» NXPLiteShell.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

NXPLiteShell.dll

NXPowerLite

Neuxpower Solutions Ltd

It is registered as a context menu handler (displays a menu when right-clicked in Explorer) named “NXPLiteShell3”. This is installed with NXPowerLite.

File name:

NXPLiteShell.dll

Publisher:

Neuxpower Solutions Ltd (signed and verified)

Product:

NXPowerLite

Description:

NXPLiteShell Module

Version:

4, 2, 2, 4435

MD5:

ff5b13c9367f4a4bdb6a0e87b0106f4e

SHA-1:

40b461340010e1448fd7345f570c69c146575295

SHA-256:

2680397645bb462d9b3986ce58358864e37549e3c1f63dd3c96f464e82944918

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 4:58:05 PM UTC (today)

File size:

125.4 KB (128,456 bytes)

Product version:

4, 2, 2, 4435

Original file name:

NXPLiteShell.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\nxpowerlite\nxpliteshell.dll

Digital Signature

Signed by:

Neuxpower Solutions Ltd

Authority:

VeriSign, Inc.

Valid from:

10/22/2009 7:00:00 PM

Valid to:

10/24/2012 6:59:59 PM

Subject:

CN=Neuxpower Solutions Ltd, OU=Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Neuxpower Solutions Ltd, L=London, S=London, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

23D7FC48AA603DFEAEFC8DB77E26C8D4

Registration

CLSID:

{45A3D4B3-C00F-11DB-9F3D-005056C00008}

ProgID:

NXPLiteShell3.Extension.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/30/2010 10:13:46 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

1536:snOp/X4eeGLNAK4jvmQZN7zJynjt5pCt6s0rZAB51G/7u+oHaEC8:B/oymBvfzJqbpC0s0ra1Q7u+jk

Entry address:

0x996E

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 40, 40, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, 68, 80, 89, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 98, 67, 01, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC... 
[+]

Entropy:

5.8745

Code size:

64 KB (65,536 bytes)

Context Menu Handler

Display name:

NXPLiteShell3

CLSID:

{45A3D4B3-C00F-11DB-9F3D-005056C00008}

CLSID name:

CExtension Object

The file NXPLiteShell.dll has been discovered within the following program.

NXPowerLite by Neuxpower Solutions Ltd

Publisher's description - “NXPowerLite Desktop Edition radically reduces the size of Word documents, Excel spreadsheets, PowerPoint presentations, JPEG images and PDF files. Files remain in their original format, with no discernible loss of quality - and there's no need to unzip before using them.”

www.nxpowerlite.com

10% remove it

Scan NXPLiteShell.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.