home

npcol400.dll

CouponNetwork Coupon Activator Netscape Plugin v. 5.0.0.0

Catalina Marketing Corporation

Publisher:
Catalina Marketing Corporation

Product:
CouponNetwork Coupon Activator Netscape Plugin v. 5.0.0.0

Description:
CouponNetwork Coupon Activator

Version:
5, 0, 0, 2

MD5:
ae5e8753ddfd97c7b15bb542a431f396

SHA-1:
4b073dd8fe929060a0555fddcc8e7868613afb44

SHA-256:
292b9a26e20c37397774a7985126835a1920b15eb0eb582778b1a194f43950d6

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
5/21/2024 10:05:34 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Win32.Packer.Msvcpp-1
0.98/18155

File size:
456 KB (466,944 bytes)

Product version:
5, 0, 0, 0

Copyright:
Copyright © 2010-2012

Original file name:
colPlugin

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\google\chrome\application\plugins\npcol400.dll

File PE Metadata
Compilation timestamp:
9/14/2011 7:05:38 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:/EVm/h77eBssG5dLiIhnuNke5gQ5rBKJ2FzI01tX76++wgEXCM+C64qIJ:/EQp77eBFG5AIhuqB22IX7WkyMjF

Entry address:
0x359A9

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 17, A1, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 83, EC, 20, 53, 33, DB, 39, 5D, 0C, 75, 1D, E8, 79, 24, 00, 00, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, 59, 0A, 00, 00, 83, C4, 14, 83, C8, FF, EB, 4D, 8B, 45, 08, 3B, C3, 74, DC, 56, 89, 45, E8, 89, 45, E0, 8D, 45, 10, 50, 53, FF, 75, 0C, 8D, 45, E0, 50, C7, 45, E4, FF, FF, FF, 7F, C7, 45, EC, 42, 00, 00, 00, E8, 25, 83, 00, 00, 83, C4, 10, FF, 4D, E4, 8B...
 
[+]

Entropy:
6.3379

Code size:
308 KB (315,392 bytes)

Google Chrome Plugin
Name:
NPcol400.dll


The file npcol400.dll has been discovered within the following programs.

ArtistScope Plugin FX  by ArtistScope
Publisher's description - “ArtistScope DRM reduces the risk of exploitation by removing rights control from the user's computer and instead, validating document permissions online prior to allowing access.”
www.artistscope.com
About 1% of users remove it
Cisco WebEx Meetings  by Cisco WebEx LLC
Publisher's description - “WebEx Meetings for collaboration allows you take care of business more efficiently by eliminating back-and-forth email. Show documents, applications and your desktop to remote attendees in real time. Pass control to attendees so they can share their desktops or annotate yours.”
www.webex.com
5% remove it
Meeting Service  by Cisco WebEx LLC
3% remove it
Mozilla Firefox 19.0 (x86 en-US)  by Mozilla
Firefox 19 features a built-in PDF viewer. Mozilla Firefox is a free and open source is a web browser coordinated by Mozilla Corporation and Mozilla Foundation that is a heavily localized.
www.mozilla.com/en-US
11% remove it
Mozilla Firefox 24.0 (x86 en-US)  by Mozilla
Firefox 24 includes support for the new scrollbar style, closing tabs to the right, an improved browser console for debugging, and improved SVG rendering. In addition 9 new security holes were pacthed.
www.mozilla.org/en-US
5% remove it
Mozilla Firefox 26.0 (x86 en-US)  by Mozilla
Mozilla Firefox is a free and open source web browser. Firefox 26 changed the behavior of Java plugins to "click-to-play" mode instead of automatically running them.
5% remove it
WebEx  by Cisco WebEx LLC
Publisher's description - “Meet, collaborate, and share in a whole new way. It's easy to prepare because everything you need is in one place. Share anything on your computer and generate ideas fast. Next steps are crystal clear. That's WebEx Meetings.”
7% remove it
 
Powered by Should I Remove It?

Scan npcol400.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.