home

npupeditorx64.dll

UPEditor

China UnionPay Co., Ltd

It is installed within the Mozilla Firefox web browser as an extension/plugin as ‘PassGuard’.
Publisher:
中国银联股份有限公司  (signed by China UnionPay Co., Ltd)

Product:
UPEditor

Description:
UPEditor Version:3.0.0.3

Version:
3.0.0.3

MD5:
3fb139063333955b3519766fd25a9d68

SHA-1:
984a1d5378a0b8b61caaf0c180f4fd598ab6c515

SHA-256:
d02862f2bee76c2b3c35b366e024481c5d5ed89f9f3b65b637f534fed136fd7e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/13/2025 2:48:21 PM UTC  (today)

File size:
2.3 MB (2,404,168 bytes)

Product version:
3.0.0.0

Copyright:
(C) 2016 所有权利保留

Original file name:
npUPEditor.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\upedit\npupeditorx64.dll

Digital Signature
Signed by:
China UnionPay Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
2/1/2013 12:00:00 AM

Valid to:
4/2/2016 12:59:59 AM

Subject:
CN="China UnionPay Co., Ltd", OU=HULIANWANG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="China UnionPay Co., Ltd", L=Shanghai, S=Shanghai, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2E5DCB78EBD9282BE0EB8E71EA9947F3

File PE Metadata
Compilation timestamp:
2/26/2016 10:22:44 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:c1pf11Wv/OGApDey3FmV2uI4Tun6JNZGVZ8jT6CX1:c1t1wXOSQ8kuI4SU0V+j/

Entry address:
0x2F465A

Entry point:
E9, 02, B4, FC, FF, E9, DA, CE, FF, FF, 0F, 84, 18, BC, FE, FF, BA, D4, F2, 37, 11, 48, 8D, 53, 08, 48, 8D, B0, 61, 56, E9, C0, 48, 8D, B8, 02, 5A, E6, 7F, 0F, B7, 72, 26, 48, 0F, CF, 48, 8D, 74, 16, 28, 66, F7, D7, 66, F7, D7, 66, F7, D7, 48, 8B, 7D, 10, E9, F9, B6, FE, FF, 00, 00, 45, 78, 69, 74, 50, 72, 6F, 63, 65, 73, 73, 00, 00, 00, 00, 00, B9, 04, 01, 00, 00, 84, D9, 0F, BA, E5, 15, F8, 66, F7, C4, 63, 26, 30, C0, 66, 0F, A3, E1, F5, F2, AE, E9, 6E, E2, FC, FF, E9, 3D, ED, FF, FF, F7, F3, 6B, 66, E4...
 
[+]

Entropy:
7.9063

Packer / compiler:
Xtreme-Protector v1.05

Code size:
622.5 KB (637,440 bytes)

Mozilla Plugin
Name:
PassGuard


Scan npupeditorx64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.