Should I block it?

No, this file is 100% safe to run.

Additional versions

11, 0, 1, 52	33.33%
10, 3, 3, 10	33.33%
10, 3, 2, 6	33.33%

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExW, RegOpenKeyExW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegEnumValueW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, RegCloseKey

dpb3.dll

AspectHelper_scaleToFit, AspectHelper_adjustForAspectRatio

kernel32.dll

Sleep, GetSystemDefaultLangID, CreateMutexA, CreateEventW, ResetEvent, SetEvent, InitializeCriticalSection, WaitForSingleObject, CloseHandle, ReleaseMutex, DeleteCriticalSection, CreateMutexW, EnterCriticalSection, LeaveCriticalSection, GetModuleHandleW, GetModuleFileNameW, GetProcAddress, FreeLibrary, LoadLibraryW, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, DisableThreadLibraryCalls, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, InterlockedExchange, GetSystemTimeAsFileTime

libxml2.dll

xmlNodeListGetString, xmlFree, xmlXPathNewContext, xmlXPathEvalExpression, xmlXPathFreeContext, xmlXPathFreeObject, xmlFreeDoc

msvcp80.dll

DllMain

msvcr80.dll

DllMain

qtcore4.dll

DllMain

qtgui4.dll

DllMain

shell32.dll

SHGetFolderPathW

shlwapi.dll

SHDeleteKeyW

user32.dll

GetClassNameW, DefWindowProcW, CreateWindowExW, GetWindowTextW, IsWindow, SetWindowLongW, GetWindowLongW, SystemParametersInfoW, PostMessageW, SendMessageW, EnumWindows, GetMessageW, PostQuitMessage, DestroyWindow, RegisterClassW, DispatchMessageW, TranslateMessage

DPXPlayerPlugin.dll

DPXPlayerPlugin by DivX (Signed)

Remove DPXPlayerPlugin.dll

Version:	11, 0, 1, 52
MD5:	e7812a4e12457e0df2aa319fcf7ec67a
SHA1:	8c4b652f10603b589a2b617ca5e3a5ff920297e3
SHA256:	1d4195e22981b615155ba93ada1d193a0bb27827750dc76f1c42420350aea24d

Overview

dpxplayerplugin.dll is loaded as dynamic link library that runs in the context of a process. This will ad a run once registry key upon installation for all user profiles of the PC that will cause the file to be executed the first time any user logs in. The file is digitally signed by DivX which was issued by the VeriSign certificate authority (CA).

Details

File name:	dpxplayerplugin.dll
Product name:	DPXPlayerPlugin
Description:	DivX Player Player Plugin
Typical file path:	C:\Program Files\divx\divx plus player\dpxplugins\dpxplayerplugin.dll
File version:	11, 0, 1, 52
Size:	988.37 KB (1,012,088 bytes)
Build date:	5/29/2013 4:33 AM
Certificate
Issued to:	DivX
Authority (CA):	VeriSign
Expiration date:	Monday, December 15, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Behaviors

Startup files (all users) run once

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'

'B Register C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll' → "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer
'B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll' → "C:\Windows\system32\rundll32.exe" "C:\Program Files\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer