» nptriangleplayer.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

nptriangleplayer.dll

NPPlayerShell

Fuzhuo Zhuo Yue Wu Xian Software Development Company Limited

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘@TrianglePlayer’.

File name:

Publisher:

Fuzhuo Zhuo Yue Wu Xian Software Development Company Limited (signed and verified)

Product:

NPPlayerShell

Description:

NPPlayerShell 1.0.0.27

Version:

1, 0, 0, 27

MD5:

257d299a3910381ce7980f204b4417eb

SHA-1:

8574462bf2ae1f13f4066a65310e146b374a81e1

SHA-256:

4c2ef8428de97318e2a992b6e8c5177d518f5be2c0c05305a9abf5f3ce8dd164

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 12:48:18 AM UTC (today)

File size:

359.8 KB (368,456 bytes)

Product version:

1, 0, 0, 27

Original file name:

NPPlayerShell.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\triangleplayer\nptriangleplayer.dll

Digital Signature

Signed by:

Fuzhuo Zhuo Yue Wu Xian Software Development Company Limited

Authority:

GlobalSign nv-sa

Valid from:

11/15/2012 11:10:41 PM

Valid to:

11/16/2014 11:10:41 PM

Subject:

CN=Fuzhuo Zhuo Yue Wu Xian Software Development Company Limited, O=Fuzhuo Zhuo Yue Wu Xian Software Development Company Limited, L=Fuzhou, S=Fujian, C=CN

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11219B15C2B0D21E95A61AC6B467352B7562

File PE Metadata

Compilation timestamp:

11/16/2012 2:39:28 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:o0Q0e2ZUp33h/NrzfsX6fidXMDknK+HOoHtJolxbt9LawH7Ipq3cPjzUR95PSU:o0TLa33dNrTsq0XMrELJoPPDPp

Entry address:

0xFEE7

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, B4, 9B, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 8D, 44, 24, 08, 50, 6A, 00, FF, 74, 24, 0C, E8, 19, 9F, 00, 00, 83, C4, 0C, C3, 8B, 44, 24, 04, 33, C9, 3B, 04, CD, E0, 00, 03, 10, 74, 12, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0C, 6A, 0D, 58, C3, 8B, 04, CD, E4, 00, 03, 10, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, C3, E8, 61, 52, 00, 00, 85, C0, 75, 06, B8, 48, 02, 03, 10, C3, 83... 
[+]

Entropy:

5.8385

Code size:

160 KB (163,840 bytes)

Mozilla Plugin

Name:

@TrianglePlayer

The file nptriangleplayer.dll has been discovered within the following program.

Uninstall TrianglePlayer by Fuzhou Zhuo Yue Wu Xian Software Development Company Limited

About 1% of users remove it

Scan nptriangleplayer.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.