npupeditor2.dll

UPEditor

China UnionPay Co.,Ltd.

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘PassGuard’. This file is installed with the program UnionPay Security Control for IE 1.0.0.8.
Publisher:
中国银联股份有限公司  (signed by China UnionPay Co.,Ltd.)

Product:
UPEditor

Description:
UPEditor Version:3.0.0.3

Version:
3.0.0.3

MD5:
c37c6a5e4e0eecdf92680f074d0ce367

SHA-1:
3c41ce273f3b30c16a87a7326bf840757ad05aae

SHA-256:
4a427f3a3d1f07b52a9847be4c71d4bc22a8b17929ac1c1079fe74c071b4d7b5

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/13/2025 6:20:31 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.8042

F-Prot
W32/QHost.C.gen
4.6.5.141

File size:
2 MB (2,109,720 bytes)

Product version:
3.0.0.0

Copyright:
(C) 2016 所有权利保留

Original file name:
npUPEditor.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\upedit\npupeditor2.dll

Digital Signature
Authority:
Symantec Corporation

Valid from:
6/8/2015 2:00:00 AM

Valid to:
7/8/2018 1:59:59 AM

Subject:
CN="China UnionPay Co.,Ltd.", OU=product innovation, O="China UnionPay Co.,Ltd.", L=shanghai, S=shanghai, C=CN

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
1F5E46E3B8C0B8C33918E7CB4BE3A31D

File PE Metadata
Compilation timestamp:
2/24/2016 8:00:35 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:JtH2epc8vMftyJnqwMo8QlibQIGYj8vM9dkS6yI3UV0IlURqS:J1NpUfEJ5/8+ibQIZjj9dL65glUh

Entry address:
0x40FBD6

Entry point:
E8, 6E, 1B, 01, 00, C1, 6D, 66, 39, 81, 9C, E2, 23, 8F, 26, C6, D5, A5, CE, C6, 77, 07, 30, C8, D7, FA, 86, 0E, 01, E9, E6, DE, ED, 15, 94, F1, 61, 89, F0, A9, F0, CB, 84, 88, D9, 25, 7D, 82, A5, 4D, 46, AA, 0E, F2, 45, CA, F2, 15, D4, 95, CF, 5C, 71, CA, 72, F8, FC, E7, 4F, C2, AA, BD, 5D, 6C, DF, 16, 55, 61, 7D, CE, 3A, 47, 0B, 9A, 9D, CF, A4, 05, 4C, B0, 62, 61, 6D, 8D, BC, 84, 45, B2, 77, E7, 13, 44, CA, 93, A8, A4, 2F, 7F, BE, 4D, 1E, 37, 66, 09, 46, 92, DC, 7D, 78, 8D, 08, 10, CE, 9F, 92, 6C, F4, A5...
 
[+]

Code size:
534 KB (546,816 bytes)

Mozilla Plugin
Name:
PassGuard


The file npupeditor2.dll has been discovered within the following program.

cn.unionpay.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan npupeditor2.dll - Powered by Reason Core Security