home

upeditor1043p.dll

UPEditor

China UnionPay Co., Ltd

Publisher:
China UnionPay  (signed by China UnionPay Co., Ltd)

Product:
UPEditor

Description:
UP Security Editor

Version:
1.0.4.3

MD5:
839aaa3a3576b1e36cc6705128f36e3f

SHA-1:
41eee73d2fc7cca78ff9a0c2553f542d538eae2d

SHA-256:
487d790fa51bb0f381ea50b47c3bd48a2926419176491edbba3f2ac58a09dc28

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 10:07:44 PM UTC  (today)

File size:
638.4 KB (653,736 bytes)

Product version:
1.0.4.3

Copyright:
China UnionPay. All Rights Rerserved

Original file name:
UPEditor.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Windows\System32\upeditor1043p.dll

Digital Signature
Signed by:
China UnionPay Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
2/26/2011 8:00:00 AM

Valid to:
2/26/2013 7:59:59 AM

Subject:
CN="China UnionPay Co., Ltd", OU=HULIANWANG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="China UnionPay Co., Ltd", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EDCB4A1398A11371EF115396CE93ECA

Registration
CLSIDs:
{A98A97E3-1E01-4B9B-9FFA-127C730465BD}, {AE460AD7-D678-43BB-B4DF-394B2D0C4E52}

ProgID:
UPEditor.UpSecEditor.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
6/10/2011 6:59:11 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:Dz5D1cwSoMU5vtxgsNy69lSEfYqglLdphSDFd5bVTnYCIokJ2:35D1c9oZzgsNy+lBfYbLd/ovRd42

Entry address:
0xDFB7C

Entry point:
E8, 67, E8, 06, 00, DE, D7, 28, 68, 1D, BF, 1B, 1A, 92, AA, DA, E2, F2, 42, 9A, 86, 79, B1, EB, B7, FF, 81, 93, D9, 4F, 3F, 48, 90, CA, C3, 27, 97, 07, 40, E7, 2F, D7, F7, 17, 5F, CF, CE, CD, 3F, 13, 21, 93, 4E, F7, 7F, 0B, 54, E0, C0, 5E, 56, 73, F8, D3, C6, C6, 06, 11, A3, C4, F0, CF, 10, 12, 03, 43, 2F, B4, BF, F5, 37, 1C, A7, EC, 54, 53, 2A, D3, 34, 4B, 8B, 77, 16, 71, E1, EF, C5, 65, 46, 39, FB, 1B, DA, 03, 97, 53, 7B, ED, 5F, 2B, 93, 52, 4A, 97, FF, 27, 6C, 8C, F4, 73, 41, 7E, 7F, 34, 44, 6C, 7A, 3A...
 
[+]

Entropy:
7.9846  (probably packed)

Code size:
275.5 KB (282,112 bytes)

Scan upeditor1043p.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.