Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Child processes

Related files

PE file structure

Show functions

Import table

gdiplus.dll

GdipCreatePen1, GdipBitmapUnlockBits, GdipDrawImageRectI, GdipDeleteGraphics, GdipNewPrivateFontCollection, GdipSetSmoothingMode, GdipCreatePath, GdipSetImageAttributesColorKeys, GdipDrawImage, GdipSetPixelOffsetMode, GdipDeletePath, GdipLoadImageFromFile, GdipLoadImageFromStream, GdipCreateSolidFill, GdipDeleteFontFamily, GdipDrawPath, GdipRotateWorldTransform, GdipCreateStringFormat, GdipGetPathWorldBounds, GdipCreateLineBrushFromRect, GdipDisposeImage, GdipImageRotateFlip, GdipDrawLine, GdipSetImageAttributesColorMatrix, GdipCreateBitmapFromScan0, GdiplusShutdown, GdipCreateBitmapFromFile, GdipSetInterpolationMode, GdiplusStartup, GdipCreateFont, GdipCreateBitmapFromHBITMAP, GdipDeletePrivateFontCollection, GdipDeleteFont, GdipTranslateWorldTransform, GdipAddPathString, GdipResetWorldTransform, GdipGetImageEncoders, GdipDrawImageRectRectI, GdipBitmapLockBits, GdipCreateFontFamilyFromName, GdipDeleteStringFormat, GdipMeasureString, GdipDrawImagePointsRectI, GdipFillRectangle, GdipSaveImageToFile, GdipDeletePen, GdipAddPathLineI, GdipCreateFromHDC, GdipCreateBitmapFromHICON, GdipGetImageGraphicsContext, GdipDrawImageRectRect, GdipSetCompositingMode, GdipGetImageDimension, GdipDeleteBrush, GdipDrawImageRect, GdipDisposeImageAttributes, GdipSetTextRenderingHint, GdipGetImageWidth, GdipAddPathArcI, GdipGetImageEncodersSize, GdipFillPath, GdipDrawString, GdipPrivateAddFontFile, GdipCreateImageAttributes

msvbvm50.dll

DllMain

ole32.dll

IIDFromString

NextStart.exe

NextSTART by Winstep Software Technologies

Remove NextStart.exe

Version:	12.02.0689
MD5:	031381d2f4de15c46f3bd6aceed0b368
SHA1:	6f7d614a55ae048ef5da91a0220074acef41967a
SHA256:	b9f2367c462b01cc980d45282bfe963c8e26a1b631af6e1f6ea2ee9d038a3adc

Overview

nextstart.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program Nexus 12.2 published by Winstep.

Details

File name:	nextstart.exe
Publisher:	Winstep Software Technologies
Product name:	NextSTART
Typical file path:	C:\Program Files\winstep\nextstart.exe
File version:	12.02.0689
Size:	7.43 MB (7,789,184 bytes)
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Nexus

Winstep

9% remove

“Nexus Ultimate is an enhanced version of the free-to-use Nexus dock which is available stand-alone or as a component of Winstep Xtreme (a single easy-to-install package featuring all of Winstep's popular desktop enhancement products for Windows). The Winstep Nexus Dock is a FREE professional dock for Windows. With Nexus, your most frequently used applications are only a mouse click away - and Nexus turns working with your computer into ...”

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'NextSTART' → C:\Program Files\Winstep\nextstart.exe autostart

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00379693%	0.028634%
Kernel CPU:	0.00332393%	0.013761%
User CPU:	0.00047300%	0.014873%
Kernel CPU time:	9,064 ms/min	100,923,805ms/min
CPU cycles:	8,147,929/sec	17,470,203/sec
Memory
Private memory:	13.32 MB	21.59 MB
Private (maximum):	21.05 MB
Private (minimum):	4.07 MB
Non-paged memory:	13.32 MB	21.59 MB
Virtual memory:	130.86 MB	140.96 MB
Virtual memory (peak):	173.2 MB	169.69 MB
Working set:	9.33 MB	18.61 MB
Working set (peak):	22.37 MB	37.95 MB
Page faults:	167,524/min	2,039/min
I/O
I/O read transfer:	44.65 KB/sec	1.02 MB/min
I/O read operations:	5/sec	343/min
I/O other transfer:	964.48 KB/sec	448.09 KB/min
I/O other operations:	22,747/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	330	600
GUI GDI count:	220	103
GUI GDI peak:	288	142
GUI USER count:	110	49
GUI USER peak:	149	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\Program Files\winstep\nextstart.exe" autostart
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads

Averages

Nextstart.exe (main module)
Total CPU:	0.20560143%	0.272967%
Kernel CPU:	0.11842460%	0.107585%
User CPU:	0.08717683%	0.165382%
CPU cycles:	28,417,424/sec	5,741,424/sec
Context switches:	166/sec	79/sec
Memory:	7.6 MB	1.16 MB
gdiplus.DLL
Total CPU:	0.00021410%
Kernel CPU:	0.00021410%
User CPU:	0.00000000%
CPU cycles:	682/sec
Memory:	1.56 MB