» XCShInfo.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (2)

XCShInfo.dll

Tracker Software PDF-XChange Shell Extention

Tracker Software Products (Canada) Ltd

This is installed with multiple programs including PDF-XChange Pro 4.0 and PDF-XChange Viewer.

File name:

XCShInfo.dll

Publisher:

Tracker Software Products Ltd. (signed by Tracker Software Products (Canada) Ltd)

Product:

Tracker Software PDF-XChange Shell Extention

Description:

PDF-XChange Shell Extention

Version:

2.5.0198.0000

MD5:

562e21a104914e7a27f040a3637cf642

SHA-1:

dc61831ad2adff87fcf0c01dd646c2315c6367f1

SHA-256:

e069a1454279e1e22c9dc847f3bd3672f9f34b52ab92eb020a29e0d5d2e7f409

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:16:45 PM UTC (today)

File size:

6.9 MB (7,184,976 bytes)

Product version:

2.5

Trademarks:

Tracker Software Products Ltd.

Original file name:

XCShInfo.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\tracker software\shell extensions\xcshinfo.dll

Digital Signature

Signed by:

Tracker Software Products (Canada) Ltd

Authority:

COMODO CA Limited

Valid from:

8/11/2011 2:00:00 AM

Valid to:

8/11/2014 1:59:59 AM

Subject:

CN=Tracker Software Products (Canada) Ltd, O=Tracker Software Products (Canada) Ltd, POBox=79, STREET=9622 Chemainus Rd, L=Chemainus, S=BC, PostalCode=V0R 1K0, C=CA

Issuer:

CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

76FA6EDC6FDF49D49B8B9727A6A8732D

Registration

CLSIDs:

{1AC7939A-F487-4C8D-97AA-062FCA5DFA3C}, {67EB453C-1BE1-48EC-AAF3-23B10277FCC1}, {B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}, {CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}, {EBD0B8F4-A9A0-41B7-9695-030CD264D9C8}

ProgIDs:

XCShInfo.PXC_PDFFilter.1, XCShInfo.PXCPropertyHandler.1, XCShInfo.PXCInfoShlExt.1, XCShInfo.CPXCPreviewHandler.1, XCShInfo.PXCThumbnailHandler.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

9/16/2011 9:54:37 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:EsvnCQXOPZHzaKXZJVdMuh2hEdxzrevp3HPxhLxqa+WV0IKB0th:E6X03ck2OxnUBphLxqa+wfv

Entry address:

0x20BE5C

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 73, 94, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 68, 10, 48, 89, 70, 18, 57, 48, 83, EC, 50, 48, 83, 60, C8, 00, 48, 8B, FA, 33, D2, 49, 8B, E8, 48, 8B, D9, 44, 8D, 42, 28, 48, 8D, 48, D0, 49, 8B, F1, E8, 80, E1, FF, FF, 48, 85, FF, 75, 15, E8, BA, 33, 00, 00, C7, 00... 
[+]

Code size:

4.2 MB (4,359,680 bytes)

Approved Shell Extension

Name:

PDF-XChange PDF Preview Provider

CLSID:

{CF822AB4-6DB5-4FDA-BC28-E61DF36D2583}

The file XCShInfo.dll has been discovered within the following programs.

PDF-XChange Pro 4.0 by Tracker Software Products Ltd

Publisher's description - “PDF-XChange Version is an Adobe compatible, PDF file creation software. PDF-XChange offers an efficient compression and optimisation for PDF file generation.”

www.docu-track.com

24% remove it

PDF-XChange Viewer by Tracker Software Products Ltd

PDF-XChange Viewer is a free PDF reader for Microsoft Windows. The basic reader, which can be downloaded free of charge, includes extended/markup capabilities such as typing, highlighting, callouts, and notes.

www.tracker-software.com/product/pdf-xchange-viewer

21% remove it

Scan XCShInfo.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.