.35%
6.2.9200.16496 (win8_gdr.130108-1504) 0.35%
6.2.9200.16496 (win8_gdr.130108-1504) 0.31%
6.2.9200.16496 (win8_gdr.130108-1504) 3.44%
6.2.9200.16496 (win8_gdr.130108-1504) 1.49%
6.2.9200.16496 (win8_gdr.130108-1504) 0.14%
6.2.9200.16496 (win8_gdr.130108-1504) 0.00%
6.2.9200.16496 (win8_gdr.130108-1504) 0.60%
6.2.9200.16496 (win8_gdr.130108-1504) 0.00%
6.2.9200.16451 (win8_gdr.121105-1502) 0.07%
6.2.9200.16384 (win8_rtm.120725-1247) 0.28%
6.2.9200.16384 (win8_rtm.120725-1247) 0.39%
6.2.9200.16384 (win8_rtm.120725-1247) 0.18%
View more



Windows Shell Common Dll by Microsoft Corporation (Signed)

Remove shell32.dll
Version:   6.1.7601.17514 (win7sp1_rtm.101119-1850)
MD5:   e02781d4871844dcd30df1d69a650f78
SHA1:   c82c5fcafd4d25693898aedabd8ebd2b0a30ed13
SHA256:   dc77302f06cd6cf7fc2c3b0f433a4ae41df869b9f342c0656ccd8a125b3d3318
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is shell32.dll?

The Windows common shell DLL files (such as Shell32) are operating system (OS) files that contain vital information about the OS and your PC's hardware configuration. The Windows shell is the main graphical user interface in Microsoft Windows, today hosted by Windows Explorer. The Windows shell includes well-known Windows components such as the Taskbar and the Start menu.

About shell32.dll (from Microsoft Corporation)

The Windows shell desktop is an array of icons, rendered behind all open windows and taking up the space left by the taskbar.


shell32.dll executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). It configures an autoplay handler withing explorer.exe named MSCDBurningOnArrival that will launch the program automatically. The file is digitally signed by Microsoft Corporation. This version is designed to run on Windows 7 and is compiled as a 32 bit program.


File name:shell32.dll
Publisher:Microsoft Corporation
Product name:Windows Shell Common Dll
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\shell32.dll
Original name:SHELL32.DLL.MUI
File version:6.1.7601.17514 (win7sp1_rtm.101119-1850)
Product version:6.1.7601.17514
Size:12.28 MB (12,872,704 bytes)
Build date:7/26/2013 2:56 AM
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
More details


Shell open commands
  • themefile
  • msstylesfile
Context menu handlers
Located in '*\shellex\ContextMenuHandlers'
  • CLSID: {645FF040-5081-101B-9F08-00AA002F954E}
  • Name: 'New'
  • CLSID: {a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
  • CLSID: {90AA3A4E-1CBA-4233-B8BB-535773D48449}
  • Name: 'Open With EncryptionMenu'
  • Name: 'Open With'
Search handlers
  • ShellSearch
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'MSCDBurningOnArrival'
Copy hook handlers
  • FileSystem
Approved shell extensions
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'Window TXT Preview Handler' with CLSID {1531d583-8375-4d3f-b5fb-d23bbd169f22}
  • 'Microsoft Windows RTF Preview Handler' with CLSID {a42c2ccb-67d3-46fa-abe6-7d2f3488c7a3}
  • 'Client application shell extension' with CLSID {25585dc7-4da0-438d-ad04-e42c8d2d64b9}
  • 'Control Panel' with CLSID {21ec2020-3aea-1069-a2dd-08002b30309d}
  • 'Programs Folder and Fast Items' with CLSID {865e5e76-ad83-4dca-a109-50dc2113ce9a}
  • '.cpl, .dll, .exe, .ocx, .rll or .sys files' with CLSID {66742402-F9B9-11D1-A202-0000F81FEDEE}
  • '.fon, .otf, .ttc or .ttf files' with CLSID {0AFCCBA6-BF90-4A4E-8482-0AC960981F5B}
  • 'Shortcut' with CLSID {00021401-0000-0000-C000-000000000046}
  • 'Layout Folder' with CLSID {328B0346-7EAF-4BBE-A479-7CB88A095F5B}
  • 'Command Folder' with CLSID {437ff9c0-a07f-4fa0-af80-84b6c6440a16}
  • 'Search Folders' with CLSID {b2952b16-0e07-4e5a-b993-58c52cb94cae}
  • 'Explorer Browser' with CLSID {71f96385-ddd6-48d3-a0c1-ae06e8b055fb}
  • 'Tree property value folder' with CLSID {708e1662-b832-42a8-bbe1-0a77121e3908}
  • 'Summary Info Thumbnail handler (DOCFILES)' with CLSID {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
  • 'Alphabetical Categorizer' with CLSID {3c2654c6-7372-4f6b-b310-55d6128f49d2}
Internet Explorer web browsers
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser'
  • CLSID: {0E5CBF21-D15F-11D0-8301-00AA005B4383}

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Total CPU:0.00093320%
Kernel CPU:0.00063706%
User CPU:0.00029614%
Kernel CPU time:234,002 ms/min
Private memory:4.06 MB
21.59 MB
Private (maximum):6.38 MB
Private (minimum):6.09 MB
Non-paged memory:4.06 MB
21.59 MB
Virtual memory:62.37 MB
140.96 MB
Virtual memory (peak):64.21 MB
169.69 MB
Working set:6.23 MB
18.61 MB
Working set (peak):6.39 MB
37.95 MB
Resource allocations
GUI GDI count:15
GUI GDI peak:16
GUI USER count:6
GUI USER peak:9

BehaviorsProcess properties

Integrety level:System
Command lines:
  • C:\Windows\System32\rundll32.exe shell32.dll,shcreatelocalserverrundll {995c996e-d918-4a8c-a302-45719a6f4ea7} -embedding
  • "C:\Windows\System32\rundll32.exe" shell32.dll,control_rundll mmsys.cpl
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8.1 Pro 35.00%
Windows 8.1 28.00%
Windows 8.1 Single Language 15.00%
Windows 7 Ultimate 12.00%
Windows 8.1 Pro with Media Center 5.00%
Windows 8.1 N 5.00%

Distribution by countryDistribution by country

United States installs about 33.00% of Windows Shell Common Dll.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 37.04%
Acer 20.37%
Dell 14.81%
Hewlett-Packard 13.89%
Lenovo 9.26%
Alienware 4.63%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE